Tag Archives: Colorado

Tech Talk: Pipe Supplier Networks Depots

CTAP has been supplying the oil and gas industry drilling in the Rocky Mountain region with tubing products and service for 25 years from its Louisville, Colo. headquarters. Andy Carlson, CTAP’s director of IT, tells IncTechnology.com that by centralizing the firm’s information environment and networking its storage yards along railroad routes the firm has improved inventory management, billing, and internal communication. Elizabeth Wasserman: How many storage yards do you manage in your business? Andy Carlson: CTAP supplies steel tubular products, pipe, and services for the drilling rigs in the Rocky Mountain region. We have our service yards strategically positioned on rail sites, where we can receive, ship, store, manage and service our customers’ needs. The tubing products we work with generally range from 20 feet to 40 feet long and are extremely heavy, requiring loaders and heavy machinery to move. We’re currently at six yards now located in Montana, North Dakota, Wyoming, Utah, and Colorado, and expect growth this year. Wasserman: What was the issue with communications between the yards? Carlson: This business has grown by acquiring other businesses and locations over 25 years. As a result, we have very different methods of management, communication and culture in each of these locations. The first task was to be able to standardize our method of inventory management, so we would know how much tubing has come in, how much has gone out, where it’s gone and who it’s for. Historically, this was accomplished on spread sheets and e-mailed into the corporate office on a weekly basis. We used that to assemble our billing packages for customers, but there was latency issue in the timing of the bills and the fact that we had no auditing trial at all. The communication of inventory information was not part of an efficient process and did not leverage available technology. Wasserman: What did you do? Carlson: I started at CTAP a year ago, and the first priority was to create a perpetual inventory management system. We needed a centralized information application and a centralized information environment. Given that I was the only IT person at that time, I needed a cloud based solution, and the expertise to design, build and implement it fast. I chose 3T Systems because they provided both of those services, and had worked well with them in the past. We developed our network environment based on Citrix. It allowed all of us including main office and yards to communicate on the same platform, through e-mail, file sharing, and application sharing. Today, we use the same working environment and we’ve been able to be consistent in the way we work. The second thing we did with 3T was to develop an inventory management application specific to when the product comes in and out of the yards. It’s a perpetual inventory management system so we can bill faster and have accuracy in terms of reporting, both internally and back to our customers. Our customers were asking questions such as, ‘How much of our tubing do you have at the Montana yard?’ It would literally take three days to figure out. Someone would have to go out and count and report back.  The spreadsheet would need to be re-keyed in, then adjusted for any last minute inventory level changes. Today, any one of us can get that information in 10 seconds.  Shortly, customers will be able to get that information on demand through our customer portal. Wasserman: What are the improvements that you’ve noticed? Carlson: It’s revolutionized the way we communicate, forecast and implement decisions. It’s contributed to our profitability in that we are able to assemble billing packages much more quickly.  It’s allowed our management team to monitor the inventory levels from a macro level, and respond to new business accordingly.  It’s allowed our sales team to monitor the inventory levels at the micro level, and respond to customer inquiries in real-time. It’s reduced a lot of errors and inefficiencies. Finally, we now have a competitive advantage over other businesses that provide similar services because of our information system. That’s a big improvement for our customers because sometimes we store some of their inventory, and the confidence they gain in our processes They like to know how much of their inventory is in our yards at any given time, and they now have the tools to get that information a lot quicker than they use to.

Watchful Eyes: Outsourcing Video Surveillance

our beautiful site

Video surveillance cameras are no longer static fixtures that hang about unnoticed, their tapes only reviewed when the grim need arises. A number of managed service vendors are stepping up to provide round-the-clock digital access to video content via a subscription service, usually paid monthly. Take Brandon Knudsen. He has a toddler to help put to bed and a coffee shop to run. He used to race back to the shop after bedtime. But after installing new video technology just over one year ago, the coffee shop owner tucks his son into bed, then logs on to his computer to check out the goings on at Ziggi’s Coffee House in Longmont, Colo. More and more often these days, Knudsen manages his store remotely thanks to video cameras that continually stream their digital contents to a password protected website he accesses from home. Video helps in many ways Think of the service as roughly analogous to your cable television subscription, says Matt Steinfort, chief executive officer and president of EnVysion, a video surveillance managed service provider. You provide the video cameras in the same way you provide your existing TV to be wired to cable. The managed-care provider arrives at the small business to establish the Internet connection and the website. Should they go down, the provider repairs the connection. At EnVysion, a four-camera set up runs $150 per month. Installation fee is $1,000. The cameras can be used in a number of new ways to help small businesses pump up productivity. These include: Managing remotely. Small business managers and owners can access business footage in real time as Knudsen does, giving them the capability to check on employees and manage the store in off hours or from another location. Tracking shrinkage. The video systems can be integrated with point of sale system and searched by date, time, or transaction. Business owners can also create reports that will display video from pre-selected parameters such as transaction time. In this way, they can view and analyze suspicious transactions. Better marketing. Digital video can identify customers’ connections with products and analyze their retail behavior. In a retail environment it can also analyze customer traffic patterns, helping to improve store layouts, says Stan Schatt, ABI Research vice president and research director. An ABI Research report released in May predicts a fourfold increase in video surveillance software revenue over the next five years. Training. Knudsen reviews videos to ensure employees make coffee drinks correctly. Sounds mundane, but too many excess ingredients and the costs add up. Make a drink incorrectly and customers complain. Cost reduction or containment. One Envysion customer locates cameras near the pizza production area to record the number of pepperoni going on each pizza. These numbers help when tracking product usage, Steinfort says. Security benefits, too For his part, Knudsen used the video to track why his 2007 hard-goods costs came to 40 percent of overall costs rather than the expected 30 percent. “We discovered employees were giving out cups for water and splitting drinks into plastic cups,” he says. “They didn’t think it was a big deal, but when you add it up over the cost of the year, you’re talking $1,000 in plastic cups. In a couple of months, we got costs down to where they should be, in the 30 percent range.” Rather than searching through realms of videotape, business owners can quickly review specific events based on time of day or other parameters. At the Stooper Stop convenience store in West Fargo, N.D., the recorded images helped local police quickly apprehend a thief who stole nearly $200 in cash, says Todd Jacobson, owner. The theft happened five years ago but is still fresh in Jacobson’s mind. Because he could quickly direct officers to the exact moment on the tape the theft took place, the police apprehended the suspect in just over three hours, he says. “The guy just returned home after the crime and hadn’t even taken off his coat,” says Bethany Johs, chief executive officer at byRemote, the vendor that provides Jacobson’s video system.

Application Security 101

our beautiful site

You’ve hired someone to build the Web-based application for your business’ online home, but do you know how they plan to lock the front door? Long-neglected by companies of all sizes, application security are the new buzzwords in business.  Unsecured apps allow anyone to walk right in and make themselves at home — while vandalizing your business, stealing big bucks, and creating off-line downtime.   And as large companies batten the hatches, hackers look for easier targets. “The path of least resistance may lead them to small businesses,” says Blake Frantz, a consultant with Leviathan Security Group Inc., a company specializing in application security, based in Westminster, Colo. Most security loopholes are “simple programming mistakes,” says Jeff Williams, chairperson of the Open Web Application Security Project (OWASP), a non-profit organization educating businesses and developers about the risks of unsecure apps. “They don’t teach this stuff in schools. It’s the dirty underbelly of the software industry.” Here’s how to implement application security from design to implementation, and get the strongest castle for your dollar.   Sketch out scary scenarios. According to Williams, business owners should ask themselves: “What are the worst things that could happen to me?”  Are you worried about downtime? Customer accounts or database corruption? Regulatory non-compliance? Bringing your concerns to the table ensures that every party knows what’s on the menu, whether you’re still seeking a developer or would like to review current code. Know top problems. Check your concerns against the OWASP Top Ten, which lists exploits common in Web-based applications.  Frantz says serious issues with Web apps include cross-site scripting and SQL injection attacks. Cross-site scripting allows malicious users to take over users’ browsers, while SQL injection exposes database contents, allowing hackers to read, change, or destroy your database. Secure your trusted developer.  Seek recommendations when hiring an application developer. Otherwise, you’re depending on an individual, yet know little about their background.  Ask potential hires or firms if they’re familiar with the OWASP Top Ten, and how — not whether — they build safety measures into applications. Seek developers that attend RSA or Black Hat conferences, or are involved in their local chapter of OWASP. Design Documents. Before the developer starts creating your Web storefront, request an outline for preventing your worst-case app-related scenarios. Williams proposes focusing on how the developer deals with cross-site scripting, authentication, and access control. Check his or her answers against the OWASP Top Ten. Often, security speak is overlooked during initial design discussions, Williams says. “So the OWASP legal project created sample language, to serve as a guideline for that conversation,” he adds. Appraise your apps. If you’re unsure about your current application’s weaknesses, consider contracting a short-term consultant to look for code loopholes. Alternatively, documentation reviews offer good value, another argument for solidifying security requirements before the developer’s work begins. As the OWASP site points out, security isn’t a one-time event. Map out strategies before, during, and after development, so your business stays safe.

Application Security 101

our beautiful site

You’ve hired someone to build the Web-based application for your business’ online home, but do you know how they plan to lock the front door? Long-neglected by companies of all sizes, application security are the new buzzwords in business.  Unsecured apps allow anyone to walk right in and make themselves at home — while vandalizing your business, stealing big bucks, and creating off-line downtime.   And as large companies batten the hatches, hackers look for easier targets. “The path of least resistance may lead them to small businesses,” says Blake Frantz, a consultant with Leviathan Security Group Inc., a company specializing in application security, based in Westminster, Colo. Most security loopholes are “simple programming mistakes,” says Jeff Williams, chairperson of the Open Web Application Security Project (OWASP), a non-profit organization educating businesses and developers about the risks of unsecure apps. “They don’t teach this stuff in schools. It’s the dirty underbelly of the software industry.” Here’s how to implement application security from design to implementation, and get the strongest castle for your dollar.   Sketch out scary scenarios. According to Williams, business owners should ask themselves: “What are the worst things that could happen to me?”  Are you worried about downtime? Customer accounts or database corruption? Regulatory non-compliance? Bringing your concerns to the table ensures that every party knows what’s on the menu, whether you’re still seeking a developer or would like to review current code. Know top problems. Check your concerns against the OWASP Top Ten, which lists exploits common in Web-based applications.  Frantz says serious issues with Web apps include cross-site scripting and SQL injection attacks. Cross-site scripting allows malicious users to take over users’ browsers, while SQL injection exposes database contents, allowing hackers to read, change, or destroy your database. Secure your trusted developer.  Seek recommendations when hiring an application developer. Otherwise, you’re depending on an individual, yet know little about their background.  Ask potential hires or firms if they’re familiar with the OWASP Top Ten, and how — not whether — they build safety measures into applications. Seek developers that attend RSA or Black Hat conferences, or are involved in their local chapter of OWASP. Design Documents. Before the developer starts creating your Web storefront, request an outline for preventing your worst-case app-related scenarios. Williams proposes focusing on how the developer deals with cross-site scripting, authentication, and access control. Check his or her answers against the OWASP Top Ten. Often, security speak is overlooked during initial design discussions, Williams says. “So the OWASP legal project created sample language, to serve as a guideline for that conversation,” he adds. Appraise your apps. If you’re unsure about your current application’s weaknesses, consider contracting a short-term consultant to look for code loopholes. Alternatively, documentation reviews offer good value, another argument for solidifying security requirements before the developer’s work begins. As the OWASP site points out, security isn’t a one-time event. Map out strategies before, during, and after development, so your business stays safe.

