<invalid character>
- Why 0x56?
- It's a special number to me.
- Contributor to
- FactLayer. Links below👇
Joined Jun 2018
Trend-Micro apps removed from iOS app store after it was revealed they've been collecting personal information.
There's a good bet that it's also being done on Android.
just saw this over on twitter:
#CoSoSec
@x0rz
Pssst, don't use this https://passwordgenerator.online/
It generates the passwords *server-side*, looks shady AF. It probably adds them in a dictionary or something. #password #cracking
Family Orbit, a company that that markets itself as “the best parental control app to protect your kids” exposed hundreds of gigabytes of childrens photos online protected by only a basic password.
Parents - don't sign up for this sort of service. Do your own research, lock down your kids devices, and most of all talk with your kids, make sure you trust them and they trust you - both - to do the right things all the time.
https://motherboard.vice.com/en_us/article/ywk8gy/spyware-family-orbit-children-photos-data-breach
This is downright terrifying.
In a thought experiment cyber war games - an attacker could severely weaken our military without touching a DoD computer.
https://www.schneier.com/blog/archives/2018/08/future_cyberwar.html
Any #CoSoSec people play around with this yet?
Australia 🇦🇺 is considering forcing tech companies which do business in/with Australians to allow AU authorities unhindered access to what should be encrypted data.
The ability to do this goes against all security best practices.
Three more Intel chip flaws found.
Security experts now recommend throwing your computer in a lake.
https://www.reuters.com/article/us-cyber-intel/intel-discloses-three-more-chip-flaws-idUSKBN1KZ280
Have you used myFHA in the past?
Expect a new CoSo guard alert.
MyFHA had 973k records breached in 2015. Data included home financing info, personal contact data, credit statuses, household incomes and notes on personal circumstances such as health conditions.
https://twitter.com/haveibeenpwned/status/1027652728623747072?s=19
Just a daily reminder:
a good step to keep your accounts safe: turn on 2FA (2 factor authentication)
2FA requires you to put in an unguessable code when you log into a new computer, therefore if a criminal guesses/steals your password, they still can't log in to your account w/o your phone or keys
It's only a slight inconvenience to you, but a huge one to overcome for the criminals.
If you have a choice, eschew SMS 2FA in favor of app-based authentication, or better yet, a fob.
the humble bundle book bundle just dropped something that some of the #CoSoSec subscribers may be interested in.
https://www.humblebundle.com/books/cybersecurity-wiley-books
Malware bytes just came out with a browser extension to help make browsing safer.
I haven't tried it out yet, but I do trust the company.
As @voltronic and others have pointed out already, there's a large, coordinated push to have google sell you a fob to increase your online security.
I won't go into the merits or flaws of these, but I will say. Unlike the stories Google's been pushing, this is no panacea.
With these an attacker may not be able to get into your email, but there are more types of phishing out there.
The name has changed, but a phish is still a con is still a grift. online or offline.
Hey! Everybody! Bluetooth security is broken (again). Update your drivers/software as soon as possible.
https://www.schneier.com/blog/archives/2018/07/major_bluetooth.html
pardon me if we've seen this already (all these breaches are starting to run together)
Macy's, Bloomingdales
Compromised information included customer names, home addresses, phone numbers, email addresses and birthdays, as well as debit or credit card numbers with expiration dates.
Access to a major Airport's computer system was offered for sale on the "dark web" for $10
This is why system administrators need to lock down RDP, SSH, etc.
German hosting company Domain Factory has been breached
This includes contact information and banking information.
https://www.theregister.co.uk/2018/07/09/domainfactory_in_germany_confirms_brdata_breach/
So, did you know your TV can track other devices attached to your network? I knew it was theoretically possible, but I didn't realize that's what's actually happening. Sending ads to those devices based on what you're watching?
Likewise, did you know your TV is selling the fact that are likely a Democrat or Republican based on if you watch MSNBC or Fox news more?
https://www.nytimes.com/2018/07/05/business/media/tv-viewer-tracking.html
Good news Android users!
Your phone ISN'T listening to you and sending that data to companies.
The bad news is that many apps seem to be taking screenshots and sending it to companies. 🤦♂️
https://gizmodo.com/these-academics-spent-the-last-year-testing-whether-you-1826961188
<invalid character>
- Why 0x56?
- It's a special number to me.
- Contributor to
- FactLayer. Links below👇
Joined Jun 2018