Ban ransomware payments

Should ransomware payments be banned?

The Government have been recently lobbied to ban ransomware payments. They have been asked to prohibit companies and individuals being able to pay ransom demands. Cyber criminals try to scam organisation with cyber-attacks using ransomware malware. The prohibition of ransom payments would cut the flow of income to attackers. As well as shutting down the desire to hit U.K. citizens and companies with ransomware.

Prohibition of ransom payments for ransomware could mean there is no point in cyber attackers going after U.K. Alexander Culafi a news writer from Search Security explores the ban ransomware payments story in more detail.

Ransomware payments

A security firm involved in the business of combating ransomware has called for a government ban on the
payment of ransoms by companies. There was no other practical solution other than to ban ransomware payments.

Paying ransomware demands could be illegal

Companies paying ransom when attacked by ransomware in an effort to retrieve their data has always been controversial because it encourages future attacks. Now, doing so may also be illegal.

The U.S. Department of Treasury today warned that paying ransomware demands may be illegal and that companies that do so could be prosecuted.

The warning came in advisories from the Treasury’s Office of Foreign Assets Control and its Financial Crimes Enforcement Network. Both warned that any company that paid a ransomware payment, or a third party that facilitated a payment, could be prosecuted in the case that the hackers demanding the ransom were subject to U.S. sanctions.

There is an exception: Companies that are considering making a ransomware payment can do so but only with government approval.

Specific attention was given to third-party companies that facilitate ransomware payments. “Companies that facilitate ransomware payments to cyber criminals, encourage future ransomware payment demands. They also may risk violating OFAC regulations,” the Office of Foreign Asset Control said in its advisory.

Ransomware payments are controversial

Paying ransoms in ransomware attacks has always been controversial. Firstly, a serious ransomware attack could and has seriously crippled companies and cost them. Secondlay, hundreds of millions of dollars in lost business and costs. Finally, sometimes paying the ransom to obtain access to core business files is arguably worth it.

The counter-argument is that every single time a company pays a ransomware demand, it encourages future ransomware attacks. Hacking groups know this, which is why they keep deploying attacks.

An expert’s opinion

James McQuiggan, security awareness advocate at security awareness training company KnowBe4 Inc. compares ransomware to the Italian Mafia.

“Many years ago, in Italy, there were many kidnappings by organized crime groups of the wealthy and affluent families,” McQuiggan told SiliconANGLE. “They would request large sums of money in exchange to return the victim’s loved ones. The kidnappings got so bad that the Italian government initiated a ban on paying any ransom to organized crime groups. The government would seize all financial assets to prevent the kidnapped families from getting the money to pay.”

He went on, “At first, the crime groups called the bluff of the families who couldn’t pay and killed the family member. However, after a short while, the organized crime groups realized they couldn’t pay, and quickly, the kidnapping and ransoms came to an end.”

Returning to today’s advisories, McQuiggan said that even if an organization wishes to pay the ransom, it would have to collaborate with the U.S. Treasury, FBI and other government agencies to send the funds. “The U.S. government’s recommendation of not paying comes with a similar notion of not negotiating with terrorists. Never pay the ransom when involved with kidnappings and thus, the anticipated action of reducing ransomware attacks,” he said.

Stay protected with LIS

Unfortunately, we are unable to stop cybercrime. However, we try and help prevent it. Our clients benefit from our Anti-Spam, Anti-Virus and Office 365 Security Package solutions. Can you afford to take the risk?

Practice safe IT. STAY PRODUCTED! Contact the LIS HELP DESK to discuss your options.

LIS – Securing your digital world

#Ransomware #Cybercrime #Security #ITSupport

 

 

Digital Services Tax

Retail giant Amazon will NOT be impacted by £500m digital services tax. However the smaller retailers will be, HMRC admits. However, traders who use the site will be, the HMRC has revealed.

The Guardian claims the online retailer will only have to per a 2% charge on revenues it receives from third-party sellers trading on its marketplace. In June Rishi Sunak signed a letter alongside counterparts in France, Spain and Italy declaring that tech giants needed to ‘pay their fair share of tax’.