How to Make RSS Make Money for Your Business

It used to be that corporate intelligence — whether it was about customers or competitors — required hours of painstaking work poring through news clippings, analyzing webpages, and compiling notes on transactions, phone calls, and competitive coups to stay current. But now with RSS — short for Really Simple Syndication or Rich Site Summary — up-to-the-moment data can arrive automatically in e-mail, RSS aggregators or be incorporated into a company’s customer relationship management (CRM) system. Rather than forcing you to hunt for the required data, RSS sends the information automatically to you the moment it’s available. RSS channels, or “feeds,” provide instant notifications about updates or changes to a website. The technology first came into widespread use among bloggers, who wanted to notify readers about changes to their weblogs without having to organize and maintain a list of e-mail addresses. RSS aggregators, or “newsreaders,” were developed to access feeds automatically, saving the user the hassle of checking websites repeatedly for updates and changes. Business uses for RSS Business has found ways to expand RSS beyond simple convenience into the realm of strategic necessity. “Competitive intelligence and brand marketing are two of the bigger use cases for RSS,” says Todd Berkowitz, director of marketing for NewsGator, of Denver, Colo., one of the most popular RSS aggregators. “There has been a big push into enterprise RSS systems that give companies the ability to subscribe entire groups of people to feeds that don’t necessarily jump out and say, ‘Hey! This is RSS!” In many cases, the people within a company who most need the information that RSS can provide are among the least technically savvy. So it’s crucial to make RSS technically painless. NewsGator created an enterprise server product that lets companies manage feeds centrally, pushing data out to personnel in the best position to make use of it. Competing syndication solutions are available from Attensa and KnowNow. “Blogs and other social media tools are going to become an important part of doing business, but just how valuable are they without a way to read and aggregate them?” notes Trapper Markelz, a senior project manager at executive recruiting firm Spencer Stuart, which is using NewsGator to put critical information in front of its recruiters. “Delivering relevant, timely information in an easy-to-consume way is a challenge in most enterprises, but RSS is a great way to solve this problem. I expect it to become an indispensable technology for most businesses and be as ubiquitous as e-mail.” Incorporating RSS into CRM RSS feeds can be incorporated into customer relationship management software such as NetSuite to provide instant access to the latest news and updates about client companies. There is also PubSub, a Web service that filters through scores of RSS feeds to create new, custom channels based on keyword searches. RSS also lets companies keep track of who subscribes to which corporate RSS feeds and, perhaps more importantly, lets companies watch which news items subscribers choose to explore in greater detail. “Gathering market intelligence is the primary reason for having RSS,” says Carl Agers, vice president of client services and strategy at Decision Counsel, of San Ramon, Calif., a marketing consultancy. “You can build a profile on a subscriber to an RSS feed solely on an e-mail address and the pages they choose to view. Which feeds are they reading? Which words trigger what responses?” RSS also can provide customer leads. A New York private equity firm, for instance, uses the technology to receive instant notification whenever certain forms are filed with the U.S. Securities and Exchange Commission, including those that are required whenever a large number of shares are sold. “It’s a pretty good bet that the seller is flush with cash,” Berkowitz notes. “That would make them a good prospect to go after to invest in a private equity fund.”

Is Online Backup Safe?

While online backup services are becoming increasingly popular, business users still have nagging doubts about them. Are online backups really secure? Is data sent over the Internet truly safe? The answer, for the most part, is yes. It is true that determined computer criminals can hack their way into many online databases. But there are a variety of reasons why a hacker’s attack is unlikely to jeopardize your online backup data, and even better reasons why your backup isn’t going to be intercepted en route. Companies that lose data may shut down First, some perspective. More than one-third of all PC users have lost all of their files because of events beyond their control, according to Verio, of Englewood, Colo., which provides online backup services under the auspices of Iron Mountain, a Boston-based technology company. Half of Internet users have lost computer files at some point, and two-thirds of them never recover their data. Perhaps most notably, 60 percent of companies that lose their data will shut down within six months of the disaster, according to Verio. “With new compliance issues, data growth, and recent security breaches, the need for companies to back up their data against file corruption and data loss has increased dramatically,” says Albert Metais, CEO of Steelgate Technologies, of Boston, which provides online backup.  “Typically, if a company loses their data for more than 10 days, they end up filing for bankruptcy. New options to safeguard information are long-term and off-site through automatic online backup..” Even though backups can be crucial to long-term business success, they may not be created at all if the process is too complicated or time-consuming. That’s where online backup services can play an important role. Why online backup is secure Online backups usually work through an application installed onto each PC in the business network. While some do their job virtually in real-time — saving backups as files change throughout the day — most can be set to back up data automatically at specific intervals throughout the day or week. According to online backup service provider Carbonite, of Boston, data is encrypted before ever being sent onto the Internet. Anyone who does manage to tap into the data stream while it’s en route would be unable to decipher the bits without a copy of the user’s decryption key, which is kept separately from the encrypted data. In addition, encrypted data is scrambled once again as it goes out by using the same kind of secure connection that online merchants use for moving credit card information. Good options for small businesses “I think online backup services are terrific, particularly for a small- to medium-sized business,” says Steve Lewis, co-founder and CEO of application continuity device maker Teneros, of Mountain View, Calif. “You’re getting basically an Inc. 500-quality infrastructure managed by really good people and you’re paying somewhere around $15 per month for it.” What about security concerns? Lewis calls them “a red herring.” “The real question is: Is your data that valuable? When your data and my data are sitting in an archive with 50,000 terabytes of other people’s data, is yours really going to be the one that somebody teases out?” he says. “It’s highly unlikely.”

