Tuesday, June 27, 2017

Airbnb: Run Don't Walk

An airbnb supervisor just told me that "Customer Support died in the 80's. This is Customer Experience".

Noooo...Customer Support did not die. There are plenty of companies that excel at customer service. Drop your coffee at Peets? They hand you a new one, no questions asked - after making certain you're okay.  Problems with an L.L. Bean shipment? They overnight a replacement and arrange for return of the lost package - without charging your card. Lost your Debit Card? Charles Schwab immediately mails a replacement and offer to overnight at no charge.

"Experience" may be how airbnb managers excuse what they're doing, but as a first-time-never-again customer, I see a company that is in failure. Another poster child in the rise and fall of shared economy. They have lost sight of the fact that without a dedicated customer base, they don't have a business. Booking accommodations 3,000 miles away from home is completely different than picking up a used lawnmower. It's not Craig's List, and trying to justify operating as though the two offer an equivalent connection service is foolish, especially when airbnb collects a service fee from the guest for the booking.

When the I booked this apartment in Boston, the host told me the address was 38 Queensberry St. I looked it up on Google Maps, and went okay! This'll work.






Skip one month, a verrryyy long flight from the West Coast, and one Uber, I'm standing outside this very nice complex with my kid and pile of bags. Waiting. Wondering. Where is the host? Where is 38? I can see 36, and 40, but no 38.

After 15 minutes I checked my 1% phone and found a message from the Host instructing me to go a block away to meet "Eddie" at a Pizza Parlor.



We hauled everything down the street, and waited. Eddie shows up and takes us ANOTHER block down to a large apartment complex at 62 Queensberry St. 

It's was about 8:30 at night. Dark.

Eddie talks a fast talk about the apartment having been on Craig's List, and nobody is who they say they are, so when they moved to airbnb they didn't want to lose the good ratings, so they kept the old address, even though it's not right. (Huh?!) But you'll love this place because it's all professionals. Doctors and lawyers.



It's student housing.

When we got into the apartment, I was pretty shocked to see it was only one bed, not two as advertised. Eddie showed me the kitchen saying there was a little hole under the carpet probably from the dishwasher leaking, but they were going to get it fixed and I could use it if I wanted to, though really; you don't want to cook, do you?

FINALLY he left and I pulled back the carpet. The soft area went from wall to cabinet, was about 2 feet wide and punched straight through the subfloor in spots.



There were other soft spots throughout the unit and large holes in the walls:


The shelf in the living area was falling out of the wall. An ancient window AC could barely kick out air through the crust of dust.




The bathroom looked like it hadn't seen a scrub brush or caulking in years, and the door couldn't close.




The sheets were threadbare.  Pillows disgusting.

I told my son to sleep on the coach and I caught a few hours sleep before looking for a hotel the next morning. 

The first two hotels were booked solid because the Dead were playing Fenway Park that weekend. The third had room, but would have to move us three times, and Saturday and Sunday were going to $695 per night. Fortunately the gals at the front desk told me to check out Hotel Buckminster because they always had rooms - and they did! At a reasonable price. (Great hotel!)

We packed up and were out the door by 10:30 am. I contacted the airbnb Host while standing on the street waiting for an Uber to let him know we'd checked out. He asked why, and I sent the pictures.

The next day, while on a school tour, the Host started sending messages telling me I had no right to leave because all that could be fixed in 20 minutes 0_o

I contacted airbnb as soon as we got back to the hotel. I was scared.  I wasn't exactly certain about airbnb procedures, but at this point, it seemed over the top even for the "unstoppable share economy". 

Technically, this was Day 3, but only two nights.

The support folks were wonderful! Totally focused on the right thing: our safety. Discontinue contact with host. You've done everything you can. 

But I was worried. I contacting support multiple times and ended up with TWO case numbers that got joined.  I filed for a refund for the 5 days we didn't stay plus cleaning fee (cause it wasn't) and service fee (because it shouldn't have been).

Of course the host denied my refund. Per airbnb policy, I had to wait 72 hours before requesting help from the Resolution Center. I submitted the paperwork and photos and called. The support rep was wonderful! She was horrified by my experience and assured me it warranted a case worker who would contact me shortly.

William, the case worker, sent me an email days later that succinctly stated the reservation had not been "officially" canceled, and as a result the Host had lost money.