Seven months after the tax was announced, HMRC has revealed Amazon, paid £293million in taxes. On sales of £13.73 billion will not be affected by it.

Digital Services Tax

  • Two per cent on tax on internet giants will not impact Amazon, HMRC admits 
  • Treasury said Digital Services Tax would make companies pay ‘fair contribution’
  • Business leaders say the tax is penalising smaller companies who use Amazon  

With Amazon expected to cover the cost by charging higher fees. This results in putting it at an advantage compared to the businesses that use the website.

Should the Digital Services Tax be ditched?

In August it was reported that the Treasury was considering ditching the tax. Mr Sunak concluded that the £500million a year it is expected to raise is a pinprick compared with the hundreds of billions of pounds dent to the nation’s finances caused by the coronavirus epidemic.

Business groups have criticised the levy following this latest revelation. Lord Leigh of Hurley told the House of Lords: ‘It is clear that the UK government is not taxing Amazon properly. It is allowing it to avoid tax on its own sales through the marketplace’.

‘This puts regular retailers at a significant disadvantage. The digital sales tax does not achieve its objective of yielding more revenue from the likes of Amazon. However, it is simply passed on to its suppliers in the marketplace, which have to absorb this tax in their margin.’

Announcing it earlier this year, the Treasury described the levy as ‘a new 2% tax on the revenues of search engines. Including, social media services and online marketplaces which derive value from UK users’.

Businesses should make a fair contribution

The Government department hoped the measure would ‘ensure large multinational businesses in-scope make a fair contribution to supporting vital public services,’ it wrote in March.

The British Independent Retailers Association has voiced its own opposition. They warned the tax has penalised smaller retailers while giving Amazon the edge.

An Amazon spokesman said: ‘Like many others, we have encouraged the government to pursue a global agreement on the taxation of the digital economy at OECD-level rather than unilateral taxes. Rules would then be consistent across countries and clearer and fairer for businesses.’

IT does not have to be taxing

Who is likely to be affected? Large multi-national enterprises with revenue derived from the provision of a social media service, a search engine or an online marketplace to UK users. This is you if your website turns over more than £25 million in the UK! Hats off if you fall into this category. You are one of the few as the Government had some very specific targets in mind when devising this tax, introduced by the Government as of 1st April 2020.

Unfortunately, we are unable to help Amazon with their tax problems! However, LIS clients do benefit from our years of IT experience. Contact the LIS Help Desk to see how we can help your business. With an approach based on the socially distanced human touch, our knowledgeable team will help you achieve your business goals.

LIS – SECURING YOUR DIGITAL WORLD

#Digital #Tax #ITSupport #Business

Robots conducting job interviews?

“Congratulations, you have been selected for an interview. For the professional minigamer position at Open Mind Corporation,” a robotic voice announces over a blank screen. “My name is Alex. I will be guiding you through the interview. The whole process will take no more than 10 minutes. Let’s hear your voice. … Smile for the camera. … Welcome to the interview.” Robots conducting job interviews help companies save time, money and keep social distancing

The conversational AI recruitment technology is validated and proven to objectively assess general work performance. As well as, identify competent candidates and reduce the risk of faulty recruitments. Designed and produced by Tengai AB is a HR Tech start up based in Sweden that is combining AI and an unbiased recruitment methodology in the world’s first interview robot.

Robots conducting job interviews?

Unbiased interviewer Tengai now available in English

Robots conducting job interviews: How it works

How exactly AI interviews work remains something of a mystery. The tech is driven by an interest in increasing efficiency in the interview process. The virtual interviewer/robot asks a standard set of questions (pre-designed rather than spontaneous or follow-up questions that probe into answers). It then evaluates candidates’ responses, including physical reactions and the cluster of words used. The physical reactions under scrutiny could include micro expressions. Unlike regular facial expressions which are difficult to hide or manipulate. As well as other forms of body language, vocal tone and volume and response time. Don’t panic just yet, it doesn’t appear that the algorithms judge an applicant’s appearance.

