Tuesday, January 26, 2010

Is Online “In-Line” with Your Backup Needs?

A reliable network and data backup system is essential for all businesses, but choosing the appropriate backup method for your business is challenging. Traditional backup methods include remote, appliance, tape and disk cartridge backup, but online backup services have also emerged, offering the option of backing up data on the Internet. Online backup services are becoming a popular backup alternative due to their initial low cost, lack of breakable hardware and location away from physical hazards; however, before you transfer your precious business data to cyberspace, consider the following aspects of online backup services that may help you determine if online backup is the best method for your business.

1. Consider the speed of your Internet connection. Fast Internet connections can facilitate the data upload within a reasonable time frame; however, if your connection is slower than cable or fiber optic Internet, it may take days (if not weeks) to upload a complete copy of everything on your server.

2. Verify what is being backed up. Most online backup services backup your data, not your system, which can be problematic if your system fails and you lose all your data. If the online backup service does not provide system backup, you may be forced to reinstall and reconfigure your whole network, which can be very costly and time-consuming. Online services also do not backup data from servers, only workstations.

3. Determine the security of data. Some online services use poor quality encryption or no encryption at all, which can put your data at risk for exposure and theft. Ask for their data security guarantees in writing.

4. Consider the size of your files. Online backup services usually limit file size to 3.6GB to 4GB per file. Files common and vital to business networks (Exchange database backup files, system states for servers, project files, etc.) often exceed 4GB.

5. Research how much bandwidth use your Internet provider will allow before applying extra charges. Bandwidth is the amount of data transmitted along a communications channel (i.e. the Internet) in a given period of time. Online backups, streaming media and viruses present the highest bandwidth use of the Internet, and many Internet providers charge extra for going over a certain amount.

6. Consider how well your system connects to the Internet and determine if the online service can recover if the connection is interrupted. If your system typically has a hard time connecting and staying connected to the Internet, it is uncertain if the online backup service can detect this disruption and pick up where it left off in uploading your data.

7. Think about the habits of your users. If someone forgets to log out at the end of the day (as many users habitually do), the file the user was working on will not be backed up by the online service. While this is occasionally the case with traditional style backups, these instances are more common when using online backup services.

8. Determine the amount of full backups the online service will allow. Many online backup companies offer one full backup and then backup data incrementally thereafter. Since there is some risk of the data from the full backup being corrupted, the future incremental backups will not fully capture the data that may have been corrupted in the initial full backup.

9. Determine if the online backup service provider sets time limits on storing files. Many online backup service providers limit storage to 90 days for any given file, not allowing enough time for archiving, which will have to be handled separately and manually.

10. Consider the longevity of the online backup service. There is always potential of the online backup service going out of business. If this occurs, you will have to transfer your data to another backup method.

11. Determine if the online backup service offers database backup support. Without this, Exchange, SQL databases, large Access databases, Oracle databases, Microsoft jet databases, etc. will not be backed up.

12. Find out if data is virus-checked before being uploaded. If using online backup, one should consider whether or not data is virus-checked before being transferred back to the network.

13. Determine the cost of the online service as the amount of data increases over time. If you’re only backing up a little data, the price should remain the same over time, but when dealing with large quantities of data (as businesses typically do), the price of the online service can become less cost-efficient over time.

If you’re looking for a reliable backup solution, 3D can help you determine which solution will work best to fulfill the needs of your business and assist in transferring your data to that solution. For more information on the reliable backup solutions 3D can provide your business, visit our website at www.3dcorp.us, email us at info@3dcorp.us, or call us at (360) 671-4906.

Friday, January 22, 2010

CRITICAL: Emergency Updates Released to Patch Serious Flaws in Internet Explorer

Microsoft has released a security bulletin describing eight new vulnerabilities discovered in Internet Explorer (IE) running on all current versions of Windows. An attacker entices users to a malicious web page and then uses the vulnerability in IE to execute code on the user’s computer, potentially gaining complete control over it. Additionally, it has been publicly reported that one of the vulnerabilities allowed hackers based in China to breach the networks of Google and many other technology companies including Adobe. More information on these breaches can be found on WatchGuard’s website.

