Independent – Page 160 – Computer Security Articles

Credit to Author: Jonny Evans| Date: Mon, 10 Dec 2018 08:01:00 -0800

We’re always told never to click on a link we receive in an email in case doing so takes us to some dodgy phishing site where our account details are violated, but what if our email app warned us before we clicked malicious links?

Can this app offer you protection?

MetaCert isn’t fully available yet, but it does seem to be a promising solution that provides email users in enterprise and consumer markets an additional line of defence against clicking on malicious links received in email messages.

The solution emerged from the developer’s earlier work building an API to help app developers add a layer of security to WebView.

To read this article in full, please click here

ComputerWorld Independent

December 10, 2018 admin

Forbidden names, revisited

Credit to Author: Sharky| Date: Mon, 10 Dec 2018 03:00:00 -0800

Flashback a few decades to the glory days of online service CompuServe, when anyone could get an account — but not everyone could use their real names, according to a pilot fish in the know.

“You logged in with your account number, but to join a forum — a chatroom focused on a specific topic — you had to give a real name,” fish says. “The name on your billing record was the default.

“Of course there were fraudsters who used an official-sounding name to phish people for personal info and credit card data. So users were not allowed to have words like ‘billing’ as any part of their in-forum real name. This could only be overridden by the forum sysop. I was one.

To read this article in full, please click here

Independent Krebs

December 7, 2018 admin

Bomb Threat Hoaxer, DDos Boss Gets 3 Years

Credit to Author: BrianKrebs| Date: Sat, 08 Dec 2018 01:38:49 +0000

The alleged ringleader of a gang of cyber hooligans that made bomb threats against hundreds of schools and launched debilitating denial-of-service attacks against Web sites (including KrebsOnSecurity on multiple occasions) has been sentenced to three years in a U.K. prison, and faces the possibility of additional charges from U.S.-based law enforcement officials.

ComputerWorld Independent

December 6, 2018 admin

5 handy Google Fi features you shouldn't forget

Credit to Author: JR Raphael| Date: Thu, 06 Dec 2018 09:21:00 -0800

Got Fi? Google’s unusual wireless service may have shifted its name from Project Fi to Google Fi this fall, but its core proposition remains the same: Pay only for the data you use, and avoid all the traditional carrier gotchas and nonsense.

For the right kind of person, especially among those of us on Android, Fi can be a real cost- and hassle-saver. And aside from its most prominently promoted perks — the seamless network-switching, the public Wi-Fi use, the fee-free roaming and hotspot capabilities, and so on — Fi has some pretty interesting out-of-the-way options that can really elevate your experience.

To read this article in full, please click here

ComputerWorld Independent

December 6, 2018 admin

Will Apple’s iPhone replace your password?

Credit to Author: Jonny Evans| Date: Thu, 06 Dec 2018 07:00:00 -0800

Imagine using Face ID on your iPhone alongside a password and Touch ID on your computer in order to access highly secure websites, such as online banks, enterprise intranets and confidential online data services.

That’s a possibility as Apple begins testing a new security standard called WebAuthn.

What is WebAuthn?

Apple has begun beta-testing support for the standard in Safari Technology Preview Release 71, thought it does warn this support is an “experimental feature”, so it may go no further than that.

To read this article in full, please click here

Independent Krebs

December 4, 2018 admin

A Breach, or Just a Forced Password Reset?

Credit to Author: BrianKrebs| Date: Tue, 04 Dec 2018 21:45:51 +0000

Software giant Citrix Systems recently forced a password reset for many users of its Sharefile content collaboration service, warning it would be doing this on a regular basis in response to password-guessing attacks that target people who re-use passwords across multiple Web sites. Many Sharefile users interpreted this as a breach at Citrix and/or Sharefile, but the company maintains that’s not the case. Here’s a closer look at what happened, and some ideas about how to avoid a repeat of this scenario going forward.

Independent Krebs

December 3, 2018 admin

Jared, Kay Jewelers Parent Fixes Data Leak

Credit to Author: BrianKrebs| Date: Mon, 03 Dec 2018 17:25:58 +0000

The parent firm of bling retailers Jared and Kay Jewelers has fixed a bug in the Web sites of both companies that exposed the order information for all of their online customers.