Friday, November 10, 2017

We only do that if we want the data to be secure.
Equifax ex-CEO: Hacked data wasn't encrypted
Customer data that was compromised during a massive breach of Equifax's systems was not encrypted, the company's ex-CEO told a congressional committee Tuesday.
During a three-hour hearing before the House Energy and Commerce Committee, Richard Smith blamed the massive hack on a combination of failed technology and human error. [Neither excuse explains why nothing was encrypted. Bob]
… Then, responding to a question from Rep. Adam Kinzinger, R-Illinois, Smith said the data was "not encrypted."




Something for my Computer Security students to consider.
Marissa Mayer had one alarming takeaway from Yahoo’s massive data breach
Marissa Mayer, the former CEO of Yahoo, testified Wednesday before the Senate Commerce Committee that Yahoo has “not been able to determine who perpetuated the 2013 breach” that its parent company Verizon said affected nearly all of the company’s three billion user accounts.
“To this day, we have still not been able to identify the intrusion that led to the attack,” Mayer said. Yahoo had a separate data breach in 2014, which the Justice Department in March said was the work of Russian government spies. That breach impacted some 500 million Yahoo accounts.
The testimony that Yahoo doesn’t know who instigated the 2013 breach was “more than a little disconcerting,” said Rick McElroy, a security strategist at the firm Carbon Black. The incidence of two breaches in such quick succession shows “a long period of time with no knowledge of what was happening when with their systems,” McElroy said.
What’s more, Mayer’s testimony also showed that companies are essentially competing in an arms race against bad actors, said Jeff Dennis, a managing partner and lead in the cybersecurity practice of Newmeyer & Dillion, a law firm based in Newport Beach, Calif. “Even Yahoo’s allegedly robust defenses were not enough in a fight with a foreign nation state, to ward off this type of attack,” he said.




Arming my Computer Security students.




I should use these more…
Comparison of Screencasting Tools
Screencasting is a fast and easy way to capture what is happening on your screen along with your voice or video of you speaking. Teachers can use screencasts to create self-paced lessons for students, tutorials, and supplements to sub plans. Students can use screencasting to tell stories or demonstrate their understanding of a topic or concept. There really are no limitations on screencasting can be used in schools.
The are quite a few screencasting apps available and sometimes it is difficult to figure out which one to use. My advice is to try out a couple of different ones to see which one you are most comfortable with. All of these are free and some allow you to access additional features for no additional cost by referring friends and colleagues. All of them work nearly the same way.
This chart compares Screencastify, Screencast-o-matic, Nimbus, Soapbox, and Loom.


No comments: