Wednesday, March 21, 2012

Hand over your Facebook username and password if you want a job

Hand over your Facebook username and password if you want a job: What would you do at a job interview if the interviewer requested your Facebook username and password?


Job interview - cartoon by CarolePicture it: you are at a job interview, and the interviewer requests that you log into your Facebook account so they can shoulder surf as you lay bare your profile in its entirety.
Worse, what if they ask you to hand over your Facebook username and password?
You might laugh and say I would never do that, but what if you really, really need a job? Many of us are desperate for work at the moment, so it is no surprise that some feel they must comply to avoid being stricken from the candidates' list.
In the US, this tactic has been used with people applying for police officer or 911 dispatcher roles, according to an AP article. But the report says that it is happening elsewhere too.
The reason that an increasing number of employers want full access to a Facebook account is perhaps due to more of us hiding information from people we aren't connected with.
Rob MacLeod was shortlisted for a police job in Baltimore when he was asked for his Facebook password. The Spec reports that:
The question startled MacLeod, now a bylaw enforcement officer in Peel Region. He had a personal policy of not sharing his password, no matter the circumstances. So when the request came, MacLeod offered to log in to his Facebook account and then leave the room so the interviewer could browse his page.

But he says the interviewer remained firm — he wanted the password. After a few minutes, MacLeod gave it to him.

MacLeod says he "felt like I was being pressured into doing it. It felt like if I didn’t do it, he would call the recruiter and say, 'This guy’s not interested in the job'", he told The Spec.
It is not surprising that this interview technique is riling a number of individuals and groups, including American Civil Liberties Union (ACLU) attorney Catherine Crump, who states:
It’s an invasion of privacy for private employers to insist on looking at people’s private Facebook pages as a condition of employment or consideration in an application process. People are entitled to their private lives. You’d be appalled if your employer insisted on opening up your postal mail to see if there was anything of interest inside. It’s equally out of bounds for an employer to go on a fishing expedition through a person’s private social media account.
And Orin Kerr, Professor of Law at George Washington University, told AP “It’s akin to requiring someone’s house keys... [It’s] an egregious privacy violation.”
One can understand that companies want to do everything they can to ensure that candidates will be a good fit and won't jeopardize the company, but asking for the keys to their personal Facebook account seems many, many steps too far.
So, if you are out looking for a job, here are some tips to consider:
  1. Sanitise your account before you start applying for any jobs. Look for compromising messages, pictures, messages on walls, and remove or hide anything that you wouldn't want a prospective employer to see
  2. You can quote Facebook's legal terms, which clearly state that
    You will not share your password, let anyone else access your account, or do anything else that might jeopardize the security of your account.
    Explain that you are a law-abiding citizen, and you can in no way break this binding contract with Facebook.
  3. HackFactor author Neal Krawetz advises you to expose the company by anonymously posting online that they made this request during the interview. He also suggests that you consider suing them if you do not get the job.
  4. Tell them you don't use Facebook. Review your settings on your How You Connect page under Facebook's 'Privacy settings', you can tweak these, as shown below.
    This means that an employer won't find you during a search. Even friends of friends won't see you listed. The problem here of course is that you are lying, but my view is that human rights to privacy are a little more important than a white lie.
  5. Facebook setting


(864) 498-0569


Monday, January 9, 2012

Convicted murderer gets new trial after computer virus destroys data

Convicted murderer gets new trial after computer virus destroys data:

by Graham Cluley on January 4, 2012

It seems like the plot twist in a bad TV show - but it's true. A computer virus infection has helped a convicted killer get a new trial.



In July 2009, a Miami jury convicted Randy Chaviano, of Hialeah, Florida, of second degree murder.

Many might have thought it was the end of story when, after an eight day trial, Chaviano was given a life sentence for the shooting of Carlos Acosta.

But when the courts recently investigated whether Chaviano had grounds to appeal his conviction, it was discovered that no legal record of the trial could be found - giving the Third District Court of Appeal no choice but to throw out the conviction and grant Chaviano a new trial.

Stenographers at trials normally record proceedings on both paper and an internal disk. You've probably seen them busy at work, tapping wildly in the corner of the shot if you've ever seen a courtroom melodrama.

But Terlesa Cowart, the stenographer at Chaviano's 2009 trial, had not brought enough rolls of paper for her machine, forcing her to record details of the trial only on the device's internal disk. Subsequently, she transferred the data onto her PC, and erased it from the stenograph.



You can see where this is leading can't you?

An infection on Ms Cowart's PC by an unnamed virus is said to resulted in the loss of the legal records.

As a result, the trial has to be reheard, costing time and money, and witnesses and police officers will need to give evidence once again. And, of course, the relatives of the deceased man will have to go through the heartache of another trial.

It seems very sloppy to allow the only record of a trial's proceedings to be held on an individual's PC - it's like asking for trouble if it isn't at the very least held securely as a backup elsewhere.

It's claimed that stenographers in Florida have been resisting moves to replace them with digital recorders. Goofs like the one made by Terlesa Cowart are not going to do anything to help their argument.


Tuesday, November 15, 2011

Facebook users hit by hardcore porn, violence and animal abuse images

Facebook users hit by hardcore porn, violence and animal abuse images:


by Graham Cluley on November 15, 2011


Explicit and violent images have flooded the newsfeeds of many Facebook users in the last 24 hours or so.


