Home
iPhone, iPad, iOS devices susceptible to permanent hack
- Details
- Written by: CyberFreek
- Category: Celll Phones and Mobile devices
I absolutely love it when someone touts the security of their devices, bragging and thumping their chests. This is a sure indication that someone will be embarrassing the hell out of them soon enough.
Here is another fine example. Through the use of a small program that can be accidentally or maliciously placed onto an iOS device, it can give unfettered access to the device from a remote location. This article explains the hack and how simple it is to accomplish.
Keep thumping your chests because sooner or later someone will find a way to expose you.
100k Wireless Routers Susceptible
- Details
- Written by: CyberFreek
- Category: Wireless Security
It was reported last year that the WiFi Protected Service (WPS) for configuring a wireless router is susceptible to brute force attacks.
Read the article here via this link
If available, turn off WPS on your device and configure it the old fashioned way of reading the manual and using the interface via a network connection.
I like to use the old addage of "if its something new that makes things easier, stay away from it, its probably breakable. Wait for Version 2 to be released".
Check with your Wireless Router manufacturer to see if your device is susceptible or if there is a later version of the rom code available. Upgrade and keep your device up to date with the latest in security and configurations.
Various levels of WiFi are breakable (except WPA2/Enterprise, but give it time) and anything that is added to help configure your device faster is usually a bad move.
If all else fails, stay current with your manufacturers modifications for your device.
Here Password, Hear Password...
- Details
- Written by: CyberFreek
- Category: Information Security
The age old problem of Passwords rears it head again. All predictions aside, we will be dealing with Passwords for a LONG time.
I still love it when people post a note next to or neat their computer on what their password is or better yet, leave it as something simple and guessable.
Dark reading again focuses on the age old problem with Passwords again in this article. read it here
The problem is not with the passwords, keys, encryption, it's with people who ignore the teachings of Cyber Security and continue to use weak and guessable passwords. Or worse, they still walk away from their computer systems logged in at work! How many times do you see this still occurring? We need some sort of Cyber Ruler to come down and smack these people on the knuckles each time they even think about doing something in disregard to their Cyber Security Training.
That brings up another issue... the Cyber Security Trainer themselves. Are they effective ? Maybe not so much if the students continue to sluff off the subject matter the trainer is attempting to convey. I know of a couple of incidences myself, where the trainer used the sessions as an opportunity for personal self indulgence. No wonder there are repeat violations of Cyber Security Policies. No one took the Trainer serious at all. Show a movie, ask some questions, here, your training is done <yawn>.... is THAT effective ? If you convey in your Cyber Security Classes how unimpressed you are, doesn't THAT teach your attendees something ? It says big and boldy "I'm unimpressed with this and so should you be." Whoops, there goes another opportunity to train people correctly!
If you are going to be serious about Cyber Security Training especially password Management, then get the class to pay attention and be alert. Train them the right way with the right instructor.
Steve
Page 42 of 60