It’s becoming more common for attackers to hijack legitimate web pages and infest them with malicious code. Once attackers entice users to these legitimate but booby-trapped web pages, they are able to use these flaws in IE to gain control of a victim’s machine.

Because these flaws create such a threat to a large number of Windows users, Microsoft has released emergency patches to fix them. These patches will be tested and applied automatically on the networks of 3D clients receiving patching services. All other users should immediately download and install the appropriate IE patches. These patches can be found in Microsoft Security Bulletin MS10-002 - Critical.

To find out more about the network security solutions (i.e. patching services) 3D can provide your business, visit our website at http://www.3dcorp.us/, email us at info@3dcorp.us, or call us at (360) 671-4906.

References: WatchGuard's LiveSecurity Service Update "Out-of-Cycle Cumulative IE Update Patches Google Hack Flaw,” WatchGuard Wire article “Hackers in China rumored to have hacked Google with IE zero day,” Microsoft Security Bulletin MS10-002 - Critical

Thursday, January 21, 2010

Apple Releases Security Update to Fix Critical Vulnerabilities in OS X

Apple just released a security update to fix vulnerabilities in all current versions of OS X for Macs. An attacker exploits these vulnerabilities by luring Mac users into downloading and viewing malicious media files, which allows them to execute code on the user’s computer to potentially gain control over it. OS X users should immediately download and install Apple’s security update to fix these vulnerabilities. More information and instructions for installation can be found on Apple’s website here: Security Update 2010-001.


As the OS X line of operating systems for Macs gains in popularity, more and more attackers are encouraged to actively seek out vulnerabilities and try to exploit them. To read more about security threats to Macs, please refer to our previous blog post entitled “Don’t Be Lulled Into a False Sense of Security.”


To find out more about the network security solutions 3D can provide your business, visit our website at http://www.3dcorp.us/, email us at info@3dcorp.us, or call us at (360) 671-4906.References: WatchGuard's LiveSecurity Service Update "Apple’s First 2010 OS X Security Update Not So Bad," Apple’s Security Update 2010-001

Thursday, January 14, 2010

Windows 2000 Most Vulnerable to Attacks Caused by Flaw in EOT Font Engine

Microsoft has released a security bulletin concerning a serious flaw in the Embedded OpenType (EOT) Font Engine that ships with all current versions of Windows, but primarily affects Windows 2000. Windows 2000 is the only version of Windows that implements the EOT engine in a way that exposes this flaw, so users of Windows versions other than Windows 2000 are considered to have little to no risk of an attacker exploiting this flaw on their machines. However, administrators of machines operating on all versions of Windows should still apply the appropriate patches to mitigate the risk of attack. These patches will be deployed automatically for 3D clients receiving 3D patching services. Other Windows users, especially those using Windows 2000, should quickly install the security patches released by Microsoft to fix these vulnerabilities or allow Microsoft’s Update utility to install them automatically.

In general, due to its age, Windows 2000 is becoming more and more vulnerable to attacks like these, and support (developing security patches, etc.) for Windows 2000 by Microsoft will cease on July 13, 2010. For these reasons, we strongly encourage Windows 2000 users to upgrade their operating systems to a more recent version of Windows that will continue to be supported by Microsoft and therefore be less vulnerable to attacks. 3D can assist clients still using Windows 2000 in selecting and upgrading their machines to versions of Windows that will keep their networks and business data safer from future threats.

For more information on ways 3D can help keep your network secure, visit our website at www.3dcorp.us, email us at info@3dcorp.us, or call us at (360) 671-4906.

References: WatchGuard's LiveSecurity Service Update "Critical Windows EOT Engine Vulnerabilities Primarily Affect 2K," Microsoft Security Bulletin MS10-001