Comments on: Social Networks, Evil Twins and Puppet Masters http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/ Information Security Think Tank Mon, 08 Sep 2008 04:50:29 +0000 http://wordpress.org/?v=2.6.1 By: vandeneynde.net » Blog Archive » Privacy Paradox http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-122080 vandeneynde.net » Blog Archive » Privacy Paradox Sun, 18 May 2008 14:43:54 +0000 http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-122080 [...] from hacker think tank GNUCITIZEN also warned about some of the dangers of social networks. (and now runs his own social network … [...] [...] from hacker think tank GNUCITIZEN also warned about some of the dangers of social networks. (and now runs his own social network … [...]

]]> By: serwisy spoÅ‚ecznoÅ›ciowe « harce http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-118476 serwisy spoÅ‚ecznoÅ›ciowe « harce Wed, 09 Apr 2008 02:25:15 +0000 http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-118476 [...] 9 kwiecieÅ„, 2008 ciekawy artykuÅ‚ ze strony gnucitizen “Social Networks, Evil Twins and Puppet Masters” (polecam) skÅ‚oniÅ‚ mnie do refleksji na temat serwisów spoÅ‚ecznoÅ›ciowych na naszym [...] [...] 9 kwiecieÅ„, 2008 ciekawy artykuÅ‚ ze strony gnucitizen “Social Networks, Evil Twins and Puppet Masters” (polecam) skÅ‚oniÅ‚ mnie do refleksji na temat serwisów spoÅ‚ecznoÅ›ciowych na naszym [...]

]]> By: Marchiner http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-117481 Marchiner Wed, 26 Mar 2008 10:07:14 +0000 http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-117481 Rodrigo, It´s a scenario that could realy become reality, but as the information is easy showed by social networks. I believe that this kind of password and usernames "trade", may be reported to the company fast by one "trust employee". Companys shal have a "Information Security Police" explaining to all employees the rights, duties and responsibilities that they have, when they are handing with data that can be used against the company purposes. -Expecialy if this is a personal data, like a login and password. -Above of all, it´s responsibiliti of the owner the integrity of his passwords. Of course that we all know that - OSI model layer 8 , also know as "user" :D - can make things that we can´t expect. But, this kind of action "sell login and passwords" may be classified as a "crime" in some countrys that have specific legislation for this actions. The company "Information Security Police" rules should deal with this kind of problems, to future auditorships and etc, etc, etc... Rodrigo,
It´s a scenario that could realy become reality, but as the information is easy showed by social networks. I believe that this kind of password and usernames “trade”, may be reported to the company fast by one “trust employee”.

Companys shal have a “Information Security Police” explaining to all employees the rights, duties and responsibilities that they have, when they are handing with data that can be used against the company purposes.

-Expecialy if this is a personal data, like a login and password.
-Above of all, it´s responsibiliti of the owner the integrity of his passwords.

Of course that we all know that - OSI model layer 8 , also know as “user” :D - can make things that we can´t expect. But, this kind of action “sell login and passwords” may be classified as a “crime” in some countrys that have specific legislation for this actions.
The company “Information Security Police” rules should deal with this kind of problems, to future auditorships and etc, etc, etc…

]]> By: Rodrigo Salvalagio http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-117276 Rodrigo Salvalagio Sun, 23 Mar 2008 23:13:49 +0000 http://www.gnucitizen.org/blog/social-networks-evil-twins-and-puppet-masters/#comment-117276 I have something to add: Imagine if your company holds a huge callcenter! And you got about 30% of your employees in a social network of any kind. How bad it could be, if outsiders start offering money for valid usernames and passwords. Got the picture? I have something to add: Imagine if your company holds a huge callcenter! And you got about 30% of your employees in a social network of any kind. How bad it could be, if outsiders start offering money for valid usernames and passwords.
Got the picture?

]]>