The other week I got a ‘tweet’ from a new colleague. The update seemed harmless enough. It enthusiastically pointed me a web site they thought was humorous. Suspecting nothing, I clicked on it. I thought it a bit odd when my browser opened to my Twitter account requesting that I log in, odd since I didn’t remember logging out. Then nothing appeared to happened.
Moments later, an update appeared from my account which was identical to the one my colleague sent. My stomach sank. I was Twitter scammed. (Yes, it does happens to IT folks from time-to-time!) I immediately logged in on a different machine and changed my password.
A number of updates were soon posted that it was a wide spread attack. Within a few hours Twitter had cleaned up all these infected message and reset those peoples’ passwords. The hacked accounts were used to tweet spam pushing diet supplements.
After getting over my embarrassment for falling for it (but hey, even a CNN anchor got his account hacked), I performed some forensics work on my colleague’s update. I used this experience to come up with a few tips on how to avoid getting caught up in a Twitter phishing scam:
- While shortened URLs help keep updates under the 140 character limit, they also make it easy for someone to embed a fraudulent address into an update since there are no clues on the authenticity. I like to use TweetDeck since it expands the shortened URLs in updates so they can be examined. To check where they lead, visit longurl.com or install the LongURLPlease plug-ins that lets you hover over a shortened link and see the full URL before you click.
- If you have gotten caught up in a phishing scam you should change your password immediately. If that password is used for other sites you may wish to change those as well.
- Delete the infected messages from your Twitter feed and from wherever else they were syndicated.
-Eric Schnell
June 11th, 2009
I mentioned the concept of cloud computing in an earlier TechTip on Netbook computers. 
Many library staff members are already experienced users of cloud computing - without even knowing it. Some are using the cloud in the form of GoogleDocs. Staff users of Facebook take advantage of cloud, as do those that use photo sharing services such as Flickr.
In very basic terms, cloud computing is when data and software applications reside on and are drawn from the network rather than locally on any one workstation or a particular device. The ‘cloud’ is simply a metaphor for the Internet since that is how it is depicted in most computer network diagrams. The important point to know about cloud computing is that represents a paradigm shift in how we think about our data and the role of our computing devices.
Most people rely entirely upon their devices (desktop or mobile) to store information and run applications. How many have panicked over misplacing a presentation disc, accidentally deleting a presentation file, copying the wrong file version onto a USB key, or simply grabbing the wrong USB key? A misplaced mobile device or a PC crash is devastating since all data and applications are lost if not aggressively backed up (and we all back up, don’t we!?).
With cloud computing, the focus shifts away from which devices can effectively store data and able to run applications to which devices provide the easiest access to data and applications - which are stored at various places on the Internet. The iPhone has become very popular since it is in essence a cloud computing oriented device.
How libraries can use the cloud is a current topic of discussion within many library organizations and associations. At this point in the emergence of cloud computing in libraries there are many questions being asked. How can libraries use the cloud to both personalize and localize the user’s information seeking experience? Can the cloud save libraries money and resources by using computing devices more efficiently? How our users interact with the cloud, how our services may need to be modified to fit into emerging user patterns?
One thing that is certain, the way in which we think about library computing infrastructures and architectures need to change in order to effectively incorporate cloud computing.
Yes, I know. What happens if an Internet connection goes down or the servers crash? How do we get our spreadsheets on the cloud when offline? After all, the most important files are the ones we need access to at ALL times! The reality is that these issues can be placed in the CON side of every service or solution libraries are talking about implementing today. Without the network most libraries services are shut down.
The cloud is already out there and libraries need to start thinking about how they may need to adjust services in order to effectively adapt to how users are interacting with it.
-Eric Schnell
February 17th, 2009
Welcome to the TechTips blog. The goal of this site is to inform and educate the students, staff, and faculty of the Ohio State University Libraries System about the various emerging technologies that may impact the services that libraries provide.
-Eric Schnell
December 1st, 2008
