January 28, 2011 Dear NFL, I work cheap... relatively speaking

I came across a link today about a local NFL player for the Minnesota Vikings, Bernard Berrian. Here's the story.


Here's the run down. Berrian left his Blackberry at an ATM in Vegas, walks away, realizes he left it, goes back and it's gone. Now, the people who apparently found it are trying to extort money out of him for it's return.


Now... did you know this is 100% preventable? Not the loss of a mobile device, but this extortion of information? You can't hold hostage what you don't have....


This little situation comes down to two things... lack of knowledge on how to properly use a device and proper knowledge on how to use a device. They look the same, but they are two different things. Let me explain like a good IT security expert should.


First one - Lack of knowledge on how to properly use a device
This is around how to use the built in function of the device you own. Celebrities are hard targets for hackers and thieves. Berrian left his cell phone and I know it wasn't properly locked down otherwise the thieves wouldn't know who's it was. There are many simple things that you can do to a device to secure it to the max and most people don't because it adds a level of extra steps and inconvenience. Here are a list of things that a Blackberry can do, out of the box, to help protect your data.

• Use a strong password
• Setting a strong password is the single easiest and most effective way to lock down your private data. Without a password, much of your data is accessible to prying eyes. With a password, you are far more secure.
• Set the number of password attempts
• If a password is typed incorrectly 10 consecutive times, all of the information on the BlackBerry smartphone is automatically deleted. This is a security feature.
• Encrypt data on your BlackBerry smartphone and media card
• Lock your phone automatically after a certain amount of time
• You should set the Security Timeout feature to automatically lock your BlackBerry smartphone after a set amount of inactivity (maximum is one hour). For lost or stolen smartphones, this is a critical security block.

Those simple things can render a device worthless if found and attempted to get hacked. Unfortunately there is not a security best practice and How To steps to do this from the stores. Most people find out about these later and after they get extorted for $30,000.


Second one - Lack of knowledge on how to properly use a device
A mobile device should be looked at and treated as an extension of a main computing source. Mobile devices are sold and positioned as the central focal point, but they are not. Take Berrian's situation for example. One small mistake and it can be lost, dropped in the street, disappear without your knowledge. It can and does happen to everybody. So, why take the risk.


Mobile devices are great and their only purposes should be for quick emails, texting, Twitters, Facebook, games, short non critical information exchanges. At no time, ever, should a mobile device store any personal critical information about you. I was more disturbed about the level of information stored by Berrian on the device than the fact he lost it and is getting extorted. Mobile devices are not PCs and are no where secure enough.


This is a live and learn scenario. The extorter is a moron and will get caught anyway. If the device was wide open then they have everything, if not it could be a good bluff, but doubtful. Either way it's preventable with a little education and guidance. Technology is a powerful, fantastic part of our lives... it's also the most damaging and destructive part if it's taken for granted and ignored. But I blame the peddlers and sellers of services... pushing all the bells and whistles without the proper education and warnings around "What Could" happen if you don't take precautions.


I have been there.
I have learned.
I apply my skills to corporate America at a level not understood by regular consumers.


I am The Binary Blogger.


Read my words, act on them if you wish, at the end of the day your data's security in ultimately in your hands.


End of Line.
Twitter - @binaryblogger