Posts

Showing posts with the label April 04

EFF: Facebook Got Caught Phishing For Friends

Image
Facebook Got Caught Phishing For Friends Once again, Facebook is in the news for bad security practices, dark design patterns, and secretly reappropriating sensitive data meant for “authentication” to its own ends . Incredibly, this time, the company managed to accomplish all three in one fell swoop. What happened? Last weekend, news broke that Facebook has been demanding some new users enter their email passwords in order to sign up for an account on the site. First publicized by cybersecurity specialist e-sushi on Twitter , the unnervingly phishing -like process worked like this: any user who tried to create a new account on Facebook with an email from one of a few providers (including Yandex and GMX) was directed to a page that asked them to “Confirm [Their] Email”–by entering their email password. Soon after the news was reported more widely by The Daily Beast and Business Insider , Facebook discontinued its verify-with-password program . EFF was made aware of the ...

EFF: EFF’s New ‘Threat Lab’ Dives Deep into Surveillance Technologies—And Their Use and Abuse

EFF’s New ‘Threat Lab’ Dives Deep into Surveillance Technologies—And Their Use and Abuse EFF is proud to announce its newest investigative team: the Threat Lab. Using a combination of research skills, the Threat Lab will take a deep dive into how surveillance technologies are used to target communities, activists, or individuals. The Threat Lab is a multidisciplinary unit that’s part of our Technology Projects team. EFF’s Director of Cybersecurity, Eva Galperin heads up the group, which also includes Senior Staff Technologist Cooper Quintin and Senior Investigative Researcher Dave Maass . The creation of the Threat Lab is a logical evolution of the investigative work we’ve been doing at EFF for years. Some of the projects that will move under the Threat Lab umbrella include our research into state-sponsored malware and cyber-mercenaries , our analysis of Automatic License Plate Readers (ALPRs) and how data collected by police endangers privacy , and our work fighting spousewar...

3 Must Haves for Building a Resilient Edge

Image
OCP at the edge is predicted to be a larger market than hyperscale. That’s quite a statement considering hyperscale capacity is expected to double in the next few years. To support the growth and maintain the increasingly critical edge , we must build resiliency through a collaborative ecosystem. This was the topic of my presentation at the OCPSummit19 . Reduced latency and the need to process massive volumes of data are driving the edge. Plus, new 5G technology will depend on it. Applications and closed services are moving to the regional edge — some even closer to the user at the local edge. Call them cloud stacks, cloudettes or outposts, complex architectures including these local edge data centers will be required. Telco networks  will build similar architectures with a multi-access edge computing (MEC) model allowing delivery through fiber, radio network and wifi. And though users won’t know where an application is hosted, they’ll surely feel the effects when processing is...

Demystifying Cloud Cybersecurity – An Edge Infrastructure Operator Perspective

Image
As if their jobs were not challenging enough already, data center teams are being faced with a new test — protecting edge computing infrastructure from cyberattacks. Why is this happening? Because as of 2019, cybersecurity is not just a single battle or even an all-out war. For those with edge assets to protect, it is a constant low-level conflict where all infrastructures, systems, and networks themselves are constantly probed for weaknesses. Criminals and bad actors never sleep. Vigilance is vital. To address this complicated task, start with a strategic cybersecurity plan that addresses both internal and external factors to prevent and mitigate cybersecurity attacks. Naturally, the plan will take into account internal policies, but it must also consider how chosen providers will ensure a safe environment which matches the organization’s security profile. Understanding Edge Data Center Protection Cloudscapes Data center profiles are quickly evolving. Protection requirements hav...

6 steps for setting up a server room for your business

Image
Server rooms are an integral asset to the business as it is a physical space that houses all the data running through the computer network. Most of the time and resources of the IT department in any organisation is spent in troubleshooting server or network issues and performing routine maintenance. There is a need to design server rooms that are compliant with the safety norms of the organisation. To ensure this opt for infrastructure that is safe, spacious and computer friendly for the entire IT team. Here are the steps one should take to set up a server room for the business: Step 1: Determine the appropriate room size The first step is to lay the requirements of the physical space of the server room. It should be planned in a manner that there shall be enough space for the servers, wires, cables, and other necessary equipment to be kept comfortable. The IT department shall ensure that the data should be kept away from an exterior wall of the room. Step 2: Set up hardware for ...