Richard Mu

Fraser,
I do believe protecting usernames and passwords very important to insure the continuity of any business. We will continue seeing new methods to access our accounts. In my opinion, some arts to produce and design new login methods will be very helpful to break down the algorithms that attackers develop everyday to attack people.

Hi Fraser:

Great post! I think the curve encryption is very important to both business companies or government. By adding Curve 25519 and Curve 448 definitely will help the organizations gain a better understand of how to encrypt their documents

Fraser,
Your article is quite interesting and upon reading I was actually shocked to see such threats possible. You are right when you say that Information should not be disclosed publicly, but practically it is impossible for high profile people to not disclose or hide everything. The Image correction of QR code hacking is pretty shocking because if we consider China or United States, these countries use digital QR currency payments in almost 90% of their every transactions. How much will QR code hacking unfold itself further and what will be its impact across different channels that use QR code or user’s Identity codes for validation?

This is pretty scary since WPA2 is the wireless security currently in place for almost all Wi-Fi networks. I know at Verizon old routers still operate on WEP and they applied a firmware update to make sure they operate on WPA2 or we replace it. But to hear it has been cracked, make me a little paranoid about my info I send over the network and if someone is trying to crack it.

Frazer,

I read about this yesterday as well. It is a bit scary, but the patch was released and “fixed”. This is a man-in-the-middle attack. This is a big issue, but the problem for the “bad guys” is that they would have had to been in your WiFi range to get any of the information.

Add a compensating control to your house and do a quick search of the WiFi perimeter before sending sensitive data… But I guess that would mean when someone is walking around their house, they may be about to use their credit card on-line. We can’t win…

Hi Fraser:

Interesting article but at he same time pretty scary because WPA 2 is the wireless security for most of Wi-Fi.

This is a really interesting article. I think that the biggest thing was the people that they were going after. IT was people who most likely had higher level security clearance and could cause information that if, in the wrong hands could be a really big problem.

If Equifax was hacked earlier this year and Deloitte was last year, why are we just hearing about this now? Just curious – are their standards of revealing when the period of a hack more strict or less strict and why? Food for thought

Good question! Probably all managed by lawyers and PR specialists, who abide by whatever regulation is in place.

Neil,

The answer to this question is very important. In my opinion, these companies don’t want to announce these incidents at the time they get attacked, I think they like to know the consequences first and how much damage these attacks can result.

They are big organizations that deal with sensitive information all the time, they know the reaction of their clients who keep them having business won’t be good for their businesses. The impact of this announcement in the beginning of the year will be very bad since they companies like Deloitte start new projects in that time of the year. The impact will be very low if they announce these attacks in the end of the year.