But how can the robot evaluate whether an answer shows ingenuity and creativity? As well as business acumen, a capacity for empathy or a collegial vibe? Doesn’t it take a seasoned interviewer—much less one with a pulse!—to do that?

Well, it’s conceivable that an algorithm could detect things like enthusiasm, passion, confidence and the quality of an applicant’s vocabulary, right? And isn’t it also conceivable that an algorithm could measure a candidate’s appreciation for social cues by examining responses and expressions? 

Large companies embrace the new technology

These systems are now being used by major companies, including Unilever, Vodafone, Intel, L’Oréal, Mars, and Citibank, to name but a few. Kevin Parker, CEO of Utah-based HireVue, one of the more prominent platforms in the space, tells me that one of the company’s customers, “a large grocery chain in the U.S.,” used the platform to interview about 20,000 people a day for stocker and cashier jobs. But A.I. interviews are also being used for internships and professional positions, especially in the age of social distancing.

Robots conducting job interviews: The risks

Some fear that AI run amok could engender disparate impact discrimination claims (i.e., where a facially neutral policy or practice disproportionately and adversely affects individuals with legally protected characteristics). For example, there is a fear that since AI may involve machine learning. The robot may develop assumptions over time regarding the suitability of certain groups of people for employment based on historical interview results with respect to members of those groups. 

If this technology does become the norm, some new skills will suddenly become just as important as your work experience, education and professional referrals. Whether you’re a database administrator or a regional sales rep, you might want to enrol yourself in an acting class or get a poker coach. “Impression plays a major role in personality analysis,” the researchers said. A study found that 7% of a person’s impression depends on the spoken word. 38% on vocal sounds and a whopping 55% on facial expressions.

The human touch

A recent study revealed that the number one reason customers dread calling companies for support is the growing probability that they will encounter a bot instead of a human upon connection.

LIS clients benefit from the human touch. We do not have robots that deal with our client issues. Contact the LIS Help Desk for an IT audit. You are only a phone call or email away from an IT partner that can help your business save time and money.

LIS – SECURING YOUR DIGITAL WORLD

#AI #Interviews #ITSupport #Technews

 

Google Assistant Features

Google Assistant is a capable helper but adjusting these options will protect your privacy and put you in control. We have put together a short guide of five Google Assistant features you should turn off right now.

Business Insider take a look how to turn off or limit Google Assistant Features, if you don’t want it listening to you all of the time.

Make life easier with Google Assistant Features

You can use Google Assistant Features to set timers, call friends or restaurants for takeout and so much more. It’s certainly convenient to have Google around to answer quick questions. It will even report on the day’s weather or control your smart home. Still, there are some things you might want to disable on your Google smart speaker or smart display. After all, every feature of Google Assistant won’t be a good fit for everyone.

Whether you’re worried about privacy or just want a more natural conversation experience, here are five things to toggle off to get a simpler and safer Google Assistant experience.

Google Assistant Features

One of Google Assistant’s most powerful features is its ability to act as the hub for your connected smart home of office.

Voice recording settings

Google recently announced changes to its voice recording privacy settings. Unless you opt in, Google won’t save your audio recordings or share them with its human analyzers to improve Google’s algorithms. However, if you opted in or have previously saved audio recordings, you can choose how long Google keeps them or manually delete them.

To adjust these settings, visit your Home app, tap on your profile picture in the top right, followed by Assistant Settings. There, you’ll land on the You tab. Select Your Data in the Assistant and scroll down to Audio Recordings. Tap to see options for saving, reviewing and deleting recordings.

Continued conversation

Continued Conversation helps Google listen for follow up questions without you having to say “Hey, Google” a second time. While this is handy, the extra listening can sometimes be less than seamless, especially when you don’t have a follow up question or you’re just asking a question of someone else in the room. Luckily, you can turn off this feature.

To turn off Continued Conversation in the Home app, tap on your profile picture in the top right, followed by Assistant Settings. In the next screen, navigate to the Assistant tab. There you’ll see several options including Continued Conversation. You’ll be able to toggle off Continued Conversation and see which speakers it will affect.

