Welcome to our fully functional beta site. We welcome all comments
informed!
the Official Informatica Blog - Subscribe & get informed!
Don't get exposed to privacy and security breaches as you surf the InternetI'm not a fan of banner ads, browser pop-ups nor of what's come to be called behavioural advertising. I find that such online marketing largely falls into two categories. The kind that has nothing to do with what I'm interested in, and the kind that is surprisingly well targeted to my personal interests. Since the former is irritating and the latter is downright creepy, I'm not likely to click on any online ads anytime soon.
 
That said, I'm certainly not against commercial promotion and far be it from me to pass judgment on one of the most profitable ways to spend - and make - money online ($25B in 2010 and an estimated $31B in 2011). I'm even sympathetic to the argument that online advertising keeps the Internet humming along quasi-free as the services we practically depend on in turn depend on advertising dollars to help them resist the temptation to charge us.
 
However, when this online marketing comes with security surprises and compromises user privacy, I am forced to give it a thumbs down. So what's the best way to block Internet ads?
01/08/2012 15:50:20
Security Study Makes No senseTELUS and The Rotman School of Management - whose motto is "a new way to think" - decided that asking a few hundred IT professionals about IT security at their firms and reporting the straight numbers would be the way to go. Fair enough, but why they decided to turn it into a comical affair with the allure of a self-serving initiative is curious at best.
 
Never mind that. It gave me a great opportunity to start your new year off on an amusing note, and for that, we can all be thankful. Enjoy the article. It goes best with eggnog.
 
Happy new year!
12/31/2011 14:21:22
Mesopotamian tablet http://images.cdn.fotopedia.com/flickr-3224132892-hd.jpgEverything I'm reading these days indicates that hacking and malware infections are going to increase in 2012. I don't need to provide references here because everything you're reading does too. Yet all the software you need to secure computers, both corporate and personal, is available for free. There's everything from scanning and blocking to diagnosing and disinfecting the computing devices you depend on. So how come we're poised for continued growth in data theft and general cyber-mischief?
 
In short, you're the weakest link. If it weren't for you, your computer would have a much higher chance of leading an infection-free existence, gracefully growing old and slowly descending into obsolescence. Instead, you may hear yourself thinking out loud: "it was fast at the beginning, but now it's so slow I'm thinking of getting a new one". This platform-independent mantra is no doubt very depressing for laptops and smartphones to overhear and even the shiny new tablets, smug in their reliance on a firmware-based operating system, aren't too far behind.
 
What are your options? Panic? Trade in your new tablet for an old one (circa 3000BC)? Pester the one social recluse in your family with open-ended questions?
12/27/2011 04:45:01
Another nest of vipers has been uncovered this past week. Over 100 people involved in sharing ‘extreme’ rape videos of babies and children have been arrested with up to 200 more suspected in an operation spanning 22 European countries.
 
The scale of the crime is staggering. One individual was found to possess over 120 thousand gigabytes (120 terabytes) or 36000 hours of horrific video footage. Over 2400 storage devices were confiscated in Denmark alone. The vermin caught by Europol (the joint police organization for the European Union) in the other 21 countries ranged from Internet stalkers to facilitators in elaborate schemes to lure, prepare and eventually abuse young children. They joined the 184 child rapists arrested earlier this year (this time from 30 countries) in an operation that also rescued at least 230 abused children. 670 more suspects were identified out of a 70,000 pedophile network of mindblowing proportions.
12/19/2011 02:15:52
Microsoft Phone ScamIf you have not already received a call from a ‘Microsoft Windows Center’ representative insisting on helping you get rid of ‘lots of hacking file in your computer’, chances are that you will, and soon.
 
This unfolds according to a pattern in use for the past few years and begins with a long distance ring from any number of fake Caller IDs. It’s almost always an informational message from a somewhat assertive caller indicating that your computer is spewing malware and it needs to stop.
 
Helpfully, they offer to work with you to clean it up, and if you’re lucky enough for the "supervisor" to be available, that individual will take you through the steps of liberating you of some cash in exchange for the support call, or remotely accessing your computer for further "diagnosis".
 
