Ancient Chinese Proverb: May You Live In Interesting Times. Well welcome to interesting times. Today, Facebook said that the accounts of 50 million users were compromised. The hackers compromised the security “tokens” that Facebook uses to authenticate users and not the passwords themselves. Facebook revoked those users “tokens” to stop them from continuing to be used. […]
Continue reading → [DISPLAY_ACURAX_ICONS]Cisco Will Eliminate Hard Coded Passwords One Per Month It seems like every patch cycle, Cisco admits to another app that has an undocumented hard coded password. I have lost track of how many of them they have removed so far, but the number is scary large. What is more scary is that I bet […]
Continue reading → [DISPLAY_ACURAX_ICONS]There are people who think open source is the holy grail of software, I am not one of them. Apparently hackers agree with me. So does the Department of Defense. They have even coined a term – SCRM or Supply Chain Risk Management. Bottom line, developers need to understand that there is a war out […]
Continue reading → [DISPLAY_ACURAX_ICONS]The hackers seem to be winning. One solution I have advocated for over the last many years to reduce credit card fraud is a technique called credit card tokenization. When a merchant accepts a credit card, that card information is immediately tokenized and that token is all that the merchant keeps. If they need to […]
Continue reading → [DISPLAY_ACURAX_ICONS]New Web Attack Will Crash Your iPhone, iPad or Mac A new CSS-based web attack will crash and restart your i-device with just 15 lines of code. The code exploits a weakness in iOS’ web rendering engine WebKit, which Apple mandates all apps and browsers use. Anything that renders HTML on iOS is affected. That […]
Continue reading → [DISPLAY_ACURAX_ICONS]A security researcher has found, he thinks, years worth of customer data available on Craigslist. Not exactly the dark web. The servers were from bankrupt computer store chain NCIX. The seller had, supposedly, hundreds of servers that were in storage. The storage company owner was selling the servers after NCIX did not pay their storage […]
Continue reading → [DISPLAY_ACURAX_ICONS]