Security improvements lead the way in iOS 9

Our appetite for IT innovation seems insatiable and this is particularly true of smart phone technology. Just days after the rollout of iOS 8.4 at the end of June 2015, attention turned to the new features and specifications of Apple’s next big release: iOS 9.

Expected to be unveiled later this year (to coincide with the new iPhones, which are typically released in autumn), iOS 9 is set to include public transport information on Maps, improved card integration on Wallet, and CarPlay, for better wireless connections with in-car wireless systems. These features have already been released by Apple and are able to view on its site.

Among the most notable changes, though, are those related to security, which we thought were worthy of a mention this month. The first is the introduction of a six-digit simple passcode, to replace the current four-digit system.

Six-digit passcodes

Whilst users will still be able to use four-digit pass codes if they choose, Apple (along with countless security companies) strongly advises using six. This takes the number of possible combinations up from 10,000 to one million. Whilst it’s unlikely that someone would sit there manually entering 10,000 passcodes, the fact that they’re able to is enough of a risk. This became evident after it emerged that users could power down after inputting incorrect pass codes to reset the failed attempt count.

Two-factor authentication

The second security feature heading to iOS 9 is two-factor authentication. The system, which has long been in use on other devices, will see users asked for a security code whenever they sign in from a new browser or device. Such a move not only keeps out hackers but can also alert users to any fraudulent login attempts.

Apple has already dabbled with two-factor authentication, having rolled it out in March 2013 – albeit to a limited number of accounts. It was later integrated with iMessage, iCloud and FaceTime.

Exactly how it will work within iOS 9 has not yet been revealed, but its introduction is almost guaranteed, with Apple declaring in a statement: “A password alone is not always enough to keep your account secure. With two-factor authentication… you’re quickly signed in – and any unauthorised users are kept out.”

Watch this space.

Hacks could cost UK businesses £1.46 million

By on July 10, 2015 in Blog, General, Internet, Security, Web privacy

Security breaches can cost a business much more than its reputation, according to a new study, and the number of businesses affected by cyber-attacks is on the rise.

According to a government-commissioned report from consultancy firm PwC, British companies could see security breaches leave them out of pocket to the tune of almost £1.5 million – at least for larger organisations. It said that average ‘starting costs’ for major breaches at large firms had more than doubled in the past year alone, growing from £600,000 to £1.46 million.

Whilst the number isn’t quite so high for smaller firms, as a percentage of their turnover it’s still an eye-watering amount. Small businesses suffering with the most extreme security breaches could end up with a bill of £310,000 – significantly more than the £115,000 that a similar breach in 2014 would have cost.

Perhaps unsurprisingly, one in ten companies that had suffered a breach said they’d changed the nature of their business as a result.

90% of large firms and 74% of SMEs affected

PwC also reiterated that the old belief of “that won’t happen to me” is risky at best, and a recipe for total disaster at worst. It claimed that 90 per cent of large organisations had suffered some sort of cyber-attack over the past year, a nine per cent year-on-year increase. It was a similar story for smaller firms – with 74 per cent having fallen victim of an attack, growing from the 60 per cent total recorded in 2014.

Much of this could be attributed to the diversity of devices being used in today’s workplaces. Companies are investing in security for their desktop devices, but neglecting to roll out such measures for tablets and smartphones. There are also intangible risks much more difficult to protect against, like human error. Staff-related breaches have hit 75 per cent of large businesses, a figure that was nearer 60 per cent last year.

Commenting, PWC cyber security director Andrew Miller told telegraph.co.uk: “Breaches are becoming increasingly sophisticated, often involving internal staff to amplify their effect, and the impacts we are seeing are increasingly long-lasting and costly to deal with.”

We recommend working closely with your IT provider to minimise the risk of a cyber-security breach and being vigilant when opening emails and attachments. Give us a call on 01293 871971 to discuss your security options.

Microsoft announce the launch date for Windows 10, but what does it mean for SMEs?