I told William that I HAD contacted airbnb multiple times and not one person mentioned that I needed to "officially" cancel the reservation. That the Host had communicated outside the app when texting my phone directly, and had changed his profile name from Alan to Edward - resulting in ALL the communications within the app being retroactively modified!

William responded that I was still in violation of the 24 hour notification policy, even though there was false advertising, and questioned the location issue, "because nobody else had complained". I sent him the very negative reviews that had posted since I'd booked, and the text message that Alan/Edward/Eddie had sent outside the app which identified the address as 62.




William told me the best he could do is refund the cleaning fee, service fee, and 50% of the nights not stayed because of the 24 hour policy. Regardless of the breach of contract and multiple contacts with airbnb. He refused to provide his last name for "security reasons", and refused to let me speak with a supervisor. 

It's not easy to find a phone number for airbnb. 

1-855-424-7262

The supervisor who lectured me is quite proud of the fact that being a web service they don't have a phone number published on the site.

How was I supposed to contact airbnb the 1st night so they could find another place for us to stay?! 

I will never use airbnb again.

btw - Alan/Edward/Eddie is still a host.

Thursday, April 27, 2017

Part and Parcel

One of the truly gut-wrenching set-backs that we experienced while making the BSidesSF badge was due to a package not being delivered.

No, this isn't another story about China parcels being held hostage in customs, or a bad weather act of God. This is a story about 10 years of war with Ron the UPS Driver.

We were on a tight timetable with one month to go until the con. Duclass was calculating estimated time to complete for three separate dev epics on a daily basis: software, case manufacturing, and board assembly. The final PCBs were ordered from Advanced Circuits on January 13th specifically because they agreed to a rush delivery on Friday January 20th; we needed the weekend for assembly.

Ron the UPS Driver showed up as expected Friday morning - and demanded a check for $1,746. The package was marked COD. When we tried to explain the order had been paid in full, he walked away taking our precious boards with him, and a box of batteries, saying the packages would be marked for delivery next business day.

Monday. No weekend assembly.

It was a really bad scene. IF I had answered the door, and we weren't emotionally trashed from months of sleep deprivation, I coulda woulda just written a check and dealt with either reimbursement or cancelling it later. But duclass answered the door and everything about Ron the Driver's dismissive controlling manner pushed his buttons.

So. There were conversations. Some louder than others. Advanced Circuits did everything they could, but UPS would not budge. The only way we could get the package was to provide a check.

I called the distribution center and they said they would redeliver that day. But they didn't. And they didn't the next day either.

Ironically, after 5 years of telling duclass about what an asshole Ron the Driver was, there was no satisfaction in getting validated. This is the jerk, who parked his truck in our private driveway easement, completely blocking our garage door - then went to lunch! I caught him a block away and told him he had to move it, and he got pissed because "that's the only shade on the street". Private property be damned.

Monday. I had two checks written and ready for UPS: the international shipping fee for the batteries and the PCBs. Fuck me it happened AGAIN; Ron the Asshole showed up right when I was in the shower so duclass answered the door. Ron had only one package, the PCBs, and no idea what happened to the batteries. Bad scene, but at least we could start assembly.

I called the distribution center about the missing package. Fortunately, one of the warehouse sorters stumbled into it on the floor and scanned it, so at least it wasn't lost. I drove down and picked it up.

The PCBs were the last package Ron delivered to our home. That day, January 20th, he started marking all packages "customer requests pick-up" without my authorization. At first, I called the distribution center thinking, "Oh, they must not know or support what he's doing because they must be concerned about doing their job." The same two people kept answering the phone, politely listened to my problem, said all the right things - and did not deliver the packages.

Skip to a month after the conference. Ron was still marking packages for pick-up. So I started calling UPS customer service. Then I started calling the vendors. The Customer Support reps were always shocked. They would file a report with UPS, and we'd get delivery - but never from Ron, and the problem persisted.

I asked if I could select the carrier. We get deliveries from FedEx, USPS, OnTrac, and AMZL without issue. But that is not an option with the companies that I order from. They optimize profit by selecting cheapest delivery for that from/to destination.

I started returning packages that were held for pick-up, thinking that would get someone's attention. But no such luck.

At one point, Amazon connected me directly to a special unit at UPS that is dedicated to resolving Driver Problems. It operates outside the standard UPS customer support line. She told me there are a lot of problems because the drivers are union, and "escalated" the report to the regional level. When that package was delivered, I thought we were finally done with the bullshit. Then I got a call from the driver manager at the local distribution center who was "researching" my problem report - then said I was the problem.

Ron continued to mark packages for pick-up without my authorization. But of course...

One night, duclass and I were having a beer, and he said, "You know, this has been going on for a long time. Not just since January. Or the driveway incident". Duclass started marked all deliveries to the office, and encouraged me to do so too.

But I got to thinking, and I got pissed. Really pissed.

I knew a few things. Calling the vendors for help always worked, but it was a one time shot. Calling the distribution center did buttkiss. Calling UPS customer support did less than buttkiss. I needed more data.

Instead of ordering and going on my merry, I started checking for the carrier, and if UPS, followed the tracking status online: https://www.ups.com/WebTracking/track?loc=en_us

I could see every scan, including timestamp when it went on the truck, and when that fucker marked it for pickup. I watched for when UPS was on the street. The status was always changed about an hour after the truck left.

I called the manager at the distribution center. He said there was more than one driver on our dead-end street, didn't know where the package was and - this was wild - had no way to reach the driver while on route. Cover-up confirmed. No need to bother with them again.

I called the UPS 800 number. They said it was a mistake, and would be happy to follow up with the distribution center to help locate my package. "But," I said. "The distribution center IS the problem." That's when I discovered you have to specifically request the problem be escalated to regional, but it's still only good for that delivery. 

I had an established pattern, but needed to force Ron's hand. I did a little OSINT to confirm the status scans fed into a fairly elaborate delivery system. Then checked the meaning of the codes and all the labels on my packages. Also read up on the teamsters union and the specific local riders for UPS drivers in my area.

Another package, same old shit. But this time, I hit twitter, e-mailed customer.service@ups.com, called the 800 number, and e-mailed and called Amazon - who filed a complaint with UPS. Logic being written complaints are more likely to be added to a log and garner attention. I told all parties that marking packages for pick-up without my authorization is essentially theft since I had already paid for the goods, and that I was being subjected to harassment.

Apparently that brought some kind of corporate heat because the next package: Ron and company actually deleted scan history from the delivery and changed the status from "by 8pm" to "delayed due to operating conditions". Like, WTF?!

That was great - but unfortunately I didn't have screensnaps to prove the deleted history. Another round of calls an emails, and this time I had a complete record when the following Monday they did it AGAIN, and marked the package as "receiving business was closed."

End Game. Now it was about the data that UPS depends on. Another round of customer support calls and emails, and for the first time in three months: I have no problems with UPS deliveries. It's been two weeks.

Friday, February 17, 2017

BSidesSF 2017 E-Badge: A Few Notes

A few notes about the BSidesSF e-badge.

It was an extraordinarily fast spin. We proposed in mid-September, were surprised to get a thumbs-up in October, and hit the first technical no-go in November.

Upon reflection, what stands out from initial concept to final deliverable is sticking to the goals:

  • Get folks talking, collaborating, and sharing
  • Provide a valuable ioT learning experience
  • Create a memorable conference collectible that reflects the Mr Robot theme, and the uniquely vibrant entrepreneurial Maker infused Bay Area tech culture
  • Keep the BOM at $50 to $60
There is no way we could have delivered without sticking to agile principles. Not the programmatic duly (or dully) certified bastardization of agile, but the true intent and meaning of the word.

We ramped up over Thanksgiving, went crunch over Christmas, balls-to-the-wall week before the conference, and pulled an all-nighter Friday that lasted through a catnap Sunday night. At that, we still didn’t have all the badges assembled in time for registration, and there are still a few outstanding.

Successful disaster 0_o



First Pivot:
The original pitch was a Raspberry Pi Zero, the adorable $5 micro-processor. Unfortunately, Raspberry Pi moved production in-house resulting in severely limited stock. To this day, it is available one per customer from a few select resellers -  if they have it in stock and have not bundled it with add-ons.

We knocked our heads against that wall for a couple of weeks before realizing there was no way we could purchase the quantity required and, if this project was going to move forward, we had to find a different CPU.

The NanoPi NEO Air from FriendlyArm (FriendlyElec) at first-blush looked too expensive, but then we realized the onboard wifi and bluetooth made up for the cost difference.

We ordered a bulk shipment that slid through customs right before Chinese New Year (January 28th).

Manufacturing and shipping stops week before Chinese New Year as workers start their annual migration back home. The full-stop lasts about 7 - 10 days which this year was February 6th. Way too late for the conference.

