Skip to Content

AOL Tech

password posts

Web, Social Networking

Twitter Hit by Another Direct Message Phishing Scam

It seems like every day that a new phishing scam hits Twitter, and Wednesday was no different. According to CNET News, Twitter warned its users to be on the lookout for a phishing scam that attacks via direct messages. "[If] you've received a strange (direct message), and it takes you to a Twitter log-in page, don't do it!," Twitter warned in a post.

Of course, this isn't the first scam that disguises itself in a direct message. But this message attempts to fool you by posing as a dear friend. According to Sophos, the message reads: "hi. this you on here?" and is followed by a link to the phishing site. The link, if clicked, redirects you to a fake Twitter log-in page, where the phishers intend to steal your user name and password. If you enter both, you'll see a faux over-capacity page that's supposed to make the scam seem more real. When Sophos logged in to the false page, it was directed to the over-capacity page, and then to a blog by someone called NetMeg99. It's unclear as to whether or not that blog is part of the scam, too.

Read more →

Computers, Web

Lazy Passwords Leave 21K Routers, Cams, Phones Open to Attack


In the "yet another thing to be paranoid about" category comes a report that nearly 21,000 routers, webcams and VoIP products are wide open to remote attack, simply because their owners have committed the ultimate sin: failing to change the manufacturer's default password for the devices.

The study was performed by Ang Cui, a grad student at Columbia University's Intrusion Detection Systems Laboratory, which has sponsored the likes of DARPA and the Department of Homeland Security. Researchers have now scanned over 130 million IP addresses, and discovered nearly 300,000 devices to be remotely accessible. And the 21,000 devices with default passwords are, of course, the most vulnerable -- "runts of the litter", if you will.

Read more →

Computers, Web

Hotmail Scam Reveals Most Common Password: 123456

It's never fun to be on the wrong end of a hack. But often, we can use them as learning experiences So, what did we learn when around 10,000 Hotmail, MSN, and Live.com account passwords were revealed on PasteBin last weekend? Either people are lazy or our memories have withered away to nothing in this digital age. According to Wired, the most common password on the list was "123456." That's right, a series of consecutive numbers was the password to 64 e-mail accounts on the list.

Bogdan Calin from the security site Acunetix analyzed the password list and found other disturbing trends, too. For example, just 6-percent used passwords that mixed numbers and letters. Nearly 42-percent of the passwords used only lowercase letters. What's truly scary is that the list only included addresses beginning with the letter 'A' or 'B,' which means we're only seeing a small small sampling.

Read more →

Web, Social Networking

New Twitter Worm Hijacks Your Account via Direct Message

Another day, another Twitter worm. The latest worm (or Tworm, if you please) to hit the micro-blogging site is even sneakier and more dangerous than others we've warned you about. That's because it's being spread via direct messages (DM) from users you know, not random spam accounts.

Let's keep it simple. If you receive a DM with the link pictured above, don't click on it. Delete the message immediately. According to Mashable, this link will direct you to a fake (but apparently pretty believable) log-in page, where, if you enter your account information, the worm will infect your account and set about infecting others by sending the link. If you already clicked on the link and your account has been hacked, simply change your password and report the problem to Twitter. Mashable says that Twitter is aware of and is handling the problem. As usual, avoid any suspicious links, even if they're from friends. [From: Mashable]

Computers, Advice, Web

How to Fortify Your Passwords



With phishing scams sweeping across the Net, including recent Facebook and Twitter attacks, it's important to take extra measures in protecting personal information from identity thieves. One method of avoiding phishing traps and hackers is to ensure that your passwords are virtually undetectable.

Riva Richmond, in the New York Times, outlines some easy and effective ways to secure passwords and make them harder to decipher. Important precautionary measures include using different passwords for different online accounts, specifically banking and bill-paying sites, and also using as many characters as possible in the password. Also, don't use easily obtained personal information, like birthdays, or street or pet names. Instead, try using obscure references, like a character or line from a favored book or song. Mix in symbols and numbers as well, in order to add another level of difficulty. If you love 'The Office,' you could use "dw1ght$833tf@rm," which translates into "Dwight's beet farm," or, if you're a sci-fi junkie, you could try "m0nt@g45I," which refers to the character Montag in the novel 'Fahrenheit 451.'

Read more →

Computers, Web

Forgotten Password Questions Too Easy to Crack, Study Finds


Remember when Sarah Palin's e-mail account was accessed by a 20-year-old student who guessed the answer to her Yahoo! security question (where she and husband Todd first met)? Well, the former VP candidate is just one of many whose "forgotten password" questions are way too easy for others to guess, according to a new study published in the Technology Review..

Researchers from Carnegie Mellon and Microsoft found that 28-percent of 130 participants had their security questions correctly answered by people they know and trust. Another 17-percent were vulnerable to people they knew, but didn't trust. The problem, it seems, lies with both users and the ineffectiveness of the security method itself.

