Assange arrested, faces extradition for hacking

Posted on April 12th, 2019 by Responsible Cyber

by Paul Ducklin Julian Assange, founder of whistleblowing organisation WikiLeaks (or co-founder, depending on whom you ask) , and arguably Ecuador’s most famous Londoner (or infamous, depending on whom you ask), is in custody following his arrest yesterday. Assange rose to fame by leaking secret government documents that the WikiLeaks organisation acquired from a wide […]

Read More

Serious Security: How web forms can steal your bandwidth and harm your brand

Posted on April 11th, 2019 by Responsible Cyber

by Paul Ducklin Spamming is a word we all know and an activity we all loathe – it’s when crooks blast out unwanted emails for products we don’t want at a price we won’t pay from from suppliers we’ll never trust. And the word spam has given us related terms such as SPIM for spam […]

Read More

Facebook apps expose millions of users’ Facebook data

Posted on April 6th, 2019 by Responsible Cyber

by Paul Ducklin It’s happened again! Unsecured personal data found lying around in the cloud! Unfortunately for Facebook, which has been caught up in numerous “concerned about cybersecurity” stories lately, this isn’t just any old data… …it’s data that was acquired via Facebook by third-party apps. It’s a little bit like what happened with Cambridge […]

Read More

Serious Security: GPS week rollover and the other sort of “zero day”

Posted on April 5th, 2019 by Responsible Cyber

by Paul Ducklin I bet you’ve heard of GPS, short for Global Positioning System. It’s owned and operated by the US government but it’s available for free to anyone in the world – and, boy, is it widely used. GPS is a fantastic feat of science and engineering that is anything but simple in implementation, […]

Read More

Ep. 025 – Business Email Compromise and IoT surprises [PODCAST]

Posted on March 30th, 2019 by Responsible Cyber

by Paul Ducklin We explain how to avoid losing money to the cybercrime known as BEC, short for Business Email Compromise, and our experts give you some great tips on what to look out for when you plug new devices into your network. With Paul Ducklin, Matthew Boddy and Benedict Jones. This week’s links: To […]

Read More

“Twitter 2007 multicolor” hoax – debunk it, don’t spread it!

Posted on March 28th, 2019 by Responsible Cyber

by Paul Ducklin We’ve written about internet hoaxes many times before on Naked Security. Sometimes, hoaxes – made-up nonsense about software, bugs or hackers – get spread widely because they sound exciting and scary. Even when a hoax sounds bizarre and unlikely, it may get picked up and repeated as an earnest truth by millions […]

Read More

Facebook password crisis – what to do? [VIDEO]

Posted on March 23rd, 2019 by Responsible Cyber

by Paul Ducklin Facebook has just admitted to years of problems with password hygiene by leaking plaintext passwords into logfiles by mistake. Watch this special edition of Naked Security Live… …we answer the questions lots of people have been asking us since we first wrote about this issue: What happened? Was this a blunder or […]

Read More

BitLocker hacked? Disk encryption – and why you still need it [VIDEO]

Posted on March 22nd, 2019 by Responsible Cyber

by Paul Ducklin A security researcher in New Zealand just showed that it’s possible to wire up a low-cost data sniffer to the security chip in a Microsoft Surface laptop… …and read out the decryption key used by BitLocker, the software that is there to keep the data on your hard disk safe. That has […]

Read More

Ep. 023 – Facebook promises and Google Chrome patches [PODCAST]

Posted on March 15th, 2019 by Responsible Cyber

by Paul Ducklin This week, the Naked Security Podcast tries to figure out where Mark Zuckerberg’s new “Facebook Privacy Promise” is going, and digs into both the technical and community aspects of a recent Chrome zero-day exploit. With Anna Brading, Mark Stockley and Matthew Boddy. (This week, Duck was away in London giving a dramatic […]

Read More

Serious Security: What we can all learn from #PiDay

Posted on March 14th, 2019 by Responsible Cyber

by Paul Ducklin It’s Pi Day – or World Pi Day, if you prefer, or even Universe Pi Day, given that Pi is a universal constant. As you may remember from school mathematics, Pi is the cool and amazing ratio you get when you divide the distance around a circle by the distance across it […]

Read More