Skip to main content

The WiKID Blog

Viewing posts by admin

citrix-and-security

PDP has recently pointed out how easy it is to hack into poorly configured Citrix servers, which can easily be found via Google et al. He's also posted information on how to hack Citrix in a more forceful way. So, it is a good thing that we've posted documentation on how to protect Citrix with WiKID two-factor authentication. Also, yesterday, I posted a similar how-to document for protecting for GoToMyPC Corporate.

higher-quality-info-will-cost-you-black-market

Check out the McAfee Avert blog for look at the black market for banking information. Accounts with high balances cost more, but have guarantees:

For such prices, the seller offers some guaranties. For example, the purchase is covered by replacement, if you are unable - within the 24 hours - to log into the account using the provided details.
So now the banks know how long they have to spot a compromised account to drive the profits out of the black market.

moved-the-webserver-to-amazon-ec2-is-is-faster

We've moved our web-server to the cloud. We're getting more traffic and we've been using more bandwidth for development, so we decided to move the server to Amazon's EC2. This may be temporary depending on how it holds up. It's a little disconcerting to have your website out there in the ether.

choicepoint-stiock-drops-10-percent-in-one-day

As we have discussed elsewhere in this Blog, there is value in protecting your information assets. We've talked about the impact of information security breaches on stock price. Well, Choicepoint provides a good case in point. This was not a “hacker” attack as labeled in the popular press (further moving the definition of that word from its original meaning), but rather a traditional scam that took advantage of a lax credentialling process (yes, Irony with a capital I) that apparently is fax-based.

checkfree-breach

Holy Cow.

Hackers on Tuesday hijacked the Web site CheckFree.com, one of the largest online bill payment companies, redirecting an unknown number of visitors to a Web address that tried to install malicious software on visitors' computers, the company said today.
First, I find it very hard to believe that you would hijack the domain for one of the world's largest payment processor and only try to install malware.

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom