Archive for the 'Security' Category

Update of the 10 Immutable Laws of Security

It’s been a while since I posted about the 10 Immutable Laws of Security, but with an update on it I need to have it marked here for future reference.

Revisiting the 10 Immutable Laws of Security, Part 1 

Hello, Kitty

BANGKOK, Thailand – Thai police officers who break rules will be forced to wear hot pink armbands featuring “Hello Kitty,” the Japanese icon of cute, as a mark of shame, a senior officer said Monday.

It sounds like the work of Phil, the Prince of Insufficient Light, but it is a new strategy for punishing minor infractions. I have been looking for something like this for a while in order to punish the “sins” I deal with the most.

  • Not putting something on the schedule
  • Leaving an outside door open
  • Not taking something off the schedule
  • Leaving an outside door unlocked
  • Not updating something wrong on the schedule
  • Propping an outside door open
  • Forgetting to look at the schedule and trying on using a place that has already been booked

There is other stuff, but I think I have been  in a rut lately.

Do you use minor punishments for minor problems just to make sure people take notice and correct themselves? What do you do when your boss or the preacher does the infraction? What about when you do it?

Some technical infractions:

  • Downloading mywebsearch or hotbar
  • leaving the computer on and logged in
  • leaving their laptop unattended in a public area

Is your web cam a security issue?

I enjoy web cams. No, not the dirty ones, the scenic ones. With a little searching in Google you can find all sorts of amazing views.

The widespread use of web cams has not been missed by the government. The Department of Homeland Security has a study on using face recognition and anomaly recognition software with public web cams to determine if something has happened based upon whether there are many fewer people or many more people in the scene than statistically expected (one study can be found here: PDF file). There have been several papers in the FBI concerning home web cams left open to the world. There was even a recent FBI notice concerning web cams in sensitive areas.

If you are like us then you probably have cameras looking at areas where there is not a good physical presence much of the time. Having this available for people to check out gives them an opportunity to see patterns of activity and vulnerability.

If you have cameras accessible outside your network just make sure you have them on a password.  Perhaps do some “site:” searching in Google on the domain name or IP address you view the cameras on.

DCS-5300 Pan / Tilt / Digital Zoom Network Camera

Warning: the following post was written in several odd sittings and may seem a bit disjointed. If you are not interested in this camera then you will want to skip this item. If you are interested this will serve as an intro to hacking its controls to make it work the way you need it to work.

I recently installed a DCS-5300 in the Worship Center and I thought I would share information on it with others.

Continue reading ‘DCS-5300 Pan / Tilt / Digital Zoom Network Camera’

Talking Security Cameras

“Seven cameras in Middlesbrough town centre have a facility, which allows operators to bark orders at those involved in anti-social behaviour.” -  BBC News UK

Our DCS-3220g cameras have this ability.

I have been tempted to use them in different areas of the church with the speakers mounted above the ceiling tiles. Then I could not only tell people to close doors, but maybe even cause a few “religious experiences.”

I could collect a list of open volunteer positions and then recruit via talking camera. So far I have had a few people respond positively to the idea. Mainly people who need to recruit volunteers.

Chubby Bunny Claims Another Victim

If you were in a youth group or attended a summer camp you probably know the routine. Several cocky youth and a few shy individuals would be brought up onto stage like modern day gladiators for the entertainment of the crowd. As the youth minister goes from youth to youth they hand out marshmallows. The contestants would then place them in their mouths and say the phrase “Chubby Bunny.” People like me would typically fail early on. I had a narrow pallet (later widened by orthodontia), no interest in winning, and a realization that what I was being asked to do was really quite stupid (you have to at least have 5 in your mouth to drop out and make it look like you were actually almost trying).

As each contestant increased the number of marshmallows more and more started to drop out of the competition, often ending with a slimy white disgorgement into a waiting garbage can. The first truly disgusting outburst usually lead to cheers from the crowd and a domino effect bringing down another contestant.

Now it is in the news: Chubby Bunny Kills 32 Year Old Woman

I am not surprised that this tragedy which occurred in London this week has happened again. This time it gets more attention due to the event and the age of the woman. There are some references to other deaths on the Wikipedia page for Chubby Bunny. I have been looking for references to a related game called “Royal Roman” which was played with grapes. That one always seemed worse since I could picture sucking a grape into my windpipe when preparing to say “Royal Roman.”

Apparently the worse danger with marshmallows is that they slowly melt into your throat and clog you up with a goop that is not easily removed. The vistim has a decreasing supply of air and each gasp makes it worse until there is not enough air in the lungs to get the deadly goop out.

I posted this in the security section because churches also need to be protected from the stupidity within.


The Security Forum

I has finally started to happen, more security people are finding the Church Security Forum.

If you ever have the feeling that perhaps you are not paranoid enough about church security I recommend you stop in. As more people who are interested in security are joining in there are more perspectives and resources available.

Blogs are nice. They allow an author to focus on a topic and write in a personal manner. I still prefer forums though. They open up the conversation in a way that a self focused blog cannot.

If you are an active learner then I invite you to stop in at the Open Source Ministry Forum and join in.

It isn’t a place focused on software or Linux (although those are regular topics), it is focused on opening knowledge for ministry. I believe that Open Source is not about software, it’s about people helping people accomplish great things.

Don’t buy anything from Zebra

I have posted about the Zebra p330i before (use the search box if you are interested), so there is a history of problems here.

The print quality on the ID cards has been pretty much hit or miss. I had a big pile of poorly printed cards before, but lately every single one of them looks like it has a coffee stain on it. For an expensive printer it is pretty lousy. On top of that, the continued service contract is more than $500 per year and when it comes to the print head that only brings about a discount which drops the repair price to a few hundred dollars.

I admit that I am cheap, but I don’t know anyone who likes to pay a premium for garbage with bad support.

There has got to be a better company out there for printers.

Extracting jpg images from IvisPlus

We use Ivis Plus 1000 (Motto: 32-Bit Software . . . faster & more reliable than 16-bit systems) from Identicard for our ID Card printing.

One of the features we really wanted was to be able to use the images from the ID cards for other uses, but the documentation for IP 1000 didn’t include info on how to get the images out. Ivis Plus 2000 advertises standard jpeg images as a feature, but the 1000 does not.

It was after about 1 week of starting on the ID cardsthat I decided to look into how the images are stored. They are kept in \IVISPLUS\PHOTOS\PIC1 and they are named as p1.pc where “1″ is the incremented number of the image. Don’t let the .pc fool you, they are really jpeg images and once I associated .pc files with Firefox they open up immediately.

We use a separate program for controlling the maglocks, and it was able to import the .pc images for the picture IDs associated with the cards in the system.

The fact that the images are stored in jpg format meant that I was able to open one of the images in photoshop and use it as a template for creating my own ID images. I used the proportions of that image and created other pictures for the loaner cards (Yoda: “Return this card you must”, General MacArthur: “I Shall Return”, The Terminator: “I’ll be back”, and President Bush: just in case he ever visits). I used a picture of communion trays for our communion prep ministry card, a picture of an audio cassette for the message ministry card, and pretty notes for the worship department loaner card. I saved them as .jpg files and then took a picture with the camera through the ID card program to create an associated image and then renamed the .jpg to match the .pc name in the picture directory.

I also used this option for bringing in pictures of people who were not available to get their picture taken when I had the system set up for regular operation. There were a few times when I had to edit images in photoshop and drop in the default background before importing.

The best feature with this is that we also have a place where staff can look at pictures of all the other staff, ministry leaders, custodians, and regular contractors to know what they look like. I got around to tht after 100 pictures had already been taken so I ended up pulling out a section of the Ivis Plus database and writing a php script to associate the person’s name and position with their image, resizing the images to make them all the same size, and saving the images as FirstName_LastName.jpg for easier future reference.

These pictures look like mugshots so they did not turn out well when a couple were used during service at the last minute (if you want to recognize people they need a more flattering image), but they were used to identify people in security camera video, and one was used in a police investigation. The security hosts have a direct link to the images on the front desk computer so they can identify people by name very quickly.

PublicData.com

We have started using PublicData.com for some basic background checking and research on cars in the parking lot.

It is a pretty simple service and very affordable. It doesn’t take the place of the regular background checks we have been doing for a long time, but it works as a good first line check. We are using the “Business Use 1500 Plan” under the corporate account area.
PublicData.com also offers the ability to look up automotive registrations via license plate information or Vehicle Identification Number (VIN). This is helpful for tracking down where some of these cars that appear in our parking lot came from.

I am interested in starting up a license plate registry of staff vehicles and vehicles that are regularly left in the parking lot to make them more quickly identifiable.

It has several databases to search from (a list in the demo), but it doesn’t cover everything in every state.

By the way, if you are interested in using PublicData.com go ahead and register through this link. It will give us 100 more lookups and I believe you will also get an extra credit of 100 lookups as well.
If you have any questions about the service then post in the comments and I will try to answer them.