Skip to main content

Posts

Showing posts matching the search for Computer

Attack Example - ClickJacking+Spoofing - UI Redress - Trusted User Interface

ClickJacking and Spoofing Attack Example - Trusted User Interface attack. It used to be that the most common operating system and browser being targeted for this kind of attack is Windows and IE. The underlying reason was that Windows has more users and Internet Explorer was basically File Explorer having a different user interface. Today, the attack surface is wider and much more complicated to notice. The screenshot posted here is a combination of a User Interface (UI) spoofing from a ClickJack.

Why Do People Care Less About Cybersecurity?

Imagine trying to remember 10 to 50 passwords or access credentials just to get access to things you need to work done. People do not really care less about cybersecurity. The problem is that oftentimes security implementations makes the system less usable for people. That is one of the reasons why it seems that people care less about cybersecurity. People don't really care less about cybersecurity, they are simply overwhelmed with the amount of decisions that they have to make to access their own data. People experience what is called 'decision fatigue'. It turns out, this is a known phenomenon in Psychology. This is exactly what people are experiencing and a research paper calls it 'security fatigue'

Cloud VM Vulnerability - Stealing from Cache

Cloud has been the buzz for several couple of years now. Cloud server, distributed networking, automatic redundancy, and all the other stuff promoted with the adoption of "Cloud." But there really is no cloud. To us, it's just a marketing lingo. The underlying technologies used to implement "cloud" has been there for a long time, they are system administrator and network engineer domain technologies. To us, the cloud is just another rack of servers managed by someone else. To us, it's just somebody else's computer.

Selfies and Vanity - Social Engineering Data Collection - Prefetching Biometric Data

How many of you would like to know what your age is according to a computer? How many of you would like to know who your celebrity look-a-like is? Did you try one of those web app? How about the mobile app? Wow! you look like that actor?! Congratulations! Wait, we have ten other friends who look like that actor? What a boring world if thousands of you actually look-a-alike one famous actor! Seriously though, it is just sad how guillible people are. It didn't even actually try to properly score similarity factor. It is sad that people just gave some other people one of the most identifiable factor about them. And the most common excuse, it is just harmless fun. Fun, Vanity - among the many of our frailties that threat actors (hackers, scammers) can exploit or use against us. Yes, our search for fun and validation can be easily used against us. Biometric authentication is gaining ground in everyday use. The commonplace fingerprint authentication is ... well, commonplace. It's n...

Internet Safety Myths

There are many myths surrounding Internet Safety and we'll be talking about them as a series of articles to dispel it. All in hopes to help bring in better internet usage habits for every Filipino. First an overview and later on, a separate article for each of the myths.

SocMed Safety & Privacy - Cautionary Tale - Facebook

Do you ever wonder what Social Media (SocMed) companies get out of letting you use functionality of a system that is continually being worked-on and improved upon by employing paid professionals? Do you want to know the answer? If the service is free and is not selling you any product, then their product is most likely you or your data. Yes, it's that simple. We encourage you to take some time to review Facebook's Terms of Service in the screenshot on the right and on their page - https://www.facebook.com/terms.php

Threats to Internet Safety

There are many Threats to Internet Safety for Filipinos and our government have long started passing laws that would enable us to counter the effects, prevent it from happening, and be made aware of its consequence. Let's start by understanding the official and legal definitions of these threats. Among them are: Cyberbullying, Online Scam, Online Libel, Identity Theft, and Photo & Video Voyeurism