WyzGuys Tech Talk

Many devices including smartphones and tablets are shipping now or will be available soon with a feature called NFC or Near Field Communications.  We have seen this already in contactless credit card products such as PayPass and PayWave.  Soon you will be able to use your smartphone to make purchases as well.

Charlie Miller, a researcher at this years Black Hat convention in Las Vegas took a look at exploiting the NFC feature, and although NFC in and of itself is ...

A claim was made by the Jill Knesek, BT’s (British Telecom) Chief of Security, that 3 in 10 Android applications contain some sort of active or dormant malware payload.  Can this be possible?  Wouldn’t this mean that if you have installed 3 or more apps, it is likely that at least one of them infected your phone?

The situation is not likely to be quite that grim, but it does pay to be careful, and follow a few simple rules.

1. Stick to ...

On the Internet there are two main ways of getting a malware infection – links or attachment on emails, or from visiting fake, rogue, or compromised websites.  So browser security has become an important consideration, perhaps the most important consideration, when deciding what browser to use.

Microsoft will be releasing Internet Explorer 10 with Windows 8 in the fall.  IE 10 will be available for Windows 7 users by download.  Several major changes in the browser will improve its overall security.  ...

This story is very very freaky.  Here is the link to the original article in Wired.  Exploiting security flaws on Amazon’s and Apple’s web sites, Mat Honan’s Google account, Twitter account, and Apple ID accounts were breached, and and with it his email accounts.  The hackers then erased all the data in his MacBook and iPhone.  None of this information was backed up, and Mat lost everything, including every picture he had of his newborn daughter.

This was possible ...

In an article on Sophos, the question was posed “Is security training a waste of time?”  There were some examples of training with poor outcomes.  80% of West Point cadets given 4 hours of computer security immediately fell for a test phishing scam.   Employees at internet security firm RSA opened an infected XML attachment to an email that allowed their “secure” network to be breached by real-life hackers.  At the end of the article, it is suggested that ...

I recent survey by several leading software manufactures found that only 40% of users accepted alerts requesting them to download an install an upgrade, update, or security patch, even when the updates are free of charge.  The reasons given most often were:

• The end users didn’t know if the alert was valid or not, were concerned the alert was fraudulent, and that they risked downloading malware or some else as bad.
• There was no perceived or explained benefit to the end ...

Here’s a fun story from Sophos of a Pennsylvania mom who hacked school district computers in order to improve her children’s grades.  She did this while working as an employee of the school district, so this in not quite the feat you might think it is.  Nevertheless, she was able to access a lot of other secure personal and payroll records for the district, using the Superintendents user ID and password.  Point being that you never know who ...

Where does all the spam come from?  Well, almost half (49.7%) of it originates somewhere in Asia, with India leading the pack at 11.4%.  This does not mean that Indians or other Asians are the “perpetrators.”  What this means is that computer users in Asian have become unwitting accomplices after having their poorly secured or unsecured computers hacked and added to some cyber-criminal’s botnet.

Here are the top 10 Spam relaying countries in the world for April to June 2012.  They ...