Celebrities Reliving Old Roles
Written on Tuesday, December 01, 2009 by Joe Nobody
Joe, Moving on...



The security guards of the whole copyright protection initiative care nothing about the source of the material but making sure every dollar is squeezed out of you for it. If the guardians had their way, they would want everyone at a party to pay them to hear a song played at that party. To them the only one that can use that material is the one who bought it. They don't like used book stores, they don't like game rentals places, they do however like changing technology to that can rape your wallet again when you want it on the new medium.
I am not in that court. They claim that they are protecting the copyright... I have a question then - When I bought Thriller on vinyl for $15.99 did I not buy the copyright for the material then? Why do I have to re-buy the same material on a new medium for $19.99 on CD, then again for $11 on iTunes? Did I not already buy the copyright? Their stance is flawed.
This post is not an extension of that moral debate on what you can and cannot do with your own purchased materials... RIAA doesn't like you transferring your own CDs to your iPods... this is about how to enable you to use your purchased material in anyway you choose.
If you choose to take this and distribute illegally you are on your own. I do not condone that or any other twists that you may come up with. This is about taking what is yours and using it how you want to get the maximum pleasure out of it.
Here are the steps to take your own DVDs and convert them to a nice small, high quality format for use on your iPod or iPhone.
=============================
Software Needed
1) DVD Decrypter
2) Red Kawa's Videora iPod Converter
3) iTunes (to get the video on your device)
DVD Decrypter
You can get the last remaining scrap of this program HERE. This program was once at the center of the DVD ripping debate and the RIAA got to them and this program was scrapped, never to be updated again. But the fact is, it still works on most DVDs. I say most because there are some that this does not work.
This only works for regular DVDs not Blu-ray or HD-DVD.
I dont need to re-type the instructions, they are quite good and detailed from the converter website - Red Kawa Videora Converter Instructions with DVD Decrypter
Videora iPod Converter
This is the program, the workhorse to convert a video to iPod format. BUT, it is just not for DVD rips its for any video file. They also have a YouTube ripper to convert YouTube videos to your iPod.
The GUI is very easy to use and understand, there is a Normal mode for regular users or Advanced mode for those who are knowledgeable on video codecs to customize it to your audiophile needs.
Depending on the speed of your computer it takes anywhere from 45 min to over an hour for the full convert. Which is not too bad for a permanent solution to have your favorite movies with your in a very portable way for travel, in bed, in the office or whatever. The file sizes are anywhere from 300MB to over 1GB depending on the length of the movie and the quality settings you choose.
Then just use iTunes to add it to your library and sync or use WinAmp like I do for my iPOd for media management. I have a prior blog post about that as well.
==================================
Take what is yours that you obtained from your hard earned money and use it how you want.
Joe, Moving on...
Posted in
Technology
|
Comment Now!
I have tried, past posts will show, that I have tried to stay committed to writing in this blog about those things meaningful. My job has been keeping me busy and my 10 month old is taking up the rest. Now that things are getting more into pattern and I can find slices here and there, I am going to do it. Consistent growth is my goal. Trying to put into my perspective which usually is not to norm is my purpose.
I am Joe.
I am nobody.
Joe, Moving on...
Posted in
Blog News
|
Comment Now!

I regularly talk about the mental capacity of the general population, how limited it is. One great example is the all known Internet scam. Random emails that fly in talking about great financial fortune, missing funds, money owed to you, etc... and all you have to do to claim it is to SEND money first via Western Union. People who fall for this lose tens of thousands of dollars. It's a sad state of affairs and something that can be so easily avoided. SO EASILY.
Lets break down first how to identify a scam, really there are 2 rules to follow:
Posted in
Technology
|
Comment Now!

If you haven't heard or seen, Miss USA pageant was a few weeks ago and something was blown out of nothing. If you haven't seen it or want a refresher, here you go.

Posted in
People
|
Comment Now!
My blog has been revitalized again. So I am going to push this to my negative, deep thoughts, things I would never admit to or say in normal conversation. My job takes me all over the country, mainly by air. So as I sit and stare across the clouds, I always get a window seat, I listen to my music and think about these things. I focus my energy to think about these things to drown out all the other morons that are on the plane and I end up sitting near.
I was at lunch the other day and we got onto a conversation on groups of people we hate. We came up with an impressive list for impressive reasons, so I decided to expand on it a little bit and blog about it. Here we go.
People I Can't Stand
=============================================================



Posted in
People
|
Comment Now!

I am trying to pay attention to my blog. But so neglected. I see hits are coming in for it, but yet I do not post enough as I should.
Please, encourage me. Leave comments. What do you want to know? What are you curious about? What do you want to know what my thoughts are on a subject?
Tell me!
Joe, Moving on...
Our friends across the pond are a strange bunch. Tagged, "The Nanny State", by putting restrictions and rules into almost every aspect of an individuals life, they continue to amaze me that they can do more.
A little website called Google a few years back launched a project called Street View for their Maps application. Basically, a car with a pano camera system on its roof drives around the roads and takes pictures. The idea is when you search on the map, you can go into street view and see what it looks like at gound level. Very witty approach and it has come in handy.
Apparently some people have a problem with this, whining under the umbrella of privacy. Now, the Google car does not go into private land, just snaps the pictures as you would see it on the public road. Sometime people are out, sometimes they are not. But overall its a one time picture that may or may not be several years old before they take a new one. A snap shot in time as things look.
The United Kingdom really doesn't like this and has gone as far to force Google to black out the street view pictures. Which just reeks (sp?) to high heaven of irony and takes hypocrisy to a new level. The UK is complaining about privacy violations. HA! This is coming from a country that has over 4.5 million CCTV surveillance cameras, almost on every street corner. They are called the "surveillance society".
Check this excerpt out.
It predicts that by 2016 shoppers could be scanned as they enter stores, schools could bring in cards allowing parents to monitor what their children eat, and jobs may be refused to applicants who are seen as a health risk.
You see that and try to swallow their complain about Google Street View being a privacy problem. Holy crap I can't take it. I am fearful of the future world. Your free will is gone. Governments will control us all. Like a frog in a pot, bring it to a slow boil and the frog won't jump out.. just sit there and die.
I may not fully agree with Google's expansion into, well, everything. Information is power. But my point is, lets have some common grounds here on when and where to complain about something. You can't have your cake and eat it to.
I see this as the UK crying that another kid is playing in the sandbox that they want to dominate. Maybe it's not so much a fear of the UK protecting the privacy of the citizens, rather protecting the privacy of activities that the citizens aren't meant to see or know about that the camera's might catch.
Joe, Moving on...
Posted in
News,
Technology
|
Comment Now!
The last few days seem to have been consumed around AIG and their employee bonuses. Lets dive in and let me explain why you can't whine and bitch about it.
First, Congress did this. Congress took out the provisions in the stimulus to pave the way for this to happen. The Treasury Department knew about the bonuses for months, this was not a surprise to them. They can't now start banging the drum to drown out their F'up.
Second, AIG were under contractual obligation to pay these out. That's what a contract is for. Take out the human emotional element and these bonuses are nothing more than another operational expense for the ailing company. Many of these executives didn't take salaries and they depended on that bonus for the services provided. Now, if the contracts were poorly written for AIG that there were no benchmarks or conditions in place based on company performance, currently employed with the company at the time of the payout, or any other thing htat would limit the payout vs. performance... Hey, good for the employees for getting in the deal like that. AIG screwed that one up. At the end of the day, a contract is a contract.
Third, Congress' speed on attempting to tax these bonuses 90% is 100% unconstitutional. This will be challenged and dragged out for years from this screwup by Congress.
Take away the human element and this is just another contractual obligation. Period.
You screwed up... you should not have given them the money in the first place, let them fail and another will take its place... that's how capitalism works.
Joe, Moving on...
Posted in
News
|
Comment Now!
As I sit here filling out my NCAA March Madness brackets, I have come to realize the impact sports has in this country. I am not talking just Basketball, but all around. Sports has been a fabric of the American persona since the start of it all. But in the last 20 years, it has become so much more than stats in the Monday morning sports page in the newspaper. Technology has allowed sports to be inserted into almost everyone's lives, whether they are a true sports fan or not.
