half true, half interesting, mostly BS
The Winter Olympics and the World Cup in 2010, sports fans have a lot to be happy about this year!
We launched our Hosted Exchange 2007 Product just over a year ago. And for the most part, things have gone great.
One of our early decisions was to balance the security of the system while making the system as user friendly as possible. Originally, we had a pretty strict password policy. We soon found that many of our customers were not too happy with this policy and thought it was too much. Were we out of control security freaks? Shouldn’t the customer appreciate the steps that we are taking to not only secure our servers, but their information!
Looking around at other vendors, we quickly found that we may be a bit too harsh. Take Gmail for example. Sure its not exchange. But then again it has over 100 million users. If they had massive issues with security and hacking, they clearly have it under control behind the scenes so things do not get out of hand.
And have you ever been prompted to change your password on gmail? I haven’t.
So we compromised. We altered the time between when the system forces you to change your password. We altered the number of passwords that you could recycle. And we also added a somewhat buried feature in our customer portal. That feature, ‘allow passwords to never expire’
Holy crap! Let’s just blow a huge freaking hole in the security system shall we.
This was a feature that we were not all that happy about, but with the other measures in place we figured we would avoid passwords such as abc123. It makes the end user happy, we have some level of security though not as high and tight as we would like. But its better than having things wide open.
Now here is the shocking part of this. 20% of our users have this feature enabled. 20-feaking-percent! I was really hoping for this number to be in the 5-10% range.
But no, 1 in 5 of our users will never change their password again.
Or will they?
I’m currently developing a nag script that will send out a reminder to the end users ever couple of months. Not enough to completely annoy the heck out of them. But hopefully enough to get a good portion of that 20% to change their passwords on a semi-regular basis.
So what do you do for your password policy? Leave your tips and tricks in the comments section. We’d like to hear what you think is an acceptable policy to stay secure!
In: In the news
30 Dec 2009As the end of the year is quickly approaching, I like to look back at what I have accomplished for the year and what new things I will strive to complete in 2010. Some people like to make a New Year’s resolution. I personally think that this is great, but limiting. Most people will set one goal for the year and probably abandon that resolution within a few months. Typically these resolutions center around weight loss which is fine and the local gyms like to prey on these individuals.
For me, I like a nice set of goals to work towards. I do this both professionally and personally. I can’t share my professional goals with you as most of them involve products yet to be launched.
However, I can share some of my personal goals.
Instead, my goal is to do something that i haven’t done in 15 years. Back in high school, our soccer team had to run 2 miles in under 12 minutes. This is something that I haven’t done since then and it definitely takes some endurance and muscle to get there. Along the way, I figure that I will drop to the weight I want to be at in order to accomplish this goal. So goal #2: 2 in 12.
5 goals for 2010. Some will take time, some will take hard work, but all are do-able. I’ll let you know how my goals are reached through out the year.
In: Cool Videos
30 Dec 2009If this doesn’t make you feel small, I’m not sure what will.
In: Cool Videos| Politics
29 Dec 2009Yes its true. It takes an act of congress to get the ad guys play nice with the consumer. Pretty freaking sad if you ask me, but I won’t complain if it passes.
In: Cool Videos
24 Dec 2009Well done, well done indeed!
Merry Christmas!
In: In the news| Politics| Rants
15 Dec 2009Yes, I’m going there. But not for the reasons that you might expect. I’m not going to make this a right vs left, red vs blue, or bears vs packers issue.
I’m going about this from a bit of experience in the not so distant past. My wife and I had been traveling in another state and unfortunately had to take a trip to the emergency room. It was early in the morning when she fell ill. Its happened before and we basically run down to the ER, she gets an IV and we’re good to go in a few hours. We had narrowed down the condition but at 3 in the morning, neither one of us could remember what the heck it was. Its noted in her medical file back here in Des Moines.
Are you seeing where I’m going here?
