A Company’s Incorrect Passkey Process Can Lead to Phishing Attacks PREVIEW As I wrote in Part 1 of this series, Unlike passwords, passkeys are resistant to phishing attacks. Built into the passkey’s cryptographic protocol, the domain of the website you are logging into will be checked. You cannot be phished with passkeys. But unfortunately, I am already seeing an example of a companies implementing passkeys in… A Company’s Incorrect Passkey Process Can Lead to Phishing Attacks PREVIEW As I wrote in Part 1 of this series, Unlike passwords, passkeys are resistant to phishing attacks. Built into the passkey’s cryptographic protocol, the domain of the website you are logging into will be checked. You cannot be phished with passkeys. But unfortunately, I am already seeing an example of a companies implementing passkeys in…
LastPass Users’ Vault Stolen PREVIEW LastPass has a very serious cybersecurity incident. They have just made this announcement. The crucial part of this announcement is: The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website… LastPass Users’ Vault Stolen PREVIEW LastPass has a very serious cybersecurity incident. They have just made this announcement. The crucial part of this announcement is: The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website…
Is there a better password protection than Passkey? PREVIEW Fifty years ago, at the dawn of the Internet, people logged on to systems using passwords. Today, we are still doing the same. Despite the astonishing growth and development of technology over the past five decades, user authentication is still stuck in the technological stone age. The problem is, as I explained here “If you… Is there a better password protection than Passkey? PREVIEW Fifty years ago, at the dawn of the Internet, people logged on to systems using passwords. Today, we are still doing the same. Despite the astonishing growth and development of technology over the past five decades, user authentication is still stuck in the technological stone age. The problem is, as I explained here “If you…
Will Apple, Google and Microsoft till on the rented land of Meta? PREVIEW In the 1990s, Microsoft had a stranglehold monopoly in the Information Technology industry by controlling the operating system market of the PC industry (Apple was truly a niche player at the time). Then Google came along, disrupted Microsoft’s business model and rendered Microsoft’s monopoly irrelevant by making the Web the focal point instead. Today, we… Will Apple, Google and Microsoft till on the rented land of Meta? PREVIEW In the 1990s, Microsoft had a stranglehold monopoly in the Information Technology industry by controlling the operating system market of the PC industry (Apple was truly a niche player at the time). Then Google came along, disrupted Microsoft’s business model and rendered Microsoft’s monopoly irrelevant by making the Web the focal point instead. Today, we…
Why cybersecurity victims will grow It is no secret there is a worldwide cybersecurity skills shortage. In fact, this shortage is often described as a “crisis”. But the response to this crisis is always to deal with the supply side of the issue. Nobody is thinking about approaching the problem from the demand side. For example, the Australian government recently… Why cybersecurity victims will grow It is no secret there is a worldwide cybersecurity skills shortage. In fact, this shortage is often described as a “crisis”. But the response to this crisis is always to deal with the supply side of the issue. Nobody is thinking about approaching the problem from the demand side. For example, the Australian government recently…
Why Multi-Factor Authentication Will Soon Be Useless PREVIEW Multi-Factor Authentication (MFA) is a security measure that requires two or more proofs of identity to grant you access to an application. For example, in addition to providing your password, you need a one-time password (OTP) sent via an email, text message or an authenticator app. On some websites, it can be an approval prompt… Why Multi-Factor Authentication Will Soon Be Useless PREVIEW Multi-Factor Authentication (MFA) is a security measure that requires two or more proofs of identity to grant you access to an application. For example, in addition to providing your password, you need a one-time password (OTP) sent via an email, text message or an authenticator app. On some websites, it can be an approval prompt…
How to Defeat Facial Recognition Technology PREVIEW If you are on social media, photos of your face may be everywhere on the Internet. But some unscrupulous technology companies (e.g. Clearview AI) may have pulled these photos without your knowledge or permission to build a facial recognition model to connect your face with your online identity. Some people are resigned to the fact… How to Defeat Facial Recognition Technology PREVIEW If you are on social media, photos of your face may be everywhere on the Internet. But some unscrupulous technology companies (e.g. Clearview AI) may have pulled these photos without your knowledge or permission to build a facial recognition model to connect your face with your online identity. Some people are resigned to the fact…
Iran and Israel: Potential For Catastrophic War From The Middle East PREVIEW It seems pretty clear that the drumbeats of war are looming in the Middle East. Strangely, the mainstream media seem to be ignoring it, and the financial markets act unaware. That can only mean one thing. Get ready. For starters, should war break out, it will likely be a major Black Swan event. Obviously, economies and… Iran and Israel: Potential For Catastrophic War From The Middle East PREVIEW It seems pretty clear that the drumbeats of war are looming in the Middle East. Strangely, the mainstream media seem to be ignoring it, and the financial markets act unaware. That can only mean one thing. Get ready. For starters, should war break out, it will likely be a major Black Swan event. Obviously, economies and…
The DuckDuckGo Controversy Recently, there is a lot of noise about DuckDuckGo now being an arm of Bill Gates and a “turncoat” for censoring search results in an effort to combat misinformation. Should you still use DuckDuckGo? First, there are two issues with DuckDuckGo that should not be conflated. We will look at them one by one. How… The DuckDuckGo Controversy Recently, there is a lot of noise about DuckDuckGo now being an arm of Bill Gates and a “turncoat” for censoring search results in an effort to combat misinformation. Should you still use DuckDuckGo? First, there are two issues with DuckDuckGo that should not be conflated. We will look at them one by one. How…
Can you be phished when logged in via Google/Facebook? Let’s say you went to a website that allowed you to log in using your Google account: When you pressed the “Log in with Google” button, you saw this: You had checked that the pop-up web-browser window is really at Google’s domain (“google.com”) . So, you entered your Google account name (i.e. your Google email),… Can you be phished when logged in via Google/Facebook? Let’s say you went to a website that allowed you to log in using your Google account: When you pressed the “Log in with Google” button, you saw this: You had checked that the pop-up web-browser window is really at Google’s domain (“google.com”) . So, you entered your Google account name (i.e. your Google email),…
by blaggers 
