Posts tagged "Sileo"

EMV Security is Coming, Ready or Not (And You’d Better Be!)

EMV Security

Quite a while ago, not long after the Target data breach, I wrote a detailed  blog about the importance of the United States catching up to more than 80 other countries who already employ EMV security measures for their credit and debit cards.  (EMV refers to “Europay, Mastercard, and Visa” or “Chip and PIN” technology.)  Why so important?  This one statistic should answer that question: Almost half of the world’s credit card fraud now happens in the United States —even though only a quarter of all credit card transactions happen here.

As a consumer, you should be glad of the change because you will be much better protected than with traditional magnetic stripe technology we’ve clung to for so long.  EMV authentication includes a cryptographic message that makes each transaction unique. Having a card that is difficult to hack or duplicate and requires something YOU know (a PIN) will provide extra layers of protection.

Posted in Identity Theft Prevention by Identity Theft Speaker .
Tags: , , ,

Data Breach Expert’s Pragmatic View on PF Chang’s News

pf changsData Breach Expert Alert: The restaurant chain P.F. Chang’s China Bistro has reported a security breach that may have led to the theft of customer data from credit and debit cards used at 33 restaurants.  In addition to stolen card numbers, the intruder may have gotten  names and expiration dates as well.  The breach took place between October 19th of 2013 and June 11th of 2014 and supposedly has affected 33 locations.

If P.F. Changs follows in the footsteps of the recent Target breach, you can expect an expanding number of stores and customers affected over the coming days. It seems that the data breach playbook suggests that companies initially under-report the severity of the security lapse in order to keep customer shock and defection to a minimum. Once the news cycle has worn out the topic (generally 3-5 days), the breached company generally issues news on additional stores affected, customer data lost, increases in the actual data affected, etc. Let’s hope P.F. Chang’s does a better job of communicating damage the first time.

Posted in Cyber Data Security by Identity Theft Speaker .
Tags: , , , , ,

Facebook Using Your Likes, Browsing History & Mood Manipulation

facebook adsWhen you read the recent blog post from Facebook about how they’re going to “Make Ads Better” and “Give People More Control”, you really want to believe them.  You want to believe that they’re really just trying to make your life easier by providing ads relevant to your “likes” and apps you choose to install.  Sure, if I have the MLB app, why wouldn’t I want to know about a sale on caps for my favorite ball team?  Or if I’m an exercise nut, getting the latest gear for my next triathlon might be really important to me and save me the time of searching for it.

But the bottom line is this: Facebook is going back on something they promised years ago.  Not only are they using our likes and apps to market to us, they’re also using our browsing history to target ads.  They can “only” use information from sites that have Facebook buttons (to like, recommend or share) or that you can login to with your Facebook account, but these days, that’s practically any site!

Posted in Online Privacy by Identity Theft Speaker .
Tags: , , ,

Facebook Privacy Settings Get Needed Update

Facebook Privacy Settings Update

Facebook Privacy Settings… Some may say it’s too little, too late. I’m relieved that Facebook is finally responding to concerns about their confusing and weak privacy settings.  The social media giant (who has been losing customers of late) has recently made several changes to their settings.

Facebook Privacy Settings Update

  1. Additional photo settings.  Your current profile photo and cover photos have traditionally been public by default. Soon, Facebook will let you change the privacy setting of your old cover photos.
  1. More visible mobile sharing settings.  When you use your mobile phone to post, it is somewhat difficult to find who your audience is because the audience selector has been hidden behind an icon and this could lead to unintended sharing.  In this Facebook privacy settings update, they will move the audience selector to the top of the update status box in a new “To:” field similar to what you see when you compose an email so you’ll be able to see more easily with whom you are sharing.

Posted in Online Privacy, Social Media Privacy by Identity Theft Speaker .
Tags: , , , ,

Latest Tax Scams “Target” Data Breach Victims

irs scam alertIt’s no surprise that identity theft once again tops the “Dirty Dozen” tax scams put forth by the IRS for 2014.  They warn that if an identity thief has access to your personal information, such as your name, Social Security number or other identifying information, he or she may use it to fraudulently file a tax return and claim a refund in your name.  Think of the implications for the 110 million victims of the recent Target data breach as well as victims of the hundreds of other breaches at other retailers, universities, healthcare providers, government agencies and so on.

