Archive for security

Twitter Introduces Two-Step Authentication

Twitter-two-step-security
Feed-twFeed-fb

Twitter has finally introduced two-factor authentication to more securely protect accounts, the company announced Wednesday.

The move comes after a number of hacks of high-profile Twitter accounts, including The Onion, the Associated Press and E! Online

Jim O'Leary from Twitter's product security team announced the new feature via a blog post, saying it is in response to accounts "occasionally" being compromised by phishing schemes or password breaches on other sites

The move will likely be of most interest to major brands with a presence on the site as a part of an effort to ward of hackers. By implementing the feature, it will make it more difficult to gain control of an account. Read more...

More about Twitter, Security, Social Media, Apps Software, and Two Factor Authentication

Former Thief Invents Theft-Proof ATMs From His Cell

Atm
Feed-twFeed-fb

Who knows security better than a thief?

Romanian computer expert Valentin Boanta used to supply thieves with the skimmers they used to gather information to create fake bank cards and then steal cash from ATMs.

Boanta, 33, was caught in 2009. And now, six months into his five-year sentence, the former thief has developed a technology that would safeguard ATMs from the very attacks in which he used to participate.

"When I got caught, I became happy," Boanta told Reuters. "This liberation opened the way to working for the good side."

Skimming is the act of copying a credit or debit card by scanning the magnetic strip on the card's back. Thieves then use these cloned cards to withdraw money from the cardholder's bank account at an ATM. Read more...

More about Hacking, Security, Privacy, Theft, and Tech

5 Security Tips for Facebook Mobile

Padlock
Feed-twFeed-fb

You are your Facebook account. Public or private, its contents define you in a professional, commercial and social nature. Your photos are keepsakes, and personal messages can be confidential exchanges. Either way, it's an identity you want to protect.

But you probably aren't doing everything you can to secure your account. You can carry Facebook everywhere on your phone, but is it safe? Facebook Mobile leaves you more susceptible to attempted hijackings and identity theft

Here are five ways to make sure there's more than a phone case between you and a potential intruder Read more...

More about Mobile, Facebook, Apps, Security, and Social Media

How Safe is Your WordPress Website From Hackers and Other Malicious Attacks?

How safe is your website from hackers? Check out these security tips to make sure you're not leaving yourself wide open for a similar kind of attack. One of the simplest ways to prevent your site from being hacked and having malicious code added to your pages is to keep your WordPress installation current.

Government Lab Reveals Quantum Internet Operated for 2 Years

Sparkleoptic
Feed-twFeed-fb

One of the dreams for security experts is the creation of a quantum Internet that allows perfectly secure communication based on the powerful laws of quantum mechanics.

The basic idea here is that the act of measuring a quantum object, such as a photon, always changes it. So any attempt to eavesdrop on a quantum message cannot fail to leave telltale signs of snooping that the receiver can detect. That allows anybody to send a "one-time pad" over a quantum network which can then be used for secure communication using conventional classical communication.

That sets things up nicely for perfectly secure messaging known as quantum cryptography and this is actually a fairly straightforward technique for any half decent quantum optics lab. Indeed, a company called ID Quantique sells an off-the-shelf system that has begun to attract banks and other organisations interested in perfect security Read more...

More about Security, Internet, Science, Tech, and Apps Software

LivingSocial Hacked; 50 Million Users Affected

The daily deals service LivingSocial has been hacked and will begin sending notifications out to users this afternoon.

Fifty million of the company’s 70 million users were affected.

Only users in Thailand, Malaysia, Indonesia, and the Philippines are free of risk, since the company uses different storage systems in those countries.

“LivingSocial recently experienced a cyber-attack on our computer systems that resulted in unauthorized access to some customer data from our servers. We are actively working with law enforcement to investigate this issue,” CEO Tim O’Shaughnessy wrote in an internal memo obtained by AllThingsD.

The compromised information includes names, email addresses, encrypted passwords and, in some cases, date of birth. LivingSocial specified that it encrypts passwords by hashing and salting them.

The database that stores customer credit card information was not affected by the attack, the company said.

