Joe Carl

Just your average Joe.

[princejoecarl-blog]

What is your position on software piracy?

What is software piracy? Software piracy means the stealing of legally protected software. Under the copyright law, software piracy occurs when copyright protected is copied, distributed, modified, or sold. So, since software piracy is an illegal act of stealing, it is a must that people should not practice such behavior of stealing software, especially there are a lot of software that can be easily downloaded on the internet.

Stealing, first and foremost, is wrong in any ways. Society consider stealing as unethical and illegal. Anyone who commits this crime are sentenced for punishment that could last for a very long and waste a lot of money. Software is common of being stolen since there are a lot of users on the internet that uploads them and they are free for download to whomever needs them. Torrents sites are common websites that users can download software. Though it is beneficial for those users that can't afford to buy expensive software, users must still avoid downloading free software since there are users (spies) on the internet that monitors. Free software are also prone to viruses being attached to them by the up-loaders, so instead of users benefiting from the software, it causes problems to the users instead.

One of the commandments of computer ethics states that "Thou shalt not use the computer to steal". Based on this commandment, computers should not be used to steal anything, may that be information of others, money, or software, since it is wrong to acquire information of others, breaking into a bank account to collect information is wrong, and downloading software illegally, for the purpose of convenience, is very wrong. Breaking this commandment can cause imprisonment for many years and pay a big amount of money.

Third world countries, such as the Philippines, has a lot of people who steal software to use on their advantage. Since there are a lot of "free software" on the internet, Filipinos tend to download them since they can't afford the original software since they are very expensive. However, the Philippines has RA 8293 (violation of the copyright of the IP code of the Philippines) and RA 9239 (Optical Media Act), which is are acts that carries penalties to those who are caught stealing software illegally. The penalties are nine years of imprisonment, a fine of up to 1.5 millions pesos, or both.

References:

https://www.techopedia.com/definition/4361/software-piracy

https://technology.inquirer.net/33067/10-businesses-found-using-unauthorized-software-in-anti-piracy-campaign

https://en.wikipedia.org/wiki/Ten_Commandments_of_Computer_Ethics

http://www.au.af.mil/au/awc/awcgate/ndu/strat-ldr-dm/pt4ch15.html

[princejoecarl-blog]

Computer Security Consultation

An online company who accepts credit card details wants to secure its customers’ details and safeguard against damage.

What are the likely crimes to be committed?

-Likely crimes to be committed are credit card fraud and identity theft.

Who, and where, are the threats coming from, both internally and externally?

-There are many possible threats. Hackers can use the internet to break into the company’s system if they have weak security and get as much information from the and their customers which will cause a lot of damage. The company will lose money and their customers’ information are in jeopardy.

What technical security measures would be most appropriate, and why?

-Increase and update security to lessen the chances systems breach and educate the customers to tighten up their security in regards to their information.

Reference: https://www.quora.com/How-do-credit-card-companies-fight-the-criminal-use-of-peoples-credit-card-numbers

 A communications company employing a lot of young, technically able people, wants to ensure its online facilities are not being abused.

What are the likely crimes to be committed?

-Likely crimes to be committed are telemarketing fraud and cybercrime.

Who, and where, are the threats coming from, both internally and externally?

-New employees are good always good companies since they can contribute new knowledge to improve the performance. However, there are also possibilities that new employees can use their knowledge to scam the clients and commit fraud.

What technical security measures would be most appropriate, and why?

-Tighten security within the company to monitor the new employees, making sure they don’t commit any crime.

Reference: https://aic.gov.au/publications/tandi/tandi59

 A high-security establishment needs to ensure that only authorized users can access certain parts of the system.

What are the likely crimes to be committed?

-Likely crimes to be committed are hacking the system and damaging the system.

Who, and where, are the threats coming from, both internally and externally?

-Unauthorized users, hackers, and untrained users of the system can damage system. Unauthorized users and hackers will try to damage the system to gain information about the establishment, while untrained users might cause problem when accessing to the system doing things that they are not supposed to do so, which damages the system.

What technical security measures would be most appropriate, and why?

-Tighten the security making sure that only authorized users can access to make sure that the system is safe from unauthorized users and hackers.

Reference: https://www.bayometric.com/problems-current-security-systems/

 A private consultant has a contract with a research organization working on highly sensitive issues. He needs to be sure his communications are secure, and some of the documents he sends might be used as legal proof of his recommendations.

What are the likely crimes to be committed?

-Likely crimes to be committed are theft of telecommunication and wiretapping.

Who, and where, are the threats coming from, both internally and externally?

-Intruders/spies who are interested on learning the sensitive issues will tap on the communication to get sensitive information since they might be useful for them. Hackers can also get the documents the consultant sends when his security is easy to breach.

What technical security measures would be most appropriate, and why?

-Secure communication is a must when it comes to very sensitive information since other people who are not part of the conversation can get into the conversation without the consultant knowing by wiretapping.

Reference: https://whatis.techtarget.com/definition/wiretapping

[princejoecarl-blog]

Security Technologies

Biometric Authentication Biometric authentication verifies user's unique biological information, such as fingerprints or iris scans, instead of entering a password. For example, many smartphones now a day uses fingerprint scanning in order to unlock the phones. The latest iPhones is one example of smartphones who uses fingerprint scanning.

Biometric authentication has benefits that could help the users such as: it is faster and convenient for users (users doesn't have to remember long passwords), the authentication is strong since it is the biological characteristics of the users that are being use (which are distinct), it eliminates friction associated with traditional security measures, and biometric servers usually require less database memory.

