Click on the year you were born and read the news for that year.
http://www.oldhippie.com/forums/ice-house/8883-news-year-you-were-born.html
Thursday, February 4, 2010
Monday, February 1, 2010
CU Information Security Conference Set for May 19-21
One of the biggest needs in credit unions today is security. The 10th annual credit union security conference is set for May 19-21, 2010 at the Red Rock Resort in Las Vegas. This popular conference offers one of the highest dollar values of any other conference serving credit unions. Your registration fee includes the first two nights lodging FREE - No Extra Cost. Check out the program agenda, schedule, a site visit to an area credit union, speakers and more at: http://bit.ly/cusecurity2010. Sunday, January 31, 2010
January News & Views Published Below
Friday, January 22, 2010
If Your Password Is 123456, You May Be In Trouble
Back at the dawn of the Web, the most popular account password was "12345."
Today, it's one digit longer but hardly safer: "123456."
Despite all the reports of Internet security breaches over the years, including the recent attacks on Google's e-mail service, many people have reacted to the break-ins with a shrug.
According to a new analysis, one out of five Web users still decides to leave the digital equivalent of a key under the doormat: they choose a simple, easily guessed password like "abc123," "iloveyou" or even "password" to protect their data.
"I guess it's just a genetic flaw in humans," said Amichai Shulman, the chief technology officer at Imperva, which makes software for blocking hackers. "We've been following the same patterns since the 1990s."
Mr. Shulman and his company examined a list of 32 million passwords that an unknown hacker stole last month from RockYou, a company that makes software for users of social networking sites like Facebook and MySpace. The list was briefly posted on the Web, and hackers and security researchers downloaded it. (RockYou, which had already been widely criticized for lax privacy practices, has advised its customers to change their passwords, as the hacker gained information about their e-mail accounts as well.)
The trove provided an unusually detailed window into computer users' password habits. Typically, only government agencies like the F.B.I. or the National Security Agency have had access to such a large password list.
"This was the mother lode," said Matt Weir, a doctoral candidate in the e-crimes and investigation technology lab at Florida State University, where researchers are also examining the data.
Imperva found that nearly 1 percent of the 32 million people it studied had used "123456" as a password. The second-most-popular password was "12345." Others in the top 20 included "qwerty," "abc123" and "princess."
More disturbing, said Mr. Shulman, was that about 20 percent of people on the RockYou list picked from the same, relatively small pool of 5,000 passwords.
That suggests that hackers could easily break into many accounts just by trying the most common passwords. Because of the prevalence of fast computers and speedy networks, hackers can fire off thousands of password guesses per minute.
"We tend to think of password guessing as a very time-consuming attack in which I take each account and try a large number of name-and-password combinations," Mr. Shulman said. "The reality is that you can be very effective by choosing a small number of common passwords."
Some Web sites try to thwart the attackers by freezing an account for a certain period of time if too many incorrect passwords are typed. But experts say that the hackers simply learn to trick the system, by making guesses at an acceptable rate, for instance.
To improve security, some Web sites are forcing users to mix letters, numbers and even symbols in their passwords. Others, like Twitter, prevent people from picking common passwords.
Today, it's one digit longer but hardly safer: "123456."
Despite all the reports of Internet security breaches over the years, including the recent attacks on Google's e-mail service, many people have reacted to the break-ins with a shrug.
According to a new analysis, one out of five Web users still decides to leave the digital equivalent of a key under the doormat: they choose a simple, easily guessed password like "abc123," "iloveyou" or even "password" to protect their data.
"I guess it's just a genetic flaw in humans," said Amichai Shulman, the chief technology officer at Imperva, which makes software for blocking hackers. "We've been following the same patterns since the 1990s."
Mr. Shulman and his company examined a list of 32 million passwords that an unknown hacker stole last month from RockYou, a company that makes software for users of social networking sites like Facebook and MySpace. The list was briefly posted on the Web, and hackers and security researchers downloaded it. (RockYou, which had already been widely criticized for lax privacy practices, has advised its customers to change their passwords, as the hacker gained information about their e-mail accounts as well.)
The trove provided an unusually detailed window into computer users' password habits. Typically, only government agencies like the F.B.I. or the National Security Agency have had access to such a large password list.
"This was the mother lode," said Matt Weir, a doctoral candidate in the e-crimes and investigation technology lab at Florida State University, where researchers are also examining the data.
Imperva found that nearly 1 percent of the 32 million people it studied had used "123456" as a password. The second-most-popular password was "12345." Others in the top 20 included "qwerty," "abc123" and "princess."
More disturbing, said Mr. Shulman, was that about 20 percent of people on the RockYou list picked from the same, relatively small pool of 5,000 passwords.
That suggests that hackers could easily break into many accounts just by trying the most common passwords. Because of the prevalence of fast computers and speedy networks, hackers can fire off thousands of password guesses per minute.
"We tend to think of password guessing as a very time-consuming attack in which I take each account and try a large number of name-and-password combinations," Mr. Shulman said. "The reality is that you can be very effective by choosing a small number of common passwords."
Some Web sites try to thwart the attackers by freezing an account for a certain period of time if too many incorrect passwords are typed. But experts say that the hackers simply learn to trick the system, by making guesses at an acceptable rate, for instance.
To improve security, some Web sites are forcing users to mix letters, numbers and even symbols in their passwords. Others, like Twitter, prevent people from picking common passwords.
For more information from this article, Visit the NY Times at:
Wednesday, January 20, 2010
A Frequent Traveler Jacket
How about a frequent travelers jacket with 22 pockets as a purposeful carry-on. Breeze thru security. Just slip off the vest. Comes in three colors. Not a bad idea.
Check out more details and information at: http://www.scottevest.com/
Monday, January 18, 2010
The Rollup PC - You Won't Believe Your Eyes
Check out the laptop of the future - The Rollup.
See more at: http://orkin-design.de/design/rolltop/movie/FXVideo_Example.html
or at: http://manneli.com/movies/Laptop.html
The wave of the future.
or at: http://manneli.com/movies/Laptop.html
The wave of the future.
Sunday, January 17, 2010
Use Wasp Spray Instead of Pepper Spray
A friend who is a receptionist in a church in a high risk area was concerned about someone coming into the office on Monday to rob them when they were counting the collection. She asked the local police department about using pepper spray and they recommended to her that she get a can of wasp spray instead.
The wasp spray, they told her, can shoot up to twenty feet away and is a lot more accurate, while with the pepper spray, they have to get too close to you and could overpower you. The wasp spray temporarily blinds an attacker until they get to the hospital for an antidote.
It's also one he wants everyone to hear. If you're looking for protection, Glinka says look to the spray. "That's going to give you a chance to call the police; maybe get out." Maybe even save a life.
The wasp spray, they told her, can shoot up to twenty feet away and is a lot more accurate, while with the pepper spray, they have to get too close to you and could overpower you. The wasp spray temporarily blinds an attacker until they get to the hospital for an antidote.
She keeps a can on her desk in the office and it doesn't attract attention from people like a can of pepper spray would. She also keeps one nearby at home for home protection. Thought this was interesting and might be of use.
On the heels of a break in and beating that left an elderly woman in Toledo dead, self defense experts have a tip that could save your life.
Val Glinka teaches self-defense to students at Sylvania Southview High School . For decades, he's suggested putting a can of wasp and hornet spray near your door or bed. Glinka says, "This is better than anything I can teach them." Glinka considers it inexpensive, easy to find, and more effective than mace or pepper spray.
The cans typically shoot 20 to 30 feet; so if someone tries to break into your home, Glinka says "spray the culprit in the eyes". It's a tip he's given to students for decades.
Five Robberies in Five Years; CU Closes Branch
After enduring five robberies in five years, workers at A-K Valley Federal Credit Union in the Pittsburgh area cleaned out their crime-plagued Homewood branch -- never to reopen.
"We just decided we'd had it," said Janet Horn, chief executive of the credit union, regarding the latest incident New Year's Day at the two-story brick office.
The Homewood branch had been robbed by criminals bearing assault rifles on four previous occasions since mid-2004, when the credit union opened there. This time, the credit union's board voted Jan. 5 to shutter the branch, which served 1,630 members.
More on this story at: http://www.pittsburghlive.com/x/pittsburghtrib/business/s_662505.html
"We just decided we'd had it," said Janet Horn, chief executive of the credit union, regarding the latest incident New Year's Day at the two-story brick office.
The Homewood branch had been robbed by criminals bearing assault rifles on four previous occasions since mid-2004, when the credit union opened there. This time, the credit union's board voted Jan. 5 to shutter the branch, which served 1,630 members.
More on this story at: http://www.pittsburghlive.com/x/pittsburghtrib/business/s_662505.html
Oxymorons at Play
Beyond the classic definition of oxymoron, there may be at least two others in my never finished complete Dictionary of Words as We Phonetically Understand them. Take a look:
(1) Oxymoron. (noun) definitions: (1) any expression in words or placement of objects or combination of both that conveys a contradictory meaning; (2) the dumbest guy at Oxford; (3) anyone who fails to grasp the cleansing power of Oxydol soap after seventy years of its broad commercial exposure to one and all.
That first one was mine, but I can neither take nor offer credit for the rest of these items on the list below because they came to me via e-mail with a lot of beautiful graphics and no acknowledgement of authorship by a living or deceased soul. Some of these figures of speech have been around these parts for a very long time so I suspect that even this list is little more than a collection of “oxy-morons” from all those places on this electronic planet where jokes and whimsy pop up as often and surprisingly as those little life-energy lightning bugs of Pandora in the movie “Avatar”.
Here’s the Sunday Working Day of Rest List of All the Rest:
(2) Is it good if a vacuüm really sucks?
(3) Why is the third hand on the watch called the second-hand?
(4) If a word is misspelled in the dictionary, how would we ever know?
(5) If Webster wrote the first dictionary, where did he find the words?
(6) Why does “slow down” and “slow up” mean the same thing?
(7) Why does “fat chance” and “slim chance” mean the same thing?
(8) Why do “tug” boats push their barges?
(9) Why do we sing “Take Me Out To The Ballgame” when we are already there?
(10) Why are the benches and chairs at the ballpark called “stands” when they are made for sitting?
(11) Why do we say an evening time for something is “after dark” when it is really “after light”?
(12) Doesn’t “expect the unexpected” make the unexpected expected?
(13) Why are a “wise man” and a “wise guy” perceived as opposites?
(14) Why do “overlook” and “oversee” mean opposite applications of attention?
(15) Why is “phonics” not spelled the way it sounds?
(16) If work is so good for you, why do they have to pay you to do it?
(17) If all the world’s a stage, where is the audience sitting?
(18) If love is blind, why is lingerie so popular?
(19) If you are cross-eyed, but you also have dyslexia, can you read all right?
(20) Why is a “bra” singular and “panties” plural?
(21) Why do we press harder on the buttons of a remote control when we know the batteries are dying or dead?
(22) Why do we put suits in garment bags and garments in a suitcase?
(23) How come “abbreviated” is such a long word?
(24) Why do we wash bath towels? Aren’t we clean when we use them?
(25) Why doesn’t glue stick to the inside of the bottle?
(26) Why do we drive on a parkway, but we park on a driveway?
(1) Oxymoron. (noun) definitions: (1) any expression in words or placement of objects or combination of both that conveys a contradictory meaning; (2) the dumbest guy at Oxford; (3) anyone who fails to grasp the cleansing power of Oxydol soap after seventy years of its broad commercial exposure to one and all.
That first one was mine, but I can neither take nor offer credit for the rest of these items on the list below because they came to me via e-mail with a lot of beautiful graphics and no acknowledgement of authorship by a living or deceased soul. Some of these figures of speech have been around these parts for a very long time so I suspect that even this list is little more than a collection of “oxy-morons” from all those places on this electronic planet where jokes and whimsy pop up as often and surprisingly as those little life-energy lightning bugs of Pandora in the movie “Avatar”.
Here’s the Sunday Working Day of Rest List of All the Rest:
(2) Is it good if a vacuüm really sucks?
(3) Why is the third hand on the watch called the second-hand?
(4) If a word is misspelled in the dictionary, how would we ever know?
