Researchers: Application-specific passwords weaken Google's two-factor authentication

Computerworld Security: Issues and Trends: February 27, 2013
===============================================================

Application-specific passwords weaken Google's two-factor authentication, researchers say

Researchers from two-factor authentication provider Duo Security found a
loophole in Google's authentication system that allowed them to bypass the
company's 2-step login verification by abusing the unique passwords used to
connect individual applications to Google accounts.
http://cwonline.computerworld.com/t/8476609/823929840/602586/0/

~~~~~~~~~~~~~~~~~~~WHITE PAPER: Mimecast North America Inc~~~~~~~~~~~~~~~~~~~~~

What it takes to deliver Security, and Privacy at Mimecast.

This whitepaper explains the process and controls that Mimecast put in place to
deliver a secure, private and trusted SaaS platform for your email security,
email archiving and email continuity.

http://cwonline.computerworld.com/t/8476609/823929840/602587/0/?3e076d18=am9uc2FuOThAZ21haWwuY29t&x=b7e73bf6

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


IN THIS ISSUE

1. Twitter implements DMARC standard to fight phishing
http://cwonline.computerworld.com/t/8476609/823929840/602588/0/

2. Six-strikes piracy alert system rolling out in the US
http://cwonline.computerworld.com/t/8476609/823929840/602589/0/

3. Phishing concerns cause double trouble
http://cwonline.computerworld.com/t/8476609/823929840/602590/0/

4. Privacy groups protest CISPA bill
http://cwonline.computerworld.com/t/8476609/823929840/602591/0/

5. Obama executive order redefines critical infrastructure
http://cwonline.computerworld.com/t/8476609/823929840/602592/0/

6. Critical infrastructure protection: Maybe thinking good thoughts will make us safe
http://cwonline.computerworld.com/t/8476609/823929840/602593/0/

7. Lawmakers reintroduce cyberthreat information-sharing bill
http://cwonline.computerworld.com/t/8476609/823929840/602594/0/


~~~~~~~~~~~~~~~~~~~WEBCAST: VMware~~~~~~~~~~~~~~~~~~~~~

Virtualizing Exchange KnowledgeVault

The Virtualizing Exchange KnowledgeVault contains concise videos on topics
related to running Microsoft Exchange in a virtualized environment.

http://cwonline.computerworld.com/t/8476609/823929840/602595/0/?3e076d18=am9uc2FuOThAZ21haWwuY29t&x=facb5b95

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Twitter implements DMARC standard to fight phishing

Twitter has implemented DMARC, a standard for preventing email spoofing, to make
it harder for attackers to send phishing emails that appear to come from
twitter.com addresses.
http://cwonline.computerworld.com/t/8476609/823929840/602588/0/

Six-strikes piracy alert system rolling out in the US

A system that aims to curb Internet users from sharing copyrighted content is
being rolled out in the U.S. after a number of delays.
http://cwonline.computerworld.com/t/8476609/823929840/602589/0/