By on June 15, 2015 in Blog, Microsoft, Product releases

Earlier this month, Microsoft unveiled the official launch date for the eagerly awaited Windows 10.  From 29th July 2015, the new operating system will be available in 190 markets around the world. Microsoft are offering Windows 10 as a free upgrade for Windows 7 and Windows 8.1 users for the first year. After this period ends, Microsoft will either introduce a new service subscription model or continue to charge a single one off payment.  This is yet to be officially clarified by Microsoft.

When Microsoft introduced Windows 8 back in October 2012, it faced widespread criticism for moving too far away from the familiar functionality highly valued by Windows 7 customers. As a result the market was slow adopt the new Windows 8 operating system and many either stayed with Windows 7 or waited until Windows 8.1, particularly business users. With the launch of Windows 10, Microsoft have brought back some of the favourite Windows 7 features such as the Start Menu bar, which were dropped from Windows 8. For simplicity, the new version offers a single platform across smartphone devices, pcs and tablets. Windows 10 also includes the digital personal assistant ‘Cortana’ in the desktop version and a new internet browser named ‘Edge’.

Last month, Microsoft CEO Satya Nadella spoke at a conference for IT professionals in Chicago, stating that the company is ‘making a profound change in how it approaches Windows’. He also speaks of ‘Windows as a service’ turning Windows 10 into far more than just an operating system. By this, Nadella means Windows 10 will be delivered as an application via the cloud rather than a system installed on a PC or laptop.

The free upgrade path also applies to businesses users. Clients using Windows 7 Pro or Windows 8.1 Pro can upgrade to Windows 10 Pro. As with any new operating system launch, the advice we offer for small to medium sized businesses is to sit tight with your current Windows version for now until the dust settles. New operating systems will always require software fixes shortly after launch and it makes sense to wait a couple of months until it is stable. We would also be happy to review your organisations current systems and applications to determine whether upgrading to Windows 10 this year is advisable for your business.

If you have any further questions about Windows 10 for your business, please contact us on 01293 871971 or enquiries@m2computing.co.uk

Recycled Apple computer fetches $200K at auction

By on June 15, 2015 in Apple, Blog, General

A massive cheque awaits one mystery woman in Silicon Valley after the old computer she dropped off at a recycling firm ended up selling at an auction for $200,000 (£131,000).

The computer in question is a rare Apple-1 – one of the first pre-assembled Apple computers built by co-founder Steve Wozniak in 1976. When the recycling company CleanBayArea’s vice president Victor Gichun first saw the machine he believed it to be fake, but after being confirmed as the real deal he sold the machine for a huge profit.

But CleanBayArea has a policy whereby it splits any proceeds gained by donated items with the person who brought the item in. As a result, there is now a $100,000 (£65,200) cheque – half of the price paid – waiting for the donator.

So who is the mystery woman? Nobody knows. According to Sky reports, she is believed to be in her 60s, and donated several electronic items in Milpitas, California in April 2015. Mr Gichun confirmed that she told CleanBayArea staff about how she had found the computer parts when cleaning out her garage after the sad news of her husband’s death.

She left no personal details, nor did she fill out a tax receipt for the donations.

Back in 1976 when it was originally released, the Apple-1 was on sale for $666.66 – which after being adjusted for inflation would be the equivalent of around $2,786 (£1,821) today.

It’s not the first Apple-1 in good condition that has been sold at auction. In October 2014 a near-mint condition Apple-1 sold for a whopping $905,000 (£564,000) at a New York auction. Then, in December 2014, another Apple-1 went straight from late Apple founder Steve Job’s garage onto the auction lot. It is the only machine to have been personally sold by Jobs, and went for $365,000 (£230,000).

The hunt continues to reward the mystery donor.

Increasing powers to monitor phone and internet use

By on June 15, 2015 in Blog, Security, Web privacy

New laws proposed in the Investigatory Powers Bill will allow spies and police to have greater power to monitor the public’s phone and internet use.

