Thursday, June 30, 2011

PCI Compliance - Practicing Safe Computing.

PCI Compliance Security
There has been a lot of talk going on right now about hackers, and their ability to break into even the biggest of software companies' systems.  The question, though, is how well could your system stand up to these hackers?  In 2004 five large companies took it upon themselves to create the PCI (Payment Card Industry) Compliance.

PCI Compliance was created by the major Credit Card companies in order to protect consumers from online credit card fraud. Developed by Visa, MasterCard, American Express, Discover, and the JCB Data Security Program; their intention was to create a standard for everyone to follow in order to protect the online merchant, the online costumer, and of course themselves. On December 15th, 2004, these 5 companies created the PCI Compliance.  

The best way to understand the PCI Compliance is by reviewing their terms and making sure that you take the proper steps to protect yourself and your customers, or in this case, your members.   
There are six different categories that regulate whether or not you are PCI Compliant.  First is that you maintain a secure network.  Is your network behind a firewall?  This is key to keep others out of your system.  A firewall keeps out all unwanted computers trying to connect to your network.  This way only people who are logged into your online marketplace can access and use their credit cards.

The second is that you protect cardholder data.  This is easier said than done.  You need to make sure that your card holder data such as names, card numbers, and other personal information that is stored on your server is protected.  The best way to do this is by encrypting your data.  Encrypting your data means that a computer creates a random code that only it has the key for.  This way if your network is broken into, the data would be useless as the hacker would not be able to read the data without the secret code.

Third is that you maintain a vulnerability management program.  Of all the items on this list, this is something you already do.  Just make sure your software is up to date such as your anti-virus and windows updates, along with running virus scans on a weekly basis (I recommend running it at least twice a week, and updating the virus definitions at least once a week).  This is something you should not just confine to your server, but your desktop and home computer as well.  Always good to practice safe computing.  

The fourth piece of the compliance standard is all about implementing strong control measures.  This is your responsibility to limit who has access to these key pieces of information.  This is done by assigning a specific ID number to those key people.  This may be anyone from an IT manager to an Executive Director.  But each has to have a specific ID so that it is known who has access to the system, and who doesn't.  You might ask, what about those who log in?  When you assign them a username and password, you are already giving them this specific ID number.  You can trace the IP Address this person logged in from, and therefore know exactly who it is, and where they were when they logged in.

Number five states that you must regularly test and monitor your networks.  This can be done by White Hat Hackers (hackers who are employed by security firms to test the strength and find holes in other networks, the good guys), or through some software that will monitor and test your network regularly for vulnerabilities.  It is important to make sure that your network is in tip top shape so that you can't be broken into.

The final item on the list is that you have and maintain an information security policy.  This is the idea that your employees know what your security policies are and are able to explain them to the public if need be.  You are responsible for your network; make sure you have a plan and know how to implement it.

The current version of PCI Compliance, 2.0, was released October 26th, 2010.  By January 1st, 2012 everyone must be on 2.0.  With all the hacking going on, especially to big companies like Sony, Google, and the CIA, it is your responsibility to protect yourself.  Some hackers do it for fun, and some do it for profit, but no matter what, unless you take the time to protect yourself, you can, and will be, hacked.

To get more information about PCI Compliance visit PCI Security Standards Official Site.


Thursday, June 23, 2011

Social Media Going Jewish!


G-DCast
G-DCast.com
Every week we read one chapter in the greatest story ever told, the Torah.  I happened to come across a great website that compliments this very well.  G-DCast is a website that has the week's corresponding Parsha.


They are short flash videos with the stories of the Torah broken into 4 minute videos.  What makes these great is that they are written in "prose, poetry, music and hip hop!"  They are a fun little way to start each Monday morning.  So grab a cup of coffee, your bagel, and get a little Torah for the week!


You can check out G-DCast here, or just head over to

Friday, June 17, 2011

Israel, A Leader in Technology.

Israel's Technology
Israel is less than 65 years old, but yet it has become one of the world's leaders in technology.  This is due to many reasons, but the big factor is their location.  Israel is a giant desert with little water, yet it is known as 'The Land of Milk and Honey'.  This idea has been the driving force in their technology boom, and this boom has been all about going green.