KrebsOnSecurity reports that the information from the Target breach alone has reportedly flooded underground black markets and cards are being sold from around $20 to more than $100 each.  This data is being sold in hundreds of online “stores” advertised in cybercrime forums.  A fraud analyst at a major bank was able to buy a portion of the bank’s accounts from such a store.

Posted in Fraud Detection & Prevention, Identity Theft Prevention by Identity Theft Speaker .
Tags: , , , , , , , , ,

Facebook knows what you said, EVEN IF YOU DELETE B4 POSTING!

delete keySelf-censorship on Facebook

Do you ever delete the words you type on Facebook before you hit post?

Have you ever started to type a status update that you thought was hilarious…until you realized your boss might not appreciate your 8th-grade humor? So what’d you do? You quickly hit the delete key and watched your comment disappear forever, right? Not exactly.

What if you are ready to make a snarky comment to Greg, the upperclass jerk who stole your high school girlfriend (and is about to get a divorce, ha ha), but decide to take the high road just before hitting the “post” button and instead, wish him well on his pending journey of love (despite the fact that it’s bound to fail)?

No harm done, right?  You never hit the post button, so no one ever saw it! Well, it turns out that’s not quite how it works in Facebook Land.

Posted in Online Privacy by Identity Theft Speaker .
Tags: , , , , , , ,

Netflix Users: Don’t Fall Hook, Line, & Sinker for Latest Phishing Scheme

netflix scamThe latest scheme to target unsuspecting consumers aims right at the core of what matters to the average person on an average night: our entertainment!  In a scheme unveiled by Jerome Segura in a blog post on the site Malwarebytes.org, scammers are going after the personal information and financial resources of Netflix users.

Here’s how it works:

You are on what looks like the real Netflix home page.  You enter your information, but instead of taking you to Netflix, you are redirected to a page telling you your account has been suspended for “unusual activity”.  You are given an 800 number for “Netflix Member Services” and a very authentic looking error code.

If you call this number, a real live human being answers sounding much like a real typical tech support person.  They will be happy to help you (even if you give them bogus account information!) if you’ll just give them that error code.  This then allows them to remotely access your computer.

Posted in Identity Theft Prevention by Identity Theft Speaker .
Tags: , , , ,

Is the CIA Spying on the Senate?

CIA spying on senate?What happens when a spy agency spies on the Congressional body that was created to keep spying in check in the first place? What are the implications of the CIA spying on the Senate?

That is exactly what Sen. Dianne Feinstein, D-Calif., head of the Senate Intelligence Committee, asserts has happened.  In a scathing address to the Senate, Feinstein, who has been a strong advocate of the intelligence community in the past, accused the Central Intelligence Agency (CIA) of violating “the separation of powers principles embodied in the United States Constitution including the Speech and Debate clause”.

This accusation stems from an agreement between the committee and the agency to allow committee aides to review millions of confidential documents related to the post 9/11 Bush administration detention program for handling terror suspects.  In the process of reviewing these documents, staffers came across an internal review of the agency’s practices. When the CIA became aware of this, Feinstein claims they searched the network — including the committee’s internal network — and removed the documents.

Posted in Cyber Data Security by Identity Theft Speaker .
Tags: , , , , , , , , ,

Biometrics are Like Passwords You Leave EVERYWHERE

biometrics,jpgBiometrics are like passwords, but worse.

Biometrics are like passwords that you leave everywhere (fingerprints, facial recognition, voice patterns), except that unlike passwords, you can’t change them when they’re lost or stolen. It’s easy to change your password, a bit harder to get a new retina. Like passwords, risk goes up as they are stored globally (in the cloud) versus locally (on a physical device).

In addition to the biometrics mentioned above that most of us have come to accept as commonplace, there are many other methods in use or under exploration:

  • hand geometry
  • vascular pattern recognition (analyzing vein patterns)
  • iris scans
  • DNA
  • signature geometry (not just the look of the signature, but the pen pressure, signature speed, etc.)
  • gait analysis
  • heartbeat signatures

Posted in Cyber Data Security by Identity Theft Speaker .
Tags: , , , , , , , , ,