Ordering components in general was nerve wracking, especially since one of us (that would be me) didn't listen to the other (REDACTED) and accept the preferred method of communication is Skype.

Final Pivot:
We loaded the assembled badges in the car and the parts we needed to keep making, and headed over (late) Sunday morning feeling like we'd totally fucked it up.

Instead of dodging rotten fruit, there was this group of cool people who made it easy to accept their help carrying the boxes - and then they hung out. Building through lunch, through dinner, through the parties.


It was a spontaneous hardware hacking village! One of the most amazing experiences of my life. The wave of curiosity and enthusiasm kept us going. You know who you are. Thank you!

What does it DO?!

We wanted to hook folks into hacking the badge.

The initial concept was a capture-the-flag game where points are gathered based on social-ability, ioT, and hacking. For example, did you change the root password?


The badges communicated via AP with a scoreboard server. After kicking around a few locations we decided to stash the laptop and AP in a backpack for sake of mobility, not knowing the exact conference layout and best location to maximize frequency of communication with greatest number of badges.


It worked in test mode.


We started flashing the distro to the EMMC, connected the pis - and the server completely froze after 10.


That was a bad moment. bloom ripped out 60% of his code :/


Known Bug: If you have NO lights and a 4 char code on the display, that means the final version did not get flashed to your badge; it is running test code. We will be posting an update that you can download, but not certain when...


The e-badge does two things:


Blinky Lights:

The blinky lights are a row of three, 3-color LEDs that blend together for a rainbow effect through the light pipe on the case. They are so bright, that bloom dropped the output to 30%.

Each LED was supposed to change color depending on how many flags were captured by that badge. The overall effect of the light pipe would communicate with other badge wearers and, hopefully, get folks wondering, Why are the colors on the badges different?

But you can also change the color display via tap codes picked up by the accelerometer / gyro sensor (look it up; very cool). You don’t have to bang the case. The lights will change if you set the board on a table and bang the table.

There are six, 6-tap codes where ‘T’ is a tap and ‘^’ is a pause”

TTT^TTT

TTT^T^T^T
T^TT^TTT
TT^TT^TT
TTTT^T^T
T^T^TT^T^T

Known Bug: If the LEDs don't change color you need to boot the pi.


Bluetooth Scanner:

The OLED display was intended solely for the wearer of the badge.

When you first turn the badge on, it shows an 8 character ID. Then it changes. The e-badge scans for and displays the ID of broadcasting bluetooth devices within 10’ to 30’.


ioT Dev Kit

We were inspiried by the FSociety’s takedown of Evil Corp via RPi (eps1.3__da3m0ns.mp4), and had initially explored deploying a PwnPi-like toolset but after becoming more familiar with the NanoPi, it just didn’t make sense.

The NanoPi NEO Air was released in October, 0.9 square inches 40x40mm of bad-ass with a half gig of RAM, wifi, bluetooth, camera port, and USB input. The add-on cam500 module is a 5 megapixel camera that streams 30 fps directly to the cloud (somewhere, over the rainbow). The images are not stored locally. We added a wifi antenna for your hacking fun.


We flashed the EMMC with a custom Armbian Debian distro which eliminates the additional cost of an SD card, while (somewhat) lowering the power consumption and increasing reliability.

Root password is ‘owatagoosiam’.

The python code is at  /usr/sbin/badge.py


The achilles heel is power management. The NanoPi Neo Air was designed for
set top boxes (TV) i.e., plugged in via USB for power. We coulda shoulda put better power management on the board to support the batteries. But by the time we figured out the power management it was too late. For this board ;-)

The e-badge battery life is about 6 hours running on 3 AAA lithium batteries.


To power on, push the switch on the side of the case down. Off is up. Design is based on wearing the e-badge on a lanyard where the lights and faux camera lense are facing out, where other people can see them.


The micro USB input is accessible on the bottom without cracking the case. You can plug into a computer and access via telnet or putty (or UI of choice). Battery switch should be OFF when powering via USB.


There is one screw on the bside (uh backside) that holds the case, bracket and board. Be careful when jiggling the little OLED display into place and tucking the wires; we found a number of badges in the RMA box because the components were scraped off the display board.


Known Bug: If the display doesn’t work, it takes the LEDs with it. The code needs to be modified to trap errors instead of crashing. We’ll be posting an update, but not certain when...