Now, in the world of the micro blog, more and more people can get information and gain interest in the games. I would say, most of the people who are participating in the NCAA bracket challenges around the country have not watched one full, regular season game of any team. But now with the brackets going on, they will pay attention to all the scores.
When the Super Bowl comes around, same thing, the NFL doesn't have 75 million regular season viewers each week. But they do during the Super Bowl. Why? Because it has become a part of the American culture.
Super Bowl Sunday, March Madness, The Fall Classic or The Series, Daytona... all these are major points in our culture. Why? Why so much focus on a game?
I think it's because it takes our minds and energy off everyday life. It's dramatic, emotional, exciting, thrilling, satisfying, disappointing... It's all what life is wrapped up into a few hours where a winner emerges. That's it. The inclusion of the Fantasy games wrapped into the actual games gives us more of a sense of involvement, rather than just sitting there watching. You own a piece of the game. You feel the pain when the free throw is missed, the kick missed the uprights, the HR was robbed at the wall. It allows us to fantasize the experience.
This is not for everyone, there are those out there who despise competition, but I am speaking for the whole of the American society. Sports are a way of life, intertwined into our vocabulary with sports metaphors, social gatherings for the big games, investment into your local communities and states, taking attention away from life and bringing entertainment if just for a little while.
No matter your sports tastes, no matter if you play fantasy games or not, whether or not you watch all the games you can or scan the scores the next day. If anything, sports does something that we need more of in this country... that's bringing people together.
Joe, Moving on...
Posted in
Entertainment,
Sports
|
Comment Now!
Being an IAM career expert, I have a different view on things as I work in the trenches. Yesterday Gartner released their IAM predictions for the next few years. Being on the leading edge in a company that is driving IAM advancements, they are not too far off in their predictions. But you can also apply these service based predictions to almost any slice of IT, thats the direction it's going.
You can read the predictions here.
Their predictions are fine and good on a technology and implementation level but they are not addressing one very large aspect. Adoption rates.
IAM (Identity and Access Management) is a practice. It's a security methodology and business changing way of maintaining system and data integrity. Answering the questions that need to be answered in IT.
Who has access to what?
What can they do with that access?
Who approved the access?
What did they do?
When did they do it?
Most companies, large companies, with very critical and personal data cannot answer those questions in a timely manner and accurately. They don't know. It's frightening how much critical personal data sits at companies that is largely unsecured and not being able to accurately report on who is accessing that data.
There are regulations out there that are in place to mitigate that, but I have not seen one company large or small that is close to meeting it. Some of the regulations have been out for years. Some companies refuse to try to be compliant to the regulations because the cost of meeting them exceed any financial fines the penalty is for failing the audit. THAT'S EVEN SCARIER!
What about the cost of a breach and losing all that data to the open Internet?
IAM is looked at by these CTOs, CIOs, IT Directors as another product set. Another purchase. Another thing that has to be installed and maintained. They don't have the Industry knowledge or training to understand completely how important is it to be able to answer those questions. To grasp that Security is a way of life and not just perimeter protection.
Today, their systems and processes are fine. No issues that they are aware of. Do they know if an employee is warehousing data and using it for profit outside of the network? Can they be sabotaged at any moment by a soon to be laid off employee? Do they have severe segregation of duties violations like Accounts Payable also has Accounts Receivable capabilities? Do they know who all of the accounts on their systems belong to and how they are being used and when?
Their vision stops at money. Money most don't have, but most do have for the right reasons. But once again, companies are not attributing an upfront financial cost to mitigate a RISK and comparing it to the cost of that RISK being exploited.
That's where the problem lies with adoption. Security as a whole is a very intangible, invisible component of IT. It makes lives much easier, more efficient, saves hundreds of man hours in procedures, and takes RISK down to an acceptable level. But you don't know it's there. The bean counters like to see what they are paying for. Hard to do with Security. Harder to explain it to the non-technical on how important it is to have a fully functioning automated provisioning system in place.
I just comes down to a roll of the dice. Do you think you will have a business crippling data breach or not? A business damaging event doesn't mean an outage, just ask TJ Hacked, I mean TJ Maxx.
It's a very frustrating effort to get the knowledge and understanding out there. If these CIOs have that gap in true end to end vision of understanding, the CEOs and boards who approve the money know even less.
Looping back to Gartner's predictions, I hope that when the industry gets more mainstream to the service based model adoption rates will increase. Paying a service instead of setting up your own infrastructure and maintaining your own service should increase businesses implementations.
However it's a double edged sword as the recent news has shown us, Gmail Outage, Hotmail Outage, Salesforce outage, Google Docs Breach... Cloud Computing is still in it's infancy and has a way to go to be trusted across the Big Bad Internet.
Joe, Moving on...
Posted in
Technology
|
Comment Now!
Fox's new DVD policy: No special features for renters
Fox movie studios have come out again with another move that will surely have no effect on anything. They are now going to sell movies to renting companies that do not have the extra features, deleted scenes and what-not. Does anyone really care? Think about it. If you are renting a movie, you are renting it for the movie. If you love the movie so much you buy it. The extras on a rental are the curious features you flip through at the tail end if you have time and pay no real attention to it.
I do Netflix and most movies now are dual disc features with the movie on the first and extras on the second. Netflix only shops the one disc anyway. So who cares? Is this supposed to be some sort of punishment? I am guessing that Fox will not be dropping the price, even though they are dropping the standard DVD features from their sets to a slice of purchasers, in this case the rental companies.
The only thing that will come out of this is that there will be new companies that will wholesale the full featured DVDs to the rental companies instead of the rental stores going to Fox directly.
I think Fox needs to focus on putting out quality movies first then worry about unnecessarily restricting their products. But hey, in most cases it's actually more of a gift than a punishment on seeing what other crap was not included in the final release of some of these 'movies' that come out.
Joe, moving on...
Posted in
Entertainment
|
Comment Now!

I do not consider myself a blogger, but I have a blog and spew thoughts on here occasionally. I don't do this for money, but I have adsense on here anyway. Why? Because its not visually interfering and why not? Shallow dreams of making it big, earning more money than I can shake a stick at and retire? Ha!
Blogs today are not quite mainstream but close. They are not news sources, nor ever should be. I am a full supporter of naming your sources, backing up the data with facts, blogs don't do that. Anyone can make the news and the scary thing is people trust it.
Basically you have a few classes of blogs.
- Celebrity
- Personal Journal (most are these)
- Opinion (post a news story and comment on it)
- Ad bomb blogs
The landscape is going to change a great deal here in the next few years and Blogs as a whole will be tossed aside much like print newspapers have.
Here's why - Today blogs are a means to get thoughts on information out. Tomorrow's blogs will be used more and more to generate revenue and lose their focus, it's already starting. There is a blog owner I know semi-personally. He has 3 blogs actually. One very personal, one semi-personal with technical posts, and a pure poetry one where he writes and posts his form of poetry. I have been visiting his blogs for sometime, most posts are about his reviews on TV shows, movies, etc... nothing hard hitting and nothing that benefits anyone, what I mean is nothing news worthy, just entertainment. But one pattern I have been seeing with his blogs and now its come to the point where I find my self going there less and less is his purpose for his blogs. More ads.
The drive, not just with his, but with several others I am a regular viewer of, are the ads. Ads make money with visits and clicks. The over the top self promotion and flash ads are surrounding the content and beginning to drown it out. Some blogs are so bad that every single post has 15 lines of Digg, Tumblr, Twitter, LinkedIn, Vote for me at this Blog site for the best, Vote for me here, Here's my Blog award that means nothing, etc.... on every post. Each one has a little revenue tied to it because they are linked back to the sources. The more visitors, the more dough. However, it's starting to get in my way of the CONTENT. I stopped getting newspapers because I got sick and tired of filtering through the ads to get to the news. Blogs are taking this path as well, since most are for entertainment, I am quicker to abandon them and move on to something else.
If I have to play hunt for the story on the blogs, I stop going.
*** Secret Tip - One workaround if you are hooked on a blog but hate the ads, subscribe to the blogs RSS feed. No ads, or very minimal that won't get in the way of the same content. Then you gets all your posts in one place, scroll through them all, go about your day. If you don't use Google Reader, look into it. ***
Back on topic, this is where blogs will go. It will become very obvious too who's who and their true purpose of the blog. My blog, I have a few links sure over on the right side in it's own little section. I am not in it for the money. I would be more interested on my thoughts and application of my 15 years of IT and sales experience to get me involved with a commercial mainstream blog. Not taking this one mainstream.
With the blogs and the authors cramming their sites with more and more annoying ads, sites like Twitter and Tumblr will continue to dominate. Instant news like that, no blog or newspaper will be able to keep up. They will keep being as they are today, review sites of the day's activity. There is no compelling reason to go to a blog or news sites anymore, just watch the Twitter cloud and you get more news as fast as it happens.
On other aspect that most don't think about, but I do, is that people will get sick and tired of the blogs spins and tabloid nature that they will morph into. Again, adding fuel to miro-blog sites like Twitter and Tumblr. Why? Because those site's design does not allow for a spin with 160 character limits. Headline posts only with no chance for commentary. The political and economic climate today, people are just going to keep being mad and angry and will goto places that don't have that crap on it. They will want the headline, maybe a link to get more detail, but in the world coming a person can suck down 100 news stories a day with doing nothing more than reading headlines.
Greed and speed will be the downfall of blogs much like newspapers have suffered.
I don't agree with it, I think it's potentially bad for the next generation. Lack of hard core challenging reading is going to dumbify. But that's another topic for another time.
Joe, Moving on...
P.S. - If you like this post, click the vote logo on the right side... J/K
UPDATE - I am so smart I scare myself sometimes, this just came off the wire.
Google branches into expandable ads
Posted in
Technology
|
Comment Now!
Being a computer nerd I am also a gadget freak. So, naturally I have had a slew of various cell phones over the last 10 years and everyone of them I have modified to add more functionality than originally designed for. I am a supporter of using what you purchase to its fullest capabilities, if it means bending and twisting it to do so, then do it. This behavior should be accepted, supported and encouraged. I think the Google Android is going this route, but Apple I$ not.
Here are my thoughts on it. Lets compare their argument of modifying the original iPhone state with other products that would be illegal under Apple's (App Store) eyes.
CARS
No new tires other than your car's. Can't replace the stock stereo, can't tweak the engine, can't tint the windows.
YOUR HOUSE
You can't do anything to make it better beyond the original construction.
ANY COMPUTER YOU BUY
No extra memory, no sound cards, video cards beyond what the manufacturer built it with.
And so on...
Jailbreaking your iPhone is not illegal nor should it be. It's taking your hard earned money and taking the expensive phone and making it work to its fullest potential. Apple I$ mad because it's taking the Nazi grip of Application Store apps out of their hands. I say, if you didn't or couldn't see ahead, then build the iPhone software so it can't be done. That simple.
I took my iPhone and performed a jailbreak on it. Sure, I voided my warranty, but if I run into a problem, I will restore from iTunes and restore it to default before Apple sees it. None the wiser, again, you don't like it, build better software. Apple is going to alienate their own customer base by this war drumming and its already starting to tick me off. I am not unlocking the phone to use it on other carriers, I have a full blown service with AT&T, I freed my iPhone from the grips of restrictions.
Why did I do it? I want to have a video recorded on my iPhone, the hardware is capable of it, Apple doesn't allow it, but I want it and now I have it. I wanted the ability to change my SMS text alert sounds, the stock sounds get old real quick, now I can change them.
A smart business would take a look at what the open source community is doing with your phone and make changes to adopt and embrace it rather than blast it. The era of the Mac dominant mentality is going to backfire on them. I always said that Apple should have released the iPhone to every carrier, but AT&T coughed up enough dough to not allow that to happen.
If you want other views on the why, just hit the Google and look.
Why to jailbreak?
Enough ranting, here's how you do it.
=============================
I followed these instructions and it worked perfectly.
Jailbreak instructions
There are a few Windows Apps that will make you life MUCH easier as well.
WavPad - very slick audio editor. I generally use Audacity, but WavPad has far more codecs to save with. You use this to create your text alert sounds or ringtones.
Video Pad - This is the video version of the Pad software. Use this to create your vWallpapers and Video ringtones, that's right, video ringtones.
Prism - Video Pad partner product to convert your videos or other outside videos to iPhone format which is mp4 or mov.
After you do that, the sky is the limit on what you can do. I highly recommend getting these apps first
- WinterBoard, a very slick theme skinner (replacement for Summerboard) for the iPhone. (manual location - /Library/Themes)
- OpenSSH, you need this to move files on and off the phone.
- Cycoder, video recorder...nuff said
These two will tweak the iPhone layout to get 5 rows with 5 icons on the screens, so you can get 30 icons on the home page if you want. 5x5 + 5 icons in the dock. :)
- FiveRow icons
- FiveColumn icons
vWallpaper
A must have application. Have animated wallpapers!!!
*** One note that I found out, the instructions out on the web are not correct. They are for older firmware. If you manually create your own videos here is the location on the iPhone on where they need to go.
- /private/var/mobile/Media/Skrew
Once you get into it, there are hundreds of app out there. You can run the original DOOM 1 and 2 on the iPhone, Quake, NES emulator bringing the full power of the graphics out. There is a flashlight application that maxes out the bightness, did you know the famous Flashlight App. on the Apple App Store is restricted on how bright it could be???
Q: Why?
A: Because their store their rules.
If you have questions, let me know and I will post what I have found out. Overall, I do not regret doing it, in fact I wonder what took me so long.
Joe, moving on...
Posted in
Technology
|
Comment Now!

I can't be completely serious with this blog. As a nobody in the world I need to point out the imperfect nature of those who walk this planet. As far as I am concerned, if they post things like this on the internet... they deserve it and must be called out and talked about.
Introducing this piece of work. Nothing is know about this individual, or at least nothing obvious, because I am not going to look and farther than this video. Let me set it up for you, it's a strange looking boy/girl who needs a haircut lip singing to Cascada Remix of a Rascal Flatts song.
When you watch it... PLEASE... wait for the Wii Wheel... wait for it.
Posted in
Videos
|
Comment Now!

I would like to classify myself as an intelligent person. My wife may argue this... There is a trend I am seeing that I am just not understanding under the umbrella of common business sense. I am going to use one example because it's the most extreme I have seen personally, but nonetheless, prevalent almost everywhere I go.
As an IAM expert I travel all over the country meeting with IT teams from small shops for Fortune 500 companies. One blew my mind a few weeks ago and I have still not comes to terms on where they are coming from. So much so, I thinks its worthy to call the CFO tell him he's an idiot and then call the CEO and tell him to fire the CFO for being an idiot and wasting millions.
Here's the situation. Compliance management has been the hot top and will be for the next several years. So, I was in with the CISO and his best and brightest on the team. We were talking about data protection and server protection, they have none. They do it all manually and know they have way too many 'root' users and 'Administrator' accounts. They are aware of it. Among several other messy identity issues. Here's where their pain is.
They do business with other very large corporations, names are unimportant in this example. This company not only has to deal with SAS70, PCI, SOX audits, they are also audited by their own customers. Their business model has the customers able to fine them if they dont meet the security audits as 'insurance' money. Since their data is less secure, they have to pay more to do business with them.
Last year alone they spent over $10 million in fines and insurance for not able to meet these audits. Some of their partners are tossing the idea around of the restricting any business until it's met.
So here I come. I layout Role and Compliance management as well as heavy focus on server protection. The IT and CISO loved it, it will solve all their problems. I can get them light years ahead on where they are now in 6 months time.
Remember $10 million...
Few follow up meetings later we get this message that they are in a 'freeze' and cannot spend any money because there is none. But continue with POCs and such because when it frees up, we're in like Flynn.
NOW - $10 million in fines.
Expenditure of let's say $1.5 million, which is a one time cost, which would allow you to meet their audits in 6-12 months, Saving them $8.5 million in unnecessary fines.
They say they have no money. "It comes from a different bucket" I hear that too. Yet they continue to have millions for these fines, are they now part of the budget???
Am I off here on why I think this is absolutely ridiculous and dangerous??? Is there a magical aspect of Accounting I am not seeing?
They have a serious problem both in IT and Finance. Yet they won't spend a fraction of the problem's cost to fix it.
Please explain this to me.
Joe, Moving on...
