Second IRS Tax Security Tip

The Internal Revenue Service (IRS) has released the second in a series of tips intended to increase public awareness of how to protect personal and financial data online and at home. A new tip will be available each Monday through the start of the tax season in January, and will continue through the April tax deadline. US-CERT and the IRS recommend taxpayers prepare for heightened risk this tax season and remain vigilant year-round.


The second tip focuses on awareness of phishing attempts and prevention of malware infection when conducting business online. US-CERT encourages users and administrators to review IRS Security Awareness Tax Tip Number 2 for additional information.




https://www.us-cert.gov/ncas/current-activity/2015/12/03/IRS-Releases-Second-Tax-Security-Tip

IRS Releases First in a Series of Tax Security Tips

The Internal Revenue Service (IRS) has released the first in a series of tips intended to increase public awareness of how to protect personal and financial data online and at home. A new tip will be available each Monday through the start of the tax season in January, and will continue through the April tax deadline.


The first tip focuses on seven simple steps to secure your computer when conducting business online. US-CERT encourages users and administrators to review IRS Security Awareness Tax Tip Number 1 for additional information.

Handmade Music Lovers Pens

Stunning Detail

These Music Lovers Pens are remarkable. The head is a drum, the clip is the neck of a guitar, keyboard keys for the center ring and a musical score for the tip.

I can custom make these in just about any color, a wide assortment of woods with Chrome or 24ct Gold.

Take a look!!! Old Mill Pens Music Collection

Old Mill Pens Music Collection

Shop Handmade Pens

Old Mill Pens

Executive Pen for Sale

Big Changes in Overtime Pay, Big Challenges for Companies | Corporate Counsel

This is a game-changer……

In a long-awaited announcement this week, the U.S. Department of Labor released new regulations requiring companies to give overtime pay to a whole new group of formerly exempt workers. Under these revisions to the Fair Labor Standards Act, it’s estimated that the rules will lead to time-and-a-half pay for all hours logged over the 40-hour workweek for nearly 5 million additional members of the U.S. workforce.

Big Changes in Overtime Pay, Big Challenges for Companies | Corporate Counsel

Lax Network Administration: OPM hackers tapped the mother lode of espionage data | Ars Technica

Yet another lackadaisical network administrator has given ColdFusion a black-eye.
 

According to many published articles (link below) the Federal Office of Personnel Management (OPM) was a ColdFusion based application managing the data that was stolen by hackers. They were able to obtain the records of 14 million people who work for, applied for or provided services to the US Federal Government.
 

That is 5% of the adult population of the US. One out of twenty people (to keep this massive breach in perspective).
 

The cracked system was operating an older version of ColdFusion, one which used the Adobe JRun engine.
 

Adobe stopped using JRun over eight years ago moving to Apache Tomcat.
 

Eight years…. Amy Winehouse won a Grammy, Barack Obama was running for president, before Bernie Madoff was busted.
 

Yet the headline you will all see in computer security stories is how it is the fault of Adobe’s ColdFusion.
 

The story should not focus on the mark-up language of the application, but the underlining platform.

The server itself was not kept up-to-date.
 

If it had, the information of those fourteen-million of our neighbors and fellow Americans would not have fallen into the hands of the CHINEESE GOVERNMENT.
 

This information should have those who have purview over server farms and have been given the responsibility to keep them up-to-date a wake-up call.
 

Software companies and those who are creating the applications can only do so much to provide secure code. The servers and the supporting infrastructure is just as important as data encryption and session management.
 

“EPIC” fail—how OPM hackers tapped the mother lode of espionage data | Ars Technica