U.S. Work World Newsletter |
|
Articles
Cyber Security — Hackers
Cyber Security — Cookies
Cyber Security — Passwords
|
|
 |
CYBER SECURITY — HACKERS
There are 5 types of hackeers — Whiite Hat Hackers, Black Hat Hackers, Gray Hat Hackers, Hacktivists, and Script Kiddies.
Here is a description of White, Black, and Gray Hat Hackers —
White Hat Hackers
Highly skilled tech experts who seek to find where computers and software are weak. White hats do not have any evil or criminal goal. White hat hackers can be anyone. White hat hackers have permission from the target to hack — and their goal is to improve security on the computer, computer system, and internet. White hat hackers use programming, coding, automation, and their skills to uncover website and computer system weaknesses, and perform the hack. White hats can be hired by companies to test cyber security.
Black Hat Hackers
Black hat hackers aim to find website and computer system weaknesses for malicious purposes (harmful and criminal goals). Personal benefits (money) is the name of the game for these cyber criminals. Black hat hackers use the same technology as white hats, but black hats break into websites and computer systems without permission. Black hats want to steal information that they can sell for money. Black hats hold the stolen information hostage until the company pays the hackers money to get the information returned (called extortion). Or black hats will hack to steal Personal Identify Information (PII) to sell to other criminals. Black hats may become known by leaving the hackers' signature, design, or saying (called web graffiti) all over a hacked website or computer system.
Grey Hat Hackers
The goal of grey hat hackers is mixed. a) Grey hats want a fame and glory (to be known, popular). b) Grey hats also want money. Grey hats will ask forgiveness after a hack, instead of getting permission first —and expect the business to pay them money to learn how the company's computer system was hacked.
For a classroom lesson about the 5 types of hackers, go to usworkworld.com and click on Career Lessons.
|
|
|
|
CYBER SECURITY — COOKIES
What are internet cookies? Are cookies helpful or harmful?
Internet cookies are coding scripts (called files) created inside a website to help the website appear to read your mind. The file gives you an ID to allow the website to recognize you when you visit the again. For example, cookies help Facebook suggest friends and Amazon suggest things to buy. But, cookies are also storing private information about you, and then selling that information to others. Laws, such as ePrivacy Directive, require your consent (permission) for the website to use cookies.
Who invented the first internet cookie?
Lou Montulli created the first cookie in 1994. He was given the job to make a website remember the contents of a user’s shopping cart when they did not want to purchase the items within the same browsing session. He called his invention "magic cookie." There are many types of internet cookies today — First-Party Cookies (Session Cookies and Persistent Cookies), Third-Party Cookies, and Zombie Cookies.
For a classroom lesson about internet cookies, and their help and harm, go to usworkworld.com and click on Career Lessons.
|
|
CYBER SECURITY — PASSWORDS
Many people do their banking and bill paying online. Banks and stores must guard their websites from breaches (break ins from cyber criminals who steal information and money). According to the 2020 report by Verizon, 25% of breaches use stolen credentials (usernames and passwords). Why are there so many website breaches? Let's take a look at three kinds of password attacks that lead to website breaches.
Brute Force Attacks
Brute force attacks attack websites, such as banks or stores, to get money and information to sell. Brute Force Attacks try largest number of passwords on the smallest number of accounts (maybe just one account). For example, a burglar goes to the alarm keypad in the garage, and tries to open the house door by tapping in random codes, hoping one will work and open the house door. Cyber criminals use a computer to try thousands of usernames, and passwords to break into a web site account (such as your bank, Amazon, eBay, or Google Play accounts).
Password Spraying
Password Spraying is different from Brute Force because it tries smallest number of password on the largest number of accounts possible (such as every account at one bank). Attackers buy common passwords lists from cyber criminals or may buy a lists of usernames from the dark web (underground criminal internet). Password Spraying stays "under the radar" (secret so attack is not caught). For example, if a website locks a user out after 5 incorrect password attempts, the attacker will try 4 attempts before moving on to the next account.
Credential Stuffing
Cyber criminals know that people use the same credentials (username and password) on different sites. If a username and password is discovered, criminals quickly do Credential Stuffing — and try the username and password on many sites — banks, stores, Amazon, eBay, PayPal, email, etc.
For a classroom lesson about password attacks, and how to keep your password safe from attacks, go to usworkworld.com and click on Career Lessons.
|
|
|
|
|
|
|