(5) If Webster wrote the first dictionary, where did he find the words?
(6) Why does “slow down” and “slow up” mean the same thing?
(7) Why does “fat chance” and “slim chance” mean the same thing?
(8) Why do “tug” boats push their barges?
(9) Why do we sing “Take Me Out To The Ballgame” when we are already there?
(10) Why are the benches and chairs at the ballpark called “stands” when they are made for sitting?
(11) Why do we say an evening time for something is “after dark” when it is really “after light”?
(12) Doesn’t “expect the unexpected” make the unexpected expected?
(13) Why are a “wise man” and a “wise guy” perceived as opposites?
(14) Why do “overlook” and “oversee” mean opposite applications of attention?
(15) Why is “phonics” not spelled the way it sounds?
(16) If work is so good for you, why do they have to pay you to do it?
(17) If all the world’s a stage, where is the audience sitting?
(18) If love is blind, why is lingerie so popular?
(19) If you are cross-eyed, but you also have dyslexia, can you read all right?
(20) Why is a “bra” singular and “panties” plural?
(21) Why do we press harder on the buttons of a remote control when we know the batteries are dying or dead?
(22) Why do we put suits in garment bags and garments in a suitcase?
(23) How come “abbreviated” is such a long word?
(24) Why do we wash bath towels? Aren’t we clean when we use them?
(25) Why doesn’t glue stick to the inside of the bottle?
(26) Why do we drive on a parkway, but we park on a driveway?
Thursday, January 14, 2010
FBI issues Haitian relief fraud alert
Internet users who receive appeals to donate funds in the aftermath of the recent earthquake in Haiti need to perform their due diligence before responding to the requests, said the Federal Bureau of Investigation (FBI).
Credit unions might want to warn members that past tragedies and natural disasters have prompted criminals to solicit contributions that they claim are for a charitable organization or a good cause.
Before making any donation, consumers should use these guidelines, said the FBI.
Do not respond to any unsolicited (spam) incoming e-mails, including clicking links contained within the messages;
Be skeptical of individuals representing themselves as surviving victims or officials asking for donations via e-mail or social networking sites;
Verify the legitimacy of nonprofit organizations by using Internet-based resources to assist in confirming the group's existence and its nonprofit status rather than following a purported link to the site;
Be cautious of e-mails that claim to show photos of the disaster areas in attached files because these files may contain viruses. Only open attachments from known senders;
Make contributions directly to known organizations rather than relying on others to make the donation on your behalf to ensure contributions are received and used for intended purposes; and
Do not give personal or financial information to anyone soliciting contributions; providing that information may compromise your identity and make you vulnerable to identity theft.
The agency said anyone receiving a suspicious e-mail or anyone who becomes a victim of such incidents should notify the Internet Crime Complaint Center, known as IC3.
Credit unions might want to warn members that past tragedies and natural disasters have prompted criminals to solicit contributions that they claim are for a charitable organization or a good cause.
Before making any donation, consumers should use these guidelines, said the FBI.
Do not respond to any unsolicited (spam) incoming e-mails, including clicking links contained within the messages;
Be skeptical of individuals representing themselves as surviving victims or officials asking for donations via e-mail or social networking sites;
Verify the legitimacy of nonprofit organizations by using Internet-based resources to assist in confirming the group's existence and its nonprofit status rather than following a purported link to the site;
Be cautious of e-mails that claim to show photos of the disaster areas in attached files because these files may contain viruses. Only open attachments from known senders;
Make contributions directly to known organizations rather than relying on others to make the donation on your behalf to ensure contributions are received and used for intended purposes; and
Do not give personal or financial information to anyone soliciting contributions; providing that information may compromise your identity and make you vulnerable to identity theft.
The agency said anyone receiving a suspicious e-mail or anyone who becomes a victim of such incidents should notify the Internet Crime Complaint Center, known as IC3.
Wednesday, January 13, 2010
Malware hits online banking, Google's online apps market
Credit unions sounded the alarm that suspicious applications downloaded from Google's Android Market for cellphones may have stolen users' online banking information. And the Credit Union Information Security Professionals Association (CUISPA) is alerting credit unions to a fraud attempt in the online banking arena.
BayPort CU, a $1.1 billion credit union in Newport News, Va., and First Tech CU of Beaverton, Ore., issued warnings on Dec. 22 about a rogue Android application on Google's online market that promised members easy access to their online banking (Computerworld Jan. 12 and iPhone Central Jan. 11).
"It is believed that fraudsters deployed fraudulent mobile banking applications to the Android Marketplace, using a phishing technique to attempt to gain access to mobile banking users' financial information," said BayPort's alert.
The suspicious application creates mobile banking apps that members and other users can download to their phones but actually have the ability to steal information. Those who have added the apps should go to their mobile service provider to make ensure the suspicious apps are removed for good.
BayPort said it notified Google, and Google removed the program plus 50 similar apps, all written by a single developer identified as "09Droid."
However, security researchers have not confirmed whether the Android apps were actually malicious because before they could get copies of the suspicious apps, Google removed them from the market, according to ComputerWorld. The apps could just be someone using a shortcut app to make a quick buck, said the researchers.
Google does not vet its Android applications that appear on its online store. Apple runs its App Store for the iPhone and has an approval process for mobile applications.
Another kind of fraud in online banking--the Zeus or Zbot--was the topic of warning from CUISPA.
The Zbot is a "particularly nasty malware that is bypassing top antivirus/Malware scanners and compromising member accounts," said CUISPA's alert. "Cases have been identified by dozens of credit unions, that we know of. One can assume it is far more widespread than we've currently seen," said Kelly Dowell, executive director at CUISPA.
"The malware infects desktops the same way viruses do, but once infected it is very difficult to remove. Initial reports have come in from credit union members that logged into online banking and received a display page asking for additional authentication in the form of credit card information. The key here is the page was displayed after logging into their home banking accounts," said Dowell.
"It's important to understand that if the user is seeing that page, the damage is done. The online banking credentials have been compromised and need to be changed immediately," Dowell explained.
"The nasty thing about Zeus/Zbot is how it has been morphing or evolving," said Dowell, adding that it hides its presence on the member's machine. It is the same attack that is behind a recent flurry of automated clearinghouse (ACH) fraud.
BayPort CU, a $1.1 billion credit union in Newport News, Va., and First Tech CU of Beaverton, Ore., issued warnings on Dec. 22 about a rogue Android application on Google's online market that promised members easy access to their online banking (Computerworld Jan. 12 and iPhone Central Jan. 11).
"It is believed that fraudsters deployed fraudulent mobile banking applications to the Android Marketplace, using a phishing technique to attempt to gain access to mobile banking users' financial information," said BayPort's alert.
The suspicious application creates mobile banking apps that members and other users can download to their phones but actually have the ability to steal information. Those who have added the apps should go to their mobile service provider to make ensure the suspicious apps are removed for good.
BayPort said it notified Google, and Google removed the program plus 50 similar apps, all written by a single developer identified as "09Droid."
However, security researchers have not confirmed whether the Android apps were actually malicious because before they could get copies of the suspicious apps, Google removed them from the market, according to ComputerWorld. The apps could just be someone using a shortcut app to make a quick buck, said the researchers.
Google does not vet its Android applications that appear on its online store. Apple runs its App Store for the iPhone and has an approval process for mobile applications.
Another kind of fraud in online banking--the Zeus or Zbot--was the topic of warning from CUISPA.
The Zbot is a "particularly nasty malware that is bypassing top antivirus/Malware scanners and compromising member accounts," said CUISPA's alert. "Cases have been identified by dozens of credit unions, that we know of. One can assume it is far more widespread than we've currently seen," said Kelly Dowell, executive director at CUISPA.
"The malware infects desktops the same way viruses do, but once infected it is very difficult to remove. Initial reports have come in from credit union members that logged into online banking and received a display page asking for additional authentication in the form of credit card information. The key here is the page was displayed after logging into their home banking accounts," said Dowell.
"It's important to understand that if the user is seeing that page, the damage is done. The online banking credentials have been compromised and need to be changed immediately," Dowell explained.
"The nasty thing about Zeus/Zbot is how it has been morphing or evolving," said Dowell, adding that it hides its presence on the member's machine. It is the same attack that is behind a recent flurry of automated clearinghouse (ACH) fraud.
Thursday, January 7, 2010
Craig's List ad targeting CUs is pulled
Craig's List has pulled an advertisement that sought to recruit current credit union members to solicit others to join the credit union through them.
According to the Pennsylvania Credit Union Association (PCUA), the advertiser offered $75 to current members who answered the ad and allowed ineligible people to join credit unions through a current member (Life is a Highway Jan. 6).
The ad listed specific credit unions across the country. However, the wording indicated the ad would take anyone, said PCUA.
The ad appeared to be from California. PCUA alerted the California Credit Union League, which investigated the posting. When News Now went to check the link, Craig's List had posted a notice that it had pulled the ad.
According to the Pennsylvania Credit Union Association (PCUA), the advertiser offered $75 to current members who answered the ad and allowed ineligible people to join credit unions through a current member (Life is a Highway Jan. 6).
The ad listed specific credit unions across the country. However, the wording indicated the ad would take anyone, said PCUA.
The ad appeared to be from California. PCUA alerted the California Credit Union League, which investigated the posting. When News Now went to check the link, Craig's List had posted a notice that it had pulled the ad.
Monday, January 4, 2010
Scams Were Rampant in December
An off-shore e-mail scam targeting members and nonmembers of a Michigan-based credit union made its way to Wisconsin recently--one of several scams credit unions reported during the holiday season.
The scam targeted Community Driven CU, Ypsilanti, Mich., and spread to consumers in Wisconsin and in Texas, the Kenosha News reported (Dec. 21). A reporter of that publication received a bogus e-mail purporting to be from the Michigan credit union, asking the reporter to enter in a credit card account number and personal identification number to view a Visa card statement.
Mary Cole, Community Driven CU member service loan officer, said the credit union is aware of the scam and has received many phone calls about it. The credit union also was hit by a text-messaging scam in November, she told the newspaper.
Washington Post columnist Elizabeth Razzi noted in a Dec. 15 column that she and her daughter received a text message saying that their ATM cards had been suspended from Treasury Department FCU, Washington, D.C. After receiving the message, Razzi visited the credit union's website and saw that a scam warning had been posted.
Read more at: http://www.cuna.org/newsnow/10/system123109-2.html?ref=hed
The scam targeted Community Driven CU, Ypsilanti, Mich., and spread to consumers in Wisconsin and in Texas, the Kenosha News reported (Dec. 21). A reporter of that publication received a bogus e-mail purporting to be from the Michigan credit union, asking the reporter to enter in a credit card account number and personal identification number to view a Visa card statement.
Mary Cole, Community Driven CU member service loan officer, said the credit union is aware of the scam and has received many phone calls about it. The credit union also was hit by a text-messaging scam in November, she told the newspaper.
Washington Post columnist Elizabeth Razzi noted in a Dec. 15 column that she and her daughter received a text message saying that their ATM cards had been suspended from Treasury Department FCU, Washington, D.C. After receiving the message, Razzi visited the credit union's website and saw that a scam warning had been posted.
Read more at: http://www.cuna.org/newsnow/10/system123109-2.html?ref=hed
Wednesday, December 30, 2009
Things That Have Gone Away: Remember These?
Adjusting Rabbit Ears On Top Of a TV
Adjusting Horizontal And Vertical Holds on a TV
Be Kind-Rewind video tapes
Calling A Phone Sex Line
Calling Collect On A Payphone
Cash Register Used Manually Entering The Prices (rather than scanning them)
Changing The Ribbon On A Typewriter
Converting Your Albums From Vinyl To Cassette Tape
Cuff Links
Dialing A Rotary Phone
Filing Cards In A Library Card Catalog
Finding Channels On UHF
Getting Off The Couch To Change Channels On Your TV Set
Having Your Gas Pumped For You And Your Oil Checked At A Full-service Gas Station
Kick Starting A Motorcycle
Knowing What Part Of Town Someone Lives In By Their Phone Exchange
Loading A Reel To Reel Tape Drive
Making An Operator Assisted Phone Call
Making Hot Chocolate By Heating Milk in a Pan, Then Adding Cocoa Powder and Sugar (remember the "skin" on the milk?)
Meeting People By Answering Personal Ads In A Newspaper Or Magazine
Opening A Can Of Beer Or Soda With A Church Key
Peeling The Developer Layer Off A Polaroid
Percolating Coffee
Placing A Coin On A Tone arm To Prevent Skipping
Popping Corn In A Pot With Oil
Porn Not From The Internet
Putting A Needle On A Vinyl Record
Rewinding An Audio Cassette Using A Bic Pen
Selling Something In The Classified Ads
Shave With A Straight Razor
Shorthand
Smelling A Freshly Mimeographed Test Paper
Switching To High Beams By Stomping On A Button In The Floor
Taking The Tape Out Of An Answering Machine
Testing TV Tubes At the Drugstore
Using Carbon Paper To Make Copies
Using Correction Fluid
Using A Party-line Telephone
Using A Pay Toilet
Adjusting Horizontal And Vertical Holds on a TV
Be Kind-Rewind video tapes
Calling A Phone Sex Line
Calling Collect On A Payphone
Cash Register Used Manually Entering The Prices (rather than scanning them)
Changing The Ribbon On A Typewriter
Converting Your Albums From Vinyl To Cassette Tape
Cuff Links
Dialing A Rotary Phone
Filing Cards In A Library Card Catalog
Finding Channels On UHF
Getting Off The Couch To Change Channels On Your TV Set
Having Your Gas Pumped For You And Your Oil Checked At A Full-service Gas Station
Kick Starting A Motorcycle
Knowing What Part Of Town Someone Lives In By Their Phone Exchange
Loading A Reel To Reel Tape Drive
Making An Operator Assisted Phone Call
Making Hot Chocolate By Heating Milk in a Pan, Then Adding Cocoa Powder and Sugar (remember the "skin" on the milk?)
Meeting People By Answering Personal Ads In A Newspaper Or Magazine
Opening A Can Of Beer Or Soda With A Church Key
Peeling The Developer Layer Off A Polaroid
Percolating Coffee
Placing A Coin On A Tone arm To Prevent Skipping
Popping Corn In A Pot With Oil
Porn Not From The Internet
Putting A Needle On A Vinyl Record
Rewinding An Audio Cassette Using A Bic Pen
Selling Something In The Classified Ads
Shave With A Straight Razor
Shorthand
Smelling A Freshly Mimeographed Test Paper
Switching To High Beams By Stomping On A Button In The Floor
Taking The Tape Out Of An Answering Machine
Testing TV Tubes At the Drugstore
Using Carbon Paper To Make Copies
Using Correction Fluid
Using A Party-line Telephone
Using A Pay Toilet
Gadgets of the Decade
2000: The USB Flash Drive
2001: The iPod
2002: The Dyson DC07 Vacuum Cleaner
2003: The Mainstream DVR
2004: The Motorola RAZR Cell Phone
2005: Personal GPS Navigation Devices
2006: Intel-Powered Macbooks
2007: Tie - the iPhone, the Wii, and the Flip camera
2008: Netbooks
2009: Explosion of e-readers
See the entire list and read the details at: http://www.fastcompany.com/pics/gadgets-decade
2001: The iPod
2002: The Dyson DC07 Vacuum Cleaner
2003: The Mainstream DVR
2004: The Motorola RAZR Cell Phone
2005: Personal GPS Navigation Devices
2006: Intel-Powered Macbooks
2007: Tie - the iPhone, the Wii, and the Flip camera
2008: Netbooks
2009: Explosion of e-readers
See the entire list and read the details at: http://www.fastcompany.com/pics/gadgets-decade
Tuesday, December 29, 2009
December News & Views Published Below
CU SECURITY & TECHNOLOGY News - Providing a brief summary of news and information related to security and technology issues for credit unions - Plus some interesting and fun web sites . . .
Monday, December 28, 2009
Five technology trends to watch in 2010
Technology innovation continued its ruthless pace in 2009, despite the economic headwinds. Now it’s time to turn our sights on 2010, where there are going to be some really interesting things to keep an eye on. Let’s count down the five tech trends that should be on your radar for 2010.
5: The consumerization of IT - This is something we’ve been talking about for a couple years but the trend is accelerating. We see it in employees using their own personal laptops and devices for work tasks and using freely available Web tools to help them get their jobs done. This can create a whole host of problems for IT, but in most cases you don’t want to squash it altogether. What you’ll need is a policy that gives employees guidance on how and when these types of tools can and can’t be used, and why.
4: Desktop virtualization - TechRepublic recently asked its CIO Jury about desktop virtualization and 75% said they weren’t interested. However, the 25% that ARE interested are very enthusiastic about using it to cut costs and simplify IT support. In 2010, it’s going to interesting to see if this trend gains momentum and becomes more mainstream, or if it’s simply relegated to a few niche scenarios and industries.
3: E-readers - While most of the buzz around e-readers is centered around consumers readings books and newspapers, there are also a new set of e-readers that will hit the market in 2010 that are aimed at helping businesses streamline the meetings that require huge stacks of paper and bring more multimedia capabilities to business documents. For more ammunition on why you should follow this trend, see Jack Wallen’s article “10 reasons why e-readers make sense in the enterprise.”
2: WAN acceleration - I consider WAN acceleration to be one of the best kept secrets in the IT and business worlds. By caching big files and often-used documents, WAN acceleration appliances and software can save big money on bandwidth costs and give your branch offices and remote workers far better performance on their business applications. Companies like Riverbed are even taking WAN acceleration a step further and using it to help speed up hosted cloud applications by partnering with major SaaS providers. All of this makes WAN acceleration one of the hottest projects in IT right now, because it can offer fast ROI and immediate productivity benefits.
1: Berries, apples, and robots - What do these three things have in common? Well, of course, we’re talking about smartphones with BlackBerry, Apple iPhone, and Google Android. These are the three smartphone platforms that have the most momentum heading into 2010. With smartphones becoming standard tools for more and more business workers, it’s going to be important to watch which devices users gravitate toward, which platforms offer IT more security and manageability features, and which ones developers latch on to as the best place to build new applications for business users.
http://blogs.techrepublic.com.com/hiner/?p=3473&tag=nl.e101
5: The consumerization of IT - This is something we’ve been talking about for a couple years but the trend is accelerating. We see it in employees using their own personal laptops and devices for work tasks and using freely available Web tools to help them get their jobs done. This can create a whole host of problems for IT, but in most cases you don’t want to squash it altogether. What you’ll need is a policy that gives employees guidance on how and when these types of tools can and can’t be used, and why.
4: Desktop virtualization - TechRepublic recently asked its CIO Jury about desktop virtualization and 75% said they weren’t interested. However, the 25% that ARE interested are very enthusiastic about using it to cut costs and simplify IT support. In 2010, it’s going to interesting to see if this trend gains momentum and becomes more mainstream, or if it’s simply relegated to a few niche scenarios and industries.
3: E-readers - While most of the buzz around e-readers is centered around consumers readings books and newspapers, there are also a new set of e-readers that will hit the market in 2010 that are aimed at helping businesses streamline the meetings that require huge stacks of paper and bring more multimedia capabilities to business documents. For more ammunition on why you should follow this trend, see Jack Wallen’s article “10 reasons why e-readers make sense in the enterprise.”
2: WAN acceleration - I consider WAN acceleration to be one of the best kept secrets in the IT and business worlds. By caching big files and often-used documents, WAN acceleration appliances and software can save big money on bandwidth costs and give your branch offices and remote workers far better performance on their business applications. Companies like Riverbed are even taking WAN acceleration a step further and using it to help speed up hosted cloud applications by partnering with major SaaS providers. All of this makes WAN acceleration one of the hottest projects in IT right now, because it can offer fast ROI and immediate productivity benefits.
1: Berries, apples, and robots - What do these three things have in common? Well, of course, we’re talking about smartphones with BlackBerry, Apple iPhone, and Google Android. These are the three smartphone platforms that have the most momentum heading into 2010. With smartphones becoming standard tools for more and more business workers, it’s going to be important to watch which devices users gravitate toward, which platforms offer IT more security and manageability features, and which ones developers latch on to as the best place to build new applications for business users.
http://blogs.techrepublic.com.com/hiner/?p=3473&tag=nl.e101
Thursday, December 24, 2009
FBI: 19,000 Matches to Terrorist Screening List in 2009
Testifying in front of the Senate Homeland Security and Government Affairs Committee, the FBI's Timothy Healy, director of the Terrorist Screening Center, stated that law enforcement officials reported 55,000 encounters with suspected terrorists in the last year. Of these encounters, 19,000 were with individuals on the terrorist watchlist. (Some of the 19,000 matches included multiple encounters with the same individuals.)
The watchlist, which includes approximately 400,000 individuals, is used to screen visa applicants, gun buyers and suspects stopped by police and to stop some air travelers for extra screening or interrogation.
http://www.wired.com/threatlevel/2009/12/terrorist-watchlist
The watchlist, which includes approximately 400,000 individuals, is used to screen visa applicants, gun buyers and suspects stopped by police and to stop some air travelers for extra screening or interrogation.
http://www.wired.com/threatlevel/2009/12/terrorist-watchlist
Wednesday, December 16, 2009
A Job Even Better Than Working At a Credit Union
From The London Times:
Outside England 's Bristol Zoo there is a parking lot for 150 cars and 8 buses. For 25 years, its parking fees were managed by a very pleasant attendant. The fees were £1 for cars ($1.40), £5 for busses (about $7).
Then, one day, after 25 solid years of never missing a day of work, he just didn't show up; so the Zoo Management called the City Council and asked it to send them another parking agent. The Council did some research and replied that the parking lot was the Zoo's own responsibility. The Zoo advised the Council that the attendant was a City employee.
The City Council responded that the lot attendant had never been on the City payrole.
Meanwhile, sitting in his villa somewhere on the coast of Spain (or some such scenario), is a man who'd apparently had a ticket machine installed completely on his own; and then had simply begun to show up every day, commencing to collect and keep the parking fees, estimated at about $560 per day -- for 25 years. Assuming 7 days a week, this amounts to just over
$7 million dollars!
And no one even knows his name.
Outside England 's Bristol Zoo there is a parking lot for 150 cars and 8 buses. For 25 years, its parking fees were managed by a very pleasant attendant. The fees were £1 for cars ($1.40), £5 for busses (about $7).
Then, one day, after 25 solid years of never missing a day of work, he just didn't show up; so the Zoo Management called the City Council and asked it to send them another parking agent. The Council did some research and replied that the parking lot was the Zoo's own responsibility. The Zoo advised the Council that the attendant was a City employee.
The City Council responded that the lot attendant had never been on the City payrole.
Meanwhile, sitting in his villa somewhere on the coast of Spain (or some such scenario), is a man who'd apparently had a ticket machine installed completely on his own; and then had simply begun to show up every day, commencing to collect and keep the parking fees, estimated at about $560 per day -- for 25 years. Assuming 7 days a week, this amounts to just over
$7 million dollars!
And no one even knows his name.
Tuesday, December 15, 2009
Six cyber trends outlined by I.D. theft center
Identity crime, especially Internet-based crime, continues to plague consumers and the economy, according to the Identity Theft Assistance Center (ITAC) Identity Theft Outlook for 2010.
The report is based on developments during the past year and notes what's ahead in 2010, including trends in criminal activity and law enforcement.
The report also outlined six trends ITAC anticipates for 2010:
1) More criminals will use malware to steal usernames and passwords, and recruit accomplices as "money mules" to open phony accounts and transfer funds. "It is the responsibility of consumers and businesses alike to demand the best security protection and to implement it into their everyday experiences," said Michael Stanfield, CEO, Intersections Inc., a CUNA Strategic Service.
2) More collaboration on cyber security. The Obama administration will continue to break down silos within the government and collaborate more with the industry as it develops and implement cyber security policy, ITAC said.
3) Expanded use of identity management solutions to address identity theft, data breaches and cybercrime.