The check in experience took 20 minutes while my wife was sitting there, not seeing a doctor, but definitely in need of some help. Not life threatening at this point mind you, but definitely beyond sitting in the waiting room waiting for 20 minutes of paper work, most of which I filled out. If we could have simply flashed an insurance card with a universal identifier that would allow the hospital the opportunity to pull up her health information. Primary doctor, recent visits, notes on the file, allergies, medications, issues, insurance company, weight, last checkup, etc. This would have saved valuable time and filled in the gaps that the doctor needed later on.
Now as an engineer, I can tell you that a system like this is very possible. It is also very very risky. But still very possible and there are many companies that are out there putting these types of systems in place. There is a good chance that if you live in a large enough city in the US, you have such a system in your local medical network. So your branch family medical practice can update your file on a regular basis for when you come in for a checkup or come down with the flu or some other virus. Then, god forbid, you have to go to the emergency room, they can pull up that information because they are in the same medical network. Its slick, convenient and your information is always up to date and available for the doctors on the network.
But the catch is “on the network”. What happens when you move? What happens if you are traveling and need to go to the ER and they are not part of the network as what happened in our situation.
I’m a libertarian and I have a hard time getting behind government control. But this is something that I think that our government can help get off the ground. The system needs to work with us. I’m not sure if it is a simple matter of put it all in one master system and let the networks pull from it like a central library. Or…do you have the smaller networks tie together with some sort of system for routing information between the networks. So my identification number is much like a phone number where it knows that the first 3 numbers of my ID area a zone or state routing so the network knows that it needs to head in that direction to grab the file that it needs to be securely pulled across the ‘net.
Concerns
A lot of people will be afraid of this solution. It can be scary to have a centralized repository of this information as it will be a huge target for hackers. But I think that the system can be built. There are private networks that can be built up. Security checks and balances that will be required. Sure it will cost some money. But the overall savings and improvement to the health care system I think out weigh those costs. Now instead of 20 minutes to get in the door and extra tests that are done that are not needed since there is a full medical history gets us in and out of the hospital faster, and still provides a very high level of care if not better!
This isn’t part of the debate yet. Which is fine, we have other things to deal with like a–hole companies that are dropping guys like this guy.
I feel for the guy, I do. And I think that we need to take that insurance company out back and beat it around the head and shoulders until it gets a clue.
I’ve heard of other companies where their default answer is to deny the claim. No matter what, just deny it if it is over a certain amount. Then you have to re-submit the same paperwork and this time it will get through. But they figure that not everyone knows this trick so they get off by not paying. They purposely slow down the system and raise the costs by this one simple policy. And does it really save _that_ much money?
And don’t even get my started on pre-existing conditions. That statement alone makes me want to take a flame thrower to an insurance company.
Maybe the public option will fix all of this. But then again, it IS our government running that program which I have very little faith in them doing it well or cost effective.
So my fellow Americans, I urge you to write your representative. Write what you feel. Think of your situation and think of what it would be like to be told you have a curable disease, but insurance is going to deny it and you have no way of paying for it out of pocket. What would you do?
In: Dumb People| Rants
15 Dec 2009Seriously CNN, is this the best that you can do?

In case you are wondering why people no longer look to you for news, this is why. Some blowhole closing his twitter account shouldn’t make the front page of cnn.com.
In: Cool Videos
9 Dec 2009Living in Iowa, I feel pretty fortunate that we haven’t been hit as bad as other areas of the country.
In: In the news| Politics| Rants
3 Dec 2009For some reason, the Climate Gate articles have not made enough of a splash in the main stream media. I’m sure that the conspiracy theorist will have a reason why this is happening. I just don’t think that the story has gotten enough attention yet. So…here is a pretty good article on what has happened:
The Hockey Stick was never accurate–and CRU knew it
I’m still in a bit of shock about this. Politics at this level of research I’m not shocked on. But pushing people out, character attacks, and most of all, DATA MANIPULATION!
Let’s not gloss over that one shall we, they are manipulating the data to get the result that they want. Anytime a scientist talks about applying tricks, its a recipe for disaster.