Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Saturday, September 12, 2015

One of the most common ways to #safeguard your accounts is to create unique and difficult #passwords. But now a #UKspying agency wants us to go easy. - http://clapway.com/2015/09/12/government-agencies-want-simpler-passwords-101/

Internet-savvy people have spent their whole web-based lives regarding password security as the only defense between you and someone stealing your identity. Over the years there have been books written to explain how one maintain one’s online security. One of the most common methods is to creating unique and difficult-to-guess passwords to keep all of your secrets safe. But now a UK spying agency is telling you to stop being so secure.


“PASSWORD GUIDANCE: SIMPLIFYING YOUR APPROACH”


The UK’s spying agency, GCHQ, has created a brand new document that tackles password security in a modern day internet environment. This document is titled ‘Password guidance: simplifying your approach’. In it, the spying agency gives readers a lot of tips to keep their passwords safe in today’s online environment.


SEE ALSO: HOW HACKERS ARE KILLING PEOPLE VIRTUALLY


“The death of the password was predicted some ten years ago,” says GCHQ in the document. And to be honest, they really aren’t too far off from the truth. Passwords have many vulnerabilities. Let’s say you follow one general rule of thumb: create a unique password for every account you have. If you have 50 accounts out there that are all linked to your email address, and your email address gets hacked, then you suddenly find yourself in a predicament. Do you really want to go searching through 50 websites to find out how to change the password for all of those sites? The answer is probably no.


It’s one of the reasons why Apple and many other cell phone manufacturers have begun using fingerprint scanners as a way of logging into your phone (among other things).


THE NEW GUIDELINES FOR PASSWORDS


According to the spying agency’s new guidelines, hackers can discover passwords using many techniques that are “freely available.” These techniques include phishing, manual password guessing, ‘shoulder surfing’, keyloggers, brute-force attacks, and many more. The new document suggests just seven simple tips.


Most of these tips are still based on common sense. The first tip is to change default passwords. Another is that it’s (probably) totally fine to use a password manager. Also, don’t store passwords as plain text. Many of the other techniques are geared more towards the IT crowd, such as not requiring passwords to get into areas that don’t need security. Or using protective monitoring.


KEEP PASSWORDS SIMPLE, STUPID


All of the above tricks are fine and dandy, but one piece of advice offered revolves around not using difficult passwords, but using ones that are easy to remember; such as three simple words. The idea is that a company should have their infrastructure set up to be more secure so that security doesn’t fall upon an individual user keeping track of a hundred different passwords that are hard to remember.


It all sounds a little suspect when you think about the fact that it’s already been found out that GCHQ has been attacking security services used by British citizens in order to conduct surveillance. Would you really take password security advice from someone like that?



 


UNTIL YOUR MAINFRAME’S HACKED, TRUST BLINK WIRELESS HOME MONITORING SYSTEM


https://youtu.be/4tcLbrtNBcE



Government Spy Agencies Want Us to Use Simpler Passwords

Friday, September 4, 2015

If you thought #baby monitoring #cameras were keeping your child and family safe, you better think again. Several web-connected cameras lack basic #security and even the most elementary hacking attempts could give a hacker access to the “smart devices.” - http://clapway.com/2015/09/04/baby-monitoring-cameras-hackers123/

If you thought baby monitoring cameras were keeping your child and family safe, you better think again. Several web-connected cameras lack basic security and even the most elementary hacking attempts could give hackers access to the “smart devices”, according to research carried out by U.S. company, Rapid7.


Hackers Watch You With Baby Monitoring Cameras - ClapwayBabies watched, home networks hacked


“Overall, we did find some devices that had some very easy-to-exploit issues,” Mark Stanislav, the study’s author, told ABC News.


Besides granting access to strangers, the cameras could also be used as a catalyst to attack other devices and traditional computers by taking advantage of the “unsegmented, fully trusted nature of a typical home network”.


The paper highlights potential security flaws with web-enabled products, as a “galaxy of wildly different devices”, flood our markets.


How safe is the Internet of Things?


The research focuses in particular on the security of retail video baby monitors as they fulfill an intensely personal use for the Internet of Things” (IoT).


Baby monitoring cameras are usually placed near infants and toddlers. They work by filming a child at home and sending a video stream to a personal website or an app on a smartphone or tablet. They are largely marketed as safety devices, but “…there’s a certain leap of faith you’re taking with your child when you use one of these,” says Mark Stanislav, a senior security consultant at Rapid7.


Security problems in all cameras tested


The Rapid7 researchers stated they had found security problems and design flaws in all of the cameras they tested. According to Stanislav, some had hidden and unchangeable passwords, often listed in manuals or online that hackers could easily retrieve to gain access.


Furthermore, some of the baby monitors didn’t encrypt their data streams and web or mobile features. Stanislav also added that higher prices does not necessarily translate to safer babies. Additional features could actually give hackers more opportunities to access the devices.


The Rapid7 research looked at nine baby monitors made by eight different companies. The price range of the devices was from $55 to $260.


The researchers tested the Phillips In.Sight B120 (model discontinued), the iBaby and iBaby M3S, the Summer Infant Summer Baby Zoom WiFi Monitor & Internet Viewing System, the Lens Peek-a-View, the Gynoii, the TRENDnet WiFi Baby Cam TV-IP743SIC, the WiFiBaby WFB2015 and the Withings WBP01.


Most companies said they were reviewing the report’s findings and were working to fix the issues with their baby monitoring cameras to protect their customers’ security.


What do you think of the security of baby monitoring cameras? Share your views in the comments section below.



Forget baby monitoring cameras. Maybe you need the Blink:


https://www.youtube.com/watch?v=4tcLbrtNBcE



Hackers Watch You With Baby Monitoring Cameras