Lapsed domain names paint "hack me" target on law firms

Law firms are singularly bad at technology, yet present a singularly delicious target to hackers. One particular vulnerability comes from all their abandoned domain names, which Gabor Szathmari writes "pose a significant cyber risk to the legal profession."

Domain name abandonment allows cybercriminals to gain access to, or reset passwords for online services and profession-specific portals.

Read the rest

WPA3: a new generation in wifi security starts today

When wifi first appeared, it was secured by something called "WEP" that was so laughably weak that many people believe it was deliberately sabotaged by US spy agencies (who have a history of sabotaging security standards in order to preserve the ability to spy on their adversaries).

Insecure internet security cameras and nannycams are actively exploited by voyeurs to spy on owners

Shenzhen Gwelltimes Technology Co., Ltd is the white-label vendor behind a whole constellation of Internet of Things networked home cameras sold as security cameras, baby monitors, pet monitors, and similar technologies; these cameras are designed to be monitored by their owners using an app, and because of farcically bad default passwords ("123") and other foolish security practices (such as sequentially numbering each camera, allowing attackers to enumerate vulnerable devices), the devices are trivial to locate and hijack over the internet.

Gifted clarinetist's prestigious scholarship sabotaged by ex-girlfriend

Eric Abramovitz is a gifted musician, who can currently be found fulfilling the role of associate principal/E flat clarinetist at the Toronto Symphony: a position that thousands of musicians around the world would kill for. Back in 2014, he applied for another position that these same musicians would think kill-worthy, too: a placement with the Colburn Conservatory as a student. — Read the rest

UK consumer review magazine Which?: your smart home is spying on you, from your TV to your toothbrush

The UK consumer review magazine Which? (equivalent to America's Consumer Reports) has published a special investigation into the ways that Internet of Things smart devices are spying on Britons at farcical levels, with the recommendation that people avoid smart devices where possible, to feed false data to smart devices you do own, and to turn off data-collection settings in devices' confusing, deeply hidden control panels.