SEARCH RESULTS
 
Showing 1-10 of 12 records
 
Expand article

LPL Financial reports eighteen compromised logons

The Article has images
2008-05-20 08:56:31 by Evan Francen in The Breach Blog
...logon passwords of fourteen financial advisors and four assistants of LPL Financial ("LPL")." The "hackers used these passwords to gain access to customer accounts in order to "pump and dump" penny stocks Reference URL Maryland State Attorney General breach notification Report Credit Maryland State Attorney General Response From the online...
 
Tags: lpl financial, lpl, lpl financial recently, lpl recently, login information, information, information security governance, information privacy, data
 
 
 
 
Expand article

Internet Explorer security levels compared

2008-09-17 00:19:36 by Steve Riley in Steve Riley on Security
 
...Logon 1 2 2 2 3 1 = Prompt the user for name and password 2 = Automatic logon only in intranet zone 3 = Automatic logon with current user name and password Privacy settings (on the "Privacy" tab H MH M ML L Allow persistent cookies D E E E E Allow per-session cookies D E E E E Allow third-party persistent cookies D P P E E Allow third-party...
 
Tags: script behaviors, script, script activex controls, activex controls, net framework, net, zone, content zone, content
 
 
 
 
Expand article

42,000 West Penn Allegheny Health System Patients

2007-12-28 17:06:00 by Evan Francen in The Breach Blog
 
...logon password? This is hardly the type of protection that this information warrants. The Windows logon password is easily bypassed in a matter of minutes. If the computer and data were protected with encryption, I would be more satisfied Only home care and hospice patients could be impacted, not patients at the hospitals Patients are...
 
Tags: sensitive personal information, personal information, information, nurse, home care nurse, patients, home, information warrants, computer
 
 
 
 
Expand article

Citizens Advice stolen laptop was encrypted

The Article has images
2007-12-13 13:37:02 by Evan Francen in The Breach Blog
...logon GINA (thus providing reasonable protection against password cracking). I have had the pleasure to use both Utimaco and Pointsec in different deployments, and both offer valuable features. The key is key management (no pun intended Assuming that key management is handled securely (i.e. no password written on the laptop), then we MAY be...
 
Tags: laptop encryption, laptop encryption software, advice, encryption, encryption product, citizens advice, laptop, sought advice, personal data
 
 
 
 
Expand article

Identity Framework Probable Feature List

The Article has images
2007-12-16 06:42:00 by Keith Brown in Security Briefs
...logons InformationCard (login control that accepts information cards SignInStatus (probably similar features to ASP.NET's LoginStatus Fx helps you build relying parties InformationCard login control You can specify whether you want to accept personal or managed cards If you accept managed cards, a wizard will take a card file as input to...
 
Tags: informationcard login control, login control, information card serializer, information, control, user authentication methods, user, custom sts, card
 
 
 
 
Expand article

Password policies. Once again.

2007-09-04 22:14:00 by Steve Riley in Steve Riley on Security
 
...logon attempts every 15 minutes 2 seconds. So, contrary to the claim, enabling this setting actually can have significant impact on usability Account lockout is there for people who absolutely need it. But I can't think of any instance where this is true. Instead, have a policy that requires simple passwords at least 15 characters long....
 
Tags: account, enable account lockout, password, account lockouts, disable account lockout, 42-day default expiration, default, expiration, password expires
 
 
 
 
Expand article

Yahoo to support OpenID single sign-on

2008-01-17 00:00:00 by HASH0x8b3d234 in Network World on Security
 
People with a Yahoo user name and password will be able to use that ID information to access non-Yahoo Web sites that support the OpenID 2.0 digital identity framework, reducing the amount of different logon information people need to create, remember and enter online
 
Tags: logon information people, people, information, digital identity framework, openid, support, enter online, yahoo user, remember
 
 
 
 
Expand article

Supporting your family, friends, and neighbors

2008-02-13 17:45:40 by Steve Riley in Steve Riley on Security
 
...logon forms, which causes the site to store your password in an encrypted cookie (this is fine). There are many third-party programs you can use to manage passwords; one popular and well-regarded one is the free Password Safe . Wont all this just overwhelm my FFN Not really. Ordinary people subconsciously make security and safety decisions...
 
Tags: suspicious e-mail message, mail, home computers defense, home computers, e-mail, home, web mail, windows live mail, site
 
 
 
 
Expand article

Phishing Tactics Evolving

The Article has images
2008-04-21 11:18:17 by HASH0x85bed5c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...logon.html user-142o3ds.cable.mindspring.com /onlineid/cgi-bin/onlineid.bankofamerica/sso.login.controller user-142o3ds.cable.mindspring.com /halifax-online.co.uk/ mem bin/halifax LogIn/formslogin.aspsource=halifaxcouk stolnick-8marta-8b-r1-c1-45.ekb.unitline.ru /halifax-online.co.uk/ mem bin zux006-052-125.adsl.green.c...
 
Tags: halifax-online, halifax, mem binformslogin, user, user-142o3ds, web application vulnerabilities, mem binhalifax loginformslogin, vulnerable sites, turkish defacement
 
 
 
 
Expand article

Stokes County Schools laptop missing after Spring Break

The Article has images
2008-04-21 13:13:47 by Evan Francen in The Breach Blog