RSS Reader for Computer Security Articles
Some criminals on the dark web are taking their cues from the practices of corporate IT. Illicit offerings run the gamut from code that buyers have to implement themselves to turnkey solutions and consulting services. Here’s a look at what’s out there.
Credit to Author: Michael Horowitz| Date: Thu, 13 Jul 2017 19:43:00 -0700
Although its common to think of a secure website as the opposite of an insecure one, the choice is not, in fact, binary. For a website to be truly secure, there are about a dozen or so ducks that all need to be lined up in a row.
Seeing HTTPS does not mean that the security is well done, secure websites exist in many shades of gray. Since web browsers don’t offer a dozen visual indicators, many sites that are not particularly secure appear, to all but the most techie nerds, to be secure nonetheless. Browser vendors have dumbed things down for non-techies.
Last September, I took Apple to task for not having all their ducks in a row, writing that some of their security oversights allowed Apple websites to leak passwords.
To read this article in full or to leave a comment, please click here
Credit to Author: Rajib Singha| Date: Thu, 08 Jun 2017 13:17:05 +0000
In its latest advisory, the Indian Computer Emergency Response Team (CERT-In) has warned Internet users of the Fireball malware. This post explains what this virus is all about and how you can stay away from it. What is the Fireball Malware? Fireball is a browser-hijacker that attacks the victim’s web…
The post Stay away from the Fireball Malware – Update your Antivirus appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.
Read More
Credit to Author: Darlene Storm| Date: Wed, 31 May 2017 06:31:00 -0700
If your web browser was recording audio and video of you without any indication it was doing so, would you consider that invasion of privacy a security issue? Chrome doesn’t.
After AOL web developer Ran Bar-Zik discovered that a website can record audio and video without the red recording light appearing on the Chrome tab, he reported the bug.
But since users are the crux of problem, Google doesn’t classify it as a security flaw. That’s because before any audio or video recordings, a user has to give a site permission before it can access a user’s webcam or microphone.
To read this article in full or to leave a comment, please click here
Credit to Author: Darlene Storm| Date: Mon, 22 May 2017 06:18:00 -0700
Facebook allows users to livestream self-harm, post videos of violent deaths and photos of non-sexual child abuse, but comments which threaten to harm President Donald Trump are to be deleted, according to Facebook’s secret rule books for monitoring what its 2 billion users can post.
The Guardian got hold of leaked copies of over 100 internal Facebook manuals and documents that tell moderators how to handle content which includes violence, sex, hate speech, terrorism, nudity, self-harm, revenge porn and more controversial content – even cannibalism.
To read this article in full or to leave a comment, please click here
Credit to Author: Sharon Gaudin| Date: Fri, 19 May 2017 03:00:00 -0700
When internet pioneer Vinton Cerf was 10, he was working on advanced math, and by the time he was 17, he was tinkering at programming at UCLA and beginning a lifelong “love affair” with computing.
Today, Cerf, known as the father of the internet, says software bugs are among the biggest dangers to enterprise IT and warns of the mounting challenges the IT community must face in what he calls the “digital dark age.”
Widely recognized for his contributions to technology, Cerf, 73, was awarded the U.S. National Medal of Technology for co-founding and developing the internet. He also was the recipient of the Presidential Medal of Freedom, the A.M. Turing Award and 29 honorary degrees.
To read this article in full or to leave a comment, please click here
Credit to Author: Michael Horowitz| Date: Fri, 28 Apr 2017 11:20:00 -0700
The recent wave of new mesh router systems has brought with it changes besides the obvious increase in Wi-Fi range. For example, these mesh routers are more likely to insist on WPA2-AES encryption, as many have dropped support for the less secure WEP and WPA options. Not all of them, but many.
Here I take a look at another insecure router technology, WPS (Wi-Fi protected setup) and how these new mesh routers deal with it.
WPS is an alternate way of gaining access to a Wi-Fi network that does away with having to know the SSID (network name) and password. Much of what you read about WPS is incomplete, as it supports at least four different modes of operation.
To read this article in full or to leave a comment, please click here
Credit to Author: Michael Horowitz| Date: Fri, 28 Apr 2017 11:20:00 -0700
The recent wave of new mesh router systems has brought with it changes besides the obvious increase in Wi-Fi range. For example, these mesh routers are more likely to insist on WPA2-AES encryption, as many have dropped support for the less secure WEP and WPA options. Not all of them, but many.
Here I take a look at another insecure router technology, WPS (Wi-Fi protected setup) and how these new mesh routers deal with it.
WPS is an alternate way of gaining access to a Wi-Fi network that does away with having to know the SSID (network name) and password. Much of what you read about WPS is incomplete, as it supports at least four different modes of operation.
To read this article in full or to leave a comment, please click here