4) Changes resulting from "Red Flag" rules. Red flags are any activity or practice that indicates possible identity theft. Consumers will face questions about address changes and other behavior, including missed payments or changes in spending patterns. Consumers may be annoyed until they adjust to the new levels of scrutiny.
5) Stiffer sentences for those convicted of identity theft. The law requires a mandatory two-year sentence for aggravated identity theft. Prosecutors also are pursuing added jail time for related felonies, including wire fraud and use of unauthorized access devices.
6) Possible federal regulation of breaches of consumer data. The Senate is slated to consider two measures that would regulate how public and private organizations protect personal information.
The report is based on developments during the past year and notes what's ahead in 2010, including trends in criminal activity and law enforcement.
The report also outlined six trends ITAC anticipates for 2010:
1) More criminals will use malware to steal usernames and passwords, and recruit accomplices as "money mules" to open phony accounts and transfer funds. "It is the responsibility of consumers and businesses alike to demand the best security protection and to implement it into their everyday experiences," said Michael Stanfield, CEO, Intersections Inc., a CUNA Strategic Service.
2) More collaboration on cyber security. The Obama administration will continue to break down silos within the government and collaborate more with the industry as it develops and implement cyber security policy, ITAC said.
3) Expanded use of identity management solutions to address identity theft, data breaches and cybercrime.
4) Changes resulting from "Red Flag" rules. Red flags are any activity or practice that indicates possible identity theft. Consumers will face questions about address changes and other behavior, including missed payments or changes in spending patterns. Consumers may be annoyed until they adjust to the new levels of scrutiny.
5) Stiffer sentences for those convicted of identity theft. The law requires a mandatory two-year sentence for aggravated identity theft. Prosecutors also are pursuing added jail time for related felonies, including wire fraud and use of unauthorized access devices.
6) Possible federal regulation of breaches of consumer data. The Senate is slated to consider two measures that would regulate how public and private organizations protect personal information.
Counterfeit credit/debit card fraud: Let's stop it now
These tips may seem obvious, but mentioning them again can’t hurt. It’s your hard-earned money at stake, after all:
> Stare: It’s no longer considered rude to stare at your card for the entire time it’s in the hands of a clerk or waiter.
> Shield: When using your debit card, lean in and cover your PIN entry from every angle, the digits you protect equal the money in your account.
> Change: The bad guys have figured out the number-increment algorithm many banks use. If at all possible, make sure the last eight digits of the new credit/debit card’s number are different.
> Check: The average time between stealing credit card information and using it on-line has dropped from 10 days to three. It is recommended that you check your on-line accounts at least that often.
Mr. Patterson’s endeavor
Those tips are important. Yet, they are overshadowed by Mr. Patterson’s real quest. Here is what he wants to do:
“Completely eradicate counterfeit card fraud world-wide in the next 24 months. With the banks losing over 4 billion dollars a year and growing rapidly, the industry is ready to fight back. Organized crime has declared this fight, and it will take a unified effort to repel.”
We all know about credit/debit card fraud. What surprised me was the scope of counterfeit card fraud. Expert after expert pointed out that using counterfeit cards or information obtained from credit/debit cards supports most illegal activity throughout the world.
Counterfeit cards
This YouTube video will give you an idea of how simple it is to steal information embedded in a credit/debit card’s magnetic strip. As the video shows, the only hardware required is a computer, card reader, and magnetic strip card writer. One expert commented on how easy it is to buy card skimmers (readers) on eBay. So, I looked and, sure enough (courtesy of eBay):
(Read the rest of the story at: http://blogs.techrepublic.com.com/security/?p=2825&tag=nl.e036
> Stare: It’s no longer considered rude to stare at your card for the entire time it’s in the hands of a clerk or waiter. > Change: The bad guys have figured out the number-increment algorithm many banks use. If at all possible, make sure the last eight digits of the new credit/debit card’s number are different.
> Check: The average time between stealing credit card information and using it on-line has dropped from 10 days to three. It is recommended that you check your on-line accounts at least that often.
Mr. Patterson’s endeavor
Those tips are important. Yet, they are overshadowed by Mr. Patterson’s real quest. Here is what he wants to do:
“Completely eradicate counterfeit card fraud world-wide in the next 24 months. With the banks losing over 4 billion dollars a year and growing rapidly, the industry is ready to fight back. Organized crime has declared this fight, and it will take a unified effort to repel.”
We all know about credit/debit card fraud. What surprised me was the scope of counterfeit card fraud. Expert after expert pointed out that using counterfeit cards or information obtained from credit/debit cards supports most illegal activity throughout the world.
Counterfeit cards
This YouTube video will give you an idea of how simple it is to steal information embedded in a credit/debit card’s magnetic strip. As the video shows, the only hardware required is a computer, card reader, and magnetic strip card writer. One expert commented on how easy it is to buy card skimmers (readers) on eBay. So, I looked and, sure enough (courtesy of eBay):
(Read the rest of the story at: http://blogs.techrepublic.com.com/security/?p=2825&tag=nl.e036
Monday, December 14, 2009
The Google Phone: Risks, rewards and wild cards
The fabled Google Phone made an appearance over the weekend and it’s another iPhone killer, grand experiment for the search giant or a way to rewrite the wireless pecking order. Here’s a look at the risks, rewards and wild card associated with Google’s phone, dubbed Nexus One.
It didn’t take long for pictures of this Google phone to hit Twitter. The Wall Street Journal then followed up with a few more tidbits.
> Google’s Nexus One will up the ante vs. Apple;
> HTC will make the device;
> The device won’t be tethered to any carrier and Google will sell it online;
> Google wanted to control the hardware, software and user experience completely.
So what is Google up to with Nexus One? The answers are a little fuzzy, but here’s a crack at Google’s calculus behind launching a phone that could alienate partners, drive wireless innovation and alter the competitive landscape among other things.
Read more about the Google phone at: http://blogs.zdnet.com/BTL/?p=28432&tag=nl.e539
First, a little background (Techmeme). Google on Saturday said on its mobile blog that is handing out a snazzy phone loaded with an uncompromised version of its Android operating system. The move was all about Google eating is own Android dogfood. The device combines “innovative hardware from a partner with software that runs on Android to experiment with new mobile features and capabilities.”
It didn’t take long for pictures of this Google phone to hit Twitter. The Wall Street Journal then followed up with a few more tidbits. Among them:
> Google’s Nexus One will up the ante vs. Apple;
> HTC will make the device;
> The device won’t be tethered to any carrier and Google will sell it online;
> Google wanted to control the hardware, software and user experience completely.
So what is Google up to with Nexus One? The answers are a little fuzzy, but here’s a crack at Google’s calculus behind launching a phone that could alienate partners, drive wireless innovation and alter the competitive landscape among other things.
Read more about the Google phone at: http://blogs.zdnet.com/BTL/?p=28432&tag=nl.e539
Friday, December 11, 2009
How Fake Sites Trick Search Engines to Hit the Top
Even search engines can get suckered by Internet scams.
Security researcher Jim Stickley displays logs on his laptop from Internet scams he created for a...
Security researcher Jim Stickley displays logs on his laptop from Internet scams he created for a study for a California financial institution at his home in La Mesa, Calif., Monday Dec. 7, 2009. Stickley's study showed some of the most trusted Internet search engines gave high ratings to fraudulent web sites. (AP Photo/Lenny Ignelzi)
(AP)With a little sleight of hand, con artists can dupe them into giving top billing to fraudulent Web sites that prey on consumers, making unwitting accomplices of companies such as Google, Yahoo and Microsoft.
Online charlatans typically try to lure people into giving away their personal or financial information by posing as legitimate companies in "phishing" e-mails or through messages in forums such as Twitter and Facebook. But a new study by security researcher Jim Stickley shows how search engines also can turn into funnels for shady schemes.
Stickley created a Web site purporting to belong to the Credit Union of Southern California, a real business that agreed to be part of the experiment. He then used his knowledge of how search engines rank Web sites to achieve something that shocked him: His phony site got a No. 2 ranking on Yahoo Inc.'s search engine and landed in the top slot on Microsoft Corp.'s Bing, ahead of even the credit union's real site.
Read the rest of this story at: http://abcnews.go.com/Technology/wireStory?id=9282914
Security researcher Jim Stickley displays logs on his laptop from Internet scams he created for a...
Security researcher Jim Stickley displays logs on his laptop from Internet scams he created for a study for a California financial institution at his home in La Mesa, Calif., Monday Dec. 7, 2009. Stickley's study showed some of the most trusted Internet search engines gave high ratings to fraudulent web sites. (AP Photo/Lenny Ignelzi)
(AP)With a little sleight of hand, con artists can dupe them into giving top billing to fraudulent Web sites that prey on consumers, making unwitting accomplices of companies such as Google, Yahoo and Microsoft.
Online charlatans typically try to lure people into giving away their personal or financial information by posing as legitimate companies in "phishing" e-mails or through messages in forums such as Twitter and Facebook. But a new study by security researcher Jim Stickley shows how search engines also can turn into funnels for shady schemes.
Stickley created a Web site purporting to belong to the Credit Union of Southern California, a real business that agreed to be part of the experiment. He then used his knowledge of how search engines rank Web sites to achieve something that shocked him: His phony site got a No. 2 ranking on Yahoo Inc.'s search engine and landed in the top slot on Microsoft Corp.'s Bing, ahead of even the credit union's real site.
Read the rest of this story at: http://abcnews.go.com/Technology/wireStory?id=9282914
Thursday, December 10, 2009
From a Security Perspective, Can You Really Identify The Bad Guy
If you watch the above images from your seat in front of the computer, Mr. Angry is on the left, and Mr. Calm is on the right.Get up from your seat, and move back. They switch places! "This illusion was created by Dr. Aude Oliva & Philippe G. Schyns, MIT illustrates the ability of the visual system to separate information coming from different spatial frequency channels."
Wednesday, December 9, 2009
Sunday, December 6, 2009
Credit Union Retired Executives (CURE) Online Advisory Service Launched
Unique Virtual Network Provides Confidential, Free Advice to Credit Union Professionals
We are pleased to announce the debut of its unique online advisory service — CURE, at www.CURetiredExecs.com — a secure, virtual network of retired credit union executives who are volunteering their time and expertise to support those working today on the front lines of the credit union industry. The first of its kind, this new website is the only place to go 24/7 for confidential advice — free of charge, thanks to the website’s Supporters — about the many operational issues facing credit unions today.
Holly Herman, Executive Director, stated, “Experience matters! We’ve assembled an incredible team of Advisors, retired credit union executives with an unmatched depth and breadth of experience — experience that has gone largely untapped until now. We also have an exceptional group of Supporters from around the industry, who are making it all possible.”
Getting started is easy. Visit www.CURetiredExecs.com, register, and ask your first question. Visitors have their choice of advisors with expertise in a wide variety of areas, and are assured total confidentiality — and a customized answer within 3 business days, offering suggested solutions, recommended alternatives, and new perspectives on the question at hand.
Herman added, “In these especially difficult times for all of us, we’re confident that this service will prove invaluable in tackling and overcoming the challenges of the day, to ensure that credit unions everywhere can continue to offer the best in financial services to their members.”
CURE is a resource for credit union professionals to ask questions and to use as a sounding board. It's the number one place to go for advice on anything relating to your credit union. CURE connects credit union professionals with the nation's finest credit union retired executives for free and confidential advice. We have advisors waiting to share their experience and opinions with you. Visit http://www.curetiredexecs.com/ to get started.
We are pleased to announce the debut of its unique online advisory service — CURE, at www.CURetiredExecs.com — a secure, virtual network of retired credit union executives who are volunteering their time and expertise to support those working today on the front lines of the credit union industry. The first of its kind, this new website is the only place to go 24/7 for confidential advice — free of charge, thanks to the website’s Supporters — about the many operational issues facing credit unions today.
Holly Herman, Executive Director, stated, “Experience matters! We’ve assembled an incredible team of Advisors, retired credit union executives with an unmatched depth and breadth of experience — experience that has gone largely untapped until now. We also have an exceptional group of Supporters from around the industry, who are making it all possible.”