Phishing concerns cause double trouble

Last week the administrators of 7,000 university websites were being called upon
to change their .edu domain account passwords after a server security breach.
Trouble was that the breach had been reported to the admins by Educause -- the
non-profit higher-education IT group that runs .edu -- via an email that some
recipients complained bore the familiar markings of a phishing attempt.
http://cwonline.computerworld.com/t/8476609/823929840/602590/0/

~~~~~~~~~~~~~~~~~~~WHITE PAPER: Riverbed Technology~~~~~~~~~~~~~~~~~~~~~

Resolve Performance Issues Within Your Citrix Environment

Citrix offers significant benefits to IT organizations but alters the
performance troubleshooting process due to its unique architecture. Breakthrough
new technology flips the Citrix performance management paradigm on its head by
providing unprecedented end-to-end visibility of user transactions traversing a
Citrix server.

http://cwonline.computerworld.com/t/8476609/823929840/602596/0/?3e076d18=am9uc2FuOThAZ21haWwuY29t&x=43c93d2f

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Privacy groups protest CISPA bill

In what is turning out to be a repeat of last year, privacy rights groups
launched an assault against the Cyber Intelligence Sharing and Protection Act
(CISPA), barely a day after the controversial legislation was reintroduced in
Congress.
http://cwonline.computerworld.com/t/8476609/823929840/602591/0/

Obama executive order redefines critical infrastructure

President Barack Obama's recently signed cybersecurity executive order could
significantly expand the list of companies categorized as part of U.S. critical
infrastructure sector, security experts said.
http://cwonline.computerworld.com/t/8476609/823929840/602592/0/

Critical infrastructure protection: Maybe thinking good thoughts will make us safe

Joe Lieberman (I-Conn.) retired in January after quite a colorful two-dozen
years in the U.S. Senate. One of the major issues he pushed for during his last
few years in office was protection of the U.S. critical infrastructure. Along
with Sen. Susan Collins (R-Maine), Lieberman put forth a series of bills aimed
at requiring some level of protection for such infrastructure, the last of these
being voted down in November.
http://cwonline.computerworld.com/t/8476609/823929840/602593/0/

Lawmakers reintroduce cyberthreat information-sharing bill

Two U.S. lawmakers have reintroduced a controversial cyberthreat
information-sharing bill over the objections of some privacy advocates and
digital rights groups.
http://cwonline.computerworld.com/t/8476609/823929840/602594/0/



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

JOIN THE COMPUTERWORLD CONVERSATION ON GOOGLE +

Be sure to add Computerworld to your Google+ circles to keep track of breaking
news, features, blogs, tech reviews and career advice.

http://cwonline.computerworld.com/t/8476609/823929840/598565/0/

CAST YOUR VOTE IN THIS WEEK'S QUICKPOLL

Yahoo CEO Marissa Mayer thinks workers are more efficient and creative when
they're in the office. Is ending employee telecommuting a smart idea or not?


http://cwonline.computerworld.com/t/8476609/823929840/602345/0/

NEW COMPUTERWORLD JOB BOARD
______________________________

Search multiple listings now and get new job alerts as they are posted.

http://cwonline.computerworld.com/t/8476609/823929840/156832/0/


Get more IT peer perspective online:

LinkedIn Group: http://cwonline.computerworld.com/t/8476609/823929840/311619/0/

Facebook: http://cwonline.computerworld.com/t/8476609/823929840/311620/0/

Twitter: http://cwonline.computerworld.com/t/8476609/823929840/311621/0/

===============================================================

CONTACTS/SUBSCRIPTIONS

You are currently subscribed to computerworld_security_issues as: jonsan98@gmail.com.

To unsubscribe from this newsletter, go to:
http://cwonline.computerworld.com/t/8476609/823929840/131135/0/?90482085=aHR0cDovL2N3b25saW5lLmNvbXB1dGVyd29ybGQuY29tL3U%2faWQ9ODIzOTI5ODQwLjIzMzZmYjBlZWQ5NTcxOTgwMmJhOTZmMjZlZWI0MTllJm49VCZsPWNvbXB1dGVyd29ybGRfc2VjdXJpdHlfaXNzdWVzJm89ODQ3NjYwOQ%3d%3d&x=c23ce304

To manage your subscription preferences, go to:
http://cwonline.computerworld.com/t/8476609/823929840/72510/0/

To subscribe to a newsletter, go to:
http://cwonline.computerworld.com/t/8476609/823929840/231613/0/

Computerworld's online privacy policy is at:
http://cwonline.computerworld.com/t/8476609/823929840/72509/0/

If you are interested in advertising in this newsletter, please contact: bglynn@cxo.com

To contact Computerworld, please send an e-mail to online@computerworld.com.

Copyright (C) 2013 Computerworld, 492 Old Connecticut Path, Framingham MA 01701

** Please do not reply to this message. If you want to contact someone directly,
send an e-mail to online@computerworld.com **