Wi-Fi for the Masses

It looks like a large Styrofoam takeout container. The 14-pound box would fit into a backpack were it not for the two antennas, set well apart. It can withstand subfreezing temperatures and 165-mph winds; it’s even lightningproof. With the lid bolted down tightly, the box offers no clue as to what’s inside. But disassembled, it reveals intricate innards that look like nothing so much as a city viewed from a plane: A million tiny wires crisscross like streets and weave among square parks the size of your thumbnail. The magic of the box occurs when you mount it on the horizontal arm of a city lamppost, so that its long ears reach up to the sky. Install 30 of them per square mile (which isn’t hard, since an installer using a single tool can put up a unit in 15 minutes) and they immediately begin communicating with one another via radio waves. Data, the same information that flows through the wired Internet, begins traveling between them. Establish some hub connections to usher the data back onto the Net and you’ve created a wireless network that can transmit signals all over real, life-size cities–into parks, schools, juice joints, bars, offices, playgrounds, and homes. The boxes, known as routers or nodes, are made by Tropos Networks, a Silicon Valley upstart that’s landed in the middle of a burgeoning movement among U.S. cities to create municipal wireless networks, or metroscale Wi-Fi–essentially, an effort to deliver wireless bandwidth to the masses. Since Tropos began selling its equipment in 2002, dozens of municipalities have signed up. The Twin Cities suburb of Chaska, Minnesota, built a wireless network to cover its 16 square miles and serve all 18,000 of its residents. Corpus Christi, Texas, bought 300 Tropos nodes to cover 24 square miles and has since decided to expand to 147 square miles. As it rebuilds in the wake of Hurricane Katrina, New Orleans plans to cover the whole town with a Tropos network. This summer, Anaheim, California, will hit the switch, giving 325,000 citizens across 50 square miles ubiquitous broadband Internet access. Tropos-powered networks also are in the offing in Philadelphia and San Francisco. Launched with what Bill Gurley, a Silicon Valley venture capitalist and early Tropos investor, calls “four guys under 30 and an algorithm,” the Sunnyvale-based company spent less than $3 million getting its first product to market. Since then, it has grown into the leading equipment provider in this incipient market, with more than $15 million in revenue in 2005 and a projected $45 million in 2006. It has had roughly 350 customers to date–including some in far-flung locales such as Bangkok, Kuala Lumpur, and Doha, Qatar–and partnerships with EarthLink, Google, Motorola, IBM, and others. Given its recent contracts, the company is well ahead of competing equipment makers. Yet Tropos faces some difficult tests before it can realize its vision. The new, large-scale projects in San Francisco and Philadelphia will get the technology out of dress rehearsal and in front of a major audience. These launches will be key to the company’s fate. As hundreds of other cities look on, contemplating whether to install their own cheap broadband, and as a phalanx of massive data carriers like Verizon and Comcast glower over what may be a new threat, Tropos will march out onstage. Says CEO Ron Sege: “The best thing we can do is make sure the big cities do well, for everyone to say, ‘Oh, my God, it works.” “What Stops the Internet From Being Everywhere?” In San Francisco, there is a new café every year that has “the best coffee in town.” At the moment, it’s Ritual, a chic place in the Mission District with leather couches, wireless Internet, and PowerBooks on every table. The two founding engineers of Tropos–Narasimha Chari, who goes by “Chari,” and Devabhaktuni “Sri” Srikrishna–are sitting at a small table, drinking lattes and reflecting on recent news. About a year ago, the mayor of San Francisco put out a request for proposals, looking for the optimum plan for “unwiring” the city–that is, for creating a citywide Wi-Fi network. Just the day before, out of a half-dozen contenders, the selection had been announced–and Sri and Chari’s list of big wins had gotten one municipal contract longer. But the two men, both 32, scarcely stopped to rest. That’s because each successive contract brings them closer to answering a question that’s intrigued them since they met as undergraduates at Caltech about 15 years ago: “What stops the Internet from being everywhere?” The magic of the box occurs when you mount it on a lamppost. Install 30 of them per square mile, and you’ve created a wireless network that can transmit data all over a city. The inquiry arose out of mutual concerns about India and other developing countries. As a brainy boy growing up in Calcutta, Chari would take long excursions through the city searching for textbooks containing just the kind of math and science materials you can download in seconds today from the Internet; he knew that connecting people in poor and remote regions could be a profound form of change. Sri, for his part, had a deep desire to be useful and an appetite for solving engineering problems. So while attending graduate school in the late 1990s (Sri at MIT, Chari at Harvard), the two men would hang out in the bars around Cambridge and talk about how to get the Internet everywhere on the planet. The intellectual challenge soon became as enticing as the moral one. It was a problem of cost efficiency: How could you bring the power of computer networks to villages hundreds of miles from the nearest cable TV, places where people can’t even afford phones? It was a technical problem, of bouncing signals around in the air over large areas and then back to the nearest data wires. And finally it was a problem of overcoming natural physical limitations: the distance transmitted signals could travel, for one, and the amount of stuff that can be sent simultaneously. “It’s just a very fascinating subject,” says Sri. “We never really set out to start a company.” Any solution had to be dirt cheap. Even in the United States, broadband is so expensive, both to provide and to purchase, that its growth has not kept up with consumer appetites. Today many rural areas around the country have no high-speed data services, simply because it costs so much to dig up the streets and lay wire. Jupiter Research, a market research firm, estimates that 35 percent of Internet users in exurban or rural areas can get only dial-up connections. In some cases, the necessary conduits reach town, but jackhammering the last bit of pavement to serve a smattering of houses is more of a burden than it’s worth. “There are some places where the economics are prohibitively expensive,” says Brian Blevins, a Verizon spokesperson. For Chari and Sri, the alternative to digging would have to be radio, and while drinking beer and poring over dense technical books, they came across a radio technology developed in the 1970s for military uses. The technology worked on battlefields, but its inventors and the engineers who came after assumed that it wouldn’t scale. Sri and Chari thought otherwise. They suspected that if you could program the nodes of these radio networks cleverly enough, teaching them to move information around quickly, you could make the network as big as you wanted. Their idea was a variation on the principle of the bucket brigade or steppingstones. If you can’t get the signal to reach all the way to the wired Internet, make it hop from one transmitter to another until it does. And give it some basic rules for finding the most efficient pathway there. Here at Ritual, for instance, e-mail data comes in over wires to a base station or router somewhere in the room and then heads through the air to the nearby laptop. Everyone in the café is just one hop from the wired Net. This configuration requires every user to be within about 100 feet of the device that’s plugged in, and it’s why wireless broadband is generally limited to offices and cafés. But what if you told that router to select another router for passing along its message, and told that router to select yet another after that? If you taught those routers to make efficient choices that wouldn’t require arduous processing, eventually the Internet would spill out into the streets. Sri and Chari got hold of some Wi-Fi gear–a cheap type of radio technology recently introduced to the enterprise market for office environments–and started playing with their routing ideas. They mounted antennas on cars and tooled around Cambridge, testing the performance of nodes programmed to obey