Group items tagged

"We are forever trying to train people to have healthier lifestyles: eat better, exercise more, whatever," Schneier writes in a wonderfully entertaining blog post. "And people are forever ignoring the lessons. One basic reason is psychological: we just aren't very good at trading off immediate gratification for long-term benefit. A healthier you is an abstract eventually; sitting in front of the television all afternoon with a McDonald's Super Monster Meal sounds really good right now." "Similarly, computer security is an abstract benefit that gets in the way of enjoying the internet. Good practices might protect me from a theoretical attack at some time in the future, but they're a lot of bother right now and I have more fun things to think about. This is the same trick Facebook uses to get people to give away their privacy; no one reads through new privacy policies; it's much easier to just click "OK" and start chatting with your friends. In short: security is never salient." Schneier expands his ideas by looking at areas where awareness training or education initiatives work (driving, HIV prevention) and where they fail (training the general public to wash their hands, make drug decisions at a pharmacy, food safety). He summarises the obstacles in the path of effective security training. "The threats change constantly, the likelihood of failure is low, and there is enough complexity that it's hard for people to understand how to connect their behavior to eventual outcomes. So they turn to folk remedies that, while simple, don't really address the threats. "We should stop trying to teach expertise, and pick a few simple metaphors of security and train people to make decisions using those metaphors," Schneier concludes, adding that another problem is that "computer security is often only as strong as the weakest link". Read more: http://www.theregister.co.uk/2013/04/23/security_awareness_training/ Video Related: http://www.dailymotion.com/video/xzbyhi_compute

this subject is a lot interesting, it would help you so much.

En välbekant bluff har återuppstått i Washington Parish, och en Bogalusa bosatt är varning människor inte att falla för den. Jimmy Underwood sade han nyligen fick ett samtal från en person med utländsk brytning, som berättade för honom hade han vunnit $2,5 miljoner och att någon skulle komma från Lafayette på eftermiddagen att presentera honom med sina vinster. Dock Underwood var misstänksam och "typ av tänkte att det var en bluff rätt utanför bat," han låter anroparen fortsätta. Underwood gavs ett spårningsnummer, tillgång kodnummer och säkerhet kodnummer och tillsagd att gå till en butik för att få en grön Dot MoneyPack kort och lägga till $1.000 i den. Uppringaren sa utmärkelsen $2,5 miljoner var juridiska, hade godkänts av den federala regeringen, och att alla skatter hade tagits. Han försett Underwood med ett telefonnummer och berättade för honom att kalla det och be om Jimmy White efter han hade kortet. Underwood var nära en Walgreens, så han gick in och ifyllt manager på telefonsamtalet. Chefen sa att det var en bluff, att den som ringt var sannolikt från Jamaica, och att någon annan hade kommit att rapportera samma sak. Ungefär 10 minuter senare ringde ringer Underwood igen, frågar varför han inte hade kallas tillbaka. Underwood sa till honom att det var en bluff och att det inte var berättigat. Anroparen försäkrade honom var det inte ett skämt, men Underwood berättade för honom att ge pengar till någon annan. Jag sa, "Om jag vann pengar, hur kommer jag behöva betala $1,000?" " Underwood fick veta att han inte skulle verkligen att lägga några pengar, eftersom han skulle få $1000 tillbaka i form av ett presentkort. Related Article: http://abneyassociatesclausen.wordpress.com/2013/02/20/abney-and-associates-reviews-on-cyber-war-warning-microsoft-scheurt-e-mail-snooping-google/ Related Discussion: http://social.technet.microsoft.com/Forums/en-US/olmdiscussion/thread/3ff51444-251e-48c3-ad19-0b6872

Something else to watch out for...

