Free book - Cloud Management and Security ($ 109 value ) - free till 03/01/2017

Get it here
http://www.tradepub.com/free/w_wile231/

CloudBleed Flaw - Just on character issue caused it?

Fact is stranger than Fiction



A tiny but serious bug poked a hole in this digital wall. One character—an instance of "==" that should have been ">="—made it possible for computers to skip over the dividing wall between two different people's data. This allowed users exploiting a certain technique to obtain a random chunk of a random person's otherwise private information

If you have doubts you can check if an website you access is affected with the following URL
https://cloudbleedcheck.com/

There are a few plugins to check you bookmark but, I am not sure how safe or authentic they are.



For More info:
http://www.popularmechanics.com/technology/security/a25380/cloudbleed-explained/

Banking Apps - Good news & Bad News (actually its Bad News)

Good news -

1. 11 million banking app logins a day during 2015.
2. American Federal Reserve stats show that 71% of people using mobile banking services are confident about the security of mobile banking transactions.

Bad news - Pradeo Labs study: 
50 top banks from 22 countries

•  7 breaches per app
• 100% failure 
• 50 million risky users

Check here for more info:
http://www.itsecurityguru.org/2017/02/24/security-specialist-identifies-security-breaches-apps-50-top-global-banks/

Free book - Hacking for Dummies

i
I have not read this book so, no comments on the quality or content.



Get it here:

http://www.tradepub.com/free-offer/hacking-for-dummies-5th-edition-20-value-free-for-a-limited-time/w_wile229?sr=hicat&_t=hicat:1207

Interesting Idea - Add Duress Code to prevent forced unlocking of devices

From the Article:

A key observation from these cases is that the police can compel you to hand over a fingerprint, but cannot order you to tell the police which finger is used to unlock the device. This would be tantamount to ordering you to provide a passcode.

In the short term, Apple and Google can take steps to alleviate this threat by adding duress codes into their access control mechanisms. For instance, scanning anything but your right index finger might force a password-only lock.

In the long term, we need to rethink deploying deniability as a set of strategies for helping users evade coercion in general. What is similarly important is that all devices must have some sort of deniability baked-in, full stop





For more details:
http://www.mit.edu/~specter/articles/17/deniability1.html

FREE book - Security Engineering , 2nd edition by Ross Anderson

This book is 4 years old but , contains a lot of good information.



Download it here
https://www.cl.cam.ac.uk/~rja14/book.html

Your Mobile Device knows more about you than you know about yourself so, do you wipe it carefully before getting rid of it?

Information stored on Mobile devices can include can information

• Where you live, work, and places you frequently visit
• The contact details for everyone in your address book and applications, including family, friends, and coworkers
• Call history, including inbound, outbound, and missed calls
• SMS (texting), voice, and multimedia messages
• Chat sessions within applications like secure chat, games, and social media
• Location history based on GPS coordinates or cell tower history
• Web browsing history, search history, cookies, and cached pages
• Personal photos, videos, audio recordings, and emails
• Stored passwords and access to personal accounts, such as your online bank or email
• Access to photos, files, or information stored in the Cloud
• Any health-related information, including your age, heart rate, blood pressure, or diet

How do you get rid of this before disposing?

Check Below

https://securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201612_en.pdf