
 |
Security is SecureAgent FocusSecureAgent Software focuses on data security, offering a variety of products to help enterprises of all sizes manage data more efficiently with total security.
SecureAgent technology is patented - exclusive to its products. Here is a partial listing of offerings:
SuperVision - A single-point tool to manage multi-platform systems, to securely monitor and respond to every aspect of an operation.
IDG 9480 Secure Data Solution - A method of providing tape-level backup, off-site, without the physical problems of loading and transporting tapes.
IDG 9074 Secure Communications Controller and Secure TN3270 - A combination product to replace up to 64 3174 controllers with a single device with data encryption and compression and secure remote operation with instant replay for troubleshooting problems.
SecureAgent DataSafe - A system to provide secure, automatic, off-site backup of data for desktop computers and servers, with total retrieval capability.
SecureNotes - A program to guarantee secure document delivery, with any e-mail program.
For more information on SecureAgent Software visit our website at www.secureagent.com. |
 | Paper Still Preferred Password StorageMany experts tell you not to write passwords down. And there are all sorts of automated password storage programs. But many experts still use paper and pencil.
Bruce Schneier is a cryptology expert who created a Windows tool called Password Safe five years ago after many years of simply writing his passwords down and keeping the paper in his wallet. And today, he says, "Either write the passwords down and put them in your wallet, or use something like Password Safe."
Password Safe lets users remember only one password to access their file.
But Elinor Mills of Cnet surveyed a dozen or so experts, many of whom confessed they still rely on paper to keep track of passwords -- and one even confessed to using a Post-It note under a keyboard. She also surveyed a plethora of password-management programs and found they all worked, to an extent, but all had problems -- like only working on a Windows desktop but not on a friend's computer or a Mac.
One expert, Phil Zimmermann, creator of PGP, uses an encrypted text file. But he says it is a "cumbersome, manually operated password management system."
A cryptology cracker, Karsten Nohl, has perhaps a perfect system -- he keeps all his passwords in his head.
"I use a nontrivial function to diversify passwords for every use," Nohl said. "Security-through-obscurity, but only because I cannot compute any strong ciphers in my head." |
 | Thieves Stealing Corporate IDsColorado and Georgia authorities say criminals have been stealing corporate identities and using them to open fraudulent credit accounts at major retailers, including such as Home Depot, Lowe's, Office Depot, Apple and Dell.
Colorado's secretary of state sent warnings to 800,000 businesses registered with the state, warning that a hole in its registration system can let intruders see and change information. The office says some intruders have used this to modify registration data and then use that to open online credit lines with retailers.
Company registrations are public records, open to view by anyone. But Colorado does not require a username or password to access that information and change it. Georgia has a similar problem, an official said -- if you want to declare yourself chief executive of Coca Cola all you have to do is "to go online to the Secretary of State's site to the section where you can change registration information."
It's not known how many businesses may actually have been affected, but the Colorado Bureau of Investigation says thieves have made at least $750,000 in bogus purchases at Home Depot alone. The CBI said five people have been arrested in California in connection with the case.
Officials in both states said cases involve people in the music business, including a singer and the owner of a music production company. |
 | Wi-Fi on Third of PlanesWi-Fi service is now available on about a third of domestic flights, but there still are some problems for travelers who want to connect to the Internet in the air.
First, it can get expensive; it can cost $13 for three hours of service. And it's hard to know just what planes and flights may have the service available.
There also can be a power problem. Wi-Fi quickly zaps laptop batteries so travelers need to know what type of DC power adapter to bring to keep computers running.
Most carriers (eight) use a service called Gogo from a company called Aircell. Aircell says it's on 986 planes, about a third of the total domestic fleet.
Southwest Airlines uses a service called Row 44; it's on just six planes now, but Southwest is adding 15 a month and plans to have its full fleet equipped by the end of 2012.
Services are similar, but Row 44 uses satellite signals while Aircell relies on ground connections. |
 | Adobe Building Reader SandboxAdobe Systems is building a protective sandbox for its popular Reader program. That should prevent attacks using holes in the PDF (Portable Document File) technology, which attackers have exploited.
In a sandbox, processing takes place in a confined area and applications cannot add or delete files, modify system information or access processes. If malicious content sneaks into a PDF file it will be contained within the sandbox.
This "Protected Mode" feature will be included in the next release of Reader and in all Reader plug-ins for popular browsers. It will be enabled by default.
Adobe said it is not offering this feature for Macintosh because the vast majority of Reader downloads -- and exploits -- are on Windows systems. |
 | New Windows Virus ConfusingA new virus affecting all versions of Microsoft's Windows operating system at first appeared to be limited to major control systems running Siemens programs, but quickly was discovered to be worse than that, spreading through USB devices and exploiting a flaw in the "shortcut" code.
The pest is called Stuxnet and attacks all shortcut code ending in .Ink. It can affect a system without any deliberate action by the user,
Its biggest target is industrial systems running a specific Siemens control programs. It can steal automation layout and control information and then upload it to a remote server. Infected systems not running the Siemens software can still be used to spread the pest.
Siemens is fixing its program and Microsoft is working on a patch. Microsoft posted a "Fix it" tool, but many users will not apply that because it makes desktop, taskbar and Start menu operations nearly unusable. It advised corporate administrators to block downloads of files with .Ink extensions.
