Forum Moderators: phranque

Message Too Old, No Replies

NSA Hacker Chief Explains How to Keep Him Out of Your System

Most of this is commonsense

         

tangor

9:38 pm on Jan 31, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



It was the talk most anticipated at this year’s inaugural Usenix Enigma security conference in San Francisco and one that even the other speakers were eager to hear.

Rob Joyce, the nation’s hacker-in-chief, took up the ironic task of telling a roomful of computer security professionals and academics how to keep people like him and his elite corps out of their systems.

[wired.com...]

No smoking gun revelations, but a pretty fair list of things you can AND SHOULD do to secure your systems (home or work).

robzilla

11:11 pm on Jan 31, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



remove hardcoded passwords and legacy protocols that transmit passwords in the clear.

I'm not sure I would classify the FTP, POP3 and IMAP protocols as "legacy", but they're definitely bad from a security standpoint, and yet they remain very popular despite the availability of alternatives or security add-ons (i.e. SFTP, POP3S, IMAPS, etc).

bill

5:16 am on Feb 4, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



They rarely use 0-day exploits apparently. They can get by with your run-of-the-mill unpatched systems. That's a real incentive to keep things up to date, because it's not just governments coming after your systems.

tangor

5:24 am on Feb 4, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



(winkers!) All too true. And because of same I still have a small (diminishing but still there) cottage industry of locking down systems for dumb... er... not techknowledgable (sic) clients.

JS_Harris

1:48 pm on Feb 21, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Tangor, you were logged into webmasterworld at 9:38 pm on Jan 31, 2016 to post that bit of news. A quick look at their super computer which records all internet traffic at an ISP level for the word Tangor would show them that you are the only person to have generated a data trail for that word near that time. Your name, address and everything else about you was available to him before you typed a word. Not even the common sense helps anymore.

Once they tapped into all of the worlds data flow it was game over in terms of privacy. The only thing holding them back would have been processing power to sort it all out, I don't think that's a problem anymore for them :)

tangor

2:06 pm on Feb 21, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



the way the gubermint keeps spending my tax dollars, probably not! :)