However, despite all the benefits of biometric authentication, there are some flaws that must be addressed. First flaw is biometrics aren't private. People's eyes, ears, hands, and face are exposed to the surroundings, which can leave information of that person. For example, people leave fingerprints on things they touched, which can be used to unlock their phones if stolen. Second flaw is biometrics are hack-able. Once a hacker has a picture of someone's ear, eye, or finger, they can easily gain access to their property/account. Third flaw is biometrics hacks may have greater consequences. Since a biometric reveals part of a user's identity, if stolen, it can be used to falsify legal documents, passport, or criminal records, which can do a lot of damage the user.

References: 

https://www.plixer.com/blog/cybersecurity/biometric-authentication-issues-innovations/ https://blog.ipswitch.com/3-reasons-biometrics-are-not-secure

Encryption Encryption is the method by which plaintext or any type of data is converted from readable form to an encoded version that can only be decoded by another entity if they have access to a decryption key. Encryption is one of the most important methods for providing data security.

The primary purpose of encryption is to protect the confidentiality of of digital data stored on computers or transmitted via internet. For example, the Payment Card Industry Data Security Standard requires merchants to encrypt customers' payment card data when it is both stored at rest and transmitted across public networks. Modern encryption algorithms play a vital role in the security assurance of IT systems and communications since they provide confidentiality.Encryption also provide this kind of security elements: authentication (the origin of a message can be verified), integrity (proof that the contents of a message has not been tampered since it was sent), and non-repudiation (the sender of a message cannot deny sending the message).

Unfortunately, encryption has its own flaws since it can be attacked. Brute force is used to attack any cipher, trying each key until the right one is found. Encryption strength is directly tied to key size, but as the key size increases, so, too, do the resources required to perform the computation. Side-channel attacks are also alternative methods on breaking a cipher.

Reference: 

https://searchsecurity.techtarget.com/definition/encryption

Access Control Software/System Access control system is a security that manages and controls who or what is allowed to enter into a system, environment, or facility. It identifies entities that have access to a controlled device or facility based on the validity of their credentials.

Access control system are used to manage, monitor, and control human access to a protected equipment or facility. Most access control system are designed to take a user provided credential as input, verify/authenticate privileges using the access control list and grant/deny access based on the findings. For example, using biometric security, the system can be used to authorize only legitimate access to a data center facility. Individual must used their fingerprint, vocal or focal credentials to the system, which is then verified through comparison with its database and grant access only with valid permission.

Access control systems have issues and it can cause problems. Majority of its issues  are from outdated equipments, keycards falling into wrong hands, and lack of integration with other building systems. Outdated equipments could lead to security problems since hackers, burglars, and other criminals are working on ways to circumvent equipments. Key cards falling into wrong hands could lead to wrong person having the ability to gain access to private information.

References:

https://www.techopedia.com/definition/29707/access-control-system-acs https://info.midatlanticcontrols.com/blog/problems-with-access-control-systems

Firewall Firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. Firewalls establish a barrier between secured and controlled internal networks that can be trusted and untrusted outside networks, such as the internet.

The some strengths of firewall includes helping to enforce security and safety policies of an organisation, restrict access to specified services, and being a notification system which alerts people concerned about specific events. Organizations has to have firewalls since they are big target of hackers. There are websites on the internet that could be a possible threat, which firewalls block due to the security rules assigned. Firewalls can also send notifications incase of firewall breach, which could be caused by hackers.

Firewalls have weaknesses that could cause problems. Some of its weaknesses are it has inability to fend off attacks from within the system that it is meant to protect. This could take the form of people granting unauthorized access to other users within the network. Firewalls can only stop intrusions from the traffic that actually passes through them. And it cannot circumvent poorly structured security policies or bad administrative practices.

References:

https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html https://www.certificationkits.com/cisco-certification/ccna-security-certification-topics/ccna-security-implement-firewalls-with-sdm/ccna-security-operational-strength-a-weaknesses-of-firewalls/

[princejoecarl-blog]

The case of Kevin Mitnick

The case was about Kevin Mitnick who was arrested in 1995 for 25 counts of computer crimes including possession of unauthorized access devices, computer fraud, causing damage to computers, wire fraud, and interception of wire or electronic communications. He, along with his partner Lewis DePayne, were accused of obtaining unauthorized access to computers belonging to software and operating system manufacturers, cellular telephone manufacturers, internet service providers, and educational institutions.

The defendant of the case was Kevin Mitnick and his lawyers were Donald Randolph and Gregory Vincent. The prosecutors were Christopher Painter and David Schindler. The case was judged by Marianna Pfaelzer in Los Angeles, California.

The case was concluded with Kevin Mitnick plead guilty and was sentenced to 3 years and 10 months of imprisonment and 3 years of probation with strict limitations on use of computer equipments.

The ethical issues raised on this case were the possession of unauthorized access devices, interception of wire or electronic communications, unauthorized access to a federal computer, and causing damage to computers.

Reference: http://law.jrank.org/pages/3791/Kevin-Mitnick-Case-1999.html

[princejoecarl-blog]

Why is it important to follow Computer Ethics?

It is important to follow computer ethics because these are set of moral principles that regulates the use of computers. Users must know these principles to avoid common issues of computer ethics, such as property rights and privacy concerns. For example, with all the information existing on the internet, it is easy to copy those information. However, computer ethics would suggest that it is wrong to copy those information without the owner’s approval.

With the advancement of technology, computers continue to have greater impact on society. Therefore, computer ethics will continue to create ethical standards that addresses new issues raised by new technologies.

Reference: https://techterms.com/definition/computerethics