Read more →

Computers, Laptops

Netbooks More Prone to Security Risks, Experts Warn

Security Experts Warn about Netbook Security
Netbooks are tiny laptops that offer the inarguably tempting combination of low price and light weight. Because of that, they've become hugely popular over the past year; after all, a fully-functional portable computer that costs between $300 and $400 is within impulse-buy territory for many. But, with thousands of people picking them up on a whim, some security experts worry that they're opening the door to security problems on a large scale.

A netbook's small size makes it easy to carry with you wherever you go, but saving personal information like bank information on one of these machines could be risky without some additional precautions, starting with a strong password. Many netbooks are inexpensive because they don't include any additional software beyond the operating system itself (typically Windows or Linux). Many full-fledged computers come with virus scanners and firewalls pre-configured to protect them.

There are, however, free solutions out there, including a number of free firewalls and a free virus scanner, too. Yes, they may slow down your computer a bit, and netbooks tend to be on the slow side to begin with, but trust us; these precautions are worth it -- unless you want to be the next Conficker victim. [From: Fox News]

Related Links:

Computers

Man's Offending Password Changed By Humorless Bank


Calling the British stuffy may be a bit of stereotyping, but the term certainly applies to a Lloyds TSB employee who changed a customer's password because it made fun of the bank. The customer had chosen "Lloyds is pants" -- translation: Lloyds is crap -- after a dispute with the bank, and found later that he couldn't access his account with it.

Steve Jetley used that password for his telephone banking account, but when he called up one day, the employee said the code didn't match what was in the system. It turned out that someone changed the password to "no it's not," so Jetley tried changing it back to his original phrase. The bank deemed it inappropriate, so he tried "Lloyds is rubbish," and then "Barclays is better," a reference to a rival business. They denied those too, saying it had to be one word, so he tried "censorship." They rejected that, saying it couldn't be more than six letters. Apparently, they haven't read up on safer passwords.

Lloyds said the staffer in question was fired and that in most cases, employees cannot see a customer's password. They claim that in this instance, the account is a business account with several people accessing it, so their advisors can see it. Unfortunately, Jetley is still trying to find a suitable password. We suggest he choose another bank. [From: BBC via Techdirt]

Computers

Five Steps to a Safer Password

Five Steps to a Safer Password

We try to keep you abreast of the latest scams, whether they appear to come from MySpace or the U.S. Government. We also try to let you know about new viruses that might infect your machine with monitoring software capable of stealing the passwords to all your online accounts. These are all bad, of course, but if you're using a password so simple that someone can guess it after two or three tries, well, you may as well download all the viruses you can find.

To help, the British government has started a program called Get Safe Online to help keep folks in the U.K. from being statistics. Its recommendations range from software update advice to ways to secure your wireless network.

When it comes to passwords, to save you some time, Shiny Shiny has compiled the top five tips to a more secure account. They are:

  1. Your cat's name is not unique. Leave it alone. Ditto your name, your birthday, your mom's maiden name or your birthday.
  2. Don't use a dictionary word. They can be cracked with clever -- and even not-so-clever -- password hacking programs.
  3. Don't use Qwerty, one of the most popular passwords on the block. Consecutive letters are generally a no-no as they're easily guessed.
  4. Use a combination of upper and lower case, letters, and numbers. If non-alphanumeric symbols are permitted, throw a few of those in. Make it as nonsensical as possible, even to you. And if you do need to write it down, try not to do it on a piece of paper entitled Internet Banking Passwords...
  5. Now is not the time to be restrained. Many sites will have a minimum-character-length password, but few have a maximum. Length is in your favor as it increases the myriad of combinations that would have to be tried out before your password could be cracked.
These all jive pretty well with our own recommendations compiled earlier this year, where we list password as the number-one least-secure password ever, for obvious reasons. And no, Mr. Lazy, password1 isn't much better.

From Shiny Shiny

Related Links:

Computers, Advice

Is Your Password on This List?

Password Security
Remembering dozens of different logins can be a chore, but assigning every account you have the same password can be dangerous, especially if you've used one of the top 10 most common passwords, according to 'PC Magazine.'

Top of the list? The word password, a choice so obvious that it's the first one potential intruders use when they're trying access other people's accounts. If you think you're being tricky with numbers, the slightly more secure password1 appears in the number eight spot, with your own first name coming in at number 10 as the most secure of the list of completely insecure passwords.

Here's the list -- make sure your password is not one of these terms:

  1. password
  2. 123456
  3. qwerty
  4. abc123
  5. letmein
  6. monkey
  7. myspace1
  8. password1
  9. blink182
  10. (your first name)

In addition to the list above, here are some things the editors at Switched recommend you avoid:

  1. Your birthday
  2. Your pet's name
  3. Your girlfriend/boyfriend's name
  4. Your street name
  5. Your social security number
  6. Your favorite color/number

Now, if you need help finding something unique and secure, try an online password generator, or just put a long jumble of random letters and numbers together. Whatever you do, stop using your company's name as your work password. That's a sure-fire way to get on your IT staff's "list."

From geeksugar and PC Magazine

Related Links:



Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling