Blog Assignment 5

Information Security

Article Link:

(http://www.media-awareness.ca/english/issues/privacy/why_issue_privacy.cfm)

In the electronic age, raw data has become a valuable commodity—and the protection of personal information has become increasingly important to our sense of privacy. The Security topic I would like to share is very basic and is the one about which we have learned till now i.e. Information Privacy. I was reading about the different security topics and found one article very interesting. It provides some facts, incidents and talks about different issues like why information privacy is important? How information privacy is compromised?

Blog Assignment 4

Well that’s something real bad.....!
Article Link:
(http://www.theregister.co.uk/2009/02/04/phpbb_breach/)

I have never ever heard the news of this type. By using an unpatched security bug, a hacker managed to hack the website "phpBB.com", one of the net's more popular bulletin board software packages and that to for more than two weeks. Till hacking, it is ok; we can understand that websites could be hacked. From the article, hacker got full access to a database containing names, email, address and hashed passwords, he tried to intercept around 400000 accounts and managed to crack around 28000 user passwords by using MD5 algorithm, now what is your reaction?

phpBB made some efforts to change their security after the attack but they lost a lot.

Blog Assignment 3

"Attack on UK Ministry of Defense"

Article Link: (http://www.defensetech.org/archives/004644.html)

“Cyber attack on UK Ministry of Defense (MoD)”, the important and may be biggest cyber attack news in the last month. According to reports, a hybrid computer virus penetrated the MoD security system, which affected their IT systems. Also, over 24 RAF bases and 75% of Royal Navy ships – including aircraft carrier Ark Royal – systems were infected. These attacks could be originated from Russia and there is possibility that other government systems are also not safe. These type of attacks fall into the Intrusion type of attacks, due to attacks on TCP, that results on connection hijacking, when the host has weak security.

If these government high level security systems can be affected then general users are easy prey.

Malware attack - Blog Assignment 2

Malware Everywhere.........!

Article Link:
(http://news.cnet.com/8301-1009_3-10149884-83.html?tag=mncol)

Are you desperately searching for a job, loading your resumes on job websites? But what if some people do not want your resume to reach to the right hands? Yes it could happen, Monster.com, one of the biggest job search website announced that Monster's database of user account information - which includes user IDs, passwords, email addresses, names, phone numbers, and some demographic data - was illegally accessed and information was taken.

According to monster, stolen information did not include CV’s or other sensitive information like social security numbers or financial data. But for scammers it is very easy to use general data and to acquire sensitive information from people.

Current economic downturn is the best time for hacker’s to load more malware into the websites and to breach people information. So, as urged by monster, if you have accounts on this type of websites keep changing passwords frequently and avoid loading sensitive information.