The Case

The body worn cam, uh badge, is two snap pieces that REDACTED designed in SolidWorks and iterated on our Lulzbot printer using standard black PLA filament.

We wanted folks to experience what it’s like to try talking with people when they think a camera is recording the conversation.

It takes about 2.5 hours to print each case and bracket. The Plan for scaling production to 175 e-badges was to build 5 - 7 silicone molds from the 3D print and pore Type 3 plastic, figuring 1 hour to turn each case. Each mold took an entire day to construct. Fortunately, REDACTED started testing after 3 molds and found the original time estimate was off by a factor of 3. There was no way we could produce enough cases one week before the conference.

Meanwhile, he was still surface mounting PCBs and baking them in a re-flow oven because there wasn’t enough time to send out for assembly. (This process not for the faint of heart.)


The obvious solution was to scale 3D printing. I requested quotes from about a dozen companies: large online, small independent, and medium-sized local production.


The independents were cheap, but obviously had one printer; average production time 3 - 4 weeks. The large online companies were fairly priced and could make the deadline, but there was only one-shot, and I wanted the option to tweak the files after first article. The medium-sized locals tended to be astronomically over-priced, but gave a free lecture about using injection molding (which of course they do in-house); over $4k for the mold not counting cost to produce 175 cases. One-shot, no edits.


We outsourced the job to a 3D printer company that caterers to the small run manufacturing market. Type A Machines got us back in production.

Summary
More than once I've thought about 1o57, and been struck by the magnitude of producing THOUSANDS of badges, let alone 175. It is, and he is, awe. Inspiring.

Electronic or not, badge-making is some kinda crazy performance art.

Tuesday, October 25, 2016

BoB - Not the Planet: Emergency Preparedness

Akima: What are you going to call it?

Cale: I think I'm going to call it... 'Bob'.

Akima: You can't call a planet 'Bob'!

Image result for planet bob titan ae cale














Not the planet; a Bug-out Bag.

In California, we're all about The Next Big One, and those state crafted earthquake lists? Are really overwhelming. I know people who proudly show off their outdoor storage facility as part of the standard household tour, located a precise x feet away from the house with enough supplies for each person in the family to survive 2 weeks blah blah blah.

Here's what a friend had to say after going through Loma Prieta:

Don’t obsess – just pack a bag – and the [freezed dried] food is a good idea (you can always eat it on road trips). We took an old suitcase (canvas/backpack type) and started putting stuff in. I try to go through it once a year to refresh or whatever. Here’s what we have:
  • Grubby clothes/jacket, including old shoes that can take a beating, and all of it be rain-repellant
  • Toothbrush/paste/floss
  • Toilet paper
  • Washcloth/towel/soap
  • Underwear
  • Contacts and glasses
  • Notebook and pencil
  • Small first aid kit (just make it up – Ace bandages, bandaides, antibacterial stuff, etc. Aspirin, etc.); also any meds the family is taking
  • Some cash
  • Flashlight/batteries
  • Candles/matches
Basically “what would I likely need and what would I be miserable without?”

After much deliberation, she settled on a plastic bucket with a garbage bag liner for a toilet and let go of obsessing over a seat.

What's missing? Water. There are a few interesting options at REI, but I admit to going into stasis when it comes to purchasing. You can live for a couple of weeks without food, but not many days without water...

Thursday, October 6, 2016

The Curse of the Gifted

My son started counting before he was 2 years old. I didn't think there was anything unusual in his behavior until another Mom commented in gymnastics class, "Oh my god! He's counting?!"

Stevie was picking up push-up bars from one side of a balance beam and walking them over to the other murmuring, "One. Two. Three."

It wasn't until 3 years later sitting in a Kindergarten orientation that I found out most 5 and 6 years know numbers, some up to 10, but cannot place the numbers in order.

Warning Will Robinson! But I didn't listen...a few months later I was confronted by a pissed off teacher who shoved a piece of paper at me saying, "Stevie will not transition when asked!"

I looked at the paper and said, "He's writing kanji! That's incredible. Must be from the judo book he's reading..."

She crossed her arms and scowled, "It was time to clean-up for circle."

(Yes, he's also an early reader.)

I was really looking forward to 1st grade, thinking Stevie would finally get the stimulation and challenge he craved. That, was a mistake.