While its initial target is industrial systems, it also can spread to other units. |
 | Visa Reducing Payment Card DataVisa, Inc., has begun an initiative to reduce the amount of payment card information stored by retailers.
Most card-issuing banks and financial institutions serving retailers now require merchants to store full 16-digit credit and debit card account numbers on their systems. That Primary Account Number (PAN) is used to resolve refunds, chargebacks and similar customer disputes.
But merchant information also has been involved in some major credit thefts, when thieves use payment terminals or other devices to gain access to a database.
Now Visa wants banks and financial institutions to allow merchants to use truncated, disguised or otherwise hidden account numbers or use tokens -- a set of proxy numbers -- to better protect card information. |
 | Are Facebookers Really Happy?Facebook now boasts 500 million users, but a lot of them are apparently not happy. That's also true for MySpace, its social networking rival.
The American Customer Service Index rated social sites for the first time this year. Facebook scored 64 -- lower than sites for electronically filing federal income taxes. MySpace scored 63.
ACSI said both sites showed "abysmal performance."
Wikipedia ranked highest among social media at 77, with YouTube at 73. Twitter wasn't rated because so many of its users access it through a third party.
Privacy concerns, advertising, interface changes, navigation problems and frequent notices about "annoying" applications were major user complaints about Facebook.
Google continued to be the best search engine, but its approval rating slipped slightly and both rivals Yahoo and Microsoft's Bing were close behind. |
 | Consumers Want Social NetworkingConsumers want companies to provide information and communications through social networks, but most businesses aren't ready for that, a new survey says.
Yankee Research Group, an industry analyst firm, says 70 percent of consumers surveyed want social networking services and 65 percent expressed satisfaction with their business connections on social networks. But only 30 percent of businesses were prepared for that.
A Yankee analyst said social networking offers companies significant opportunities for contact centers. |
 | Autofill Flaw Exposes DataA flaw in the autofill feature of Apple's Safari web browser can expose user data, a security researcher says.
It could also affect Chrome, another WebKit browser, and experts recommended users of either browser disable the autofill feature.
A WhiteHat security researcher said a malicious web site could be used to access autofill data on Safari even if the user had never visited that site before and had never entered information to it.
The autofill feature can provide information automatically for data-filling forms and other uses. |
 | Apple Security: Fact or Fiction?Many people think Apple products are inherently more secure than those offered by other vendors, notably Microsoft. But the security firm Secunia says that's a myth -- Apple products consistently have more vulnerabilities than those of Microsoft.
Microsoft actually ranked third in Secunia's rating, behind Oracle.
Microsoft is not to blame for many of the insecurities on personal computers with its Windows operating system -- most of those holes are actually from third-party programs using Windows.
Popularity breeds insecurity, Secunia indicates. Over the last five years, products with the most vulnerabilities were Apple's iTune and Quicktime, Microsoft's Windows and Internet Explorer, Sun's Java (now part of Oracle) and since 2008 Adobe's Acrobat Reader and Flash. |
 | IBM Getting HealthyIBM plans to invest $100 million over the next three years on medical research.
It plans to put 100 of its experts onto various aspects of medical technology. It also plans to hire doctors and medical experts to help define and refine new medical technology.
IBM has already been active in some areas of medical technology, at times partnering with medical equipment manufacturers, but the new initiative will aim at improving health care, with better diagnoses and treatment, and lowering costs. |
 | Mozilla Fixes 16 Firefox BugsThe Mozilla Foundation has issued patches for 16 security holes in its Firefox 3.6 Web browser, its biggest patch day since March. It also issued 12 patches for the older Firefox 3.5.
Nine of the vulnerabilities were rated critical, meaning an attacker could use them to compromise a machine.
Mozilla is now paying a $3,000 bounty for major bugs discovered in Firefox. |
 | Dell Motherboards Serve MalwareDell has warned that a small number of replacement motherboards for four PowerEdge servers may contain malicious programming.
It said it had contacted all affected customers and had removed all impacted motherboards from its supply chain. Dell said it had had no reports of customers being adversely affected.
Dell didn't provide details on what the malware was or how it got onto the boards, but said it manifested itself only when a server was in a specific configuration without anti-virus programs. |
 | Hot Tip: Watch That SmokeA cigarette could be an unrecognized threat to your building and computer security.
How, you ask? An intruder will locate a door where employees gather outside to smoke. He'll get cigarettes and join the group, standing close enough to look like part of the group, but separate enough to not entice conversation or questions.
When the smokers go back inside, he'll just follow on in (sometimes he may hang around a day or two before trying the entry).
Once inside, he looks for an untended terminal, a Post-It or other paper with passwords and similar information or even a computer guidebook or employee manual.
Once armed with those invasive tools, he'll leave, either going out with the next smoke group or through another exit. Exits are rarely secured and departees are rarely challenged.
You can prevent such intrusions with some simple actions.
Secure smokehole doors, if not with a guard or monitor, at least with a sign-out/sign-in sheet.
Have an employee/visitor identification system that uses a clearly recognizable badge which must be displayed at all times. Then teach employees to question anyone seen in or near the building without proper ID.
If possible, add a security camera with video recorder in the smokehole area.
|  |
Thank you for reading this edition of our SecureAgent Secure eNewsletter.
If you would like to respond to any of our stories, please use the following form.
|
|