Passwords, Passwords, Passwords, thoughts on managing the chaos

Passwords, Passwords, Passwords, thoughts on managing the chaos

Over the past few weeks, I’ve been asking every new prospect and client, how many Internet passwords they have to remember.   The question has several levels.

“How many places on the Internet do you log into on a regular basis”, I ask

Usually the answer is 4-8.

“What about associations, alumni sites,  facebook, myspace, LinkedIN…sites that you may not access every day?”

Usually the answer is “another 10 sites”

“Ok, what about sites that you have signed up for, but may only need to log into once in a blue moon.  Examples,  account management for your cell phone provider, your 401K account,   sites like classmates.com, etc”?

Usually the answer is “10 or more”

“Lastly, what about sites you signed up for and you do not expect to return to in the next year.  Althought you still may need to access the it in the future to update account, billing or contact information?”

Typically I get 20, 50, no idea, or “lost count” 

This is when the average sales rep or recruiter realizes they have anywhere from 25-100 (or more) places they have have passwords to.  (Personally, I have well over 200 and I’ve lost count).

Then it gets fun. 

“Do you use the same password?”  I ask

95% of the time I get a …….YES.

This is a security nightmare.  What happens if facebook or myspace or one of these well trafficed sites gets comprised?   Then someone has YOUR password to all the other sites you use.  

Yes, there are password managers.  I am not a fan of them.  You can’t take them everywhere and computers do crash.  Today, I present a humanistic solution to password management.

It’s a simple concept I call password schemas.  It starts with picking a core password and then modifying it based on the attibutes of the place you are using.  I am going to use my dog’s name as an example of a core password.  Her name is Captain Janeway, so the core password is CaptJane (for those of you thinking it…no, I don’t use my dog’s name).

Password schemas, used badly, can be dangerous.  You could expose all your passwords should someone figure it out.   However,  using a schema is far superior to using the same password everywhere.   The more creative you get with the schemas, the better your protection is.

Here are some schemas:  (I just made up names for these). For each schema I am going to use mail.yahoo.com as the site example 

Alpha front/end:  using the first letters of a site in front or end of your core

            yaCaptJane            CaptJaneya       ( “ya” comes from first letters in “yahoo”)

Syllable front/end:  use syllables of the site in front or end of your core

            yhCaptJane              CaptJaneyh     (“yh” from first two syllables in “yahoo”)

Keyboard replacement:  In the password below, I used the key above each of the letters “CaptJane” on the keyboard.   Example:  the “D” key is above the “C” and the “q” key is above the “a”, etc.     Downfall here is that may need the keyboard in front of you to remember your password.

           DqmbUqhc

Alpha front/end + keyboard replacement.    Combining schemas

          yaDqmbUqhc          

Vowel replacement:  replace  O with 0, replace A with @, replace E with &

         C@pJ@n&

Keyboard wrap:  if the site name starts with a “y”, start with y and use the next 7 additional characters to the right.   If you hit the last letter, wrap around to the other side of the keyboard.

       yuiopqwe    (yahoo)
       ghjklasd       (google)
       hjklasdf        (hotmail)

These are just a few ideas of password schemas.   One of my favorites is to replace vowels with full words:  example  A=Alpha, B=Bravo, C=Charley.    The key thing is to sit down with a paper and pen and create your own.   Be creative, have fun and come up with something that you will remember.  Make sure it would be hard for someone to guess your password by looking at a few examples.  The combinations are endless. 

Captain Janeway & Donato
(she thinks she is a lap dog)

Janeway and Donato

Platform as a service (PaaS) potential to disrupt SaaS vendors

I’m taking a redeye back from San Francisco after attending Salesforce.com’s  tour de Force and the rollout of force.com.   We are all familiar with the Software as a service model (SaaS).  Many of the successful ATS vendors in the recruting market have grown their businesses with the SaaS model.  Salesforce.com is now taking SaaS to a new level.   They call it Platform as a service or PaaS.  Salesforce.com has a new development environment that allows developers and companies to base applications on the same infrastructure that salesforce.com is built from.  This is significant event, here is why.

With the Force.com framework, you can build applications that look nothing like salesforce.com or you can create “mashups” that combine salesforce.com,  Gmail, Yahoo Maps, etc.  I have seen many email systems from ATS vendors, some are very very good. But none of them come remotely close to Google’s Gmail.  

Ok, what am I getting at?  Imagine this:  An army of developers writing bolt on applications.    Job posting mashups,  resume parsing mashups, search engine aggregator mashups,  objection-response mashups, etc, etc.  Basically, an entrereneur can now create a complete ATS system and not have to worry about core software, hardware and datacenters.    Most of the basics are covered by salesforce.com and Google applications.  Yes, the workflow and business logic will have to developed, but taking a job order is not that complicated.   I should mention that there is even an open source ATS system right now,  CatsOne, see it here: CATS

The playing field has been leveled.   APEX, the salesforce programming language is similar to JAVA.   Salesforce has over a million users.

Why was I at tour de force?  Broadlook is salesforce.com’s latest partner.  We just launched our Contact Capture for salesforce.com on the salesforce appExchange.  We use our Broadlook Universal Exporter (BLUE) to send data to Salesforce.com.  What that means is that ALL Broadlook applications, now work with salesforce.com.  So if any company or entrepreneur want to create their own ATS system,  it will be 100% compatible with all Broadlook applications day 1.  

This is a trend we will continue to see over the next decade. Barriors of entry being continually reduced.  Exciting stuff.

If is also amazing that this idea of mashups came up recently on the recruiting animal show.  Someone said that the company that creates it will make a zillion.  Well the platform is here, salesforce is the first mover in the space, but I predict that we will see additional offerings from other vendors, google, microsoft, etc.  The end result is that everyone wins. 

While salesforce is the first mover, they will not be the only mover.  The real message here is

1.  PaaS will distrupt Saas, due to ease of entry

2.  The barrier of entry for someone to create a SaaS model has been significantly reduced and it will continue to become easier.

3.  Look for PaaS from multiple vendors.  (ie Recruitingblogs.com is based on Ning.com) another example of PaaS.   This was not available 2 years ago. 

Creating a custom search engine (CSE) with Google coop

Having your own custom search engine (CSE) via a Google coop can be a competitive differentiator.   This is a free service that you can access by navigating to www.google.com/coop.  Why would you want to create a CSE? What is the value?

How about stomping your competition?  Is that enough? If so, read on… 

At the basic level think of it this way:  The World Wide Web is very large, too large for you to type in a term like “medical devices” into Google and get a manageable set of results.  

What if you wanted to only look for “medical devices” inside university research departments?  You could try and use Boolean expressions (university and “medical device”).   Right?  Wrong…This is pedestrian.  Yes someday when search engines can guess what you want, maybe this will be possible.   Semantic search is not there yet.  We’re at the pre-cock roach stage in artificial intelligence.  

So what is wrong with searching for University and “medical device”?  

(1) search engines are keyword-based
(2) therefore they are limited to the keywords you type in so
(3) the word “university” may not be on every page of a university where medical devices is mentioned
(4) your search will have partial results from the good potential results
(5) you will get millions (2.49 million…I checked it) of web pages across the Internet that happen to have University and “medical Device” on the page.
(6) you will think Google sucks and get frustrated

CSE to the rescue!  A simple solution.

Google is searching everything.  Why not limit it to a smaller set of websites?  That is what a custom search engine is all about.  ** Limiting **

“Custom Search Engine”  sounds complex, but it is actually easier to work with a CSE than it is too work with massive one-size-fits-all engine.

With a Google Coop I can create a search engine that only searches Universities.  Therefore I can search for “medical devices”  and  I know that the results are coming exclusively from University sites.  Easy.

Take-aways:

Using a custom search engine is easier to use than a monolithic search engine (MSE)  because you are dealing with a known universe of possibilities

You get results faster with a CSE

It is less expensive to train users to work with a CSE than a MSE

You will get faster user adoption with a CSE 

Your competitors don’t have your CSE

Final Thoughts:

The big movement on the CSE front is one of open collaboration.  Create a cool new engine and let everyone use it.  Since everyone else is writing about this, it’s covered, so I’ll opt out.  What about the dark underbelly?  What are people not talking openly about?   How about creating your own search engine for your exclusive use, a competitive differentiator,  a category killer for the sake of sheer profit?  I have mine and I’m not talking, but here are some ideas.  Practical capitalism.

List of ideas for Google Coop’s 

1.  Create a  CSE that inlcudes every one of your clients.   Include the CSE search box at the top of your Web based CRM or ATS system.  (google makes this easy to do…review the video in this post). You now have a search box in your CRM that searches only your clients.   Possibilities …wow!   Broadlook is creating a service that will do this for you.  Look for it soon at http://www.broadlook.com/products/engineme

2.  Do the same as #1, but for your prospects

3.  Compile a CSE consisting of all free resume sites.  

4.  Create a CSE for all job boards in a specific niche.

Here are some examples of google coop’s already built

 5. Green Maven  http://www.greenmaven.com
Green Maven is the most comprehensive Green Search Engine. This search engine emphases websites with Green and Social Values, as approved by a team of Green MBA editors.
Try these queries: shoes, solar panels

6. Macworld http://www.macworld.com
Search for information about all things Macintosh recommended by the experts at Macworld.
Try these queries: Mac games, iPod headphones

7.Global Voices Weblog Search Custom Search Engine homepage
Search the global weblogs featured on the Global Voices website.
Try these queries: Ghana, Sudan

8. Intuit Small Business Site
http://www.jumpup.com
Intuit has used their 20 years of small business experience to evaluate and select the most useful small business resources on the web and provide them to JumpUp.
Try these queries: taxes, marketing

9. ASCII IT Search Custom Search Engine homepage
A listing of specialized “nested” custom search engines that provide results for special I.T. niches.
Try these queries: gigabit switch, network management

10. Real Climate http://www.realclimate.org
RealClimate.org provides expert opinions on the science of climate change. Since this subject has become rather politicized, the quality of information available on the web varies. Using Google Custom Search Engine, they have created a searchable subset of the web that they believe provides the most reliable information.
Try these queries: Greenhouse gases, CO2

Offshore research – how to make it win for you

It was 3 year ago when I was first contacted by an offshore research firm in India. 

Several of my sole-operator clients loved our software tools, but they did not have the manpower to make effective use of the powerful technology.  Our clients hired the offshore firm to run the software for them.   As it helped with client retention, I worked out a deal to train the offshore researchers.  My relationship was still with my client and I was able to observe and learn from afar.  Offshore research can pay huge dividends, but it can also cost you if you don’t what you are getting yourself into.  Here are some rules of thumb that I learned from success and failures.

1. Offshore research is a service, not a technology offering.  It’s not about efficiency or cost savings, it’s about relationship.  The offshore firm should have service, service and service in their DNA.  

2. Don’t treat people like a number.  This sounds like common sense, the golden rule, etc.  However, somehow the terms “offshore” or “remote” has a tendency to depersonalize the relationship.  Don’t let that happen.

3. Use their real name.  If one of your offshore contacts name is Rajaranan,  don’t call him Joe, Bob, or Peter.  Call centers started this protocol of giving foreign workers western names. This may work for a call centers, but it is a poor idea for someone you work with on a long term basis.  Use their real name, insist on it, you might butcher it, but they will respect you more than if you call then Jimmy.

4.  Beware of the over-emphasis on “dedicated” researcher.   Want to know a dirty secret?   Offshore firms are absolutely notorious for placing 2 workers on 3 accounts.  When I learned about this, I was livid.  Plain and simple, this is dishonest, and corrupt.  If the price is too good to be true, you’ve got a 2 for 3 situation.

5.  Have a plan.  If you cannot articulate what your current process is.  It will be hard for a researcher to achieve any level of success. 