Posted in
Technology
|
Comment Now!
This is a continuance of the first post around Roles. So now you have roles and you are provisioning all nice and efficiently. So what? All this is nice for the greased machine but for the auditors are concerned all that technology didn't make their lives any easier. They are concerned about compliance.
What is compliance?
Compliance refers to systems or departments at corporations and public agencies to ensure that personnel are aware of and take steps to comply with relevant laws and regulations.
You can have the latest and greatest applications and systems in place, but if the business doesn't know whats going on, worthless when that $1 million fine comes down because you can't report on who approved the access for a system.
A strong and robust compliance management system is the only thing that can accomplish this. REPORTS ARE NOT COMPLIANCE!!! Once again - REPORTS ARE NOT COMPLIANCE!!! They are a component of compliance. Again, you run a report, great, good for you, so what? Who cares about the data? Who owns that information? Who is responsible for it's accuracy? How do you track from now to next year?
Compliance, from the definition I posted above, is not only showing awareness but also showing you are taking steps. Acting on it. Certifying the accuracy. Remediating problems.
Why not have a system in place that can take your roles, resources, users and generate a certification campaigns. An activity that happens each quarter for example, that requires each user's manager or owner of a resource to attest to all the access is correct. Certify it. Read the reports, put your signature on it on whats correct and what needs to be corrected. Now, when the auditors come knocking, they don't need to knock on IT's door. Why not have them login to a web portal and access the quarterly attestation report? Or one better, preempt the audit and send the reports automatically to the auditors when the certification is complete.
Again, simple solutions, business changes, job adjustments can save a company weeks to months of digging, wasting time and resources digging for compliance proof points... when they can be central, stored, trended, checked, verified, enforced and take it down to a day or two of auditor visits instead of the dreaded long term presence. Why not?
It's all about accountability.
Who administers the administrators? Most will have to answer that question and if the answer is incorrect, the penalty will exceed the cost of implementing a Role and Compliance system.
Joe, Moving on...
Posted in
Technology
|
Comment Now!

Time for a pure technology related post. Nerds Unite!
Before I get going on the core of this posting I would like to layout my background and define what makes me qualified to write such a post. Blog Credibility, WOW, what a concept.
I am a Role and Compliance Management expert in IAM for the company I work for, a leading software company in the IAM space. I am trying to keep that secret because it has no bearing on the conceptual insight or industry movement, in turn I will try to keep these types of posts product neutral and if any are mentioned at all.
====================================
This post is under the assumption that there is an automated provisioning system in place, for those who do not, that's another problem for another post. :)
Today's IT world is changing daily and I predict it will change dramatically over the next few years. Not so much on technology, like Cloud Computing, those types of ideas reaching mainstream industry at a production level are years off. What I am referring to is the changes around process, procedure, and accountability of the business. The time nearing that IT is completely done as only an asset or business expense. IT, for everyone, is going to become the primary liability protection for any business. Why? Because the government and leading industry groups are going to begin to implement tighter compliance regulations and make the penalties far more reaching and painful.
Just because a company has a database to store some information to make pretty reports for the CEO is not enough. Companies need to be held accountable for everything around that database, the system it runs on, the network it's connected to, and the people who are and who can access it.
I am going to talk about the benefits of meeting those requirements and beginning to re-deign a business' way of thinking. Just because you don't have to meet any compliance requirements does not mean you can ignore making your systems as efficient and secure as possible. If humans were naturally trustworthy beings, we would not need all this, but they aren't and so we do.
If you take the gov't and industry regulations, PCI, HIPPA, GLBA, SOX, etc... they basically want to know a few basic questions with varying degree of detail.
Who has access to what?
Who does this account belong to?
Who approved the access?
What can they do with that access?
Don't flood me with comments or emails, in the simplistic form thats what compliance is. Does the company have visibility and knowledge on what the heck is going on with their systems and data, if so, prove it now. 95% of the time companies that I have been in cannot answer those questions inside of 15 min. That's a problem, a scary one.
This is where Identity and Access Management solutions come into the mix, this post is focusing on Role and Compliance Management side of the whole IAM spectrum.