“Hey Google” sensitivity

If you feel like you’re always waking up your smart speakers accidentally, the “Hey Google” sensitivity may be too high. You can adjust how well your Google Assistant responds to its wake word if it isn’t hearing you well enough or if it mistakes other words for its wake word.

To adjust the sensitivity in the Home app, tap on your profile picture in the top right, followed by Assistant Settings. In the next screen, navigate to the Assistant tab and you’ll see several options including “Hey Google” sensitivity. There you’ll be able to adjust the sensitivity for each individual speaker in your home. Select the speaker you’d like to adjust and choose from five settings from “least sensitive” to “most sensitive.”

Ask Google

You can ask your Google Assistant for info and help with everyday tasks. Ask it questions and tell it to do things.
It’s always ready to help you get things done.

Camera settings

If you use a Google-enabled smart display like the Nest Hub Max, Lenovo Smart Display or JBL Link View, you may want to keep your camera disabled when you’re not making video calls. Each display does this a little differently. While JBL and Lenovo offer physical shutter options, you don’t get a built-in shutter with Google’s in-house display, the Nest Hub Max.

Instead, there’s a toggle button on the back of the display to disable the camera and microphone. An indicator light beside the camera lens shows the current status. This is a tough one, because you’ll need to remember to switch it on and off each time you use a camera feature. Still, having the option to make sure your camera is off when it needs to be is important.

Activity controls

Like voice recordings, Google saves information on the sites and apps you use with your Google account. If you’re concerned about privacy, adjusting these settings offers some peace of mind.

In the Home app, tap on your profile picture in the top right, followed by Assistant Settings. Tap the three dots on the top right of your screen and select Google activity controls. There, you’ll see a page with options for controlling which information Google gathers from your online and mobile app activity. You also can turn on auto-delete and choose how often your data is removed.

Whether you adjust one or all of these settings, personalizing your voice assistant can make the entire experience much more pleasant. If you live in a large household, features like Voice Match and Household Contacts can help everyone live in harmony with the same devices.

“Hey LIS”. How can you help me?

Technology is always changing; upgrades need to be managed and don’t forget about security issues. LIS customers benefit from our years if IT knowledge. We managed their IT systems to allow them to concentrate on their business. Consider us like you PC doctor or Virtual IT PA.

Contact the LIS Help Desk to discuss your options and found out how easy it is to keep your systems up to scratch.

LIS – SECURING YOUR DIGITAL WORLD

#GoogleAssistant #ITSupport #Upgrades #Security

Upgrade your software

How Excel may have caused loss of 16,000 Covid tests in England? Microsoft’s Excel spreadsheet software may have led to Public Health England misplacing nearly 16,000 Covid test results. Due to the fact that the software has a million-row limit.

The story published yesterday by the BBC written by Leo Kelion (Technology Desk Editor) investigates what went wrong. This highlights that if you upgrade your software and talk to your IT provider, you will avoid nasty surpises. Are you using out of date operating system and software? Upgrade your software to make sure your business operates more efficiently and stays secure.

The data error led to 15,841 positive tests being left off the official daily figures. In addition, 50,000 potentially infectious people may have been missed by contact tracers and were not told to self-isolate. PHE was responsible for collating the test results from public and private labs.

Rapid development of the testing programme has meant that much of the work is still done manually. Individual labs send PHE spreadsheets containing their results. However, the system has improved from the early days of the pandemic and it is still far from automated.

Upgrade your software

More than 50,000 potentially infectious people may have been missed by contact tracers after
15,841 positive tests were left off the daily figures. Photograph: Simon Leigh/Alamy

Excel spreadsheet error caused a huge spike in Covid cases

The weekly rate of new Covid-19 cases has soared in dozens of areas of England. Nearly 16,000 cases were left unreported because of a technical error with an Excel spreadsheet.

Manchester now has the highest rate in England, with 2,740 cases recorded in the seven days to 1st October. The equivalent of 495.6 cases per 100,000 people, up from 223.2 in the previous week.

