Back in July we wrote a review of our experiences with LastPass, a popular password management program. For the record, I am still using it, and still liking it, although there is no way I would use a password manager without some form of two-factor authentication, such as Google Authenticator. For some people, this is going to be too much.
There was ...
Continue Reading →Great advice, but the whole exchange by text kind of kills operational security on this caper. From Pinterest
This comes under the heading of “know who you are doing business with.” Web hosting company 000webhost.com was breached this week and over 13 million customer records were stolen and posted for sale on the Internet. The data includes customer names, emails and passwords in plaintext (meaning the passwords were unencrypted). Storing passwords in an unencrypted form should be a criminal act in ...
Continue Reading →
It’s Halloween tomorrow, the traditional time when we dress up in scary or not-so scary costumes to disguise our identity and trick our friends and family. It’s good to remember that malware often uses disguises to trick us into committing an action that releases the attack. What follows are my scary Halloween stories.
OK, so Monday I lampooned the Director of the CIA for using AOL email to transmit top secret CIA files (yikes). And of course we all remember the Hillary Rodham Clinton kerfuffle over her use of her own private email service to transmit State Department documents (better). One has to assume that this pretty flagrant violation of what has to be well known government policies by people who probably know better ...
My first question is why is some nitwit without the most basic concept of cybersecurity or operational security in charge of the CIA. Sorry to those of you I offend, but if your email ends with aol.com it tells me you are very old and not computer savvy. And people who still use the AOL application in 2015 are basically still riding ...
From one of my favorite cartoons, Real Life Adventures by way of Pinterest.
The cybersecurity threat surface is constantly changing. Below are listed the top areas of concern among cybersecurity experts. Some are new, and some have been around seemingly forever.
STOP THE MADNESS!! It drives me crazy when a client calls me AFTER spending an hour on the phone with some tech support scammer, and then thinks to call me after they have a problem “fixed” that they never had in the first place.
One of my clients recently fell for an interesting variation of the Tech Support Scam. She did a Google search to find the HP technical support number, but the company she called, while at the top of ...
Continue Reading →The newly released Windows 10 operating system comes with a feature called “Wi-Fi Sense” that I think is pretty questionable from a security standpoint. The basic idea is that, under Windows 10, when you connect to a wireless network for the first time, you have an opportunity to “share” you new wireless connection with your family, friends, and coworkers. I consider this be to a security concern. The problem as I see it is that you share your connection to ...
Continue Reading →