Getting started is easy. Visit www.CURetiredExecs.com, register, and ask your first question. Visitors have their choice of advisors with expertise in a wide variety of areas, and are assured total confidentiality — and a customized answer within 3 business days, offering suggested solutions, recommended alternatives, and new perspectives on the question at hand.
Herman added, “In these especially difficult times for all of us, we’re confident that this service will prove invaluable in tackling and overcoming the challenges of the day, to ensure that credit unions everywhere can continue to offer the best in financial services to their members.”
CURE is a resource for credit union professionals to ask questions and to use as a sounding board. It's the number one place to go for advice on anything relating to your credit union. CURE connects credit union professionals with the nation's finest credit union retired executives for free and confidential advice. We have advisors waiting to share their experience and opinions with you. Visit http://www.curetiredexecs.com/ to get started.
Thursday, December 3, 2009
Scam Wave Hits CUs in Several States
Another wave of texting and phishing scams has swamped credit unions and other financial institutions in several states--this time in the Western half of the nation--prompting them to alert members and the public.
Two scams circulating in Northern Colorado involve texting to cell phones of members and nonmembers. The messages invoke the name of a defunct credit union, Norlarco CU, which was acquired by Public Service CU in Denver (Coloradoan.com Dec. 1).
The text messages say recipients' accounts have been restricted and they must call a toll free number. To unlock the account, they are instructed to enter their debit or credit card number, personal identification number (PIN) and expiration date.
Several members of Public Service CU received the message, according to its website. The credit union told members to not respond in any way to the message and to "Delete it immediately. It is a scam."
In Cheyenne, Wyoming, Warren FCU, members received a similar scam, prompting the Better Business Bureau serving Northern Colorado and Wyoming to tell the Coloradoan, "It seems like credit unions are specifically targeted."
In California, credit unions in Redwood City and Merced were targeted with the same kinds of messages. San Mateo CU, Redwood City, issued a press release saying it had not sent a text message received by consumers. In Merced, another credit union as well as customers of AT&T cell phone accounts were targeted, reported the sheriff's office (Merced Sun-Star Nov. 26).
Bridgeton, Mo.-based Vantage CU, which was been targeted before in previous waves of scams, said fraudsters started sending text-message phishing scams again to members and non-members last weekend in the credit union's name. Eric Acree, vice president, told the St. Louis Post-Dispatch that the credit union is trying to educate members about its security procedures so they don't fall for the fake messages. The credit union never contacts accountholders with an unsolicited text message, he told the newspaper.
In Nampa, Idaho, police said scammers sent text messages with an emergency notification about their accounts to consumers. Mountain Gem CU was targeted by the scammers, and Northwest Christian CU and IDADIV CU used their websites to warn consumers about the scam.
Two scams circulating in Northern Colorado involve texting to cell phones of members and nonmembers. The messages invoke the name of a defunct credit union, Norlarco CU, which was acquired by Public Service CU in Denver (Coloradoan.com Dec. 1). The text messages say recipients' accounts have been restricted and they must call a toll free number. To unlock the account, they are instructed to enter their debit or credit card number, personal identification number (PIN) and expiration date.
Several members of Public Service CU received the message, according to its website. The credit union told members to not respond in any way to the message and to "Delete it immediately. It is a scam."
In Cheyenne, Wyoming, Warren FCU, members received a similar scam, prompting the Better Business Bureau serving Northern Colorado and Wyoming to tell the Coloradoan, "It seems like credit unions are specifically targeted."
In California, credit unions in Redwood City and Merced were targeted with the same kinds of messages. San Mateo CU, Redwood City, issued a press release saying it had not sent a text message received by consumers. In Merced, another credit union as well as customers of AT&T cell phone accounts were targeted, reported the sheriff's office (Merced Sun-Star Nov. 26).
Bridgeton, Mo.-based Vantage CU, which was been targeted before in previous waves of scams, said fraudsters started sending text-message phishing scams again to members and non-members last weekend in the credit union's name. Eric Acree, vice president, told the St. Louis Post-Dispatch that the credit union is trying to educate members about its security procedures so they don't fall for the fake messages. The credit union never contacts accountholders with an unsolicited text message, he told the newspaper.
In Nampa, Idaho, police said scammers sent text messages with an emergency notification about their accounts to consumers. Mountain Gem CU was targeted by the scammers, and Northwest Christian CU and IDADIV CU used their websites to warn consumers about the scam.
Wednesday, December 2, 2009
You Can Buy Used ATMs On Craigslist
Here’s a new twist on an old scam, ATMs for sale on Craigslist are being bought and used by crooks in a variety of ways (none of them good). A data security expert in Boston demonstrated this vulnerability.
After searching Craigslist for a seller, he found a bar owner looking to liquidate assets. He paid $750 for the ATM, and after a hacker friend looked over the accompanying manual, he was able to get 1,000 account numbers to print out.
After searching Craigslist for a seller, he found a bar owner looking to liquidate assets. He paid $750 for the ATM, and after a hacker friend looked over the accompanying manual, he was able to get 1,000 account numbers to print out.
ATM Skimmers Make Off With $70,000 in Chicago
ATM skimming, capturing card holder’s card information by way of devices often attached to or placed around an ATM while they use the machine, has been slow to catch on the U.S. But Chicago thieves have been catching up.
Police are confirming media accounts of two ATM thieves which made off with $70,000 from a bank ATM after they attached a device to the machine to record card data and used a camera to record a card holder’s personal identification numbers as they punched them in.
The bank declined to comment on the theft other than to confirm that the Secret Service had been notified as well as the police. The Secret Service did not comment. Media reports said the two were caught on surveillance cameras placing the device and then returning to collect it and use the data to make the withdrawals.
See how the scam works: http://www.utexas.edu/police/alerts/atm_scam/
Police are confirming media accounts of two ATM thieves which made off with $70,000 from a bank ATM after they attached a device to the machine to record card data and used a camera to record a card holder’s personal identification numbers as they punched them in.
The bank declined to comment on the theft other than to confirm that the Secret Service had been notified as well as the police. The Secret Service did not comment. Media reports said the two were caught on surveillance cameras placing the device and then returning to collect it and use the data to make the withdrawals.
See how the scam works: http://www.utexas.edu/police/alerts/atm_scam/
Tuesday, December 1, 2009
November News & Views Published Below
CU SECURITY & TECHNOLOGY News - Providing a brief summary of news and information related to security and technology issues for credit unions - Plus some interesting and fun web sites . . .Friday, November 27, 2009
Christmas Carols Available From The Chins
Take a break and enjoy some Christmas carols from "The Chins." Just type in your song and see if you can stump the singers. Click on: http://www.sundog.net/index.php/chins/carol/
Saturday, November 21, 2009
Buddy, Can You E-Mail Me 100 Bucks?
The Next Big Thing in U.S. banking may be mobile person-to-person money transfers.
What if you could send money to that friend who loaned you $20 last week by using your mobile phone rather than having to go through the trouble of trekking to the ATM or mailing a check? All you'd need would be your buddy's e-mail address or cell number—and presto.
Folks in Japan and Europe can already do that. Soon Americans will, too. Studies show that U.S. consumers, particularly the younger set, have embraced the convenience of online shopping and e-banking and are now ready to move to the next frontier: person-to-person mobile payments. A recent poll by Mercatus, a financial consulting firm, showed that the proportion of people ages 26 to 34 who had used a cell phone to buy goods or pay for a product or service had doubled, to 14%, in the past year. "We are at the tipping point," says Mercatus managing partner Robert Hedges.
That's why a host of banks and financial companies are gearing up to add person-to-person payments to their existing mobile and online banking platforms.
[Read story at BusinessWeek.com/by Amy Feldman].
http://www.businessweek.com/magazine/content/09_47/b4156068763985.htm
What if you could send money to that friend who loaned you $20 last week by using your mobile phone rather than having to go through the trouble of trekking to the ATM or mailing a check? All you'd need would be your buddy's e-mail address or cell number—and presto.
That's why a host of banks and financial companies are gearing up to add person-to-person payments to their existing mobile and online banking platforms.
[Read story at BusinessWeek.com/by Amy Feldman].
http://www.businessweek.com/magazine/content/09_47/b4156068763985.htm
Thursday, November 19, 2009
What if your Phone could read barcodes?
You could do all sorts of cool things.
Check online prices for a DVD player.
Scan a book and check for reviews.
Scan the milk and add it to your grocery list.
I know what you’re thinking. That’s impossible, right? You heard the camera just wasn’t good enough.
Actually, it is good enough. But you can’t use just any old barcode technology. You need RedLaser – just maybe the most advanced 1D barcode recognition technology on planet earth.
Skeptical?
The future of shopping at: http://redlaser.com/
Bill Rogers spoke on similar technology and offered an outstanding video clip at the recent CU InfoTECH '09 Conference in Palm Springs. Bill said, "One attendee approached me after my presentation and said if he left the conference right now, that he already got his money worth and thanked me for a great program."
To book Bill and the future technology program, send an email to billrogers@swbell.net or call Bill at 1-800-745-2455.
Check online prices for a DVD player.
Scan a book and check for reviews.
Scan the milk and add it to your grocery list.
I know what you’re thinking. That’s impossible, right? You heard the camera just wasn’t good enough.
Actually, it is good enough. But you can’t use just any old barcode technology. You need RedLaser – just maybe the most advanced 1D barcode recognition technology on planet earth.
Skeptical?
The future of shopping at: http://redlaser.com/
Bill Rogers spoke on similar technology and offered an outstanding video clip at the recent CU InfoTECH '09 Conference in Palm Springs. Bill said, "One attendee approached me after my presentation and said if he left the conference right now, that he already got his money worth and thanked me for a great program."
To book Bill and the future technology program, send an email to billrogers@swbell.net or call Bill at 1-800-745-2455.
Tuesday, November 17, 2009
Sick of Extension Cords?
It is kind of annoying to move into a new apartment and to have to arrange your furniture and home entertainment system around the electrical outlets. You've just put up some awesome shelves, for instance, but your TV cord is a few inches too short to reach the nearest outlet. The obvious solution? Put electrical outlets everywhere.
Or, um, use an extension cord.
..
Or, um, use an extension cord.
..
CUNA Technology Council presents best of show award
The CUNA Technology Council presented its Best of Show Award to Saylent Technologies for its Card360 product.
The award was presented at the Bank Administration Institute's Retail Delivery Conference Nov. 3-5 in Boston.
Saylent Technologies develops software solutions and services to increase non-interest income and core deposits. It won the Best of Show award for its Card360 solution, a portfolio optimization suite to help credit unions maximize the performance and satisfaction of their card programs.
Card360 is the engine behind CO-OP Financial Services' Revelation product, used by CO-OP's debit processing customers.
Since 2001, the CUNA Technology Council has presented the Best of Show award to the exhibitor that demonstrates a commitment to delivering technology that will further the growth of products and services in the credit union marketplace.
The award was presented at the Bank Administration Institute's Retail Delivery Conference Nov. 3-5 in Boston.
Saylent Technologies develops software solutions and services to increase non-interest income and core deposits. It won the Best of Show award for its Card360 solution, a portfolio optimization suite to help credit unions maximize the performance and satisfaction of their card programs.
Card360 is the engine behind CO-OP Financial Services' Revelation product, used by CO-OP's debit processing customers.
Since 2001, the CUNA Technology Council has presented the Best of Show award to the exhibitor that demonstrates a commitment to delivering technology that will further the growth of products and services in the credit union marketplace.
Thursday, November 12, 2009
Hilton Hotels Available Thru iTunes
Hilton Hotels just launched an iPhone app that lets customers book and modify reservations at over 520 hotels in 76 countries.
Offered gratis on iTunes, the Hilton Worldwide app could come in handy for stranded travelers thanks to a feature that lets you find hotels near you, by address or airport, and gives you directions from your current location.
The app will also let you choose bed and pillow type — plus if you don’t think you’ll have the strength to make a request once you get in, you can put your order for room service in via iPhone, too.
Sounds good, but it still has to compete with Priceline.com’s app (which boasts William Shatner as the icon) already iTunes’ fifth-most-downloaded free app after launching a week ago.
