Thoughts on Identity Theft
As a security guy, I get asked about Identity Theft a lot, and what can be done about it. To understand the problem, we have to first do a little bit of root cause analysis. In the spirit of Socrates,…
As a security guy, I get asked about Identity Theft a lot, and what can be done about it. To understand the problem, we have to first do a little bit of root cause analysis. In the spirit of Socrates,…
In part I of “The Password Pandemic”, I advised (in the same vein as NIST SP 800-63b) the use of passphrases, instead of passwords. This is because hackers have built massive databases of stolen passwords and tables full of password…
Humanity has a massive password problem. We might call it The Password Pandemic. Computers keep getting faster and cheaper, making passwords easier to crack, while human operators do not change their bad password habits. This is a losing proposition, with…
Synopsis: Chinese hacking effort APT10 is actually the evolution of “Titan Rain”, an earlier PLA cyber warfare effort. Titan Rain was aimed at government and defense, but APT10 is also being aimed at American small businesses, who do not have…