ICT Security + Privacy + Piracy + Data Protection - Censorship - Des cours et infos gratuites sur la"Sécurité PC et Internet" pour usage non-commercial... (FR, EN+DE)...

Curated by Gust MEES

Your new post is loading...

Scooped by Gust MEES

Scoop.it!

68 Millionen verschlüsselte Passwörter aus Dropbox-Hack veröffentlicht | #CyberSecurity #Passwords | ICT Security-Sécurité PC et Internet | Scoop.it

From www.heise.de - October 5, 2016 10:59 AM

Gust MEES's insight:

Die im Jahr 2012 von Hackern kopierte Dropbox-Datenbank ist online aufgetaucht. Die darin enthaltenen Passwörter sind zwar geschützt, etwa die Hälfte jedoch nur mit dem als nicht mehr sicher geltenden SHA1-Verfahren.

Der Sicherheitsforscher Thomas White hat 68 Millionen Passwort-Hashes von Dropbox-Nutzern veröffentlicht und stellt die Daten zum Download zur Verfügung. Unbekannte Angreifer haben die Passwörter Mitte 2012 abgezogen. Es ist davon auszugehen, dass die Daten echt sind.

E-Mail-Adresse plus Passwort-Hash
Alle Passwörter sind verschlüsselt. Rund bei der Hälfte greift das als sicher geltende Hash-Verfahren bcrypt. Beim Rest kommt ein einfacher SHA1-Hash mit Salt zum Einsatz. Diese Hashes lassen sich vergleichsweise schnell berechnen und Cracker könnten selbst gute Passwörter in überschaubarer Zeit knacken (siehe dazu Die Passwortknacker; Ein Blick hinter die Kulissen der Cracker).

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/securite-pc-et-internet/?tag=Dropbox

No comment yet.

Scooped by Gust MEES

Scoop.it!

Millions of Dropbox users are being advised to change their passwords | #Awareness #CyberSecurity #digcit | ICT Security-Sécurité PC et Internet | Scoop.it

From www.grahamcluley.com - August 31, 2016 10:49 AM

Gust MEES's insight:

Yes, hackers did manage to steal millions of account credentials back in 2012.
Make sure you have protected your account, and enabled two-step verification.

At the time, security commentators such as Brian Krebs, Troy Hunt and myselfurged internet users to be wary of the claims - as they had not been verified.

After all, it seemed possible that the data had been collected from heavily-reported mega breaches at Tumblr, LinkedIn and MySpace.

Now, however, Dropbox has confirmed to the media that a 5GB archive of files, containing the email addresses and hashed passwords for some 68,680,741 accounts, is genuine.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/securite-pc-et-internet/?tag=Dropbox

No comment yet.

Scooped by Gust MEES

Scoop.it!

Attackers can access Dropbox, Google Drive, OneDrive files without a user's password | CyberSecurity | Cloud | ICT Security-Sécurité PC et Internet | Scoop.it

From www.zdnet.com - August 6, 2015 10:23 AM

Gust MEES's insight:

Hackers don't even need your password anymore to get access to your cloud data.

Newly published research, released at the Black Hat conference in Las Vegas on Wednesday by security firm Imperva, shows how a "man-in-the-cloud" attack can grab cloud-based files -- as well as infecting users with malware -- without users even noticing.

The attack differs from traditional man-in-the-middle attacks, which rely on tapping data in transit between two servers or users, because it exploits a vulnerability in the design of many file synchronization offerings, including Google, Box, Microsoft, and Dropbox services.

Making matters worse, account owners are almost powerless. Because the tokens are tied to the user's device, changing the account password would not lock out the attacker.

Learn more / En savoir plus / Learn more:

http://www.scoop.it/t/securite-pc-et-internet/?tag=Cloud-Security

Pierre-André Fontaine's curator insight, August 6, 2015 3:58 PM

Hackers don't even need your password anymore to get access to your cloud data.

Newly published research, released at the Black Hat conference in Las Vegas on Wednesday by security firm Imperva, shows how a "man-in-the-cloud" attack can grab cloud-based files -- as well as infecting users with malware -- without users even noticing.

The attack differs from traditional man-in-the-middle attacks, which rely on tapping data in transit between two servers or users, because it exploits a vulnerability in the design of many file synchronization offerings, including Google, Box, Microsoft, and Dropbox services.

Making matters worse, account owners are almost powerless. Because the tokens are tied to the user's device, changing the account password would not lock out the attacker.

Learn more / En savoir plus / Learn more:

http://www.scoop.it/t/securite-pc-et-internet/?tag=Cloud-Security

Oksana Borukh's curator insight, August 7, 2015 2:34 AM

Hackers don't even need your password anymore to get access to your cloud data.

Newly published research, released at the Black Hat conference in Las Vegas on Wednesday by security firm Imperva, shows how a "man-in-the-cloud" attack can grab cloud-based files -- as well as infecting users with malware -- without users even noticing.

The attack differs from traditional man-in-the-middle attacks, which rely on tapping data in transit between two servers or users, because it exploits a vulnerability in the design of many file synchronization offerings, including Google, Box, Microsoft, and Dropbox services.

Making matters worse, account owners are almost powerless. Because the tokens are tied to the user's device, changing the account password would not lock out the attacker.

Learn more / En savoir plus / Learn more:

http://www.scoop.it/t/securite-pc-et-internet/?tag=Cloud-Security

Scooped by Gust MEES

Scoop.it!

From grahamcluley.com - May 6, 2014 11:04 AM

Gust MEES's insight:

Read more in the article for the advice given!!!

Learn more:

- http://gustmees.wordpress.com/2013/06/23/ict-awareness-what-you-should-know/

No comment yet.

Rescooped by Gust MEES from 21st Century Learning and Teaching

Scoop.it!

From securityaffairs.co - July 12, 2013 3:10 AM

Gust MEES's insight:

Learn more:

- http://gustmees.wordpress.com/2013/06/23/ict-awareness-what-you-should-know/

Gust MEES's curator insight, July 12, 2013 3:07 AM

Learn more:

- http://gustmees.wordpress.com/2013/06/23/ict-awareness-what-you-should-know/

Scooped by Gust MEES

Scoop.it!

From www.pcwelt.de - May 15, 2012 12:21 PM

No comment yet.

Rescooped by Gust MEES from Social Media and its influence

Scoop.it!

From www.makeuseof.com - April 7, 2012 12:10 PM

No comment yet.

Scooped by Gust MEES

Scoop.it!

From www.com-magazin.de - September 1, 2016 11:02 AM

Gust MEES's insight:

Jetzt also auch bei Dropbox: Der Online-Speicherdienst hat zugegeben, dass ihm höchstwahrscheinlich im Jahr 2012 über 68 Millionen verschlüsselte Passwörter gestohlen wurden.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/securite-pc-et-internet/?tag=Dropbox

https://gustmees.wordpress.com/2013/06/23/ict-awareness-what-you-should-know/