Wednesday, September 30, 2009

Google so big and professional also can have SSL problem?

When I was trying to access gmail to check my personal email in the evening, I received the following error message:


The server's security certificate is not yet valid? The leading search engine company also can problem with SSL? Initially I couldn't believe and thought is my own browser problem. I tried to Google Adwords and my company web mail (via gmail) also with the same error message but ok for other secure website! I was not dreaming. Really Google problem but actually from Google made the mistake? I believe this mistake will spoil the reputation of Google. Wondering will the person in charge get fired? Sorry to think so.

SSL or Secure Socket Layer is cryptographic protocols that provide security for communications over networks such as the Internet.It will encrypt the data transmitted over the Internet. To have SSL, you need to buy the certificate from provider such Verisign, Thawte, Comodo, etc. by paying yearly subscription basis. A website with SSL is called as secure website. To know whether a website is secure or not, just the web URL. A secure website is start with https not http.

Monday, September 28, 2009

Beware Email Phishing

 I received the following email few days ago:

-----Original Message Start-----
From: Maybank [mailto:pass55@natrm2u.com]
Sent: Friday, September 18, 2009 3:59 AM
Subject: Alert - Contact Us Immediately


Dear Valued Customer,

Due to the increasing spam attack on our customers, we have introduced an advanced protection to protect all M2U users. You are hereby required to immediately protect your account below as unprotected accounts will be terminated till further notice.

SECURE YOUR ACCOUNT NOW
dm2ucontact.com/M2ULogin.htm

Sincerely,

Maybank Group
-----Original Message End-----


This is an example of email phishing. Email Phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an email. Usually, communications purporting to be from bank used to lure the unsuspecting public and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one.

Please take note that bank never use any methods (email, phone call, or sms) to ask their customers (account holder) to update their personal info. If the bank request you to update your personal info, they will request you to the nearest branch to do so, not update it online.

Nowadays, you can see Email Phishing Alert is highlighted at all the banks' official website but still can read people lost money due to phishing in newspaper.

If you are reading this blog, please helps to alert your family and friends about the phishing, to avoid victim of phishing appeared in newspaper again.

The Introduction

How is E-Commerce in Malaysia? I would say the local E-Commerce industry is growing up slowly but still far behind from US and Taiwan. Slow internet speed, low labor cost, online cheating and consumer mindset are some of the obstacles to the growth of E-Commerce. 

I have been stepped my legs in E-Commerce industry since year 2002, after graduated from local university. I wish the local E-Commerce can grow further. Therefore, I hope through blogging, can share my finding, experience and knowledge to encourage more people to sell and buy online besides preventing online fraud and cheating.