“We need to do the right thing for our customers who place their trust in us, and that is why we’re taking the steps described and going above and beyond what’s required. We’ll all need to work incredibly hard over the coming days and weeks to validate that faith and trust,” CEO Tim O’Shaughnessy wrote in the leaked memo.

Amazon owns a 29 percent stake in the struggling deals company, whose co-founder and chief technical officer Aaron Batalion quit a month ago.

daily deals, deals, hacks, hacked, livingsocial, amazon

New Career Opportunities Daily: The best jobs in media.

Links to Pretty Pictures on Skype Actually Send Users’ Machines on Goose Chase for Digital Money

malware, security, bitcoin, skype, hackersWith the all-digital currency bitcoin rising in value, hackers have redoubled their efforts to get at the money. Earlier this week, they hacked into a bitcoin bank. Today, Kaspersky Security reports that a malware scheme on Skype is taking over users’ machines to help them hunt for the currency online.

The currency releases additional value in a process not unlike Will Shortz puzzler competition on NPR. The central bank releases a really, really hard math problem that requires substantial computing power to solve. Of all the successful answers it gets, it chooses one by lottery and gives it a coin. (In the Shortz scenario, all the lucky solver gets is a chance to play on air with Shortz.) It’s complicated, but the math essentially assures fair play. (Link to Quora explanation requires login — don’t blame us.)

Did we mention that you need a lot of computing power to get the money? Computing power costs money — unless you illicitly take over someone else’s computer with malware. That’s exactly what some Skype hackers began doing today.

Why Skype? It has a lot of users and isn’t super-duper secure.

The malware sends users a link with a note saying it’s a great photo of them. This is social engineering: It plays on the user’s vanity to get them to click.

Once they do, the rest is nefarious computer genius. The website the link directs users to infects their computers with malicious code that commands some of their computing power (CPU) to work on the bitcoin math challenges. The hackers get a free ticket for the bitcoin lottery.

“Average clicking is also pretty high with more than [2,000] clicks per hour. Most of potential victims live in Italy then Russia, Poland, Costa Rica, Spain, Germany, Ukraine and others,” wrote security researcher Dmitry Bestuzhev.

New Career Opportunities Daily: The best jobs in media.

Researcher Uses Malware to Conduct Global Internet Census

While an Internet researcher was messing around to see how many routers he could access using the most predictable passwords, he realized the answer was a lot. The number was so big that he realized that if he didn’t just locate the unprotected routers, but botted them and used them to scan for still more routers, he could ping nearly every IPv4 (Internet protocol version 4) address in the world within an hour.

So he did. It was almost certainly illegal, but he has mapped every router in the Internet. The researcher has published his findings anonymously, including the original data. (Statistically, the researcher is more likely to be male, so I’ve used the male pronoun.) The results can’t be confirmed but appear legitimate.

The Internet hasn’t been mapped in this way since its early days as a much smaller network. And as users move to IPv6, it will become harder to scan Internet ports, meaning that this researcher’s dubious feat may never be replicated.

The researcher found that of the 3.6 billion possible IPv4 address in the world, 1.3 billion were likely in use.

“We hope other researchers will find the data we have collected useful and that this publication will help raise some awareness that, while everybody is talking about high class exploits and cyberwar, four simple stupid default telnet passwords can give you access to hundreds of thousands of consumer as well as tens of thousands of industrial devices all over the world,” the anonymous researcher wrote.

The map of IP addresses shows that the United States, Europe and Japan are more densely connected than anywhere else. Use of the Internet drops off at night. And Apache and Allegro RomPager are the most commonly used Web servers.

The virus that infected routers was designed to run in the background. The researcher subsequently removed the virus and left the routers as they were, even if they had no password.

Internet, Ipv4, ipv6, ip addresses, malware,

New Career Opportunities Daily: The best jobs in media.

Social Media and Security: Two Factor Authentication

Social media accounts are becoming extraordinarily important to many of those who use them and yet their security is often ridiculously weak. Twitter, Facebook, LinkedIn and other major social platforms are starting to make the kind of changes that take account security much more seriously.

Evernote Responds to Hack Attempt by Resetting All User Passwords

Evernote is just the latest in a series of high-profile security breaches or attempts. We have talked many times about the importance of using secure passwords and implementing a common-sense approach to what information you store on the cloud.