Home

Security expert reacts to Canadian federal workers' privacy breach

Canadian news organizations are reporting on a data breach of the personal information of government employees:

“A dysfunctional compensation system that's withholding paycheques from federal workers has also been breaching their privacy, CBC News has learned. Newly released documents show senior officials were warned as early as Jan. 18 that the new Phoenix system has a flaw that allows widespread access to employees' personnel records, including social insurance numbers.”

: SECURITY EXPERT; Talking Point; Posted On Thursday, 28 July 2016 11:50

LastPass Zero Day...why you shouldn't be put off

Recently, a researcher claimed that LastPass, a popular password vault, was vulnerable to a zero day flaw that could potentially affect millions of people. Commenting, Lee Munson, security researcher for Comparitech.com, said:

: SECURITY EXPERT; Talking Point; Posted On Thursday, 28 July 2016 11:47

Beware of “Trump Yourself” Facebook app...your privacy could be at risk

Paul Bischoff, security and privacy advocate for Comparitech.com is warning users about a new Facebook app from Hillary Clinton’s presidential campaign that invites users to “Trump Yourself”, as it could have privacy implications for users:

: SECURITY EXPERT; Talking Point; Posted On Thursday, 28 July 2016 11:44

5 Security Experts react to DNC email, email encryption information

John Gunn, VP of Communications, VASCO Data Security comments: "Encryption is simple to use, inexpensive, and highly effective. It doesn’t guarantee the hackers could not have obtained the information, but it certainly would have made their job a lot more difficult. This issue again underscores that there is a significant shortage of qualified IT security professionals - this event is just more evidence of the problem. Political campaigns are not known for paying well or for providing long-term employment. They should have hired outside consultants, but buying was airtime likely the priority. (Re emails sent to known associates) The old “if someone is respected they can’t be hacked and have no personal motives” strategy: obviously, it is utter nonsense.