Winston Solar Car Race finish at Boulder

Last weekend I was visiting my daughter in Boulder and heard that the Winston Solar Car race would be finishing up at the school stadium where you could see the cars and meet the teams that made them and drove them over eight days from Texas in this year’s competition. Now as you know, I love tech competitions, and this one is a great experience. A dozen cars competed this year, and some were interesting entries: an all-girls team, a team of Choctaw Indian students, and even one from New York. My daughter’s initial comment was telling when we came upon the finish line: “These aren’t cars, they are more like go carts!” And yes, the solar panels do dominate the vehicle profiles, in some cases they aren’t much more than a collection of panels bolted to a set of wheels.

I was amused to see that one of the cars had a Netgear router and a bunch of other computing gear that they use to keep track of battery use and also to communicate with their support van over a Wifi network. It was fun to talk to the kids involved — some of whom were not yet old enough to drive the cars that they helped assemble. And do check out the Winston web site where you can see lots of race photos and stats about each of the teams.

How to control corporate Facebook access

In keeping with my last post on cleaning up your Facebook account, today I want to talk to you about how you can regulate Facebook access across your enterprise networks. I heard a story last week about a soldier in Afghanistan who posted on his Facebook status page about the location of his next mission a few days before the actual event. Needless to say, the mission was cancelled and he was sent packing.

Your concerns might not be as life-and-death related, but just as important: do you think your employees are leaking company confidential information? Do you want to put limits on what they can do while inside Facebook, such as playing Farmville or other games? How about blocking or slowing down access during business hours, but then opening up afterwards?

I began doing some research for this topic for an article that I am writing for one of TechTarget’s web sites, and found a very rich landscape that is available to enterprise IT folks. Just about every network security product has some form of control over Facebook. Some offer more granularity than others. For example, McAfee’s Firewall Enterprise offers two different controls: one for the basic Facebook access, and one for all Facebook apps. That is nice. Palo Alto Networks takes it a step further, having these two plus four additional controls for chat, mail, posting updates, and any plug-ins too. That gives IT managers a lot of control over how they want their users to act. For example, you could restrict any posting until after hours, so that users could at least browse what their friends are doing, or keep the apps off the business network entirely, but still let people check their Facebook accounts.

Sonicwall and BlueCoat have products that can be used to restrict the amount of network bandwidth that Facebook is using at any given time. This doesn’t block the site entirely, just slows it down enough to be annoying, so that hopefully users will go do something else rather than wait for slow page uploads. For college campuses that need to free up their business bandwidth during the day, this is a good idea.

And then there are several data loss prevention products that can dig deeper into the Facebook data stream and determine if any information is leaving a corporate network that shouldn’t be – such as our army grunt’s status location update. Global Velocity’s product has a lot of granularity here and can be set similarly to the Palo Alto box for examining chat or apps traffic (or all Facebook data) specifically.

The trouble is that a single product doesn’t do everything, and you might be using a competitor’s firewall that makes it more difficult to set up these controls (I am thinking about you Cisco owners). But at least several vendors are moving in the right direction to enable these kinds of controls and at the level of detail that many of us need nowadays.

External hard drive connectors

I test a lot of different products here, and over the years I have developed a simple collection of keeping a stack of different hard drives to plug into various test PCs. Sometimes I need to quickly check something on one of them, and an easy way is to use a hard drive external connector product to hook it up to a USB port and grab the files that way.

These connectors are also useful in computer forensics since you don’t have to boot or otherwise touch the hard drive to view the files on it. If you are trying to bring back a PC from the dead this is also a useful tool to have around.

For the past year or so I have been using the Newer Technology USB 2.0 Universal Drive Adapter, a collection of cables and connectors for $35 that can connect any SATA or IDE drive to your PC. It works on both Windows and Macs, has connectors for both regular 40-pin ATA drives and the 44-pin mini notebook drives.

I also took a look at the Cirago Hard Drive Docking Station USB 3.0. For $50, you get a dock that you can insert your SATA drive in, no messing with cables. I couldn’t get it to recognize a 64-bit Windows drive, and it took a while for Windows to recognize the mass storage media before it would be accessible in Windows Explorer. And if you have a USB 3 port, it will run closer to the drive speeds too. It also looks pretty cool.

Mediablather podcast: Identity

If the cap on the Gulf oil spill holds, BP will be grateful for more than one reason. In addition to ending its $4 billion nightmare, it will no longer have to contend with @BPGlobalPR, a Twitter account set up by an anonymous critic who has been skewering the company’s efforts to manage public opinion about the disaster. I talk more about this and other issues with maintaining your brand in the age of Twitter and other social media with my long-time podcasting partner Paul Gillin.

You can download the podcast here from our MediaBlather site.

Techtarget: Should you move your antivirus protection to the cloud?

