THE WALL STREET JOURNAL News Alert
Americans’ Cellphones Targeted in Secret U.S. Spy Program
The Justice Department is scooping up data from thousands of cellphones through fake communications towers deployed on airplanes, a high-tech hunt for criminal suspects that is snagging a large number of innocent Americans, according to people familiar with the operations.
# – # – #
Think this will wake up “We, The Sheeple”?
Think again!
Argh!
# – # – # – # – #
Leave a Comment » | 
SECURITY | 
Permalink
Posted by reinkefj
http://gizmodo.com/how-hackers-reportedly-side-stepped-gmails-two-factor-a-1653631338
How Hackers Reportedly Side-Stepped Google’s Two-Factor Authentication
Kelsey Campbell-Dollaghan
*** begin quote ***
Writing on Ello, Blakeman describes how hackers gained access to his Instagram account through his Gmail. Even though he had two-factor turned on, the hackers were able to reset his Instagram password through Gmail and take control of his account (which has since been restored). So how did they do it? Blakeman says that Wired’s Mat Honan, himself a veteran of an epic hack, helped him by suggesting he check with his cellphone provider.
It turns out his number had been forwarded to a different number—which is how the hackers gained access:
“The attack actually started with my cell phone provider, which somehow allowed some level of access or social engineering into my Google account, which then allowed the hackers to receive a password reset email from Instagram, giving them control of the account.”
*** end quote ***
I suspect it’s those STUPID secondary identification authenticators!
Once again, if your mother’s maiden name isn’t “R2D2GMAIL” at Google and “R2D2AMAZON” at Amazon, then you are asking to be hacked.
Sorry, but, I use LASTPASS and just keep the secondaries in the notes.
AND, I never reuse a password anywhere!
YMMV.
# – # – # – # – #
Leave a Comment » | SECURITY | Tagged: gmail, Instagram, Security, service providers, two factor authentication | Permalink
Posted by reinkefj
Cyber Security Alert: Potential Phishing Attack
Hackers impersonating “E-ZPass Service Center Personnel” are trying to steal customer information by sending an email that contains a malicious link. Attacks have been targeted at personal email addresses stating that they have an overdue toll debt.
The attack tries to trick the user into clicking on a link to view an account invoice. The URL linked in the email directs the target to a malicious website that compromises the user’s personal account information. E-ZPass has identified the following subject lines in connection with the attack emails [PDF]: “in arrears for driving on toll road”, “Payment for driving on toll road”, “indebtedness for driving on toll road”, and “Pay for driving on toll road”.
If you receive such email in your personal mailbox, do not click on the attachment or forward it to anyone. If you have clicked on a link via your personal email account, we recommend that you change the password for any information that you entered into the malicious site.
# – # – # – # – # 2014-Jul-28 @ 11:05
Leave a Comment » | SECURITY | Tagged: Cyber Security Alert, E-ZPass, Potential Phishing Attack | Permalink
Posted by reinkefj
2014-Jul-07
ATTENTION, AMAZON Users
Today, I received a very official looking email from AMAZON email address.
It had an Amazon Dot Com link that “went to my account”. I check what was behind the text. Because the junk after Amazon Dot Com was garbage, it resolved to the front page and the cookie signed me in.
I almost fell for it EXCEPT:
Even after that analysis, when it came it I almost screwed up.
Take care.
Of course, I reported it to: stop-spoofing@amazon.com
# – # – # – # – # 2014-Jul-07 @ 23:49
NOTE: GMAIL didn’t like it either.
The message “Order Details” from Amazon.com (delivers@amazon.com) contained a virus or a suspicious attachment. It was therefore not fetched from your account fjohn@reinke.cc and has been left on the server.
Message-ID: <0MfXLH-1XEgyE1rtz-00P1O6@mx.perfora.net>
If you wish to write to Amazon.com, just hit reply and send Amazon.com a message.
Thanks,
The Gmail Team
# – # – # – # – # 2014-Jul-08 @ 13:06
Leave a Comment » | SECURITY | Permalink
Posted by reinkefj
# – # – # – # – #
This is all about what? Not security for sure.
It’s about preparing to decent liability claims.
imho
# – # – # – # – #
|
|||||||||||||||||||||||||||||
Leave a Comment » | SECURITY | Permalink
Posted by reinkefj
Target denies PIN data was compromised after insider claims encrypted personal info was stolen along with 40 million credit and debit card numbers
Target hackers allegedly stole encrypted PINS in ‘sophisticated’ operation
The retailer says it has learned of some scam emails related to breach but doesn’t have specific information as to how it happened
Details of 40 million credit and debit card accounts stolen between November 27 and December 15
Target claimed Wednesday that encrypted personal ID numbers were not accessed by hackers
Target faces at least 15 lawsuits seeking class action status
By DAILY MAIL REPORTER
PUBLISHED: 15:56 EST, 24 December 2013 | UPDATED: 15:29 EST, 25 December 2013
*** begin quote ***
Target Corp is crying foul on insiders who recently told the media that encrypted PINs were stolen along with more than 40 million credit and debit card numbers in the retail behemoth’s catastrophic data breach.
The hackers who attacked Target Corp and compromised more than 40 million credit cards and debit cards also managed to steal encrypted personal identification numbers, according to a senior payments executive familiar with the situation told Reuters.
*** end quote ***
The “card” companies are too cheap to put in a better level of security on the cards.
They could “chip” them or at least put photos on them.
The industry has many ways to tighten up the controls, but that translates into money.
As long as fraud stays low, they are happy to eat it.
Unless the cost equation changes, not much will happen.
You have to laff at the politicians and bureaucrats who are on TV pontificating.
They are the ones who created this mess.
Without Social Security Number, no of this nonsense would be possible.
So like Harry Browne said: “Government is good at one thing: It knows how to break your legs, hand you a crutch, and say, ‘See, if it weren’t for the government, you wouldn’t be able to walk.'”
Argh!
# – # – # – # – #
Leave a Comment » | SECURITY | Permalink
Posted by reinkefj
You are currently browsing the archives for the SECURITY category.
-
-
FJohn Reinke
Consultant at Technology Legacies LLC
Advisor, Computer Governance Committee at Manhattan College
Editor / Publisher at Jasper Jottings
Greater New York City Area
JJ Positraction JJ Endnotes Downsize DC
Philosophy of Liberty
I have NOT received any gagged governmental information requests
