Jan
25
Share

PCI compliance – what a PITA

 
Rochester & Associates Blog Image

PCI compliance - a helpful check on website security or a money making scheme?

For those not knowing the Internet Acronym used in the title look here: Wiktionary :tongue:

So I have a few clients with online stores of one type or another, mainly they trade as an online arm of an existing business, though this isn’t the case in all circumstances.

For those not knowing the process to get an online store – it entails getting a merchant ID (something the banks will say they can sort in about 5 days, though experience tells us it takes on average 6-10 weeks! :w00t: ).
Part of this process is the security of the websites – something which I believe most online businesses should take more seriously – Enter the PCI Compliance system.

This is a system which simulates a site infiltration via several known methods :pirate:  - and gives a report that indicates the level of security that the site has. On the face of it a good thing…

But…

Firstly, the tests that are performed can (and do) fail in their execution, on some sites.
This may mean that, even though the security may be above and beyond the level required for compliance, the site will get a ‘failed’ rating because the tests cannot get in.

Surely this is the point, if you cannot get in does that not indicate a secure site? :???:

Secondly, the tests require that some access points to sites (such as those used by known management systems) must be disabled.
This means that common systems used to control and configure systems cannot be used (The router that connects you to the outside world usually has a web based control panel accessible externally, to pass this must be disabled).

This makes my support to the clients EXTREMELY difficult If I cannot connect remotely to their systems. :mad:

This all makes sense when you realise that, even though PCI compliance is NOT required, nor even recognised by some providers, the banks will charge you a monthly fee if you are not compliant…
Believe me when I say that it’s VERY easy to be ‘Non compliant’

Call me a cynic if you will! :angel:


=============== R and A Logo ===============
Jan
14
Share

These little hands

 
Image of hands

I.T. people could do with lots more hands sometimes..!

It just so happens that you are required to have many different skills to perform successfully as an IT guy.
This was highlighted the other day, on site at a clients home…

There was a very strange issue where by the wireless access point we had just installed decided to drop all it’s connected devices at random – then it would allow them to reconnect.
We had already ruled out potential cabling problems, having had the cables tested.
This caused much head scratching, up until I had that waft of inspiration ~ “Let’s try turning all your other equipment in the same place off.”

This we did – many items of AV equipment shutdowns later we tested the wireless again and Voila!
Working, solid WiFi :)

What made it a little disturbing was that turning the equipment back on had no effect on the wireless at all :???:

Odd

Off to the next client who had a switch with a noisy fan ~ out comes the hoover…
Dust free fans make MUCH less noise! Though not enough it seems – time to disconnect the pointless fans…
Silence reigned = customer happy… :thumbsup:

Final visit and a tackle with the ‘joys’ of Sage ~ a subject techies across the globe dread. :devil:
Amazingly I managed to find a useful article that pointed me to a solution – implemented and the client still hasn’t called to say it failed!

I even managed to implement a fix for one of our clients who have a VOIP system that’s not working properly…

EMI (Electromagnetic Interference) detector, domestic and electronic engineer, software engineer and VOIP maintenance man.
Just a few of the skills a modern IT worker needs!

Tor expected a cuppa the following day – Cha lady is NOT on the resumé ;)


=============== R and A Logo ===============
Jan
9
Share

Amazon Kindle

 
The Amazon Kindle

The Amazon Kindle - A wonderful gadget freaks 'essential' or a novelty toy?

For this Christmas, my lovely GF got me the Amazon Kindle – a gadget that I’ve been eyeing up for a few months, ever since they released the 3rd generation version.

I opted for the non 3G version, as the coverage for the 3G one seems to only cover the places you’d not go to on holiday and the function to up date all your magazines ‘instantly’ was of little use to me.
Obviously I’ve got access to quite a few WiFi networks dotted around, so I can get the thing loaded with enough material to carry me through the longest period of WiFi withdrawal…

I must say though, it’s a sexy (as far as technology goes! :heart: ) little device, feeling kinda like a large thin calculator in the hand.
This is a good thing :) It feels quite sturdy and comfortable - a MUST for those extended reading hours – the buttons are positive in their actions, so you know you are pressing something.

The screen – the much vaunted ‘Digital or E Ink‘ does seem to give a nice ‘paper feel’ to the reading experience, and the matted screen is great for reading in the sunlight.
There is however, something to note – there is no lighting on the Kindle itself; Making reading it much the same as a book, poor light = poor reading.

Battery life seems to be excellent – no lights and ‘funky extras’ means with things like the WiFi turned off, you’ll get a loooooong time to enjoy your books before heading for the charger (I’ve just got mine so I have no idea how long it’s going to last!)

The range of material is fantastic, most of the new titles that I’m wanting to read, are available in Kindle format. If you are a connoisseurs of the classics, you can download many of them for FREE!
Yup – I’m currently enjoying Homers Odyssey, Mary Shelley’s Frankenstein and other ‘essential’ reads for NOWT! :w00t:
You need not get stuff purely from Amazon either – there are a few sites offering extremely cheap, if not free, books in Kindle or compatible format.

Just a couple of negative things:
Firstly, turning pages makes the whole screen flash black, then display the new page. This is a little ‘uncomfortable’ at first and does impact on your first few hours reading. Once you get into the mental ‘zone’ though, you’ll not even notice it!
Secondly, it’s a little USA centric in it’s content – there is a free dictionary installed for you ~ The Oxford AMERICAN Dictionary ~ pointless IMHO!
Finally, the operating system (the bit that controls the Kindle) seems a little uncomfortable to use and in my opinion, needs some polishing as it’s just not quite there yet…

Just one point to note:
Mine was delivered and unwrapped with keen anticipation, only to notice that there was a hair in the top right hand corner of the Kindle within the screen unit itself. :sad:
This was highly annoying when reading (imagine those little blobs of ink you sometimes get in books, in the same place on every page – annoying!).
After a quick phone call to Amazon, following sending an email to them noting this, they immediately sent a replacement unit under the Express Delivery, sent an email with a returns label and information to get DHL to collect the hirsute unit, and told me that if I didn’t send the faulty Kindle back within 30 Days, then I’d be charged for a second one – a process to those in the retail sector known as an ‘Advanced replacement’
Great service indeed.

To summarise – I’d give the Kindle 8/10 – it’s a nice little device that’s just not quite there in terms of the interface, and has a couple of little niggly bits, but I’d heartily recommend you buy on if it’s on your gadget horizon :D
Reading has always been a pleasure for me, and now it’s become so much more comfortable and convenient with my library of escapes now in my hand.
I’m loving it!


=============== R and A Logo ===============
Jan
3
Share

M&S Money for NOTHING!

 

Marks and Spencer - returning goods - con or a legitimate policy?

So Marks and Spencer, that stalwart of the British high street since time began (actually founded in 1884 by Michael Marks and Thomas Spencer dontcha know ;) )

Well, they have a returns policy which, on the face of it, seems quite reasonable ~ on request you can ask them for a gift reciept which doesn’t show the price but allows the recipient of the gift to return the item if they like within an extended period of time.
Sounds like a great thing for Christmas right..?

Hmm… (I hereby give notice of a mini rant…)

Right - so here you go M&S, have your jumper back and £5 too - thanks!
I was given a sweater for Christmas from the famed store – nothing unusual so far – unfortunately it’s made from man made fibres and I try to only wear natural fibres. In this line of work, generating static electricity from a lovely jumper, when you are wrist deep in a PC is not a good idea! :yawn:

Upon opening the gift however there was the afforementioned gift receipt :)
Good methinks, visit to the local M&S and swap for a natural fibre equivalent – easy…

Brrmmmmmm – drive to M&S

Into the specially created returns department ~ which was a bit of a surprise ~ do M&S get so many returns that they need a department to handle them?
Apparently so; the lady in the 2 person queue in front of me said that the queue was all round the store earlier so she left and came back!

A helpful shop assisstant breaks off from her extremely important conversation with a colleague to serve a waiting customer (she really didn’t like the gift that her other half had given her and she’s questioning if he really knows her after 3 months! sigh…)
Check jumper – check gift receipt.. “sorry sir, this is the wrong receipt” :shocked: 
Now I’m not one to cast aspersions (!) but I know the gift giver is fastidious about such, lets just say that it’s a REALLY unlikely thing to happen. This also raises my suspicions when the other returnee is told the same thing…
Hmm…

This now means that, because we BOTH have the incorrect receipt, but the returned products come from M&S (check out my designer label!), and the products are now in the sale, we can only be refunded the current price of the item and not the original price ~ a difference of £5 in my case.

Right – so here you go M&S, have your jumper back and £5 too – thanks!

I realise this is simple a reaction to those members of our society who decide that living a more delinquent lifestyle, but really, there MUST be a better way…
Now I know why M&S have a seperate department – it must be a money making machine at this time of year… :pirate:


=============== R and A Logo ===============