Either way, don’t feel too special as this kind of phone scam accounts for up to 80% of all reported fraud according to the organization previously known as PhoneBusters.
12/05/2011 01:15:00
According to popular expert opinion, there are seven areas in today’s mobile devices where vulnerabilities can create security or privacy breaches. Nowhere is this more true than in the paragon of mobile digital success: the iPhone.

Nothing short of a juggernaut, new versions of the quasi-ubiquitous device have all but evaded attempts at hacking it by consistently introducing innovative new features and by leveraging a clever strategy of built-in obsolescence.


It follows then that each of these areas corresponds to specific security controls, tactically building a ‘defense in depth’ approach to securing the iPhone for personal use.
11/09/2011 00:24:59
With the introduction of LinkedIn’s new Settings Page this year, the company also took the opportunity to make some changes to its Privacy Policy. Since the expansive document’s 29 pages would put even the most troubled insomniac into a deep slumber, the company conveniently provided a summary which hints at different ways it seeks to monetize its service and in part emulate Facebook’s much maligned model.

Instead of stringing together 7415 words however, the latter prefers to describe its privacy-related practices through a series of nested pages that branch off an initial six sections. You get the idea. Six of one, half a dozen of the other. But enough of that. I plan to send you on your way with something you can actually use.
11/03/2011 23:09:39
Reputational Impact
Talk to anyone in the world of business about their biggest hacking fears and you’re bound to hear that “embarrassment” ranks right up there near the top. Everyone knows that to do a proper job of alienating clients and embarrassing your organization you need to not just be good at, but excel at three things in particular.

In this post, I don't just discuss those three things, but give real life examples you can follow and achieve similar results, albeit with some effort, because long time customers do tend to be loyal and people have a relatively high, inherent barrier of trust that must be ... overcome. That said, once one gets the hang of it, as spectacularly demonstrated in this post, one can negatively impact thousands, millions, even tens of millions of once loyal followers! Consider this your free, exclusive, three-step guide.
10/30/2011 06:12:55
Twitter Phishing
For the past few days, we’ve been privy to tidbits of information about the recent PlayStation Network breach (heretofore known as the PSN Breach) often dismissive and always shrouded in a certain aura of non-seriousness due to its status as an entertainment industry fixture. Indeed, breaches of government records, personal health information and financial data garner a vastly more pronounced knee-jerk reaction of shock and awe.
04/28/2011 19:27:49
Twitter PhishingHow does it feel to win the Twitter Phishing Lottery you ask? Pretty good, I must say. I'm one of "the very few 10 Lucky Winners"! I knew it was going to be good when I saw the Subject line that screamed: TWITTER CLAIM ALERT. How could I resist? I clicked. I just had to.
04/12/2011 19:04:03
Epsilon breachThere has clearly been no shortage of spectacular breaches, and at least some of the perpetrators aren’t altogether shy about their exploits. The brazen attacks are reminiscent of the ‘90s hackers, but with a definite profit motive similar to the new cybercriminals of the ‘00s. It’s an interesting mix and a sign that things are changing. But for now, a lot of big name companies are licking their wounds and they have mostly themselves to blame.
04/05/2011 18:47:15
As Twitter is my witness, over the past weeks and months we have been deluged with reports of impropriety from the Transportation Security Administration (TSA) and other airport security complaints from around the world. Indeed we’ve read stories of humiliated men, women and children, watched videos and listened to audio recordings [...]
12/03/2010 06:30:00
Exotic (and quixotic) security exploits
Toronto-based security expert Claudiu Popa shares some of his favourite tales od dare-devil crooks and their daring heists.
10/05/2010 06:00:00
Facebook security and privacy hardening guide
Security expert Claudiu Popa provides Facebook users an excellent security and privacy setting guide to help them gain bette control of their social media profile.
09/27/2010 15:30:00
QR Code Security – Are we ready to discuss the risks?
The Quick Response codes we see on everything from movie posters to business cards are becoming the ubiquitous contact links of an entire new generation of mobile devices and the people who use them. Originally invented in Asia at the end of the last millennium (circa 1994 Japan, actually), these matrix or 2D (two-dimensional) barcodes [...]
08/29/2010 17:30:00
How to Out-Secure the Competition in 5 Easy Steps
Security expert Claudiu Popa shares his list of no-nonsense recommendations to help anyone tackle that challenge, and mitigate the vast majority of the risk to their business.
07/26/2010 06:00:00
The Toronto G8/G20 Summits:
How Simple Security Communication Blunders Can Negatively Impact Public Opinion Apparently Toronto drew the short straw. It’s our turn to host the distinguished G8 and G20 summits this year and Canada is certainly stepping up to the plate. All our reluctant tax-paying citizens are financially responsible for ensuring the comfort and safety of a select [...]
06/16/2010 06:00:00
Unforgivable: Ignorance and apathy about user privacy can no longer be tolerated
The Wall Street Journal’s discovery about the shady privacy practices of some of the world’s largest social networks came as a surprise and probably won’t help any of the big names they mentioned. In what the WSJ unfortunately characterized as a ‘privacy loophole’ exploited by such organizations as Facebook, MySpace, Hi5 and Digg, the social [...]
05/21/2010 13:00:00
Give Google a break
Yesterday’s revelation that Google’s StreetView cars collected more than just anonymized pictures of buildings and cars (and some comical situations) came as a surprise to many, including regulatory bodies in a number of countries that are now considering miscellaneous lawsuits and penalties, according to the BBC.   To wit, the issue was that these ‘photographic [...]
05/17/2010 12:00:00
The Last Throes of Traditional Anti-Virus Software
It should come as no surprise to anyone that given the vast numbers of malicious software anti-virus companies are claiming to detect, the number of viruses out there is practically limitless. With the introduction of polymorphic viruses more than a decade ago, and the current practice of injecting specialized Trojans into known vulnerabilities, the combinations [...]
05/11/2010 11:00:00
Newsflash: Facebook doesn’t care about your privacy
love how every other article about Facebook has some kind of privacy angle. As if Facebook, a site designed to share your information as broadly as possible, was also responsible for preserving people’s personal details under their control. All for free.  The latest privacy snafu allowed a confidentiality breach to occur with people’s Facebook [...]
05/07/2010 06:00:00
Scammers & fraudsters extend Holiday earnings at Haiti’s expense
As much as consumers look forward to Christmas every year, retailers salivate at the boost in revenue and its positive impact on earnings. No one enjoys the holidays more than criminals however, from petty scammers to organized crime groups whose tens, perhaps hundreds of millions of dollars in revenue make up for months of preparation. [...]
01/19/2010 05:45:00
What part should travelers play in airport security?
I can safely say that I have one of the most satisfying occupations in the world. Helping to protect the intangible assets that drive the world’s economies is certainly something that most individuals (read: men) with a superhero complex should aspire to, once they figure out that forcing radioactive spider bite situations to occur is [...]
01/11/2010 10:00:00
The decade of convergence and the (n)ever-changing risk landscape
A full decade after convergence was hailed as the next big thing, right around the turn of the millennium; this elusive concept is making a comeback. The difference is that we now have a massive infrastructure, a vast audience, and the will to make contact. Indeed 10 years ago, the potential of the Internet to [...]
01/06/2010 10:30:00
Holiday fear mongering! Will Anyone Survive 2010?
Since my previous blog post I read a ridiculous number of security projections for 2010. These range from catastrophic scenarios to something much, much worse. To these I say, bah humbug! It seems that Christmas is the time of year when many security professionals find it acceptable to drop their responsible approach to informing the [...]
12/24/2009 12:15:00
The only security advice you need this holiday season
With the holidays now upon us, what better way to get started than to talk about what’s on everyone’s mind? No, it’s not the last minute shopping nor the latest credit card spending statistics. It’s really about the amounts of money lost to financial fraud, scams, hacking and identity theft. The holidays are a special [...]
12/16/2009 05:52:04