Skip to main content

The WiKID Blog

Viewing posts tagged Authentication Attacks

Securing Google Apps for Your Domain

Posted by: admin 14 years, 9 months ago

I think there are two markets for Google Apps for your domain.  One is in education where you want to get the management of student accounts off your shoulders.  The other is real companies that like the web, use the web and want to cloud-source their infrastructure.  Twitter is clearly one of the latter and they recently realized the risks they were taking in doing so. 

read more / 0 comments

A cautionary tale

Posted by: admin 14 years, 9 months ago

Recently,  A Small Orange, a web-hosting company was attacked and their server taken down.  I hadn't heard of them, despite the fact that they are based in Atlanta.  Here are the details of the attack:  http://forums.asmallorange.com/index.php?showtopic=12908.

read more / 0 comments

The lessons from Guy Kawaski's twitter attack

Posted by: admin 14 years, 10 months ago

The lessons are sadly the same.  Static passwords are weak and DNS is weak.  The answer is two-factor authentication and either mutual https authentication or better DNS.  Since DNS is unlikely to be fixed any time soon...

read more / 0 comments

The ultimate target may not be you

Posted by: admin 14 years, 11 months ago

Small-to-medium sized businesses often assume that they are not important enough to attract attackers.  Yet, here's an example of corporate espionage where the attacker stole username and passwords for webmail accounts at a small marketing firm doing work for a large electronics manufacturer:

read more / 0 comments

Torpig data shows that even SSL logins are vulnerable

Posted by: admin 14 years, 11 months ago

From the fascinating analysis of the Torpig botnet:

read more / 0 comments

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom