Content marketing, user data and the dangers of free WordPress themes

Bit of a link post from me today as I’ve been working on a number of things for clients, and also updating some other projects. So rather than adding to the list that I intend to blog about someday, here’s some important things to consider:

Arm yourself with content, for Goliath is coming: Interesting post which reiterates a lot of the things I’ve been saying about content and marketing over the last 6 months – now is the time to start doing it. More and more companies are realising how useful content and social media marketing can be, and how much ROI it can produce, so you’re going to see more and more content fighting for attention. And given that it takes time to build an attentive audience, you don’t want to wait around any longer!

Myspace on the auction blog. What happens to user data?: Given that I’ve just been writing about social media content and user data from the perspective of future historians having access, it’s also important to consider what happens to that data if a site sells to another owner, rather than shutting down. How do you feel about your content, information and contacts being transferred? Another reason to adopt a hub and spoke model, with ownership of your own content/business/contact hub. And it’s so easy to do with the availability of self-publishing tools…

The hidden dangers of free WordPress themes: But although setting up WordPress, for example, is pretty easy, there are still dangers that you need to be aware of. For instance, only using themes from trusted sources, and checking them before you install them. Do you know what links are contained in the theme you downloaded from a random website? The original post shows the examples of how you can actually decode what could be hidden in a theme. There are a couple of solutions – one is to only pick themes from trusted sources, and the other is to bite the bullet and pay for themes from trusted sources. For instance, in my case, I tend to pay for themes from StudioPress, but there are some other good alternatives, such as Woo Themes (which I’ve used on some client sites, for example).

So why not spend the weekend getting started on your 2011 digital content and marketing. And feel free to pose any questions in the comments – if I can’t answer them, there’s a growing number of people reading this site who probably can!

Antivirus security is more essential than ever

This post is supported by Bullguard, who supply free internet security and antivirus software.

The rise of social networks, cloud computing and mobile applications means that having a decent level of security for your business or home has never been more important – and when was the last time you checked your antivirus software was up-to-date or ran a full system scan? There’s not a lot of excuse with the amount of free internet security options around (Either as trials or full products).

It’s something many people writing about the digital world forget to mention – or even neglect to do themselves, but if you consider the rise of digital networking (e.g. 500 million people connected on Facebook), then consider how the viral effect applies to malware and malevolent programmes as much as the latest marketing campaign.

It may seem blindingly obvious considering the fact they’re called viruses, but considering I’ve seen infections transferred via USB sticks swapped between digital marketing experts, for example, it’s always good to have a timely reminder.

A report from Microsoft today revealed that the U.S, for example, leads the figures for hijacked home computers, with over 2.2. million botnets currently out there, which are then controlled by whoever has taken them over – often invisibly to the owner of the computer unless they realise that’s the reason their PC is going a little slower than normal.

And social media could even be making things more dangerous. When search was the primary way to discover websites, there was a clear hierarchy of results, which meant most common terms would have some level of filtering – indeed search engines do employ warnings for know malware sites, although this obviously doesn’t cover many of them.

But when a social networking friend recommends a link, often obscured by a url shortener, how many of us honestly check before clicking on it, or even repeating it to our own network?

And there’s also the illusion that applications, particularly for mobiles, mean that everything is safe – it assumes that every application store and every 3rd party site has examined every single line of code for every application.

If that isn’t enough, there appears to be a rise in hackers actively targeting routers, rather than PCs, meaning they’re reaching anything connecting via that hub – your mobile phone, all your computers, and anything else running software which could be compromised.

Earlier this year, my websites were all disrupted by malware which infected website hosts. The disruption was bad enough, but the thought of anyone getting an infected computer due to one of my sites has been enough for me to educate myself a lot more to minimise the chance of it happening in the future.

Many of us are issued computers by our employers, and quite often we’ll assume that the often over-worked IT department have got everything covered – but a lot of the time they’re maintaining rather than having the time to pro-actively go after the latest major threats.

But there’s no need to panic:

I’m not suggesting you should run away from the internet. It’s actually surprisingly simple to start taking control and responsibility for your own data and safety. You can start by making sure you have decent antivirus software up and running, and updated. Make sure it’s updated regularly and you’re running scans either manually or automatically on a regular basis. And most vendors allow you to try their software for free for a limited time, so there’s really no excuse for not trying it.