their new steppingstone rules. “When we started doing this,” Chari says, “people laughed at us, saying Wi-Fi is an indoor technology. But our approach has always been, don’t take anyone’s word for it.” The two men soon realized that they were no longer solving a math problem: They were developing a product. So they picked up and left Boston for northern California. They hooked up with two friends of friends who understood finance and formed a company. It was not a particularly opportune time. “In 2001, we were out there looking for funding. It was awful,” says Chari. But Bill Gurley, whose firm, Benchmark Capital, invested early in companies such as eBay and Red Hat, liked their ideas. “I don’t think anyone at that time was thinking about municipal wireless,” Gurley recalls. “But what was keeping Wi-Fi from going outside?” Even in the united states, More than a third of Internet users in exurban or rural areas can get only dial-up connections. Well, nothing. In the United States, most towns already own the infrastructure for suspending 14-pound boxes in the sky: lampposts, traffic lights, telephone poles, city buildings. The Tropos routers themselves cost only about $3,500 each. So with 30 per square mile installed in a city like San Francisco, you’d spend about $5 million on boxes to serve more than 700,000 citizens. According to a report by PricewaterhouseCoopers, building a fiber network costs $2,000 “per home passed,” in the industry’s argot; providing DSL costs a few hundred dollars. Compare both with Philadelphia’s estimate that the cost per home passed of its Wi-Fi network will be $30. On the user end of the equation, the hardware economics look even better. The Wi-Fi cards that early adopters were sliding into their laptops in 1999 went for about $2,000 apiece. Today the devices are preloaded into nearly all new computers and cost less than $10 each. Right now, as Chari and Sri drain their lattes at Ritual, there are an estimated 50 million Wi-Fi-ready computers out there. So Bill Gurley got onboard. He liked the open standards of Wi-Fi technology and how quickly the price on the user’s side was dropping. He loved Chari and Sri’s vision of teaching routers with limited range and capacity how to build bucket brigades and choose the most promising pathways, based on the condition of the network. “It’s very elegant,” Gurley says. He also liked the growth potential of the market and the focus on software. “As a venture capitalist, I love everything about the Tropos model,” he says. In January 2002, Benchmark Capital ponied up $2.2 million for the young company to work with. Other VC firms followed, including the Intel Communications Fund and Siemens Venture Capital. And so did Ron Sege. Good Enough Beats Best Ron Sege (pronounced seh-gee) is a tall stick of a guy with blue eyes and blond eyelashes, whose elaborately stitched jeans were meant for a younger man. At 49, he is on his second wife, his second batch of kids, and the fourth small company he intends to make large. In a sense, Sege is a Web 2.0 guy all around, bringing hard-earned experience to a young company with a still-unproven business model. As he puts it, “I’ve seen this movie before.” Sege began working in technology in the 1980s, but really hit his stride in the ’90s, as a manager at 3Com, the company that spawned Ethernet technology. 3Com had a few hundred employees when he perspective, good enough beats best,” he says. Ethernet, the protocol that allows office PCs to share databases and printers and storage in a small local network, was far from perfect. “But it was inexpensive, easy to use, and anybody could design to it.” Sege learned the beauty of this approach to business–float a quick and dirty product, let users and other product developers improve on it, and push it as a dominant shared platform. “Wi-Fi has many of the same attributes,” he says. After 3Com, Sege took a job as executive vice president of Lycos, one of the first Internet portals, where he helped engineer an Internet-bubble buying spree that included acquisitions of Matchmaker.com, Quote.com, and Wired Digital. “That was my media mogul period,” Sege says with a laugh. He left Lycos in 2001 and joined Ellacoya Networks, a company based in Merrimack, New Hampshire, that creates software to help broadband providers ease congestion in their networks. Bill Gurley, tipped off by a Benchmark partner who’d worked with Sege in the past, saw in the Ellacoya CEO someone who’d ridden small companies through significant growth and who understood a good deal about data networks. He contacted Sege and told him about Tropos. The company made sense to Sege. Taking off-the-shelf indoor base stations and sticking them up on power poles–that was a formula he understood. Sri and Chari had already come up with the tricks, the proprietary algorithms for handling data traffic and monitoring the system from one main PC, which would set Tropos apart from its direct competitors. (The company has 30 software patents and patents pending.) In 2004, Sege came onboard–”to do all the stuff not involved with writing software.” At first, that meant selling Tropos boxes and software to a small but eager market the start-up had identified: police and fire departments. After September 11, the consequences of poor emergency communications became painfully clear to city leaders nationwide, and many municipalities were attempting to do something about it. What few civilians realize is that their heroes with hoses and their men and women in blue have always relied on only one of their senses for passing information: their ears. They use the same two-way radio technology today that police departments adopted in the 1930s. Some forces have introduced computers into their cruisers for searching DMV or criminal databases, but these hookups are as slow as your first dial-up modem. Forget about downloading a mug shot. Maps, surveillance videos, traffic updates, real-time messaging? Impossible. What emergency responders need is broadband. And it has to be broadband that’s everywhere, broadband that moves. Tropos could deliver that. Sege traveled the country, giving presentations to police and fire departments, steadily signing up customers. Oklahoma City bought Tropos technology to build a network for its police department covering 620 square miles. In Milpitas, California, about 10 miles from the Tropos headquarters, a 40-node Tropos mesh allows police to look up DMV photos and monitor video surveillance of high-crime areas. So Sege and his team were surprised in the spring of 2004 when they got an order from Chaska, Minnesota, a Twin Cities suburb that wasn’t looking to serve its police force. The town’s city council wanted cheaper connectivity–for all of its residents, who were stuck paying $45 per month for high-speed access from Sprint and Time-Warner Cable. The goal was to provide broadband access for all of its citizens for no more than $20 a month. “Tropos was selling a system for public safety departments. Our IT guys thought, ‘Why couldn’t you do 3,000 connections instead of 300?” says Chaska’s city administrator, Dave Pokorney. For Tropos, this was exhilarating. Chaska had come up with this plan on its own, with no help from Tropos, which was focusing its efforts on public safety. The company had helped create networks designed to serve the general public, but only in parks or other circumscribed areas. Chaska was out ahead of them–and within three months, the city had a real-life metroscale network available to anyone in town. Sleeping Giants Everyone at Tropos agrees on what made the company take off. It happened in August of 2004, when Philadelphia, the largest municipality to date to do so, announced plans to blanket the city with Wi-Fi. The idea was to deliver cheap, and possibly free, broadband Internet access to the 1.5 million souls–digital haves and have-nots alike–who lived within the city’s 135 square miles. This was a bold, pioneering step, lauded by civic groups and techies around the country. But the news hit one party particularly hard: Verizon. At the time, the vast majority of Philadelphians who wanted fast connections to the Web had been coming to Verizon for DSL. Now the company would have a new competitor. The proverbial sleeping giant was caught off guard. It’s one thing to build a wireless network for 8,000 households in the suburbs of Minnesota. But it’s something else entirely to do so in one of the nation’s biggest metros. Verizon’s lobbyists marched straight to state lawmakers in Harrisburg and demanded action. And they got it. A telecommunications bill that had been lingering around the capital for more than