La connectivité inégalée de l'ère numérique a créé des énormes avantages socioéconomiques. Quatre sur chaque cinq maisons au Royaume-Uni ont accès à l'internet ; les deux cinquièmes des adultes sont des utilisateurs de smartphone et, en moyenne, chaque ménage a trois types d'appareil compatible internet. Mais l'omniprésence de la technologie a apporté avec elle des défis nouveaux pour la sécurité en ligne. Une forte augmentation des menaces du cyberespace a mis à rude épreuve la capacité des organismes à maintenir une vulnérabilité des systèmes de gestion mis à jour. Clairement, l'avance sur cyberhazards de plus en plus sophistiqués et complexes est un défi pour les décideurs qui cherchent à préserver notre bien-être économique. Il y a des signes que le gouvernement est conscient du problème croissant de la cybercriminalité, quand il a récemment annoncé qu'une unité nationale sur la cybercriminalité devait être établi au sein de l'Agence nationale de la criminalité. Lors du lancement de l'appareil, le ministre de la sécurité, James Brokenshire, dit que ce serait un seul plomb UK pour lutter contre la cybercriminalité ; fournir une réponse d'enquête spécialisée et rapide-temps afin d'éliminer les possibilités de la cybercriminalité, notamment grâce à une collaboration étroite avec des partenaires tels que les agences de renseignement. Ce dernier développement dans la lutte contre la cybercriminalité est une bonne nouvelle pour les industries dont les services centrées sur la sécurité du réseau. Avec le coût de la cybercriminalité à l'économie britannique, estimée à des milliards de livres par an et entreprises britanniques portent le fardeau de ce type de crime, les menaces de plus en plus complexes montrent peu de signes de ralentissement. Site connexe : http://abneyandassociates.bravesites.com/tags/entries/internet-technology-by-abney-and-associates Forum des Site:http://www.good.is/posts/abney

Une campagne de phishing spear ciblant les 11 entreprises du secteur énergétique s'est produite en octobre dernier, selon les industriels contrôle systèmes Cyber Emergency Response Team (ICS-CERT). Après une compagnie d'électricité a posté sur son site Internet les noms, les adresses de messagerie d'entreprise, et les titres de travail des employés de l'industrie qui ont participé à un récent réunion du Comité, les attaquants étaient capables d'utiliser l'information pour leurs messages d'artisanat, ICS-CERT a dit dans son dernier bulletin d'information (PDF). Les e-mails malveillants demandé destinataires de cliquer sur un lien ci-joint qui dirigerait d'accéder la nouvelle adresse de courriel de l'expéditeur. Au lieu de cela, le lien conduit les utilisateurs à un site Web qui a servi de malware. Un autre courriel portant un attachement malveillant est censé être associé à la campagne, selon le bulletin. La campagne a échoué, menant à « aucune infections connues ou d'intrusions, » indique le rapport. Une campagne de phishing spear ciblant les 11 entreprises du secteur énergétique s'est produite en octobre dernier, selon les industriels contrôle systèmes Cyber Emergency Response Team (ICS-CERT). Après une compagnie d'électricité a posté sur son site Internet les noms, les adresses de messagerie d'entreprise, et les titres de travail des employés de l'industrie qui ont participé à un récent réunion du Comité, les attaquants étaient capables d'utiliser l'information pour leurs messages d'artisanat, ICS-CERT a dit dans son dernier bulletin d'information (PDF). Related Info Video: http://www.myvideo.de/watch/9032885/Abney_Associates_Online_Warning_and_Fraud_Prevention Group: http://abneyassociatesblog.wordpress.com/