The classroom was beautiful. There was a loft. Bookshelves packed with books. Couches. Stations for making stuff. One morning, Stevie walked up to a table filled with art balls and pipe cleaners. He was in the middle of making an elaborate spaceship when the teacher swooped down and said, "No, no! Those are for making bears," then turned a smug smile at me as my son walked away.

She beat the math out of him. By the time the school year was over, my gifted son was convinced he "wasn't any good at math". He became obsessed with death. Ironically, that woman is now an "Educational Consultant" :/

He started taking private music lessons with a wonderful teacher in 2nd grade. I would pick him up from school all nasty and angry. 30 minutes with Sludge, and Stevie was bouncing out the door filled with an all-body joy. We started going twice a week.

I came to realize that whereas nursery school is about learning to transition and sitting still, Elementary and Middle School is about following directions - including HOW to solve the problem, regardless of whether or not the student provides the correct answer. It wasn't until 9th grade that Stevie's "independent learning style" would be accepted.

A gifted mathematician feels the answer. They don't know how; it just happens. Being forced to "show your work" in detail as a young child is unbearably frustrating. He can do it now, but he's also 15 years old, and taking calculus and physics.

It took 4 years to re-build Stevie's self-confidence. My husband and I spent countless hours with teachers and administration.

At the beginning of each school year, I could set my watch by how long it took for Doug to fire off The Mathematician's Lament, an essay by Paul Lockhart. I don't know when it was written. Our oldest son found it...he too is a gifted mathematician like his father, his little brother, and my father. May this give you peace, and the words to do battle for your gifted children.

https://www.maa.org/external_archive/devlin/LockhartsLament.pdf

Friday, September 30, 2016

Intolerance is Intolerable - The 2016 American Presidential Election

When I was a kid, many of my grandparents' friends had tattoos on their forearms from the concentration camps. They didn't talk about it, but they certainly didn't hide it.

I was fascinated - probably because it was taboo - and started reading everything I could get my hands on. No small feat, as back then you had to go to the library.

The more I read, the more horrified I became, and swore in my heart that I would speak out if ever I saw impending evil. To this day, I don't like watching movies or reading books set in the WWII era. It is too real. My personal scary monster under the bed.

The Hitler regime hated everyone who wasn't them. It wasn't just the Jews. They tried to exterminate gypsys and homosexuals and academics and Poles and Roman Catholics - anyone who was not part of the Master Race, an Aryan. At least 11 million people died - as many as 20 to 30 million. For most, it was a horrible, excruciating death. Those gassed on the trains were the lucky ones. The Nazis collected mountains of shoes, hair, and teeth. They were slaughtered like cattle, every piece of the human body was used, both living and in death.

I am forever haunted by the pictures...the walking skeletons. Lamp shades sewn from human tattoos. The bombs. I don't know how people survived this terrible time.

The Holocaust was the direct result of Hitler's propaganda. The German people were reeling from economic crisis. Hitler convinced the people that Germany would be great again if the degenerates and racial inferiors were eliminated.

Sound familiar?

I didn't believe for a minute that Trump would be nominated the Republican candidate, nor did I believe his vile rhetoric could retain, let alone gather, supporters. 

And yet here we are: 38 days till the election - and it's close.

To be clear: I am a life-long independent specifically because I don't like politicians and have issues with both (all) parties. I am used to voting for the lesser evil. I understand my vote doesn't matter because of the electorate. I have cast empty ballots, voted Libertarian, Green Party, written in Mickey Mouse - whoever comes closest to aligning with my values at that time.

This election is different. Words matter.

America is struggling. There is inequity. Injustice. Corruption. 

We live in a time of great change. The population explosion of the past century has impacted the livability of large geographic areas resulting in militarized pursuit of critical resources and mass migrations.

I feel so fucking lucky to live here, in America; the land of the free, home of the brave. Of opportunity and hope. A country born of the tired, the poor, the hungry. Born of the belief that all people have the right of liberty, freedom of speech, and pursuit of happiness.

It's the power of those words that binds us together - even though these basic tenets of American democracy were tested at inception and to this day; these rights are for all people, regardless of race, religion, or sex.

It's the words that give us the strength to question - and to compromise. Because if it's not for all, then it's for none. In the melting pot of our differences lay our equality. We don't have to agree. We don't even have to listen. But we do have to respect each others right of personal choice, as long as those choices do not impact other peoples' rights.

Forget about the appalling ignorance, the crass genital references, the 5th grade level vocabulary, the impulsive diarrhea of the mouth that spews forth day and night. Donald Trump's words are the antithesis of American democracy. He believes "We are a nation that is seriously troubled." And the reason? "...people are pouring into our country."

This sociopathic megalomaniac has managed to convince enough of the American populace that they are exempt from being classified as part of the problem - even though all of us, except Native American Indians, are here by the grace of migration. I do not - cannot - believe the majority of Trump supporters agree with his racist bigotry and misogynistic attacks. The siren call of Trump propaganda is to play on feelings of economic disadvantage and fear from the recession.

Ironically, history tells us isolationist nations fall into economic stagnation - and typically collapse. Cutting international trade agreements and building The Wall will result in the one thing Trump supporters fear most: less money to buy things. Like any good salesman, Trump has conned people into wanting. More.

Maybe the worst part about blaming the changing job market and losses on immigrants and foreign nations is it leaves us, as a nation, completely unprepared. Indeed, there are less jobs - and it's only going to get worse. We are in the midst of what will probably be known as the Tech Revolution. I think will have more impact on society than the Industrial, if for no other reason than there are more of us. It is already happening. The development and deployment of self-driving vehicles, autonomous robots, and artificial intelligence may be keeping pace with rising sea levels.

I don't like Hilary. She's a liar - like most politicians. Condescending. Probably corrupt. But this election isn't about choosing the least evil or making a personal statement. It's about democracy, warts and all. The inalienable rights that are granted to all people. Intolerance is intolerable.

Monday, September 19, 2016

InfoSec Basics for Families

Information Security Basics: What every family should know about using the Internet
“Digital security education is like drug education and sex education in that people believe all kinds of things that are simply not true.” Eva Galperin, Global Policy Analyst at EFF


Everyone gets pwned. Some don’t know it. Others don’t want to admit it.
http://www.informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/


The chances of an intrusion going from bad to worse - identity theft or social ostracization -  are reduced when families openly discuss and support each other without edicts, judgement, shame, or blame. Open, frequent discussion about how to protect personal (inter-related) information and how to practice safe surfing are key to maintaining online privacy.


Know Thy Enemy - Hackers are like witches; there are good hackers and bad hackers.
  • “Getting Hacked” is a bunch of FUD; sensationalized news about targeted POI or organizations that are famous, gatekeepers, or victim of personal revenge or bullying
    • Bad Hackers use FUD to sway the masses
  • Joe Blow and Jane Doe? Chronic long-term disregard for basic security, safety, and privacy settings. Bad Hackers use sophisticated readily available automated tools and high powered computers to process 1000s of records to glean a few hundred logins. Then:
    • Try the combination and variations on other sites
    • Match against other sources and start building a profile
    • Sell the data or publish for free


Basics:
  • Set devices to automatically lock after a period of time
  • Use 2 Factor Authentication whenever possible
  • Use a (reputable) Password Manager to generate and store passwords
  • Apply OS and application updates as soon as possible
  • Choose your browser well (aka All browsers are not made the same)
  • Unsubscribe from email you don’t care about
  • Freeze your credit, and avoid establishing credit for your child as long as possible


Intrusion:
  • Mechanisms: Email attachments, Click-bait, Phishing, Spear-phishing, SE, Shoulder surfing, Brute force, Re-using Logins, Wifi & Bluetooth, Anti-virus SW, Flash, USB & other external storage media,
  • Malware: Trojans, Adware, keyloggers, browser hi-jackers, backdoors, ransomware,
  • RATs: Camera & Mic - Tape the camera!
  • Location tracking


Calculate Risk:
  • Accessible vs. Hardcore (Linux, Signal, Tor, and PGP)


Build Common Sense:

  • Instead of relying on Filtering vs. Monitoring...neither are very effective.
  • The Internet never forgets; archives of old emails, chat rooms, blogs, tweets, etc.
  • Don’t dox yourself or your family. Avoid using key identifiers in social media like names, (DO)Birthday, locations, pictures, credit cards, 1st paycheck, pic of your house with address number, pic of your car with the license plate, etc.
  • Write (post) like everyone is watching
  • Don’t give your trust to strangers - or acquaintances
  • Think before you click (aka There is no such thing as “free”...)
  • Be Prepared!
    • Backup your devices
    • Air gap personal data
    • Secure physical medium: Cross-cut paper shredder