6.  Make time.  In the recruitment arena, an offshore researcher will take about 15 minutes per day of your time to manage them.  Sometimes more and sometimes less. Be prepared.

7. Beware of metered results.  If you are getting 8-10 resumes per day, every day…something is wrong.  When I was a recruiter, some days I would get nothing and some days I would get a windfall of candidates.   Wake up and smell the appeasement.  This is usually a symptom of firms that do the 2 for 3 trick. Don’t except it, call them on it.

8.  Undergo a process audit.  Before connecting a new client with a remote researcher, Broadlook performs a technology and process audit.  This has been critical for our clients to understand what their current processes are, and what resources they have to accomplish their goals. 

 9.  Have defined timelines for each task and a weekly schedule outlining what they should do and when.  This is more important at the beginning stages.

10. Know how to do their job.  This will give you insight into how long repetitive tasks will take and will allow you should budget for them. 

11.  Host onsite.  With todays technology there is no reason for research to be done on a terminal thousands of miles away.  Set up an in-house research station and give them remote access to it.   You can use logmein for free to accomplish this.

12.  Watch them work.  Requires in-house research station, but wow, you can really tell something about someone’s efficiency by watching them work for an hour.

13.  Work with several firms.  When I compared results of one firm against another, I was surprised.  All firms are not equal.

14.  Get a referral.  If you need recruitment research done, don’t use a firm that does offshore mapping services.  Most firms will take any business they can get.  Make sure you are picking a firm that specialized.

15. Check certifications, training and tenure.  Insist on a researcher with at least six months of experience.  If you have multiple researchers, it is ok to have a new person as long as the team lead is a veteran.  All researchers I work with go through Broadlook’s certification program.

Donato Diorio is a leading authority on Internet Research.  Donato is the Founder & CEO with Broadlook Technologies, a firm that “Leverages the Internet” for recruitment, sales and marketing research. Thousand of companies worldwide use Broadlook’s recruiting software.

Building your own data silo – a growing trend

Massive online databases vs. individually siloed data…lets take a look.

There is a movement going on, right now.  Companies are starting to abandon large subscription databases and building their own silos of data.  Why?

Lets first examine the general trend of technology.  When a new technology first gets introduced, it tends to be (1) more complex, (2) more expensive and (3) centralized.  Job Boards for example. First there were the large boards like headhunder and Monster.com, next niche job boards, and then large corporate job boards.  Now even small recruiting firms post their own job postings on their own web sites.   The trend once a technology matures is (1) less complex (2) less expensive and (3) ubiquitous and decentralized.  Less complex because the technology is streamlined and reengineered and less expensive and decentralized due to technology improvements and economies of scale.

Watching this trend has been one of my hobbies, it’s universal like the 80-20 rule.  It’s time to give it a name.  Expensive-Niche-Decentralized or E-N-D. 

An entire series of technologies that follow the END trend.  Web based CRM is also starting to follow this curve.   Salesforce.com = the early days of monster.com.  In the last few years, many new CRM’s specific to vertical markets have sprung up.  Recently there is a movement to self-hosted web based CRM.  SugarCRM is open source and Microsoft CRM can be hosted in-house.   CRM, even web-based, is decentralizing.

Ignoring this trend is eqivilant to putting your head in the sand regarding Moore’s law, Kryder’s law, or Nielsen’s law.

What are the variables that will cause data siloing to follow END?

(more…)

Broadlook Diver integrated with Google Desktop Search

Quick post today.  We recently completed testing on Broadlook DIVER with support for Google Desktop Search.  You can now use Diver to search the web for contacts AND, leveraging Google Desktop Search, you can now search files, emails, and documents on your computer and network.  

The Diver integration allows you to actually do something with the information found by Google.  Most recruiters have 1000’s of resumes sitting around on their hard drive.  Let Google Desktop Search index them, and Diver extract them.   I’m looking for final phase testers.  First 5 Diver users to call me, get a week headstart on the rest.  Press release will be later in the week.  Search gurus…start your engines.

Secured By miniOrange