Offered gratis on iTunes, the Hilton Worldwide app could come in handy for stranded travelers thanks to a feature that lets you find hotels near you, by address or airport, and gives you directions from your current location.The hotels at hand also include all of those in the Hilton network — another 3,000 + including the Doubletree, Embassy Suites and Home2 suites chains.
The app will also let you choose bed and pillow type — plus if you don’t think you’ll have the strength to make a request once you get in, you can put your order for room service in via iPhone, too.
Sounds good, but it still has to compete with Priceline.com’s app (which boasts William Shatner as the icon) already iTunes’ fifth-most-downloaded free app after launching a week ago.
Fed will require bank customers and CU members to OK overdrafts
The Federal Reserve released a long-awaited rule Thursday requiring banks and credit unions to get consumers' permission before paying most debit-card and ATM overdrafts.
The rule, which comes as Congress is scrutinizing hefty overdraft fees, will take effect by July 1, 2010 for new customers and Aug. 15, 2010 for existing customers.
Consumers who want financial institutions to pay transactions that exceed their cash or credit limits can give their consent orally or in writing, Fed officials said Thursday.
More at: http://www.usatoday.com/money/industries/banking/2009-11-12-fed-overdraft-rule_N.htm
The rule, which comes as Congress is scrutinizing hefty overdraft fees, will take effect by July 1, 2010 for new customers and Aug. 15, 2010 for existing customers.
Consumers who want financial institutions to pay transactions that exceed their cash or credit limits can give their consent orally or in writing, Fed officials said Thursday.
More at: http://www.usatoday.com/money/industries/banking/2009-11-12-fed-overdraft-rule_N.htm
Wednesday, November 4, 2009
Shift Happens: Fall 2009 Version
You may have seen a previous version with the same or similar title. Here's an updated one out the fall of 2009.
http://www.flixxy.com/technology-and-media-convergence.htm
http://www.flixxy.com/technology-and-media-convergence.htm
FBI warns consumers of increased phishing scam attempts
The Federal Bureau of Investigation on Tuesday warned consumers that it has "seen a significant increase in fraud involving the exploitation of valid online banking credentials belonging to small and medium businesses, municipal governments, and school districts" over the recent months.
According to the FBI, potential victims of this type of fraud will receive a so-called "spear phishing" e-mail that contains an infected e-mail attachment or a link that sends the e-mail recipient to a website that is infected. Malware which contains a keylogger program is then installed on the victim's computer once they click on the link or attachment.
The keylogger is then used to track account information, and that information is used to steal from the victim via fund transfers or to create additional accounts in the victim's name.
The FBI has found that transferred funds of funds from the created accounts are then diverted into bank accounts of individuals that have been recruited to serve as payment processors through work-at-home advertisements or job search websites. The unwitting individuals then transfer the money that arrives in their accounts to overseas locales through a wire transfer service.
The FBI has advised customers that do their banking online to contact their financial institution to ensure that they are employing all the appropriate security and fraud prevention services their institution offers.
The keylogger is then used to track account information, and that information is used to steal from the victim via fund transfers or to create additional accounts in the victim's name.
The FBI has found that transferred funds of funds from the created accounts are then diverted into bank accounts of individuals that have been recruited to serve as payment processors through work-at-home advertisements or job search websites. The unwitting individuals then transfer the money that arrives in their accounts to overseas locales through a wire transfer service.
The FBI has advised customers that do their banking online to contact their financial institution to ensure that they are employing all the appropriate security and fraud prevention services their institution offers.
Tuesday, November 3, 2009
Data breach victims at 4 x greater fraud risk
Consumers who received a data-breach notification within the past year are four times more likely than typical consumers to have been victims of identity fraud, says new research. However, consumers rarely attribute the fraud to their data breach exposure.
Data breach notifications are intended to help consumers take protective action," said Mary Monahan, managing partner and research director at Javelin Strategy & Research, which conducted its third annual survey of nearly 5,000 U.S. consumers.
"Notification is critical because consumers are over four times more likely to encounter actual fraudulent transactions if they receive a data-breach notification," Monahan said in a press release. "But our research shows a disconnect between breach notifications and consumer awareness of risk, which results in individuals not being adequately protected."
During the past three years, roughly 11% of consumers received a breach notification, said the report. More than one-third of breach victims experienced exposure of their Social Security numbers, and 15% had their ATM personal identification numbers (PINs) compromised.
Despite almost 20% of breach victims suffering some kind of fraud in the past year, only 2% attribute their fraud to the breach.
Data breach notifications are intended to help consumers take protective action," said Mary Monahan, managing partner and research director at Javelin Strategy & Research, which conducted its third annual survey of nearly 5,000 U.S. consumers.
"Notification is critical because consumers are over four times more likely to encounter actual fraudulent transactions if they receive a data-breach notification," Monahan said in a press release. "But our research shows a disconnect between breach notifications and consumer awareness of risk, which results in individuals not being adequately protected."
During the past three years, roughly 11% of consumers received a breach notification, said the report. More than one-third of breach victims experienced exposure of their Social Security numbers, and 15% had their ATM personal identification numbers (PINs) compromised.
Despite almost 20% of breach victims suffering some kind of fraud in the past year, only 2% attribute their fraud to the breach.
Saturday, October 31, 2009
October News & Views Published Below
Friday, October 23, 2009
100 Dirtiest Sites to Avoid for Safety's Sake
Web users could be putting themselves at risk by surfing to some sites that contain more than 18,000 different security threats each, says Symantec.
The security vendor has compiled a list of this year's 100 "Dirtiest Websites." Just by visiting these sites, Web users could see their PCs infected with viruses or even have their sensitive personal data stolen by cyber criminals, even if they don't download or click on anything in particular.
Symantec said the average number of threats per malicious site is 23. However, all of the websites that made the top 100 list have on average 18,000 per site, with 40 percent having over 20,000 security threats. The company also said that three quarters of the sites have been distributing malware for over six months.
As expected just under half of the websites offered adult content, but what is more surprising is that other 52 websites covered a random selection of topics such as deer hunting, catering, figure skating, legal services and electronics.
"There has been exponential growth in the number of online threats that are constantly evolving as cybercriminals look for new ways to target your money, identity or assets. In 2008, most new infections occurred while people were surfing the web," said Marian Merritt, Symantec's internet safety advocate.
The security vendor has compiled a list of this year's 100 "Dirtiest Websites." Just by visiting these sites, Web users could see their PCs infected with viruses or even have their sensitive personal data stolen by cyber criminals, even if they don't download or click on anything in particular.
Symantec said the average number of threats per malicious site is 23. However, all of the websites that made the top 100 list have on average 18,000 per site, with 40 percent having over 20,000 security threats. The company also said that three quarters of the sites have been distributing malware for over six months.
As expected just under half of the websites offered adult content, but what is more surprising is that other 52 websites covered a random selection of topics such as deer hunting, catering, figure skating, legal services and electronics.
"There has been exponential growth in the number of online threats that are constantly evolving as cybercriminals look for new ways to target your money, identity or assets. In 2008, most new infections occurred while people were surfing the web," said Marian Merritt, Symantec's internet safety advocate.
Thursday, October 22, 2009
Wife's First Hunting Trip
My sweet husband invited me to go hunting with him this year.
I couldn't believe it...the first time ever! I never thought he'd be
willing to share his 'guy time' with me. And being the thoughtful
man that he is, he even gave me an opening day present. He
calls it 'The First Timers Lucky Hat'. I'm so fortunate to be married
to him. I have attached a picture of me in my lucky hat.
I couldn't believe it...the first time ever! I never thought he'd be
willing to share his 'guy time' with me. And being the thoughtful
man that he is, he even gave me an opening day present. He
calls it 'The First Timers Lucky Hat'. I'm so fortunate to be married
to him. I have attached a picture of me in my lucky hat.
Wednesday, October 21, 2009
Take a look at something technologically entertaining
ServerQuest II game
Let's take a look at something technologically entertaining. Do you remember playing the vintage computers games King's Quest or Leisure Suit Larry? If so, you should enjoy Microsoft TechNet's ServerQuest II game. It emulates the same sort of pixilated graphics (Figure C) and cheesy humor as those classics, but it's aimed at IT professionals and computer specialists.
In the game, which is created with Silverlight and runs in your browser, you play an IT pro (either Matt or Alicia) whose objective is to keep the network running smoothly while encountering a host of technical problems that are presented as games and puzzles, ranging from the absurd to things you might encounter in the real life of an IT pro. As you work through the tasks, you'll learn about and use Microsoft technologies to solve problems, encounter hidden Easter Eggs, earn geek points, and get to post your high scores for others to compete against.
The game is really very humorous -- and you might even learn some interesting troubleshooting techniques as you play.
Click here: http://www.microsoft.com/click/serverquest/
75 interesting credit union name changes in 2009
Callahan & Associates, the credit union industry’s leading analytics firm and publishers of CreditUnions.com, have just released their 2010 Credit Union Directory. Comparing this year’s directory against last year’s, The Financial Brand has noted 75 substantive name changes.
From this year’s new names:
http://thefinancialbrand.com/2009/10/21/2009-cu-name-changes/
From this year’s new names:
- 11 credit unions included the word “Community”: Arlington Community, Champion Community, Community, Community Driven, Memberfocus Commmunity, My Community, NMTW Community, Prestige Community, Total Community, Valley One Community and Vue Community.
- 7 reduced their names to acronyms: CEFCU, CSE, MaPS, MCT, ME/CU, NMTW and USE.
- 7 are coined names: Altana, Aventa, Cinfed, Genisys, Meritrust, TruStone and Vue Community.
- 3 use the number “one”: Alabama One, Metro 1 and Valley One Community.
- 3 credit unions ditched the word “First” in their name, while one put it in: University First.
- 2 credit unions used alphanumeric constructions: Med5 and Metro 1.
http://thefinancialbrand.com/2009/10/21/2009-cu-name-changes/
Tuesday, October 20, 2009
Email is Social, and it’s not Going Anywhere
When consumers want to share something from the Internet with their friends or family, such as a video, link or article, what methods do they use? While social media is gaining ground on email, the latter still dominates as a sharing tool.
"Is _______ going to put an end to email?" It’s a question we ask every few years when a new technology comes along. RSS sparked the last wave of discussions and, of course, now it’s social. Will social media affect email? Definitely. Will it kill the medium? Far from it.
Email is the original opt-in tactic, while social and mobile are newcomers. And email works in tandem with most other tactics to increase engagement, deliver relevant content and build contact databases.
Dispelling the Myth that Social Media is going to Abolish Email
In the chart above, we take one view of how email is used to share information, because this activity is so central to social media sites. Email is dominant, even in this regard.
When we look at media use over the last 15 years, we see a pattern of aggregation and adoption rather than replacement. Some media suffer in the exchange, but none are eliminated entirely. More commonly, their uses become more refined.
For example, we may find that Twitter and Facebook gradually reduce our use of email to convey quick messages and content to social groups, but it’s far less likely that social media will replace email for commercial transactions, receipts and the like.
Email is the original opt-in tactic, while social and mobile are newcomers. And email works in tandem with most other tactics to increase engagement, deliver relevant content and build contact databases.
Dispelling the Myth that Social Media is going to Abolish Email
In the chart above, we take one view of how email is used to share information, because this activity is so central to social media sites. Email is dominant, even in this regard.
When we look at media use over the last 15 years, we see a pattern of aggregation and adoption rather than replacement. Some media suffer in the exchange, but none are eliminated entirely. More commonly, their uses become more refined.
For example, we may find that Twitter and Facebook gradually reduce our use of email to convey quick messages and content to social groups, but it’s far less likely that social media will replace email for commercial transactions, receipts and the like.
Pa. man charged with defrauding 3 CUs in ponzi scheme
A Pennsylvania man has been charged with operating a $2 million ponzi scheme that defrauded three credit unions, according to the Pennsylvania attorney general's office.
