When you set up an internet connection for a customer you do everything you can to protect them, you set up a restrictive firewall, you have a proxy that enforces policy for web surfing as far as possible. You also use all possible means to block spam and viruses in e-mail before they reach the lusers that still believe Bill Gates will give them free Nokia cellphones.

After you did all the technical stuff, you tell everyone (you know it falls on deaf ears, but you have to try) that they must not visit those porn sites, that they must copy links in e-mail and paste them into their browser rather than simply clicking on them etc. So what happens when one of the lusers that actually listened goes to a legitimate website and still have his windows computer exploited? Or if they are lucky the lusers get a warning from their anti-virus software and the site gets blocked.

The sad part is that even very competent IT professionals have extreme difficulty to prevent all exploits on the internet even when they do all the right things. You can read a fascinating account in the Gauteng Linux Users Group mail list archives of such a case where someone’s web site got exploited by quite a nasty man in the middle attack.

In short, a windows server (every one says, we are not surprised) was compromised in a data centre and intercepted traffic from other servers on the same local network. By doing this it managed to redirect innocent visitors of well managed websites to malicious websites that attempted to compromise the visitors’ machines. You can read the gory details at http://www.linux.org.za/Lists-Archives/glug-tech-0905/msg00009.html and more detail at http://www.linux.org.za/Lists-Archives/glug-tech-0905/msg00026.html. Links to the whole thread is at http://www.linux.org.za/Lists-Archives/glug-tech-0905/threads.html

The real scary part is that you cannot do much about something like this because even if you do have a secure local net and the web server you visit has a secure local net, this type of attack can be done anywhere in the path between you and the web server you are visiting.

Be careful out there.

To my surprise I found lots of info on past events but very little about upcoming events and no Boekehuis website. Why the surprise? Well “Die Boekehuis” is a very successful bookshop specialising in South African and World Literature. In 2006 they got listed by the International Booksellers Federation’s list of 50 unique bookshops in the world. Everyone in Johannesburg that I know, who has a real interest in books knows about them so they are successful.

I visited “Die Boekehuis” last week and asked: “Why don’t you have a web presence?” The answer was simple: “We don’t really have the time to properly maintain it.” They did however offer to put me on the announcement e-mail list for “Saturday Voices”. You can ask nicely for the same by mailing boekehuis@boekehuis.co.za.

This made me think and ask the question: “Does a small, maybe niche business really need a presence on the world wide web to be successful?” Taking “Die Boekehuis” and my own small buisiness as examples, no, not really. I was also simply too busy to maintain anything but a single homepage for my business. My work came via “word of mouth” advertising from mostly happy customers. “Word of mouth” seems to work even better for “Die Boekehuis”.

When I started out as a small consulting business everyone told me, I must get onto the web. Being someone that actually sells and maintains computer systems I believed them. As I said above all this turned out to be wrong. In fact in 8 years I got one serious enquiry via the website, unfortunately the person was in the USA so I couldn’t help him.

No you don’t need the web to sell 4000 year old technology. It seems that you don’t even need the web to sell brand new technology.

Amazon.com probably disagrees.