LinkedIn Links Up With Two Factor Auth

Two factor authentication roll outs seem to be are definitely a theme for the last week. LinkedIn announced on Friday (May 31) that they have now rolled out two factor authentication to help their user base protect their user's profiles. From LinkedIn: Most internet accounts that become compromised are illegitimately accessed from a new or unknown computer (or device). Two-step verification helps address this problem by requiring you to type a ...

Continue reading

Turkey Dialup Access

Yesterday I noticed from several Twitter feeds that protests had broken out in Istanbul. The flash point in this case was the attempted bulldozing of trees in Taksim Square to make way for a new construction project. The police reacted...or rather overreacted. From Reuters: Thousands of demonstrators massed on streets surrounding Istanbul's central Taksim Square, long a venue for political unrest, while protests erupted in the capital, Ankara, and ...

Continue reading

YourAnonNews Twitter Account Compromised

This morning is off to a VERY interesting start. It appears that the Twitter account for @YourAnonNews as well as one from the People's Liberation Front (@PLF2012) have been compromised by a group identifying itself as Rustle League. They have threatened to start posting information from direct messages on the accounts. I won't be daft enough to ask if they had implemented two factor authentication. Queue the summer hacker wars. /...

Continue reading

Evernote Rolls Out Two Factor Auth

This week seems to be two factor authentication week. Yesterday we read about Amazon rolling out their "Login" product offering and today we find that Evernote is now offering two factor auth for their premium and business users. This is a great step coming a couple months after the well publicized breach. It is unfortunate however that it had to take a breach to get this rolled out. From Evernote: ...

Continue reading

Amazon Rolls Out “Login” 2FA

Joining the growing chorus of two factor authentication options we find that Amazon has rolled out their own iteration. They have integration step by steps for web apps here as well as SDKs for Android and iOS. For more on this read on. From The H Security: Amazon's service uses the OAuth 2.0 authentication protocol. Its predecessors at Twitter and elsewhere also support this standard. Amazon has specially commended the security ...

Continue reading

Rob Ford’s former staffers’ emails, telephone records ordered destroyed: sources

The more I watch Toronto's mayor Rob Ford's administration unravel I can't help but wonder if the end is nigh. Case in point there is a possibility that has been raised that the emails and phone records of newly departed staffers have been or may be deleted shortly. Just wondering...when do the police get involved? From The Toronto Star: One source the Star spoke to was alarmed at the ...

Continue reading

BSides London 2013

I got to attend BSides London 2013 today and I have to say that I could not be happier. Saw some great talks and I was very impressed with the staff at BSides and their execution of the conference was fantastic. Great job! So, when I arrived this morning in the heat...yes, heat. It's actually warm here in London. Who knew? I ran into Daf Stuttard aka Portswigger who was ...

Continue reading

What To Do If Your iPhone Gets Stolen

There are many times when we hear stories about people having their treasured iThinger stolen. For those of us who are similarly burdened with gadgets we share in that pain of loss if only for a moment. So, what if it was your device? Well, here is a great article that walks you through what to do if your iPhone gets stolen. From Mac Security Blog: Theft is a lame ...

Continue reading

Evernote Breached

Evernote, the popular note taking service, announced today that they were breached by an adversary. I read through their announcement and found myself with a few questions. From Evernote Blog: The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords. OK, understood. My question to that point is, how ...

Continue reading

RSA 2013 Parties

FINALLY got around to posting this. My bad. Here is our list for the RSA 2013 Parties. This list will continue to grow as we get closer to the date. We have also included the requisite “Disaster Recovery Breakfast” from our good friends at Securosis. It was a huge saviour for me last year ...no really ...we have bacon. Be sure to RSVP! If you have a party that you know ...

Continue reading