Civil liberties campaigners are against the new powers, as they believe that they would infringe the privacy rights of UK citizens. A similar bill, known as the ‘snooper’s charter’ was almost introduced in 2012 by Home Secretary Theresa May, but it was roundly blocked by the Liberal Democrats.

Filling gaps in intelligence gathering

Downing Street claims that the new bill will provide authorities with additional tools to keep the public safe. It will also allow them access to communications data which they say is putting lives at risk, whilst also enabling gaps in intelligence gathering to be filled. The bill will focus on monitoring the conversations between paedophiles, terrorists and other serious criminals.

Jim Killock, executive director of The Open Rights Group, stated that not only is data collection on this scale costly, it is possible the bill will result in an “attack” on encryption.

“The government is signalling that it wants to press ahead with increased powers of data collection and retention for the police and Government Communications Headquarters (GCHQ), spying on everyone, whether suspected of a crime or not,” he noted. “This is the return of the ‘snooper’s charter’, even as the ability to collect and retain data gets less and less workable.”

[themecolor]Recording our tweets, emails and online gaming[/themecolor]

Under the new bill, internet service providers and mobile operators could be asked to collect data on what people tweet, who they call, every email they send and even what games they play. However, the police say that the law needs to keep up with advances in technology and that it has long required the ability to better track suspects online.

The Investigatory Powers Bill was included in the recent Queen’s Speech, where 26 other laws were also proposed. Of course, increasing the monitoring powers of the state will always be a contentious issue and this bill still has a long way to go before it becomes law.

For UK businesses, there are clear parallels with the monitoring of internet abuse by staff in the workplace, although happily there are several tried, tested and legal solutions on hand to counter this particular threat.

Microsoft unveils new browser

By on June 15, 2015 in Blog, Microsoft

Internet Explorer has received criticism in tech circles over the past few years. Once the world’s most popular browser (perhaps by default), it has been overtaken by both Google Chrome and Mozilla’s Firefox in the usage tables, forcing Microsoft to take decisive action.

Now, it seems the software giant is ready to move on, and it’s hoping to take Windows 10 users with it. After months of working under the codename ‘Spartan’, the Redmond company has announced that Internet Explorer’s replacement will officially be called ‘Edge’.

On the edge of consuming and creating

The new name was revealed at Build 2015, a Microsoft-run developer conference that took place in San Francisco at the end of April. At the event, the company’s corporate vice president of operating systems, Joe Belfiore, spoke about the moniker’s meaning: “It refers to the idea of being on the edge of consuming and creating, and to the developer notion of being close to the modern capabilities of the web.”

Microsoft then held its first Edge Web Summit on Tuesday, where it took the opportunity to discuss its plans for the browser in more detail. As well as the minimalist appearance and previously announced assistant feature, Cortana, users can expect to see a new tab page offering useful information like weather reports and news alongside other open websites. Developers will also have the ability to port extensions from other browsers, like Chrome.

According to Charles Morris, Edge’s principle program manager, Edge should be seen as more than just a replacement for Internet Explorer. “We need to do more than just the next version of the same old thing,” he said.

Alongside the product announcement, Microsoft revealed a new ‘Edge Dev’ site, which will act as a hub for all things Edge-related. Aimed at developers, it will provide information on the browser itself as well as the team behind it.

At present, Edge is only set to be available as part of Windows 10, which is due to be released in July.

A flexible workforce requires a more resilient IT policy

By on June 15, 2015 in Blog, Company news, Topical

Greater communication with the rise in Cloud based technologies means that any SME nowadays can take a more flexible approach to their workforce. Gone are the days when everyone simply turned up at nine and went home at five, with weekends off.

The right to request flexible working, entitling employees to apply to their employers for a change to their terms of employment relating to hours or times of work, was introduced in 2002; this right initially applied to limited categories of employee with parental or caring responsibilities. Since 30 June 2014, the right has been radically extended to all categories of employees, provided they have 26 weeks’ continuous employment.

The legal implications of flexible work requests

A request for flexible working may only be refused for entirely legitimate business reasons and these are encompassed in the eight specific grounds set out for rejecting a request. The reason for rejection must therefore be based on one or more of the eight grounds which are: the burden of additional costs; the detrimental effect on the ability to meet customer demand; the inability to reorganise work among existing staff; the detrimental impact on quality and performance; the insufficiency of work during the periods the employee proposes to work and; planned structural changes.

Failure to act in accordance with the laws on flexible working could leave businesses open to legal action for breach of the Flexible Working Regulations 2014 as well as claims for sex discrimination.

A request for flexible working needs to be put in writing by the employee; the employer must then deal with the request “in a reasonable manner” and respond within three months.  Niki Avraam, Partner at Howat Avraam Solicitors comments:  “The extension to the rights to request flexible working recognises the complexities of our modern working lives; all requests must be considered carefully by employers and a genuine assessment made of the real impact on the business.”

Of course, each business is different and the employer will need to assess the pros and cons of any potential change and its impact on the business. If the request is granted then employers will also need to make alterations to the contract of work outlining the new relationship and what is expected of both sides.

Flexible Working and IT Services

One area where flexible working changes will need careful consideration is with the provision of IT services to the employee. Reviewing the provision for one employee flexible working request, could result in a positive change for the entire organisation. Cost effective cloud based solutions such as Microsoft Office 365 allow employees to essentially work from anywhere as long as they have a smartphone, tablet or laptop with an internet connection.

If remote working is not adequately managed with the right systems in place, employees could be using consumer based apps and short cuts which could leave the business vulnerable to security breaches e.g. users could use Dropbox to transfer files to their home PC and GoToMyPC to access their office computer remotely. Working with a reputable IT provider means that you can develop an effective policy for areas such as email, file sharing and access to company data on individuals’ mobile devices. These can be built into any contract changes when working with an employee who wants a more flexible approach to their employment.

For most businesses, agreeing to flexible working for an employee is not just a matter of consent. Whilst denying a request for no other reason than you don’t want it, can lead to litigation and accusations of unfair treatment. Every manager needs to make sure that any practical issues are fully explored and the right IT provision is in place to support flexible working.

Congratulations to M2’s new Microsoft Technology Associates

By on May 12, 2015 in Blog, Company news

Just over a year ago, Jake Monckton and Tim Oelkers joined M2 Computing as part of the UK National Apprenticeship scheme. Working alongside our more experienced technical IT support engineers, they have both excelled in their work and have successfully completed their City & Guilds Level 3 Diploma in IT Systems & Networking also obtaining their Microsoft Technology Associate qualifications.

Tanya Haeffele, General Manager comments “Over the last year, Tim and Jake have been invaluable.  They arrived with bags of enthusiasm and were keen and willing to learn the role as they went along.  They have received some excellent personal feedback from our business clients and we couldn’t be happier. We are thrilled to have them both on board full time.”

Jake and Tim are based in the Horsham office, West Sussex.

‘Back to the Future’ tech predictions that came true

By on May 12, 2015 in Blog, General, New technology

This year marks the 30th anniversary of the classic sci-fi film, ‘Back to the Future’, as well as the year when protagonist Marty McFly time travelled into the future and discovered all sorts of strange technology. Some of the ideas may have appeared a little far-fetched at the time but the film’s sequel did manage to make some scarily accurate predictions. Here are some of the ones that came to fruition:

[themecolor]Holograms[/themecolor]

Everyone remembers the moment Marty almost has a heart attack when a hologram of the shark from ‘Jaws 19′ pretends to eat him. Holograms aren’t that sophisticated just yet (scrolling LEDs are needed for that), but Microsoft’s HoloLens is pretty impressive. It can fill a room with HD visuals, further blurring the lines between reality and virtual reality.

Moreover, the film’s ‘Holomax Theater’, where the fictional shark film is being shown, is somewhat similar to the 3D cinema screens we have today. Although we still require glasses to view these films properly, stereoscopic 3D (the glasses-free version) does exist and similar tech could become widespread in the future.

