DigiNotar: The Certificate Authority Hacked and Bankrupt in 2011
In 2011, attackers issued 531 rogue DigiNotar certificates, including one for Google. How a CA works, what went wrong …
Information Security 144 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
What Is XSS (Cross-Site Scripting)? 3 Types and Prevention
XSS makes the browser run attacker code as if it came from the site. See the 3 types (reflected, stored, DOM), a simple …
How to Create a Strong Password: 6-Word Passphrase (Diceware)
A password full of symbols is not a strong password. Learn how to build a 6-word Diceware passphrase, when to use it and …
Hacked Google account: what to do in the first hour
Google account or Gmail hacked? Learn the signs, how to regain access, what to check (forwarding, apps) and how to lock …
Tokyo Stock Exchange Crashed in 2005: A 4.5-Hour Software Bug
On Nov 1, 2005, the Tokyo Stock Exchange sat idle for 4.5 hours because of a latent bug. What the Fujitsu case teaches …
SQL Slammer: The 376-Byte Worm That Slowed the Internet in 2003
On Jan 25, 2003, a 376-byte worm infected 75,000 SQL Server hosts in 10 minutes. Here's how Slammer worked and what it …
SPF, DKIM and DMARC: What They Are and How to Stop Spoofing
SPF, DKIM and DMARC stop others from sending email as your domain. Learn what each does, how to check your domain and …
How to Turn On Controlled Folder Access Against Ransomware
How to turn on Controlled Folder Access in Windows 11 to stop ransomware, allow legitimate apps and read the …
Stolen phone: what to do in the first hour (SIM, Pix, accounts)
Phone stolen? First-hour checklist: Brazil's Celular Seguro, SIM and IMEI blocking, banks, Google/Apple accounts, and …
Windows XP Turns 25: The Security Lesson It Left Behind
Windows XP hit stores on Oct 25, 2001. Worms like Blaster and Sasser forced SP2 in 2004, and the 2014 end of support …