In his State of the Union address, President Obama announced that he had signed an executive order (EO) on cybersecurity. The order uses a standard-setting approach to improve cybersecurity. However, such a model will only impose costs, encourage compliance over security, keep the U.S. tied to past threats, and threaten innovation. While the EO does take some positive steps in the area of information sharing, these steps are hamstrung by the EO's inability to provide critical incentives such as liability protection. As a result, this order could result in few modest changes, or it could result in substantial negative effects. The Scope of the Order The EO uses a very broad definition of critical infrastructure, defining it as "systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters." Such a broad definition could be understood to include systems normally considered outside the cybersecurity conversation, such as agriculture. While there is no way of knowing how far implementation will actually go, this broad definition is certainly concerning. Inhibited Information Sharing In Section 4, the EO attempts to expand information sharing in several noteworthy ways. It calls for the federal government to quickly move unclassified information to the private sector and increase the number of security clearances given to appropriate owners of covered infrastructure. Additionally, the EO expands already existing information-sharing systems such as the Defense Industrial Base (DIB) Enhanced Cyber Services and Cyber Security/Information Assurance Program. These objectives are worthwhile, and the President should be applauded for including them.

i would like to thank you for the efforts you have made in writing this article. thanks for your blog, big help.

Reminiscing about the good old days when we were growing up is a memory trip well worth taking when trying to understand the issues facing the children of today. A mere 20 years ago, children used to play outside all day, riding bikes, playing sports and building forts. Masters of imaginary games, children of the past created their own form of play that didn't require costly equipment or parental supervision. Children of the past moved... a lot, and their sensory world was nature based and simple. In the past, family time was often spent doing chores, and children had expectations to meet on a daily basis. The dining room table was a central place where families came together to eat and talk about their day, and after dinner became the center for baking, crafts and homework. Today's families are different. Technology's impact on the 21st century family is fracturing its very foundation, and causing a disintegration of core values that long ago were the fabric that held families together. Juggling school, work, home, and community lives, parents now rely heavily on communication, information, and transportation technology to make their lives faster and more efficient. Entertainment technology (TV, Internet, video games, iPads, cell phones) has advanced so rapidly, that families have scarcely noticed the significant impact and changes to their family structure and lifestyles. Related Topic Discusses: http://www.thelocal.se/discuss/index.php?showtopic=58464 http://answers.microsoft.com/en-us/windows/forum/windows_other-security/abney-associates-hong-kong-cybercrime-reports-what/d9bd3f0d-1fa1-4696-b1a5-cc35b5679632 http://www.good.is/posts/an-abney-associates-hong-kong-security-warning-cyber-terror-virus-set-a-doble-innen-ar

yes it was really interesting. i'll tell others to visit your site.

Claudia Natoli thought she was on to a good thing - so good that when she inquired about a luxury four-bedroom rental villa in Bali, she emailed the owner and asked: ''What's the catch?'' He had offered an attractive discount on the original price and was so obliging, he even helped organise a fully catered pre-wedding party - including drinks, food and waiters - that she planned to host at the property. The deal was too good to be true. Hackers had intercepted her initial email, posed as the accommodation owner and lured her into making a bogus booking. Natoli is among scores of tourists who have been snared in a worldwide travel scam that targets property owners who advertise their rentals on websites including HomeAway, VRBO and FlipKey, which is mostly owned by TripAdvisor. In nearly every case, the victim arrives in paradise only to discover the communication had been faked, the genuine owner has never heard of them and the accommodation is booked out - leaving them broke and stranded. Last week, NSW Fair Trading confirmed it had received complaints about the scam and encouraged others to come forward and lodge a formal complaint. Consumer Affairs Victoria warned that booking overseas private accommodation online was ''much riskier'' than dealing directly with a hotel or travel agent. Reports first surfaced about the multimillion-dollar global swindle in September 2010. Since then, the internet has been awash with blogs and forums about the problem. In the past 12 months, travellers appear to have been increasingly targeted, with luxury Balinese properties used as bait. Travellers' contact details and inquiries are initially netted either by ''phishing'' or acquiring information about a property owner's genuine email account through false advertisements on reputable websites. Souce: http://www.stuff.co.nz/travel/travel-troubles/8555018/Travellers-stranded-by-phishing-scam Discusses: http://www.zotero.org/message/viewdiscussion/182805

the information you showed us is very reliable.