[themecolor]Voice-command television[/themecolor]

Staying on the topic of entertainment, voice-controlled devices, including TVs, are everywhere now. In BTTF 2, Marty’s son arrives home and tells the TV which channels he wants to watch. This tech is extremely similar to Xbox Kinect, but we still can’t watch ten channels at once on the same TV. Why would we, though? Having a tablet, mobile phone and laptop near us at all times is distracting enough.

[themecolor]Wearable devices[/themecolor]

Both of Marty’s children use large, clunky VR glasses in BTTF 2 – don’t they look an awful lot like Google Glass? This may be the most accurate tech prediction of them all, as wearable tech is definitely being billed to be the next big thing. Smart glasses, watches, and even rings can monitor our health, enable us to track our fitness goals and allow us to keep in touch with our friends and family. Like it or not, wearables are going to be huge.

Those are just some of the tech predictions came true; even the much-loved hoverboard is now a real thing! Although, something tells us that flying cars are still a long way off.

Countdown to Windows Server 2003 end of support

By on May 12, 2015 in Blog, Microsoft

Further to last year’s end of support for Windows XP, consumers are now facing the final months of another Microsoft product support cycle. Extended support for Windows Server 2003 ends on 14th July 2015 and, despite Microsoft first announcing this line in the sand back in April 2013, many organisations are yet to formulate a clear migration plan away from this server platform.

The extent of the problem varies according to the reports you read but the common consensus is that millions will miss the deadline. As with the end of support for XP, it seems the potential security risks associated with running unsupported software are not enough to deter significant numbers of businesses from continuing to run a product that has been replaced several times over. In the case of Windows Server 2003, there have been two major updates (2008 and 2012) and three minor updates, since it was first released onto the market in April 2003.

[themecolor]What does ‘end of support’ mean for Windows Server 2003?[/themecolor]

After 14th July 2015, Microsoft will no longer be issuing any updates or patches for Windows Server 2003, which will lead to a progressively less stable and less secure infrastructure for any business that continues to use this operating system after that date.

But for most organisations, this deadline is about more than just an out-of-date network operating system. Given the age of the solution, it is likely most servers running Windows Server 2003 will have other business-critical applications installed that have also past their own supported life cycles. This further complicates the delivery of on-going support to organisations who fail to upgrade and compounds any regulatory compliance issues.

The major concerns, which face organisations who continue to run Windows Server 2003 after 14th July 2014 deadline, include:

  • No more updates – there will be no more updates to fix bugs, address performance issues and patch security vulnerabilities. So whilst 37 critical updates were released for Windows Server 2003/R2 in 2013, any critical issues will remain unfixed after the July deadline, leaving servers open to malicious attack and data theft.
  • Non-compliance – regulated industries generally require organisations to operate on supported IT platforms, so companies that continue to use Windows Server 2003 risk falling foul of industry wide compliance standards. This also applies to organisations handling regulated data such as healthcare and payment card industry (PCI) data. In these situations, non-compliance could result in fines, loss of business or maybe both.
  • Software and hardware compatibility – new software applications and hardware devices are not being built with Windows Server 2003 in mind, so companies will soon begin to experience software and hardware compatibility issues, if they have not already. There is a good chance that your organisation will not be able to run the latest instances of key business application software or communicate using the latest devices if it continues to run Windows Server 2003 beyond July 2015.
  • Increased support costs – operating legacy servers is expensive. Protecting an unsupported Windows Server 2003 platform, may require new intrusion detection systems, advanced firewalls and network segmentation, all of which come at a cost. Add to this the investment required to maintain ageing hardware and it is clear that the cost of ownership of Windows Server 2003 is likely to rise.

So, do not delay. With just weeks to go until Microsoft withdraws support for this product, any businesses still running Windows Server 2003 should contact our support team as a matter of urgency to discuss migration options.