Table of Contents What to Look for in a Hardware Security Key in 2023 Frequently Asked Questions Best Overall Security Key: Yubico FIDO Security Key NFC Best Premium Security Key: YubiKey 5 NFC USB-A Best Security Key for Bio-authentication: Kensington VeriMark Best Key & Password Manager Combo: OnlyKey Best Open-Source Security Key: Nitrokey 3A NFC Update, 02/01/2023: We’ve reviewed our recommendations and have updated our best open-source category with the Nitrokey 3A NFC. What to Look for in a Hardware Security Key in 2023 If you’ve been on the internet, then you’ve probably heard of two-factor authentication, usually abbreviated as 2FA . Typically, 2FA involves receiving a code you have to insert after you enter your password correctly. You can receive this code either through an SMS message, an email, or an authenticator app. These solutions can have problems though, especially since SMS messages can be intercepted through SIM-swapping … [Read more...] about The Best Hardware Security Keys of 2023
Non citizens and social security
Security researcher finds bug that may have allowed hackers to bypass Facebook’s 2FA
Meta created a centralised system to allow users to manage connected experiences like logging in across accounts on Facebook and Instagram . A security researcher has said a bug in this system, called Meta Accounts Center , may have allowed hackers to disable two-factor authentication (2FA) – a way that helps users to keep their social media accounts protected from unauthorised access. Gtm Mänôz, a security researcher from Nepal, said he reported a bug he found in the Meta Accounts Center in September last year. Bug in Meta Accounts Center Mänôz said that he found that Meta did not set up a limit to enter login code it sends via SMS as a part of the two-factor authentication process. As per the researcher, this bug would have allowed a hacker to bypass the authentication protections using brute force attacks. Read Also Meta to shut down social to-do list app 'Move' in March It is to be noted that when users set up two-factor … [Read more...] about Security researcher finds bug that may have allowed hackers to bypass Facebook’s 2FA
Many security teams are prioritizing prevention over detection, with disastrous results
Audio player loading… When it comes to securing the premises, the majority of businesses are prioritizing prevention over detection, investigation, and response, a new report has found. However as a result, large numbers of firms are being hit by data breaches or other attacks, with the incidents constantly getting worse. Researchers at Exabeam surveyed 500 IT security professionals, finding roughly two-thirds of the respondents (65%) prioritize prevention as their number one endpoint security (opens in new tab) goal. For a third (33%) - detection was the highest priority. Too late to the party To make matters even worse - the businesses are actually acting on this thinking. Almost three-quarters (71%) spend between 21% and 50% of their IT security budgets on prevention, while 59% invest the same amount as they do for detection, investigation, and response. The trouble with this approach, according to Exabeam’s Chief Security Strategist, Steve Moore, … [Read more...] about Many security teams are prioritizing prevention over detection, with disastrous results
Cisco fixes security flaw that could have allowed sneaky hacking
Audio player loading… Cisco has confirmed it patched a high-severity flaw that was impacting its IOx application hosting environment. Cisco IOx is an application environment that allows consistent deployment of applications that are independent of the network infrastructure and docker tooling for development. It is used by a wide range of businesses, from manufacturing, to energy, to the public sector. The flaw, tracked as CVE-2023-20076, allowed threat actors to achieve persistence on the operating system, thus gaining the ability to execute commands, remotely. Who is affected? "An attacker could exploit this vulnerability by deploying and activating an application in the Cisco IOx application hosting environment with a crafted activation payload file," Cisco said (opens in new tab) in its security advisory. Users running IOS XE without native docker support are affected, as well as those running 800 Series Industrial ISR routers, CGR1000 compute … [Read more...] about Cisco fixes security flaw that could have allowed sneaky hacking
amazon: Spanish court rules Amazon ‘Flex’ couriers were falsely self-employed
A Spanish court has ruled that Amazon must compensate self-employed couriers who used their own vehicles for deliveries, a move welcomed by a labour union that has criticised worker conditions in the "gig economy". The Madrid labour court said that the tech giant would have to pay Social Security contributions for the 2,166 people it hired under the guise of external contractors within the now-defunct " Amazon Flex " scheme and recognise them as regular staff during the periods they made deliveries. It did not provide the total to be paid. Amazon scrapped the Flex programme in Spain last year, after a 2020 Supreme Court ruling forced companies to hire freelance couriers as staff, and the government introduced a pioneering law to the same effect in 2021. Read Also Tech jobs still hot in US amid mass layoffs, finds report Big Tech earnings face more heat as cloud cover fades "Amazon is a company that is not only a … [Read more...] about amazon: Spanish court rules Amazon ‘Flex’ couriers were falsely self-employed
10 miti (falsi) sulla sicurezza informatica
La cybersecurity non è una cosa tanto complicata, almeno in certi aspetti. Ad esempio, anche qui ci sono un sacco di falsi miti che andrebbero sfatati; perché credere in certe cose sbagliate ci porta ad abbassare la guardia, esponendoci a rischi anche grazi. Alcuni di questi miti anno una storia antica, e risalgono a un'epoca in cui quasi nessuno capiva cosa fosse la rete, e le minacce informatiche erano facili da capire, nonché ridotte in numero. Gli hacker attaccano solo le grandi aziende I cybercriminali sono imprenditori e prendono di mira chiunque, dalla grande impresa fino al singolo utente che naviga su Internet, per rubare principalmente dati e credenziali utili a monetizzare il loro sforzo. Spesso e volentieri l'idea è di colpire quante più persone possibili, sapendo che in pochi casi l'investimento sarà ripagato profumatamente. Bastano un antivirus e un firewall per essere al sicuro L’ antivirus e il firewall non sono sufficienti. Di fatto, … [Read more...] about 10 miti (falsi) sulla sicurezza informatica
Compact custom version of Windows 11 released
What just happened? Windows 95 occupied less than 100MB when first installed. A clean Windows 11 install, however, needs around 20GB. Nobody doubts that software will need more data as technology marches forward, but many believe Windows hasn't justified a 20,000 percent install size increase over 28 years. One developer may have proven this with a custom installation that cuts Windows 11 to half its default size. This week, NTDEV released Tiny11, a version of Windows 11 that needs only around 8GB of your hard drive and can run on 2GB of RAM. It also removes Windows 11's somewhat demanding system requirements, but users should know it makes some steep sacrifices to slim down. A streamlined version of Windows 11 Pro 22H2, Tiny11 comes in an ISO available on archive.org that's just 3GB compared to Microsoft's official 5.1GB ISO download. The smaller version of Microsoft's latest operating system includes the bare necessities like accessibility software, the calculator, … [Read more...] about Compact custom version of Windows 11 released
Tech firms would pay $89B in taxes if offshore gov’t debt came home
According to a new report , four major American tech firms hold $163 billion in United States government debt overseas for tax reasons. That means that American taxpayers are effectively paying interest toward a corporate cash stash held abroad that likely will not return to the US anytime soon. Further Reading Silicon Valley fights to keep its Dutch Sandwich and Double Irish loopholes If Apple, Microsoft, Google, and Cisco were to repatriate this money to the US, and if it were taxed at the current corporate rate of 35 percent, “it would produce a $89 billion windfall for the US Treasury—equivalent to 17 percent of America’s projected $514 billion budget deficit this year,” according to the report, published Wednesday by the UK's Bureau of Investigative Journalism (BIJ). “The amount invested by Apple, Microsoft, Google, and Cisco is so large they would collectively be the 14th biggest overseas purchaser of Treasury securities, above Singapore and Norway.” That … [Read more...] about Tech firms would pay $89B in taxes if offshore gov’t debt came home
The best Wi-Fi 6 routers 2023: top Wi-Fi 6 and 6E routers
The best Wi-Fi 6 routers are the next-generation devices in router connectivity. Wi-Fi 6 is fast becoming the standard in wireless technology, and a lot of newer devices now support and use this next-generation technology. And, if you want to take advantage, only a Wi-Fi 6-capable router will do. Make the most of Wi-Fi 6 technology with the best wireless router . You'll need a powerful one that will be more than capable of meeting your demands, especially if you have an overcrowded network. These days, middling internet speeds are inexcusable, especially with all the smartphones , tablets , Ultrabooks , and smart home devices we use at home or in the office. With a reliable and robust Wi-Fi 6 or even Wi-Fi 6E router, your internet signal will experience a boost in speed, which will not mean faster internet but a stronger, uninterrupted signal to every device and computer connected to your network. We've tested our share of routers, putting them through their paces to … [Read more...] about The best Wi-Fi 6 routers 2023: top Wi-Fi 6 and 6E routers
Microsoft alleges attacks on French magazine came from Iranian-backed group
Microsoft said on Friday that an Iranian nation-state group already sanctioned by the US government was behind an attack last month that targeted the satirical French magazine Charlie Hebdo and thousands of its readers. The attack came to light on January 4, when a previously unknown group calling itself Holy Souls took to the Internet to claim it had obtained a Charlie Hebdo database that contained personal information for 230,000 of its customers. The post said the database was available for sale at the price of 20 BTC, or roughly $340,000 at the time. The group also released a sample of the data that included the full names, telephone numbers, and home and email addresses of people who had subscribed to, or purchased merchandise from, the publication. French media confirmed the veracity of the leaked data. The release of the sample put the customers at risk of online targeting or physical violence by extremist groups, which have retaliated against Charlie Hebdo in recent … [Read more...] about Microsoft alleges attacks on French magazine came from Iranian-backed group