Showing posts with label online security. Show all posts
Showing posts with label online security. Show all posts

Thursday, July 12, 2012

Security Breach Exposes Sorry Lack of Creativity

Am I prescient or what! Wasn't I complaining the other day about a lack of creativity evinced by spammers and spambots of late? Turns out, it's contagious... [Cue scary music]

Tech blog CNET News reported today on the latest breach of online security that has unfortunately become a major irritant in the modern digital age. Voices, an online publishing tool that was acquired by Yahoo in 2010 and is now used as a part of its news service, was hacked, giving the hackers access to login information (username and password) of more than 450 thousand Yahoo users. The gleaned credentials were posted ('dumped' is the geekspeak) on a web page. As has become a trend, the anonymous perpetrators left a cautionary note (reported CNN):
"We hope that the parties responsible for managing the security of this subdomain will take this as a wake-up call, and not as a threat," a note on the page said. "There have been many security holes exploited in Web servers belonging to Yahoo! Inc. that have caused far greater damage than our disclosure. Please do not take them lightly."... The statement adds that the "subdomain and vulnerable parameters" that were used to hack the site were not posted "to avoid further damage."

Tuesday, July 10, 2012

Anatomy of a Phishing/Spam Email

Fact of modern life: I am sure none of us are unfamiliar with the junk mail that we receive via regular post on a daily basis, including (but not limited to):
  • 'Special Credit Card offers' (often from Discover, which, surprisingly, some people still seem to use)
  • Cheques ('Checks' in the US) from Credit Card companies (even if you would never, ever use them, mostly because of ridiculously high fees associated)
  • Offers to enrol in or switch one's Car Insurance (whether you drive or not)
  • Offers to swap one's TV provider from Cable to Fiber Optic to some kind of Satellite Dish-based system and vice versa (often along with enticing bundles)
  • Random catalogs from random stores (including ones you have barely sniffed at, perhaps, but never purchased from)
  • Desperate requests - often bearing pretty name-labels for free - from various otherwise charitable organizations (including ones you didn't know existed)
... and so forth. I sometimes worry (I know! Right?) about the tremendous amount of paper and postage that is wasted by these organizations, wondering whether the money, time and effort frittered away in such fruitless enterprise couldn't have been spent more constructively elsewhere by them.