Cloud-based antivirus products can provide several benefits: centralized management, simpler PC deployments and less reliance on users. But how well do these products protect your systems? I look at three cloud-based antivirus services and see how they stack up when compared with a traditional antivirus product — as well as with one another. I tested:

  • McAfee Total Protection Service v5.0.0
  • Trend Micro TRVProtect v8 SP1
  • Panda Cloud Office Protection v5.04.01

The review can be seen here in its entirely.

Virtualization Review: Virsto One helps managing Hyper-V

Most IT managers will agree that Microsoft Hyper-V has some catching up to do with the VMware hypervisor when it comes to the management and flexibility of handling large virtual machine (VM) collections. And while the latest improvements — such as live migration and dynamic storage allocation — in the Windows Server 2008 R2 edition are welcome, they are but baby steps toward where VMware Inc. is today, particularly when it comes to provisioning storage.

That may change with a new software product from Virsto Software Corp. called Virsto One.

You can read my full review, entitled, Manage Virtual Storage in Hyper-V, here in VirtualizationReview.com

The summer social media cleanup session

Last week I had leaky capacitors on my Dell Optiplex, I couldn’t get any reception on my iPhone 4 because my hands were shorting out the antenna, my Toyota nearly killed me due to faulty parts and the waters of the Mississippi continued to rise. I think I need to call my own personal liability lawyer just to get out of bed.

Maybe I am just feeling my own mortality a bit more. We are all getting older, and no place is that more true than on Facebook, where the fastest growing population segment is the over 65-set. Yes, kids, grandma and grandpa have discovered your digital playground. And they are there to stay, too.

It does seem that our digital lives have gotten more complicated lately too. What with posting all my status updates on Facebook, LinkedIn, and Twitter, sending to my network the latest books that I am reading on Goodreads.com, my current location on FourSquare.com, tagging various pieces of content to Digg, Reddit and StumbleUpon, posting restaurant reviews to Urbanspoon, recommending songs that I like to Pandora, there are only so many hours in the day left to delete all those male enhancement emails, including the ones I am now getting in Chinese.

Okay, perhaps I exaggerate a bit: I do have a spam folder and it works rather well. But it does seem that there is a social network for just about every aspect of our daily lives, and what few places are absent it is only a matter of time before someone invents one.

In that spirit, it is worth taking a look at an essay that I wrote about social networking policies about a year ago if you don’t remember it.

Since then, I have had some other thoughts. One of the comments was “the [users of social networks] should be aware that their colleagues, bosses and/or prospective ones are now watching.” And now you can add your grandparents to that list too.

Certainly, what you post can influence your job-hunting prospects. We now have the ritual purging of pictures and posts every June, right after the graduation parties and requisite summer European discovery backpacking trip (or better yet, now there is Couchsurfing.com, a social network for people who want to crash on your couch).

One young 20-something that I know who is entering the job market wrote to me asking me for my recommendation letter of reference. We emailed back and forth about taking down his Facebook party pix, and I reminded him that it wasn’t just his own photo albums that he had to be worried about – what about those pictures that he was tagged that could create problems too? He had it covered. But I know that many recent grads aren’t as thorough, or as concerned. They should be. I hear from hiring managers all the time that these digital travails can make the difference between one candidate and another getting an offer letter.

And then there is the issue that earlier this summer reporter Octavia Nasr left CNN after a Tweet she posted praising a leader of Hezbollah. Never have 140 characters had a bigger personal impact.

Given this uptake in social media among consumers, businesses still haven’t gotten on board. A recent Yankee Group study shows that a third of those polled have no formal processes in place or any social media corporate usage policies, do not allow the use of social media at work or have no idea if their company participates in social media. And while social media growth among my generation is happening quickly, the study found that half of the over 50 respondents stated that it wasn’t important for a business to have any social media presence.

We all have a lot to learn about how to use these tools – young and old alike.

ITexpertVoice: Emerson’s Data Center in St. Louis Goes Green

When Emerson Network Power consolidated dozens of data centers around the globe into a facility at its campus just north of St. Louis, the most interesting feature wasn’t even inside the building. As part of its consolidation, Emerson, which makes a wide array of power conditioning and management systems, built a new 35,000 sq. ft. data center in St. Louis last year. The building sports a rooftop 100 kV (DC) solar array that occupies about a quarter of its surface area.

Read more about how they incorporated several green IT techniques in their new data center for this story I wrote for the newly redesigned ITexpertVoice web site here.

Techtarget: Seven considerations when evaluating automated GRC tools

There is no shortage of tools to help financial services firms automate their governance, risk and compliance (GRC) requirements. Gartner Inc. earlier this year estimated the total market for GRC tools at $117 million in 2009, and predicted that it will have steady but slow growth for the near term. Many IT and risk managers get their start with GRC analysis by using a simple spreadsheet to track risks and security policies. But that isn’t a very scalable or reliable approach, and it is very labor-intensive and error-prone.

A better strategy is use some sort of automated GRC tool, and I take a look at how you can evaluate these tools for an article that I wrote for SearchFinancialSecurity over at TechTarget here.