Over the past 20 years, the Israeli government has been working and encouraging emerging businesses to go green, creating such things as drip irrigation systems, computerized fertigation (where fertilizer is injected directly into the water of these drip systems), and even finding ways to recycle coal waste into fuel.  Israel has openly shared these technologies with the world and developing countries.  The goal of these countries is to become as efficient as Israel which recycles 70% of their waste water (the most in the world).

Their big push now is for electric cars.  Israel's goal is that have 20% of their cars fully (or mostly) electric by 2020.  This is less than 8 years away.  That's approximately 371,000 cars that are going to be electrically powered.  In a country the size of New Jersey this is an acomplishment!  

Electricity powered devices are the wave of the future and Israel knows this. The government has been working with Israeli based company Sovna to pioneer energy farms.  Energy Farms are just what they seem, a place where we can harness energy using the power of the sun, wind, water, or earth.  Sonva has been creating rooftop windmills to produce this energy.  But their real goal is to turn the Golan Heights into a giant wind farm.  This would become a prime place to create energy for the country and could show the world how we no longer need the oil from the Middle East.  

Investors all over the world, including those from Silicon Valley and China, have been heading to Israel to get in on the action.  Not only do these new technologies help the planet, but they are also creating waves in the science world and showing everyone that Israel isn't such a small country after all! 

Thursday, June 2, 2011

Facebook, Why Should I Join?



Facebook is the best way to stay connected, not just to old friends (and new ones) but with companies you work with, and companies that work with you! That's why we at MM2000 want you to join our Facebook page.  It is updated on a daily basis and is the fastest place to get up to the date information about MM2000 & MMOnTheWeb.  

We have also started a few discussion groups.  This is a place for you to ask questions and help others.  We at MM2000 moderate these forums and it is an easy way to get a quick response.

Signing up for Facebook is easy.  Just head over to Facebook and right on the front page is the opportunity to sign up.  Next, just head over to the MM2000 Facebook Page, and hit the "Like" button on the top.  It's that easy!

Soon you will be up and participating in no time!  We want to make our Facebook page a place where everyone can interact and we can't do it without you!

Don't forget to check out http://www.mm2000.net for all your Synagogue computing needs!

Google Chrome & How It's Going To Effect The Landscape of Computing.



Google Chrome NotebookFor over three decades we have really only had two choices when it came to computers, Apple or Microsoft. While Microsoft eventually bulldozed Apple almost causing it's collapse. With the re-emergence of Apple and the Ipod, Iphone, and Ipad the two are fighting head to head once again. But today marks a new day as a new major player has emerged. Google Chrome was announced three years ago as a Linux-based operating system that would eventually compete with the likes of Microsoft and Apple. Fast forward three years, and here we stand. With Google I/O (Google's Developer Conference) came the official release of Google Chrome. As of June 15th you will be able to purchase a Chrome Notebook by either Samsung or Acer.

The real question is whether or not this will have any effect on Microsoft and Apple sales? I would most diffidently say yes. Originally Chrome was going to be the main OS that Google put out, but since its conception, Google's other OS has taken off with tremoundous success. I'm of course talking about their Android mobile OS. In the past 2, years Android has risen to the top of the smart phone market, a position once held by RIM's Blackberry and Apples Iphone. Android exploded and so will Chrome.

Chrome is a web based OS, straight into the cloud, starting with your boot up. Turn on your computer, and eight seconds later you're online, surfing the web, browsing Youtube, or having a live web chat (yes they include a web cam). The battery life is what I think will really make the difference in this as you can get up to 8.5 hours on one charge (better than Apple's MacBook which only gets 6.5 hours).

What make the Chrome Notebook so appealing is that everything is in the cloud. All your information is stored online thus relieving you of the burden of a hard drive. The only problem, most programs won't run on Chrome, yet. What will run are browser-based programs, which include programs that run in JAVA. JAVA-based programs will run with no issue on Chrome Notebooks, and for those looking to the cloud, this is the way you should go!