ICT Security-Sécurité PC et Internet

A flaw in Hotspot Shield can expose VPN users, locations
The virtual private network says it provides a way to browse the web "anonymously and privately," but a security researcher has released code that could identify users' names and locations.

A security researcher has found a way to identify users of Hotspot Shield, a popular free virtual private network service that promises its users anonymity and privacy.

Hotspot Shield, developed by AnchorFree, has an estimated 500 million users around the world relying on its privacy service. By bouncing a user's internet and browsing traffic through its own encrypted pipes, the service makes it harder for others to identify individual users and eavesdrop on their browsing habits.

But an information disclosure bug in the privacy service results in a leak of user data, such as which country the user is located, and the user's Wi-Fi network name, if connected.

That information leak can be used to narrow down users and their location by correlating Wi-Fi network name with public and readily available data.

"By disclosing information such as Wi-Fi name, an attacker can easily narrow down or pinpoint where the victim is located," said Paulos Yibelo, who found the bug. Combined with knowing the user's country, "you can narrow down a list of places where your victim is located," he said.

ZDNet was able to independently verify Yibelo's findings by using his proof-of-concept code to reveal a user's Wi-Fi network. We tested on several machines and different networks, all with the same result.

VPNs are popular for activists or dissidents in parts of the world where internet access is restricted because of censorship, or heavily monitored by the state, as these services mask a user's IP addresses that can be used to pinpoint a person's real-world location.

Being able to identify a Hotspot Shield user in an authoritarian state could put them at risk!!!

Learn more / En savoir plus / Mehr erfahren:

https://www.scoop.it/t/securite-pc-et-internet/?&tag=VPN

Le Wi-Fi n'a pas été conçu pour résister aux défis du XXIe siècle en matière de cyber sécurité. De nombreux experts recommandent donc la prudence lors de son utilisation.

Une bonne nouvelle, toutefois.

En réalité, les internautes ont déjà, depuis de nombreuses années, affaire aux dangers des connexions Wi-Fi non-sécurisées… Mais ils peuvent sécuriser leur réseau en prenant quelques précautions de base.  Voici les meilleures façons de se protéger de KrackAttacks ou d’autres menaces ciblant les internautes via leurs connexions Wi-Fi :

1. Utilisez un VPN

Un VPN (réseau privé virtuel), tel que FREEDOME de F-Secure, chiffre vos données en transit. Il s’agit d’une excellente façon de sécuriser vos informations lorsque vous utilisez le Wi-Fi. Cet outil est même indispensable à votre sécurité lorsque vous utilisez un réseau Wi-Fi public.

1. Mettez vos appareils à jour

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/21st-century-learning-and-teaching/?&tag=VPN

Die WLAN-Verschlüsselung WPA2 weist kritische Sicherheitslücken auf. Netzwerkausrüster können das Problem mit Updates beheben.

Wer IMMER NOCH OHNE VPN surft...

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/21st-century-learning-and-teaching/?&tag=VPN

À l’heure où la sécurité des objets connectés fait toujours débat, l’éditeur de sécurité Bitdefender lance un outil gratuit permettant d’analyser l’intégralité des appareils connectés au réseau domestique. Un outil de prévention et de promotion pour les produits payants de l’éditeur, dont la récente Bitdefender Box.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/securite-pc-et-internet/?&tag=iot

Auf PCs wissen wir inzwischen Bescheid: Kaum jemand geht noch ohne Antiviren-Schutz und Firewall ins Internet. Doch auf dem Smartphone sind die Nutzer wesentlich sorgloser - leider zu Unrecht.

Learn more / En savoir plus / Mehr erfahren:

https://gustmees.wordpress.com/2013/05/27/dangers-of-wifi-in-public-places/

http://www.scoop.it/t/21st-century-learning-and-teaching/?tag=VPN

The company last week quietly patched vulnerabilities in the WPA2 protocol used to secure wireless networks, but did not reveal the fix until today.

Microsoft today revealed that it quietly patched Windows last week against vulnerabilities in the Wi-Fi Protected Access II (WPA2) protocol used to secure wireless networks.

Details of the security update were only published Monday to Microsoft's Security Update Guide, the catalog-like portal that earlier this year replaced the decades-old practice of delivering explanatory bulletins.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/securite-pc-et-internet/?&tag=WPA2

http://www.scoop.it/t/21st-century-learning-and-teaching/?&tag=VPN

Here's what you need to know about KrackAttacks, and what you can do to protect yourself.

And there’s the silver lining.

We’ve actually been living with the risks created by insecure Wi-Fi connections for many years, and users can protect themselves by taking some basic security precautions. Here’s the best ways to stay safe from KrackAttacks and other threats targeting people through their Wi-Fi connections:

Use a VPN

A VPN (virtual private network), such as F-Secure Freedome encrypts your data while it’s in transit. This is a great way to secure your information when using Wi-Fi, and should be considered essential when using a publicly accessible Wi-Fi network.

Update your devices

Attacking routers is a means to an end for attackers. What they’re really after are your devices. They want to steal your credit card info, passwords, and other data. And that’s what the KrackAttacks are actually doing. Updating your devices’ software and operating systems is sound security advice, so use this as a reminder to make sure your desktops, laptops, phone, and tablets are all updated.

Update your routers

Routers have a long history of security problems. They’re often poorly supported by device vendors (and in some cases not at all). You should check your router’s settings to see if there’s a firmware update available, or possibly the website of your router’s manufacturer or vendor. If you’re not getting security updates for your router, consider getting one built to be secure.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/21st-century-learning-and-teaching/?&tag=VPN

Le WPA2 est un protocole de sécurité très utilisé pour le Wi-Fi et, mauvaise nouvelle, il est vulnérable. En effet, des experts en sécurité informatique ont mis à jour plusieurs failles permettant d'écouter, d'intercepter et d'agir sur les appareils connectés.

Comme le relèvent nos confrères d'Ars Technica, les experts en sécurité à l'origine de cette découverte ont exploité plusieurs failles se situant au niveau de la gestion des clés du protocole de sécurité WPA2 pour valider l'existence de cette brèche et en apporter la preuve. Précisons qu'en 13 ans d'existence, c'est la première fois que la sécurité du protocole WPA2 est mise à mal.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/21st-century-learning-and-teaching/?&tag=VPN

Security experts have said the bug is a total breakdown of the WPA2 security protocol.

USE a VPN!!! Check below:

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/21st-century-learning-and-teaching/?&tag=VPN

An advanced hacking and cyberespionage campaign against high-value targets has returned.

The so-called 'DarkHotel' group has been active for over a decade, with a signature brand of cybercrime that targets business travellers with malware attacks, using the Wi-Fi in luxury hotels across the globe.

Hotel Wi-Fi hotspots are compromised in order to help deliver the payload to the selected pool of victims. The exact methods of compromise remain uncertain, but cybersecurity experts believe it involves attackers remotely exploiting vulnerabilities in server software or infiltrating the hotel and gaining physical access to the machines.

Learn more / En savoir plus / Mehr erfahren:

https://gustmees.wordpress.com/2013/05/27/dangers-of-wifi-in-public-places/

http://www.scoop.it/t/securite-pc-et-internet/?&tag=WiFi

Le hacking, désormais, est d’une simplicité enfantine.... Même les non-hackers s'y amusent ! Prenons le Wi-Fi public, par exemple. Pour espionner la navigation web de clients qui sirotent tranquillement leur café dans une brasserie avec Wi-Fi gratuit, pas besoin d’être un pro.

Learn more / En savoir plus / Mehr erfahren:

https://gustmees.wordpress.com/2013/05/27/dangers-of-wifi-in-public-places/