Change your router username and password from the default – if you’re still logging in with ‘admin’ and ‘password’ you’re liable for anyone using your wifi to access any website, as well as vulnerable to malicious software.

Store sensitive passwords away from the computers and change them regularly – especially any banking passwords. I use a variety of ways to secure my passwords for most things, but I never store any financial passwords on any computer, or write them and store them anywhere near any of the computers I use. The social element of hacking is best summed up by someone writing their password on a Post-It note stuck to their monitor, and it also applies to someone having an illicit wander through the files on your computer.

And lastly, don’t be afraid to read up, ask stupid questions, and find out about securing your computers. I’m definitely not an expert, and there are plenty of great resources available online to find out what you should do to prevent problems – and to help after they’ve happened. It’s all about taking responsibility for all of the equipment in your care, and all of the things which are precious to you, and at the end of the day, it should become as much a part of your routine as locking the door when you leave the house, and not walking around with a bag of cash sticking out of your pockets… You’ve never be completely safe, but by taking the essential steps you’ll have made your computer and mobile less attractive then the one next to it!

Interested in mobile or internet privacy and security?

If you have any interest in security and privacy on the internet and mobiles (and security is always increasing in importance as more of our lives become so heavily integrated with the digital world), then it’s worth taking a look at what’s coming out of the Black Hat Conference taking place in America at the moment.

There are some really interesting presentations by people looking to raise discussion and awareness on a range of security issues, including being able to eavesdrop on mobile calls with equipment costing $1500, reading RFID tags from over 200 ft away, or hacking ATM machines to let them spit out cash for you. Plus a lot of debate and discussion about how companies and governments can improve security, or nations investing in cyberwarfare.

VentureBeat appears to have just about the most comprehensive and readable coverage, and it’s something we should all be trying to become more aware about. Not only is it important for your personal information and data, and to be aware of what companies and governments are capable of doing – but as we’re the more digitally-aware percentage of the global population, we need to be able to explain these things in simple and accessible ways to those less aware than ourselves…

Enhanced by Zemanta

The aftermath of Twitters biggest phishing scam

Over the last week, many people have fallen foul of the latest phishing scam to do the rounds of Twitter. And an unusual number of high profile individuals have been included in the list of users affected, including the Press Complaints Commission, BBC correspondent Nick Higham, the Guardian’s Head of Audio Matt Wells, bank First Direct, and environment minister Ed Milliband.

Environment Minister Ed Milliband caught by phishing scam

Environment Minister Ed Milliband caught by phishing scam

Phishing scams have long been endured by most internet users – the traditional mechanism has been via email, but as social networks have becoming hugely popular, they’ve become the vector of choice. And Twitter is particularly attractive as the speed with which messages can spread is combined with the use of short urls, which help to mask the malevolence of the message.

While this is just another example of the huge amount of phishing attempts which exist, the higher profile of these attacks as they affect prominent politicians will hopefully lead to a better awareness and response by governments.

It’s probably a forlorn hope, but for example, here are some things which might change:

  • More education about phishing and spam to the ‘general public’ – how about a public awareness campaign?
  • More understanding about how normal users can have accounts compromised very easily – for instance, with ‘Three Strikes Rules’.
  • More people using offline backups of any content that is valuable or useful to them
  • More of a move towards data privacy, and Vendor Relationship Management, to allow users to only share the information they choose with any service provider under strict controls.
  • A rethink of the UK Identity Card scheme which includes private businesses taking fingerprint and photos.

Importantly, it should place the risks of Social Engineering alongside those of teenage cyberwarfare specialists taking down defence satellites from their bedroom. If a private company was, for example, storing fingerprint data, you wouldn’t need to target their infrastructure (Although I’m not sure most chemists have a particularly high level of internet security) – you’d use social engineering on their employees via Facebook, Twitter, or offline in person to gain information and access.

Of course, technology can play a part, and I’m sure Twitter will increase their response to phishers in future, particularly as a high profile attack via any platform is never good for PR. But any measures will always be part of a never-ending arms race, and only when every individual is educated enough will there be any noticeable difference…