Eugene D. Miley, 58, is accused of selling fictitious certificates of deposit (CDs) to Moonlight CU, Worthington; VANtage Trust CU, Wilkes-Barre; and Stanwood Area CU, New Stanton. Miley allegedly served as a financial broker for the credit unions, offering to locate and purchase various high interest rate CDs. Miley used the money he received from the credit unions for his personal use. He also generated fake statements about the purchase, interest rates and redemption information for the CDs.
"Miley claimed to be helping his clients earn a good return on their investments, but this was simply an illusion," said Attorney General Tom Corbett in a statement. "As with other ponzi schemes, the money received from new clients was used to pay off older investors, or siphoned off for personal use, until the flow of money stopped--causing the operation to collapse and leaving victims with nothing more than empty promises."
Miley is accused of selling $2.08 million in certificates between 2006 and 2008. He sold $1.3 million to Moonlight CU; $594,000 to VANtage Trust CU; and $99,000 to Stanwood Area CU, according to the attorney general's office.
Miley has been taken into custody and will appear for a preliminary hearing Nov. 20.
He will be charged with one count of securities fraud for creating a scheme to defraud, a second degree felony punishable by up to 10 years in prison and a $1 million fine; and one count of securities fraud for the sale of unregistered securities, a third-degree felony punishable by up to seven years in prison and a $250,000 fine.
Miley also will be charged with three counts each of theft by deception and theft by failure to make required disposition of funds--all third degree felonies, punishable by up to seven years in prison and $15,000 fines.
Miley is not licensed to operate as a financial investment company, financial adviser or financial products dealer. The funds for his fraudulent investments were funneled through PNC Bank accounts belonging to him and his business. The transactions were conducted using a PNC Bank branch in Cranberry Township, Pa., Corbett said.
Eugene D. Miley, 58, is accused of selling fictitious certificates of deposit (CDs) to Moonlight CU, Worthington; VANtage Trust CU, Wilkes-Barre; and Stanwood Area CU, New Stanton. Miley allegedly served as a financial broker for the credit unions, offering to locate and purchase various high interest rate CDs. Miley used the money he received from the credit unions for his personal use. He also generated fake statements about the purchase, interest rates and redemption information for the CDs.
"Miley claimed to be helping his clients earn a good return on their investments, but this was simply an illusion," said Attorney General Tom Corbett in a statement. "As with other ponzi schemes, the money received from new clients was used to pay off older investors, or siphoned off for personal use, until the flow of money stopped--causing the operation to collapse and leaving victims with nothing more than empty promises."
Miley is accused of selling $2.08 million in certificates between 2006 and 2008. He sold $1.3 million to Moonlight CU; $594,000 to VANtage Trust CU; and $99,000 to Stanwood Area CU, according to the attorney general's office.
Miley has been taken into custody and will appear for a preliminary hearing Nov. 20.
He will be charged with one count of securities fraud for creating a scheme to defraud, a second degree felony punishable by up to 10 years in prison and a $1 million fine; and one count of securities fraud for the sale of unregistered securities, a third-degree felony punishable by up to seven years in prison and a $250,000 fine.
Miley also will be charged with three counts each of theft by deception and theft by failure to make required disposition of funds--all third degree felonies, punishable by up to seven years in prison and $15,000 fines.
Miley is not licensed to operate as a financial investment company, financial adviser or financial products dealer. The funds for his fraudulent investments were funneled through PNC Bank accounts belonging to him and his business. The transactions were conducted using a PNC Bank branch in Cranberry Township, Pa., Corbett said.
Monday, October 12, 2009
Dade County FCU Deploys Anti-Fraud Tools
A Web-based case management solution is now being used by Dade County Federal Credit Union to help the $480 million institution do its part in the fight against financial crime in Miami.
DCFCU is using the Aithent Case Management Solution to link all its fraud and compliance processes across its internal systems, enhancing both case management and the ability to produce compliant regulatory reports, the credit union said.
The credit union said benefits include easy access to information, reducing the need for redundant data entry and easing the burden on IT staff.
Aithent is a New York-based provider of information management solutions to financial, government and health care organizations.
DCFCU is using the Aithent Case Management Solution to link all its fraud and compliance processes across its internal systems, enhancing both case management and the ability to produce compliant regulatory reports, the credit union said.
The credit union said benefits include easy access to information, reducing the need for redundant data entry and easing the burden on IT staff.
Aithent is a New York-based provider of information management solutions to financial, government and health care organizations.
..
Friday, October 9, 2009
FBI Phish Phry reels in 53 scam suspects
The Federal Bureau of Investigation (FBI) began arresting 53 individuals in the U.S. Wednesday on charges of conducting a vast financial fraud based on phishing or tricking Internet users into revealing their bank account information at two of the nation's largest banks--Bank of America and Wells Fargo.
Operation Phish Phry netted arrests in Southern California, Nevada and North Carolina, said the FBI. In addition, 47 co-conspirators in Egypt are being charged by authorities there.
This is the largest number of defendants ever charged in a cybercrime case, said the FBI in a press release. The group allegedly stole at least $2 million from 2007 through September 2009 from hundreds and perhaps thousands of the banks' customers.
Indictments in a U.S. District Court in Los Angeles accuse three California residents of masterminding the U.S. portion of the scam--Kenneth Joseph Lucas, 25; a friend, Jonathan Preston Clarke; and Nichole Michelle Merzi, Lucas' former girlfriend. They directed associates to recruit "runners" to set up bank accounts to receive funds stolen from the compromised accounts.
The online component of the scam initiated in Egypt, where defendants sent mass e-mail messages that appeared to come from the banks, said the FBI. Recipients who clicked on a link in the messages were sent to a fake website identical or similar to the banks' sites, where they were asked to enter information such as their account numbers, passwords, Social Security numbers and drivers' license numbers.
The U.S. group would transfer funds into their own accounts and remit money back to accomplices in Egypt.
Each of the 53 defendants named in the indictment is charged with conspiracy to commit bank fraud and wire fraud, which carries a maximum penalty of 20 years in prison. Various defendants also are charged with bank fraud; aggravated identity theft; conspiracy to commit computer fraud, specifically unauthorized access to protected computers in connection with fraudulent bank transfers; and domestic and international money laundering.
Some analysts said the arrests won't have much impact on the number of online banking scams that have hit businesses, including credit unions. Many other groups are involved in similar fraudulent phish schemes, they said (The New York Times Oct. 8).
Thursday, October 8, 2009
Vantage CU uses Twitter for account transfers
BRIDGETON, Mo. (10/7/09)--Vantage CU, Bridgeton, Mo., launched a new banking solution, tweetMyMoney, which allows members to conduct financial transactions within their credit union accounts through social networking site Twitter.
Released Sept. 28, tweetMyMoney is free to Vantage members. It allows them to monitor their account balances, deposits, withdrawals, holds and cleared checks. Members also can transfer funds within their accounts. The program can be accessed from a computer or mobile phone.
About 70 members have enrolled. They access the program by enrolling in Vantage's online banking program and setting up a Twitter account. Members also must sign up to "follow" Vantage on Twitter. tweetMyMoney works through Twitter's Direct Message function--which allows users to send messages to each other privately. In this case, members send messages to Vantage.
The program "utilizes a set of codes that you send via direct message to the credit union and get information back," Eric Acree, executive vice president of operations, told News Now.
(Read the rest of the story at: http://www.cuna.org/newsnow/09/system100709-7.html?ref=hed)
Released Sept. 28, tweetMyMoney is free to Vantage members. It allows them to monitor their account balances, deposits, withdrawals, holds and cleared checks. Members also can transfer funds within their accounts. The program can be accessed from a computer or mobile phone.
About 70 members have enrolled. They access the program by enrolling in Vantage's online banking program and setting up a Twitter account. Members also must sign up to "follow" Vantage on Twitter. tweetMyMoney works through Twitter's Direct Message function--which allows users to send messages to each other privately. In this case, members send messages to Vantage.
The program "utilizes a set of codes that you send via direct message to the credit union and get information back," Eric Acree, executive vice president of operations, told News Now.
(Read the rest of the story at: http://www.cuna.org/newsnow/09/system100709-7.html?ref=hed)
Tuesday, October 6, 2009
Scams hit four CUs
MADISON, Wis. (10/6/09)--Several recent scams have targeted four credit unions in various regions of the U.S.
The following scams have been reported:
Suffolk FCU, Medford, N.Y., and Island FCU, Hauppauge, N.Y., debit card holders were targets of scam text or voice messages, which tell members their debit card numbers have been deactivated, police said. The victims were instructed to call a phone number to provide account and personal identification numbers to reactivate their accounts. Police reminded the public that credit unions do not contact members by mail, phone or Internet to request account information (Newsday Oct. 3).
Shoreline CU, Two Rivers, Wis., reports that a website--www.SurveyLot.com--is mailing fraudulent cashier's checks to Internet visitors nationwide, according to Sharon Tome, Shoreline chief operating officer. The checks are written for $3,975.20 and contain the routing number for the credit union and an account number--now closed--of a Shoreline member. The credit union has returned roughly $30,000 worth of checks that tried to clear through the account, Tome said. No Shoreline members have been victimized by the scam, she added. Shoreline officials are alerting other financial institutions that the checks are fraudulent (Herald Times Reporter Oct. 1).
Paducah (Ky.) FCU, has received dozens of calls from members who received a suspicious text message that said in part: "This is an automated message from Paducah FCU. Your ATM card has been suspended. To reactivate, call URGENT at 1-866-571-7629." When the number was dialed, the caller heard an automated message requesting the caller's bank account number. The telephone number has been disconnected, and the credit union is not aware of any members who were victimized by the scam (INFED Oct. 1).
The following scams have been reported:
Suffolk FCU, Medford, N.Y., and Island FCU, Hauppauge, N.Y., debit card holders were targets of scam text or voice messages, which tell members their debit card numbers have been deactivated, police said. The victims were instructed to call a phone number to provide account and personal identification numbers to reactivate their accounts. Police reminded the public that credit unions do not contact members by mail, phone or Internet to request account information (Newsday Oct. 3).
Shoreline CU, Two Rivers, Wis., reports that a website--www.SurveyLot.com--is mailing fraudulent cashier's checks to Internet visitors nationwide, according to Sharon Tome, Shoreline chief operating officer. The checks are written for $3,975.20 and contain the routing number for the credit union and an account number--now closed--of a Shoreline member. The credit union has returned roughly $30,000 worth of checks that tried to clear through the account, Tome said. No Shoreline members have been victimized by the scam, she added. Shoreline officials are alerting other financial institutions that the checks are fraudulent (Herald Times Reporter Oct. 1).
Paducah (Ky.) FCU, has received dozens of calls from members who received a suspicious text message that said in part: "This is an automated message from Paducah FCU. Your ATM card has been suspended. To reactivate, call URGENT at 1-866-571-7629." When the number was dialed, the caller heard an automated message requesting the caller's bank account number. The telephone number has been disconnected, and the credit union is not aware of any members who were victimized by the scam (INFED Oct. 1).
Thursday, October 1, 2009
CU Tech Conference Highlights the Fall Season; Coming November 9-12, 2009
CU InfoTech '09 is an innovative, comprehensive conference on credit union IT issues, products and strategies. CU InfoTech is in its 15th year and is the only conference totally dedicated to technology issues. Communicating with other credit unions is more important today than never before. No webinar or written communication can replace face-to-face technology networking.
Register by Oct. 9 and save $50 per registration.
http://cuconferences.com/tech09/TECH09_Agenda.htm
Register by Oct. 9 and save $50 per registration.
http://cuconferences.com/tech09/TECH09_Agenda.htm
September News & Views Published Below
CU SECURITY & TECHNOLOGY News - Providing a brief summary of news and information related to security and technology issues for credit unions - Plus some interesting and fun web sites . . .
Wednesday, September 30, 2009
Bank sends email to wrong Gmail account: Who's at fault?
We all know that sinking feeling in the pit of your stomach. You’ve just done something (cut a wire, deleted a file, clicked the wrong button, etc.) and immediately realized it was a mistake. An employee at Rocky Mountain Bank likely felt this sensation when they sent confidential account information to the wrong Gmail account.