a year suddenly came up for a vote, and it had a brand-new provision attached to it. The measure said that Pennsylvania cities intending to create high-speed data networks must give the dominant local phone company the right to build first. If the incumbent proceeded within 14 months, the city would be required to drop its plans. For the leaders of Philadelphia, that meant doing nothing for more than a year before getting their project under way. It also meant that cheaper service–some subsidized for the poor–would happen only at the whim of Verizon. But the prospect of an Internet cloud floating through every park and into the city’s overlooked neighborhoods had already intrigued many Philadelphians, and the state legislature’s intervention galvanized people to protect the idea. “The school district, the nonprofits that wanted to serve poor neighborhoods, even our tourism organizations saw the potential,” says Dianah Neff, Philadelphia’s chief information officer and a 14-year veteran of Silicon Valley businesses. “When the legislation came up, we put the pressure on. We had 3,000 people call, write, and e-mail the governor.” Tropos, which already had been tapped to install two pilot projects in public parks, watched the events unfold. Sege hired a Washington lobbying firm, which showed up in Harrisburg, attempting to sway leaders to spare local governments from restrictions. In late November 2004, just as the bill was approved, Philly’s Wi-Fi enthusiasts got a break. “It was almost like diving to get the catch in the end zone,” says Sege. The state agreed to exempt Philadelphia from the requirements. (All other Pennsylvania municipalities remain bound by it.) The way Sege sees it, Verizon’s in-your-face tactics were the best thing that had ever happened to the start-up. The giant telecom’s reaction made dozens of other cities take notice. If Verizon was so ruffled, people seemed to think, then Philadelphia must have been on to something interesting; the technology’s potential must be real. “The phone was ringing off the hook,” says Sege. Cities around the country, from Minneapolis to Tempe, Arizona, began announcing plans for wireless networks. Several months later, the technology was validated by another waking giant when Cisco announced it would begin building routers for muni Wi-Fi. Tropos sales went from 90 municipal clients in all of 2004 to 75 in just the first half of 2005. The next step in the Philadelphia project was to respond to the city’s RFP, and Tropos now had to get down to details. The company had the gear and the software for monitoring and troubleshooting the network, but there was a lot the small company was lacking. Customer service for one thing. And billing. And consumer sales. Rather than build those capabilities in-house, Sege began searching for an established Internet service provider with which to partner. EarthLink fit the bill. The ISP, based in Atlanta, had thrived as a middleman, buying wholesale dial tone, wrapping it up in an attractive brand, and selling it to Internet surfers. But as the world shifted to faster wires and fiber optics, EarthLink had little to offer. Unlike the phone companies, it owned no connections into the home. In January 2005, Bill Gurley paid a visit to EarthLink’s board of directors. He presented his case for a partnership, in which Tropos would provide infrastructure–the actual broadband network–and EarthLink would handle customer support and sales. In response to Gurley’s presentation, EarthLink sent a team to visit Chaska to see for themselves if the new technology worked. The group toured the town and climbed under tables testing the network’s reliability. They interviewed folks in bars. And they were sold on it. “Municipal Wi-Fi is really important for us,” says Donald Berryman, EarthLink’s president of municipal networks. “It’s one of the top three investments we’re making in future products. It can help us control our destiny because we’ll own the network.” Tropos and EarthLink have since landed deals with five cities and have proposals out to five more. But Will It Really Work? Not surprisingly, the Bells and other data-access providers haven’t backed down. Since the maneuver in Pennsylvania, giants like BellSouth and Comcast have fueled a fight against muni Wi-Fi across the country. Lawmakers in Ohio, Virginia, Kansas, and Oregon, among others, have proposed legislation to keep local governments from building their own networks or at least make it more difficult for them to do so. Fourteen states, including Florida and Colorado, have already passed restrictions. “We have not supported a ban on municipal networks,” says Verizon’s Brian Blevins. “But we’ve felt where there’s vibrant competition, the networks can undercut and disrupt a market that’s working very well.” Critics of muni Wi-Fi argue that if local governments participate in building broadband networks, they’ll exploit unfair tax and regulatory advantages, irresponsibly drain public coffers, and mismanage the services. To counter the legislative gambit, Sege and others have taken to evangelizing in Washington, D.C., and state capitals. They’ve made some progress. In June 2005, Republican Senator John McCain of Arizona and Democratic Senator Frank Lautenberg of New Jersey introduced a federal bill in answer to the activity in the states. The Community Broadband Act of 2005, still in committee, would “preserve and protect the ability of local governments to provide broadband capability and services.” Says one Lautenberg staffer: “The senator doesn’t think there should be obstacles–we’re 16th in the world in terms of broadband penetration.” A bill awaiting a vote by the House, on the other hand, would create barriers–for instance, requiring cities to partner with a private company. A restriction like that, though seemingly innocuous, would have prevented Chaska from building its network. These policy struggles are not the only hurdles Tropos is facing as it lunges for profitability in 2007. There are big technical questions. It’s one thing to build a wireless network for 8,000 households in the suburbs of Minnesota. But it’s something else entirely to do so in one of the nation’s biggest metros. “Nobody’s demonstrated that you can have 135 miles of Wi-Fi,” says Julie Ask, a research director at Jupiter Research. Radio signal is notoriously unpredictable. When your cell phone drops out every time you round the corner of Elm Street, that’s because the mobile provider didn’t predict a problem there. Home devices from cordless phones to baby monitors might cause interference. Tempe, Arizona, where Tropos competitor Strix Systems provided 500 wireless routers, discovered that signal wasn’t getting through house walls beyond 150 yards from the routers. Many Tempe users found they needed an additional $100 device to receive and send data from indoors. Tropos could face similar problems. Dozens of municipalities have joined in, but there is not much of a record. “As a mayor, why wouldn’t you say, ‘I want to bridge the digital divide’?” says Ask. “EarthLink wants to point to Philadelphia and say, ‘Hey, it works,’ but until there’s proof…” After a city government invests $20 million, no users will be happy if their connections go down or their webpages load slowly. The last thing Tropos needs is for annoyed customers to head back to Verizon. Another looming question is what business models will work. Will consortia like the EarthLink-Tropos team for San Francisco prove easy for cities and profitable for the participating companies? Will the Bells hedge their bets and start offering their own systems? Will cities build their own public Internet utilities, just as many today deliver power without the help of private entities? In any of these scenarios, Tropos’ business doesn’t change. The Bells, the city governments, the ISPs–they’ll all need to buy boxes from someone. As experiments are made and the best models emerge, Sege insists that Tropos will stay relevant. First, of course, he has to deal with Philadelphia, which is building its 15-square-mile test area this summer and plans to roll out the full network in 2007. “I honestly believe that a lot of people are waiting to say, ‘We told you it wouldn’t work,” Sege says. Philadelphia CIO Dianah Neff doesn’t seem to mind that tension. “There’s a lot of pressure on Tropos and EarthLink. But that’s to our benefit because they’re trying really hard,” she says. “It’s like you live in a fishbowl. It’s not just other cities, but the world that’s watching.” Martha Baer is co-author of Safe: The Race to Protect Ourselves in a Newly Dangerous World. This is her first story for Inc.

Why Cornice Said No, Thanks, to Apple

Kevin Magenis hung up the phone, looked out his office window into his company’s development lab, and thought about what he’d just heard. The callers were from Apple Computer, and they wanted to talk business. Magenis’s start-up, Cornice, had developed tiny hard drives with a one-inch platter for storing music or digital files. And it made them for a third of the price of rivals like IBM. That’s why the Apple execs called that afternoon in late 2002. Would Cornice be interested, they wanted to know, in supplying the drives for the iPod Mini, the new, smaller version of Apple’s MP3 player? Digital music was still new, and no single player had emerged to dominate. But Apple was clearly the most innovative player on the scene and hooking up with the company would definitely be a coup for Cornice. Magenis was tempted. The problem was that Cornice was already working with two other makers of MP3 players, Thomson/RCA and Rio, and the Apple execs were insisting on an exclusive deal. Honoring that request would mean betraying two key clients. Cornice, which is based in Longmont, Colo., had been doing business with those two companies almost from the moment it was founded in 2000. At the time, Thomson and Rio were the leading manufacturers of MP3 players, both of them outselling Apple. Both companies had new products in the prototype stage designed around Cornice’s hard drives, and Cornice expected the two clients to account for as much as 40% of its revenue. Cornice also was negotiating to supply drives, for nonmusic uses, to Dell, Hewlett-Packard, and Sony. Indeed, digital music was just a tiny part of Cornice’s business plan. The way Magenis and his team saw it, the real opportunity was in the much larger market for mobile phones–which they believed eventually would function as hand-held computers, storing and sending all manner of data. Still, Magenis knew he’d be a fool not to at least try to forge a relationship with Apple. He contacted some of his board members and told them about the offer. In addition to an exclusive arrangement, Apple also wanted Cornice to make some changes to its technology; specifically, it wanted Cornice to design a new, double-sided drive capable of storing more information. That seemed reasonable. Nonetheless, the board members concluded it would be bad business to abandon Thomson and Rio. Instead, they decided to propose a compromise: Cornice would keep its two current customers, but the iPod would be the only other MP3-device manufacturer it would make drives for. (Apple declined to comment for this story.) Over the next few months, Magenis made several trips to Apple’s headquarters in Cupertino, Calif., and Apple’s engineers came out to Cornice’s Colorado offices. Magenis could sense how excited everyone at Apple seemed to be about the Mini; the iPod team was in constant contact with CEO Steve Jobs, and Magenis couldn’t help but be thrilled when he got to meet the man in passing. In the back of his mind, Magenis fretted that Apple would fix the problems in the digital music business, and Cornice might miss out on being inside the market leader. “I could see it was going to be a hell of an effort on their part,” he says. But Magenis was also juggling nearly 40 other deals. Apple could consume only so much of his time. By the end of the year, Apple was getting impatient. The executives were friendly but insistent. Apple wanted to work with Cornice, but it absolutely refused to budge on the issue of exclusivity. The Decision After hearing the news, Magenis sent an e-mail to his board members. All of them had the same response: It was time to move on. Magenis was disappointed but convinced it was the right decision. Cornice would forget about the iPod and forge ahead with its original business plan. That meant pushing hard into the cell phone market. The first move was to perfect its technology. Hard drives, after all, were invented for computers, which are far less likely to be dropped than cell phones, especially while in use. Cornice’s engineers have been hard at work shockproofing the company’s products. One innovation, CrashGuard, actually alerts the hard drive that the phone has been dropped, allowing the drive to brace itself for impact. Cornice’s drives can now fall 1.5 meters without disturbance–a market best, according to industry analysts. In July, Magenis became Cornice’s chairman, handing CEO duties to Camillo Martino. Both men believe that Cornice’s engineering will give the company an edge with cell phone makers, which obviously do not want consumers calling to complain that their phone stopped working because the hard drive crashed. “We have a two-year advantage on our competitors,” says Martino. Indeed, the company is working with Samsung, one of the world’s largest cell phone makers, to develop hard drives for its upcoming line of high-end smart phones. The iPod Mini, of course, proved every bit as successful as Magenis sensed it would be. The Mini debuted in January 2004, with hard drives from Hitachi. Seagate also became a supplier and both companies lowered prices and expanded storage capacity–essentially erasing Cornice’s early lead. Still, both Magenis and Martino say they have no regrets about Cornice’s decision. “The original vision was to create the ultimate storage solution for cell phones,” says Martino. “The iPod presented a turning point for the company.” Just look at the numbers, they say. According to market researcher iSuppli, the market for all MP3 players will hit 132 million units in 2009. The number of cell phones sold is expected to hit one billion. While only 10% or so are likely to have hard drives, it’s still an enormous market. Martino predicts that in three years hard drives will ship in more than 100 million cell phones a year. No cell phones with hard drives are currently being sold in the U.S. That should change late this year, when Samsung introduces a smart phone with a version of Microsoft’s Windows operating system and a camera that can shoot up to four hours of high-quality video–thanks to a Cornice hard drive. While Cornice waits for the cell phone market to materialize, the company continues to sell to manufacturers of MP3 players, digital video cameras, global-positioning systems, and personal storage units. It’s eyeing the market for hand-held video game players. And the company recently started talking to Apple again and hopes to be in a position to collaborate on some future version of the iPod. “We still covet an Apple opportunity,” Magenis says. The Experts Weigh In A Smart Move If you look at the numbers, it’s probably the smarter move to pick cell phones over the iPod. It’s pretty clear that as these cell phones become more personalized media devices, the demand for localized storage is probably going to increase. Consumers will want to have more stuff on their phones. Cornice is in a very strong leadership position to be a provider to cell phone makers, and that’s the larger potential market. Tim Bajarin Principal analyst Creative Strategies Campbell, Calif. Numbers Don’t Lie I would’ve made the same call. No one knew Apple could knock this out of the park. Focusing on cell phones is a good choice, given where the market is going. Eventually, every device we carry will have a hard drive in it. If you look realistically at the numbers, iPods sell maybe 25 million a year. But in three years there will be 100 million cell phones with hard drives in them. Sean Ryan CEO Donnerwood Media San Francisco I’m Not Convinced Going with cell phones wasn’t a bad move, since that market will always be larger than the MP3 player market. The question is, how many consumers will want a cell phone with 10 gigabytes of storage, with music, photos, video, GPS? There will be cell phones with hard drives. But will there be hundreds of millions of them? I’m not convinced of that at this point. David Reinsel Director of storage research, IDC Framingham, Mass.

What FACTA’s Latest Disposal Rule Means for Businesses

The latest ruling by the Federal Trade Commission governing the ‘Disposal of Consumer Report Information and Records,’ also known as the Disposal Rule, came into effect on June 1, 2005, amending the Fair and Accurate Credit Transaction Act (FACTA) of 2003. Intended to help combat the series of identity theft cases lately occurring in U.S. courts, the Disposal Rule requires that when any individual or company with “consumer information for a business purpose” disposes of such data, they do so in a way that prevents unauthorized persons from accessing and thereby misusing it. The FTC expects almost all businesses, from consumer reporting agencies to automobile dealers or attorneys, to be affected. So what does that mean for your business? First, know exactly what the rule covers. “Consumer information” covers any details that could identify an individual, such as social security number, phone number, physical or e-mail address; in other words, information drawn or extrapolated from a consumer report. On the other hand, “information that does not identify individuals, such as aggregate information or blind data, is not covered by the definition of consumer information,” according to supplemental information on the rule provided by the FTC. If you have this data or regularly gather such information, you likely will also dispose of it at some point. That’s where the law comes into the picture. When disposing of such data — either by discarding it or by selling, donating, or transferring the medium in which the consumer information is stored — FACTA says companies must take “reasonable measures” to protect it. Whether a company’s disposal methods are “reasonable” depends on, among other things, how sensitive the information is, the nature and size of the company’s operations, and the cost of various disposal methods. Taking cues from the application of other security-related laws, lawyers and industry experts alike expect the courts’ interpretation of the above phrases to be strict and advise companies to play it safe. Companies caught for noncompliance could face an array of costs. Civil action suits could result in damage compensation, attorney fees, and even civil penalties of up to $1,000 per person affected, which swiftly add up when you consider that a single computer might contain 20,000 such violations. But the real burden of a lawsuit, according to Jeff Zellmer, vice president of sales for QSGI, a data-security firm based in Eagan, Minn., is that the FTC may require the company to perform a full IT security audit for several years thereafter, incurring staffing and other costs. To comply with the Disposal Rule, companies should take a number of steps: Take an audit: Determine where consumer information may reside. “You need to know whether the records are physical or electronic, as well as who has access to it physically,” says Steven Hastert, vice president of operations at DataGuard USA, a data security firm based in Denver, Colo., asserting that 70% of fraud in the U.S. remains internal. Potential culprits are often in the human resource, marketing, and accounting departments. Define a disposal strategy: According to FACTA, paper documents ought to be shredded, while electronic data must either be erased or the hardware containing the data destroyed. Various methods exist for the lattermost option — while the most common is to use an industrial shredder, some drive screwdrivers through their hard drives or throw them in salt water. Zellmer himself advocates using erasure software to perform a three-time overwrite of hard drives, which would comply with U.S. Department of Defense 5220.22-M standards. Reformatting the hard drive is insufficient, because it merely removes the pointers that indicate where the data resides in the drive but does not remove the data itself, Zellmer says. A one-time overwrite similarly leaves traces of data that an expert can retrieve. Depending on the size of the hard drive, erasure may cost two to three times more per drive than industrial shredding. Still, Zellmer argues, shredding produces industrial waste, which costs money to dispose of, while erasure may allow the company to recoup costs by donating, reselling, or trading-in the hard-drive. Document the process: While Hastert feels that physically destroying the drive is more secure, he and Zellmer agree that the most important safeguard is to document the disposal process. “Instead of letting vendors pick up the PCs and then not knowing what happens to them, you want comprehensive, unimpeachable documentation,” Zellmer says. He believes the company should then keep the disposal records for seven years, mirroring the length of time companies must store audit documents under Sarbanes-Oxley, as good business practice. Hastert echoes, “It’s always good to have something in hand when the FTC commissioner calls you up.”

Five Ideas to Watch

The Hooters of Hair Care Bikini Cuts, a hair salon in Sandy, Utah, is changing the way men view their barber. Following a strategy that recalls a certain chicken wing chain, the shop’s (very male) clientele can look forward to a clip or trim from (very female) stylists who are clad only in bikinis. Despite criticism from city officials and some local residents, owner Bethany Prince has said the shop simply celebrates “summer all year round,” and that she has plans to open a second location soon. Clients can also watch sports on a flat screen TV or get a chair massage while waiting for their appointment. Labels Learn a New Language In yet another indication of the growing respect marketers have for Hispanic consumers, several California wine producers have begun distributing Spanish-label bottles. Beringer Blass Vineyards now ships cases of white Zinfandel bearing Spanish labels to Texas, Arizona, and California. Those states account for nearly a quarter of the company’s sales, says Beringer marketing director Sharon Goldman. A Black Box for Ambulances A concept common to air travel is gaining traction on highways. American Medical Response, the Colorado-based ambulance giant, is installing devices in roughly half of its 3,200 vehicles. AMR’s recently retooled box sounds an alarm when a driver speeds or rounds a corner recklessly. After 10 seconds, if the driving doesn’t improve, a second alarm sounds and the box records the incident. Now, a California company called Road Safety International has begun marketing black boxes to the parents of teen drivers. Put an iPod in the Jukebox, Baby Ecast’s MP3-playing digital jukeboxes now raise the roof at some 3,000 bars, and the San Francisco firm is deploying 150 new consoles every month. For $1, you can choose a song from 300 albums programmed on a local hard drive, or for $2, you can pick a tune from 11,000 albums hosted on corporate servers. Ecast’s quick success is due in part to record labels looking to make money from digital distribution. Replacing Passwords With Pictures A new password encryption program replaces letters and numbers with pictures of hearts and dogs. Images scroll on the screen of a PDA or laptop as they might on a slot machine. From a grid of mixed pictures, users select their sequence by tapping the screen or keypad ATM-style. Developer PointSec Mobile Technologies of Mokena, Ill., says the passwords are harder to hack.