Roles in the simplest terms are logical containers for identities. Roles are easy to understand and roles are easy to manage. Would you like to try to maintain Access Control Lists on 100,000 resources for 40,000 users or do the same thing with 1,500 Roles?
If you have hundreds of file shares with 10,000 people accessing them. Today it is done manually and the risk doesn't come from adding someone, but removing the access. It's easy to add, cleanup is sloppy and missed without automation and policies in place to make sure the access is removed. Why this is a risk is orphan account and access creeps. Orphan accounts are from people who have left the company and their accounts and permissions still exist on the systems, each one is a vulnerable door into your world. Access creeps are from when people move within the company and keep accumulating access while never getting what they don't need taken away. Eventually you could have a severe conflict, Accounts Payable permissions and Accounts Receivable permissions granted to the same person. That's a huge risk.
So create roles to manage the permissions. A role can be created to cover 15 file share resources and an application access, then assign 4,000 users who need access to all those resources to the role. Now you have a single point to control for both sides of the equation, users and resources. If you need to add a new file share for everyone, add it to the role. The automated provisioning system will grant the access to the 4,000. You need to remove a user from those resources, take the account out of the single role.
In addition, create business policies around your Role model so you are alerted to and can prevent someone from having conflicting Roles. Acct. Payable cannot have the Acct. Rec. role as well. This process needs to have the business' logic and policies integrated into it, so automatic regulation of itself can occur. Relying on teams of human's to do it is a flawed approach and open for mistakes, misses, and devious behavior.
Someone comes and asks who has access to these file shares??? Goto the role and look at the members, done. Simple, efficient, powerful, easy to understand.
There are several role mining tools that can look at your environment and define the roles based on your current permission definitions today, identify the gaps, show you the risks, reveal truly what's going on with your entire environment. Some tools are better than others. The first step of any IT project is clean up. If a company were to eliminate the orphan accounts, that is a huge risk reduction for starters, getting your own systems back in control.
But this is just a part of the process and a very high level overview on what will become the hottest IT topic over the next 18 months. All this is meaningless and gets you no where closer to where you need to be if you cannot prove you are compliant.
PART 2 - Compliance
Joe, Moving on...
Posted in
Technology
|
Comment Now!
There are certain songs that just have that melody that you hum and hum and can't shake it. Since the Grammy's I have had come a across such a tune. I don't know what it is about it, the chorus is driving me nuts, can't shake it. The true insanity is that I can't stand "Hip Hop" ghetto rap. 99% is crap, then albeit far and very few between, one tune like this comes along and messes up my music world. This one has grabbed me and made me say that this is a good song, mainly because it was driven by Justin Timberlake, who actually has extreme musical talent and doesn't hide behind voice manipulators and can play an instrument or two.
Posted in
Music,
Videos
|
Comment Now!
For a while on my couple computers I decided to move forward with MS Vista on, I have been developing a Flash player related problem. On most sites now the sounds get real choppy, especially on streams like on Hulu. So here is how to fix it.
The problem is coming from Vista and Flash together. First you need to uninstall and reinstall the Flash player.
Uninstall Flash
THEN
Install Flash - this requires you to shut down your browser.
After you do that you may still have sound issues. So tune Vista.
Click on the Windows Circle -> Control Panel -> Sound
You will see your speakers first usually, right click and select Properties.
You will then see an Enhancements Tab, click that and check the box that says Disable Enhancements or Disable All Sound Effect (I have seen it different ways on different Vista installs).
That's it. This will clear up your choppy sound on video sites. I have confirmed it on two machines.
Joe, Moving on...
Posted in
Technology
|
Comment Now!
After a few years of attempting to make this work, I am now committed to.
Joe, Moving on...
Posted in
Blog News
|
Comment Now!

So, Chris Brown, a "Hip Hop" "ARTIST", got him self into a little domestic trouble.
Now, I am not going to go into my feelings about "Hip Hop" or the culture they are trying to wrap around it.... as far as Chris Brown goes...
Untrained and unprepared KIDS will be KIDS...
You know King Tut was 9 when he took the throne and rules for 10 years, which would make him 19..... huh. How times have changed.
Joe, Moving on...
Posted in
Entertainment
|
Comment Now!
Copyright © 2009 Mr. Joe Nobody