Account information sent to wrong Gmail address
According to various news reports and the court filing, a customer of Rocky Mountain Bank in Wyoming asked a bank employee to email loan statements to a third-party representative. Unfortunately, the bank employee sent the information to the wrong Gmail address. To make matters worse, the data file attached to the erroneously-sent email contained confidential information on 1,325 accounts of other customers. The file included names, addresses, tax identification numbers, and loan information.
After discovering the mistake, Rocky Mountain Bank personnel tried to recall the email, without success. They also sent a follow-up message to the recipient, instructing them to delete the message and attachment without opening it and requesting that he or she contact the bank to discuss their actions. The bank also contacted Google to determine if the account was active or dormant, and what could be done to prevent the data from being disclosed.
Google declined to provide any information about the Gmail account in question without a court order. Rocky Mountain Bank filed suit to force the disclosure of account information and asked the Court to seal the case. On September 18, 2009, a federal judge denied the bank’s request to seal the case.
(For the rest of the story: http://blogs.techrepublic.com.com/itdojo/?p=1031&tag=nl.e099.dl090930&tag=nl.e099 )
Account information sent to wrong Gmail address
According to various news reports and the court filing, a customer of Rocky Mountain Bank in Wyoming asked a bank employee to email loan statements to a third-party representative. Unfortunately, the bank employee sent the information to the wrong Gmail address. To make matters worse, the data file attached to the erroneously-sent email contained confidential information on 1,325 accounts of other customers. The file included names, addresses, tax identification numbers, and loan information.
After discovering the mistake, Rocky Mountain Bank personnel tried to recall the email, without success. They also sent a follow-up message to the recipient, instructing them to delete the message and attachment without opening it and requesting that he or she contact the bank to discuss their actions. The bank also contacted Google to determine if the account was active or dormant, and what could be done to prevent the data from being disclosed.
Google declined to provide any information about the Gmail account in question without a court order. Rocky Mountain Bank filed suit to force the disclosure of account information and asked the Court to seal the case. On September 18, 2009, a federal judge denied the bank’s request to seal the case.
(For the rest of the story: http://blogs.techrepublic.com.com/itdojo/?p=1031&tag=nl.e099.dl090930&tag=nl.e099 )
Wednesday, September 23, 2009
Red Bluff woman prevails in bank protest
Ann Minch's YouTube revolt against Bank of America was victorious. Minch was contacted Friday by a Bank of America executive, who made her a deal.
The bank executive verbally agreed to cut her rate from 30 percent to 12.99 percent, where it was in January before it was increased, Minch said.
Upset that the bank had raised her interest rate, the 46-year-old Red Bluff resident vented her outrage Sept. 8 on YouTube, vowing to stop making payments on the card. The video has received more than 230,000 Web hits.
Minch broke news of the deal Saturday on YouTube in a video titled "Debtors Update: Bank of America Responds!!!" The six-minute clip had generated about 1,000 views by Monday afternoon.
Minch said she was contacted by Bank of America's Jeff Crawford, who asked why she produced the first video. "He was very polite," Minch said on YouTube. "He didn't make any demands about pulling down the YouTube video."
Initially, Crawford offered to drop the rate to 16.99 percent. But he reconsidered after Minch told him Bank of America has been allowed to borrow money virtually interest-free from the federal government.
(Read the rest of the story at: http://www.redding.com/news/2009/sep/22/red-bluff-woman-prevails-in-bank-protest/)
The bank executive verbally agreed to cut her rate from 30 percent to 12.99 percent, where it was in January before it was increased, Minch said.
Upset that the bank had raised her interest rate, the 46-year-old Red Bluff resident vented her outrage Sept. 8 on YouTube, vowing to stop making payments on the card. The video has received more than 230,000 Web hits.
Minch broke news of the deal Saturday on YouTube in a video titled "Debtors Update: Bank of America Responds!!!" The six-minute clip had generated about 1,000 views by Monday afternoon.
Minch said she was contacted by Bank of America's Jeff Crawford, who asked why she produced the first video. "He was very polite," Minch said on YouTube. "He didn't make any demands about pulling down the YouTube video."
Initially, Crawford offered to drop the rate to 16.99 percent. But he reconsidered after Minch told him Bank of America has been allowed to borrow money virtually interest-free from the federal government.
(Read the rest of the story at: http://www.redding.com/news/2009/sep/22/red-bluff-woman-prevails-in-bank-protest/)
GPS Could Lead to Home Invasion
A couple of weeks ago someone had their car broken into while they were at a football game. Their car was parked on the green which was adjacent to the football stadium and specially allotted to football fans. Things stolen from the car included a garage door remote control, some money and a GPS which had been prominently mounted on the dashboard.
When the victims got home, they found that their house had been ransacked and just about everything worth anything had been stolen.The thieves had used the GPS to guide them to the house. They then used the garage remote control to open the garage door and gain entry to the house.
The thieves knew the owners were at the football game, they knew what time the game was scheduled to finish and so they knew how much time they had to clean out the house. It would appear that they had brought a truck to empty the house of its contents.
Something to consider if you have a GPS - don't put your home address in it. Put a nearby address (like a store or gas station) so you can still find your way home if you need to, but no one else would know where you live if your GP S were stolen.
When the victims got home, they found that their house had been ransacked and just about everything worth anything had been stolen.The thieves had used the GPS to guide them to the house. They then used the garage remote control to open the garage door and gain entry to the house.The thieves knew the owners were at the football game, they knew what time the game was scheduled to finish and so they knew how much time they had to clean out the house. It would appear that they had brought a truck to empty the house of its contents.
Something to consider if you have a GPS - don't put your home address in it. Put a nearby address (like a store or gas station) so you can still find your way home if you need to, but no one else would know where you live if your GP S were stolen.
Tuesday, September 22, 2009
FBI report: Most bank robbers get away with it
The FBI's annual report on bank robberies shows that the feds recovered only a small portion of stolen loot and identified just 40 percent of the perpetrators in the 6,700 bank heists last year.
Of the $61.6 million in cash stolen, only about 19 percent - $8.9 million - was recovered.
Although the report does not reveal the arrest rate, it does show that just 3,342 of the 8,393 crooks known to be involved in the robberies were identified. Of those identified, 43 percent were determined to be narcotics users and 19 percent had previously been convicted of a bank-related crime.
The South saw the most robberies - 2,100 - followed by the West, with 1,857.
Banks in metropolitan areas claimed the highest number of heists - 3,388 - with small cities or towns following, with 2,189.
In all, bank-related crime in 2008 was slightly below that reported in 2007. [Read story at Scripps Howard News/by Lisa Hoffman].
Of the $61.6 million in cash stolen, only about 19 percent - $8.9 million - was recovered.
Although the report does not reveal the arrest rate, it does show that just 3,342 of the 8,393 crooks known to be involved in the robberies were identified. Of those identified, 43 percent were determined to be narcotics users and 19 percent had previously been convicted of a bank-related crime.
The South saw the most robberies - 2,100 - followed by the West, with 1,857.
Banks in metropolitan areas claimed the highest number of heists - 3,388 - with small cities or towns following, with 2,189.
In all, bank-related crime in 2008 was slightly below that reported in 2007. [Read story at Scripps Howard News/by Lisa Hoffman].
Monday, September 21, 2009
Thursday, September 17, 2009
How do I use Prey to help recover a stolen laptop?
Laptops are stolen all of the time. And recovering a stolen laptop is made very difficult when steps have not been taken to help this task get accomplished. Prey is an open source application, available for Windows, Mac, and Linux, that can help you out when your laptop is stolen. Prey takes an ingenious approach to laptop recovery; because once it is installed, it will send timed reports to a configured email address containing information describing its whereabouts.
The information collected includes:
The information collected includes:
> Status of the computer
> List of running programs and active connections
> Detailed network and WI-FI report
> Screenshot of running desktop
> A picture of the thief (if the stolen laptop is equipped with a Webcam)
Of course you are probably thinking this is a lot of information to be sending out, especially since, with this setup, your laptop will be sending out this information even when the laptop isn’t stolen. Ah, but the creators have thought of that as well.
You can configure Prey to only send out the information if it finds a certain Web URL that you created in the event of the laptop being stolen. We’ll address that in a bit. First, let’s look at how to get the program and install it.
Read more about Prey at: http://blogs.techrepublic.com.com/window-on-windows/?p=1543&tag=nl.e064
Wednesday, September 16, 2009
Internet Criminals Stepping Up Attacks
Internet criminals are stepping up their targeting of small- and mid-sized companies because they have less sophisticated security than larger companies, a Federal official told the publication.
About 87% of data breaches could be thwarted with simple-to-intermediate preventive measures, said a Department of Homeland Security official. Cybercrime has cost the nation nearly $8 billion, U.S. Sen. Susan Collins (R-Maine), ranking member of the Senate Homeland Security and Governmental Affairs Committee, told the committee.
Data relating to more than 130 million credit and debit cards have been stolen from corporations, the publication said.
Friday, September 11, 2009
Open Solutions Takes Two-Factor to Teller Line
Open Solutions Inc. is now offering users of its flagship core technology systems a two-factor authentication system for use at the teller line.
Using the Veri-Fast solution, members swipe their ATM/debit card, enter their PIN number and once verified, the software instantly retrieves the relationship profile.
The company said that in addition to reducing fraud, Veri-Fast boosts service and efficiencies by automating the retrieval of accountholder files and eliminating teller keystrokes.
Veri-Fast is being offered to financial institutions that run on The Complete Credit Union and The Complete Banking Solution core applications and can be customized to integrate with other core platforms, the company said.
Using the Veri-Fast solution, members swipe their ATM/debit card, enter their PIN number and once verified, the software instantly retrieves the relationship profile.The company said that in addition to reducing fraud, Veri-Fast boosts service and efficiencies by automating the retrieval of accountholder files and eliminating teller keystrokes.
Veri-Fast is being offered to financial institutions that run on The Complete Credit Union and The Complete Banking Solution core applications and can be customized to integrate with other core platforms, the company said.
Wednesday, September 9, 2009
FCU Embezzler Went More Than Four Years Without Discovery
Melissa Laliberte, former bookkeeper and convicted embezzler for the now defunct Meriden Franco American Federal Credit Union, went more than four years before anyone realized the extent of her theft.
According to court documents and NCUA records, Laliberte embezzled almost $744,000 from the credit union between January 2004 and July of 2008, when the NCUA closed the institution. At the time of the its closure, Meriden Franco-American had almost $338,000 in assets, suggesting that Lalibert had embezzled more than twice the credit union's assets.
According to court papers filed in the case, Lalibert diverted member's cash deposits for her own use, made checks out payable to herself or her own creditors and made direct cash withdrawals from the CU. She also failed to note withdrawals from her own accounts and those of her husband and presented false reports to the CU's board of directors, according to the documents.
The legal filings also revealed that, as the extent of the embezzlement grew, Lalibert succeeded in convincing five other CUs to invest a total of $400,000 in certificates of deposit with the CU. This infusion of cash enabled her to keep the embezzlement going past the time it would have otherwise been discovered, the documents said.
Saturday, September 5, 2009
Friday, September 4, 2009
Coming: Wearable Device That Enables Interactions With The World of Data
How can your credit union compete with this technology? It will have to some day and that some day may not be that far away. This is a mind boggling video that litterally puts information at the fingertips of the consumer. See a demo here and share your thoughts by commenting.
Pranav Mistry is the genius behind Sixth Sense, a wearable device that enables new interactions between the real world and the world of data.
http://www.ted.com/talks/pattie_maes_demos_the_sixth_sense.html
Pranav Mistry is the genius behind Sixth Sense, a wearable device that enables new interactions between the real world and the world of data.
http://www.ted.com/talks/pattie_maes_demos_the_sixth_sense.html
Wednesday, September 2, 2009
100 Years of Inspiration - 26 Films That Changed the World of Visual Effects
A quick and interesting view of films with outstanding visual effects.
http://www.flixxy.com/movies-visual-effects.htm
http://www.flixxy.com/movies-visual-effects.htm
August News & Views Published Below
CU SECURITY & TECHNOLOGY News - Providing a brief summary of news and information related to security and technology issues for credit unions - Plus some interesting and fun web sites . . .
Subscribe to:
Posts (Atom)