The problem has led to a delay in efforts by NHS Test and Trace to find the contacts of those who tested positive for the virus, in some cases by around a week.

Prime Minister Boris Johnson was unable to say on Monday morning how many contacts of positive coronavirus cases had been missed.

IT experts ‘surprised’ at PHE use of Excel for Covid-19 data

IT experts have questioned why Public Health England used Excel for a scheme as large as NHS Test and Trace. Once the technical error led to nearly 16,000 cases going unreported. Computing experts and academics said it is “very surprising” that Excel was used for something of this scale and not adequately tested” they said.

“It is very surprising to hear that an enterprise scale system, presumably developed by professional technologists, is expected to run on Excel,” said Adam Leon Smith, fellow of BCS, The Chartered Institute for IT, and chair of BCS’s special interest group in software testing.

“Many large organisations refer disparagingly to Excel-based applications as ‘end-user driven architectures’. They spend lots of time trying to decommission them for reasons relating to security, control and stability”.

“This is mostly because Excel is designed for end-users not complex systems. It has well-known scalability limits. Excel can’t handle unexpected situations in a way that interacting systems will be able to recognise”.

“It sounds like these limitations have manifested in real problems in this case. This is exactly why databases are normally used in enterprise applications”.

“Even if presented with a system that did rely on Excel, one of the first things that should have been identified through a testing process was a limit to the data volume it could process.”

Covid Testing

A sign in Bolton, UK reminds people of the need for testing Credit: Adam Vaughan/Shutterstock

Excel has limitations

Dr Peter Bannister, executive chair for the Institution of Engineering and Technology Healthcare Sector, said limitations of commercial off-the-shelf products such as Excel for medical uses are well-known.

“It’s disappointing to read that a lack of awareness around the limitations of a consumer software product has led to such a negative impact for all those who are relying on the Covid testing programme,” he said.

“It’s widely known within medical device development that the use of commercial off-the-shelf products, such as Excel, requires additional testing to ensure that they are able to meet the stringent requirements of use in a healthcare setting.”

The Excel spreadsheet reached its maximum file size. New names could not be added in an automated process, he advised. The files have now been split into smaller multiple files to prevent the issue happening again.

Consider file size

Jon Crowcroft, Marconi Professor of communications systems from the University of Cambridge, said file size is a “basic consideration”.

“One would think that a software engineer would have considered a worst-case test scenario for any system design – on paper before you even get to writing code – just to make sure it wouldn’t blow up in any way like this,” he explained.

“The limitations of Excel in terms of big data, which is generally a very decent piece of software, are well-known – if you look at how many people are expressing astonishment at this online, you can see that.”

He continued: “There are many big systems in Government (e.g. DVLA’s or HMRC’s) that work at this scale so there’s no excuse.

“Also, a simple sanity check on the data or error checks in the system might have told them when they hit this limit instead of discovering it after the event.

“This sort of thing is standard in sixth form or undergraduate computer science training too.”

Upgrade your software for efficient business

Has your organization been considering an upgrade to Microsoft Office 365 from on premises Office/Exchange? Perhaps you’re holding back because the word, “upgrade” is enough to scare anyone away. Most companies upgrade software when they are forced to. But in the case of Office 365, the benefits you’ll get from upgrading are delightfully easy and without doubt worth the commitment.

Contact the LIS Help Desk about how we can upgrade your software to Office 365. Take advantage of tools like Intelligent Edge, PowerApps and Flow. These tools ensure  your data is tied to the same cloud system. This enables you to access your email addresses without additional setup and configuration, as well as other benefits.

Office 365 Security Package
Our Office 365 Security Package is a bundle of software tools. The package works continuously on Microsoft Office 365 accounts. They provide genuine protection benefits that EVERY business ought to have. We manage EVERYTHING for you. It’s all in our hands, which is exactly how it should be. However, once we upgrade your software, you will have peace of mind to allow you to focus on your business.

Download our Office 365. A Risky Business? booklet to find our more.

LIS – SECURING YOUR DIGITAL WORLD

#Excel #Covid #Office 365 #ITSupportEssex