The content, which includes explicit hardcore porn images, photoshopped photos of celebrities such as Justin Bieber in sexual situations, pictures of extreme violence and even a photograph of an abused dog, have been distributed via the site - seemingly without the knowledge of users.
Justin Bieber porn on Facebook
Some Facebook users vented their annoyance on Twitter, with some claiming they would deactivate their Facebook accounts as a result:
Tweets from upset Facebook users
One commenter to Naked Security, rxladyblue, told us:
I just viewed a gay pornography pic that was on the news feed under her name. She could not see the pic but all of her friends could see it.
Another Facebook user, ralahinn1, said:
One of my friend's accounts was compromised and messages containing a video were sent. My daughter's boyfriend had something posted on his wall that he couldn't see on his computer, but my daughter could see on his wall from hers.
StilettoIt isn't presently clear precisely how the offending content has been spread - whether users are falling for a clickjacking scheme, are being tagged in content without their knowledge, have poorly chosen privacy settings, have been tricked into installing malicious code, or have fallen victim to another vulnerability inside Facebook itself. What's clear, however, is that mischief-makers are upsetting many Facebook users and making the social networking site far from a family-friendly place.
Reporters at Gawker have speculated that hackers associated with Anonymous may be responsible for the attack, but that is unconfirmed.
So, it seems highly offensive spam content has successfully spread via Facebook for 24 hours or more. It's precisely this kind of problem which is likely to drive people away from the site. Facebook needs to get a handle on this problem quickly, and prevent it from happening on such a scale again.
Of course, this incident raises another important question. Many firms may be comfortable allowing users to access sites such as Facebook, but what happens when hardcore pornographic and offensive content is being spread. Should companies block access to sites hosting offensive content?
(864) 498-0569

Tuesday, November 8, 2011

IBM Simulates 4.5% of the Human Brain; Skynet Is Next

It’s pretty well known at this point that computers are quickly catching up with humanity as far as brain power is concerned. Storage-wise, we’ve been long surpassed by machines, and powerfully fast computers can run circles around the human brain in solving complex equations. On the other hand, humanity wins in the brain's sheer computational power and energy efficiency.
At least, for now.
IBM’s Blue Gene supercomputer has already surpassed the processing power of some of our weaker animal relatives; mice, rats and cats, and according to IBM’s research paper, the human brain isn’t that far ahead.
The brain contains on the order of 20 billion neurons that are connected by roughly 200 trillion synapses. IBM’s Blue Gene supercomputer has 147,456 parallel processors, each with about 1GB of working memory. This has enabled them to simulate about 4.5 percent of the human brain. That only leaves an estimated 732,544 processors left to add in to equal the processing power of 1 human brain--a task IBM says it will complete by 2019.
When was Judgement Day, again?
We’ve covered the apocalyptic aspect of Moore’s Law of computers before, but it’s worth revisiting here. Processing power on par with the human brain could spark real, thoughtful artificial intelligence and bring about the singularity of science fiction, a point where computers are smart enough to make themselves increasingly intelligent through iteration and design, outstripping humanity and becoming the most intelligent things around. Would this be beneficial to humanity or mean our end as the dominant species?
What do you think?
(864) 498-0569

Tuesday, November 1, 2011

Laptop Suspected Source in Blaze: Fire Officials Advise Caution With Laptop Chargers

Laptop Suspected Source in Blaze: Fire Officials Advise Caution With Laptop Chargers:
By Melanie Pinola, PCWorld Oct 31, 2011 1:39 PM
A North Carolina fire captain is warning laptop users not to leave their laptops charging on "soft surfaces," after a blaze some suspect was ignited by a laptop left charging on a bed.
Courtesy of WECTCourtesy of WECT
No official ruling has been given for the cause of the house fire in Wilmington, NC, that started around 2 a.m on Sunday morning. However, Stephen Vorwerk, who was renting the house, told WECT news that the fire started because a laptop was left charging on the bed overnight.

I spoke with Wilmington Fire Department Captain Ian Tedder, who investigated the fire. Tedder said investigators were "unable to rule out the laptop and power supply as the cause of the fire" and that the two year old laptop is still under investigation.
According to WECT, Vorwerk did not have renter's insurance. The fire destroyed about $3,000 in computer equipment and has covered the entire second story in soot. To help others avoid the same fate, Vorwerk is urging people not to put anything plugged in and charging on a flammable surface.
Although Tedder could not say that the laptop was definitely responsible for the blaze, he agreed with Vorwerk that "absolutely" people should not leave any type of appliance on something that can burn--especially a laptop. Tedder noted that everyone knows how hot they can get, and when placed on a sofa or a bed they are unable to breathe.
Incidents of laptops sparking fires are rare, though, Tedder said.
Previous fires and numerous laptop battery recalls have raised awareness of the incredibly small but possible risk of batteries overheating, as well as steps you can take for laptop battery safety. Now it's time to add to those safety precautions keeping your laptop or smartphone on a hard, flat surface that won't easily heat up and burst into flames.

Monday, October 3, 2011

Facebook's ticker privacy scare, and what you should do about it

Facebook's ticker privacy scare, and what you should do about it: Facebook users are scaring each other over the new ticker, worried that privacy has been compromised.

Testing shows that privacy settings are working the same as they did before, but you should still take care to ensure you aren't helping strangers eavesdrop on online conversations. Read more...



iPhone 5 emails infect Windows PCs with malware

iPhone 5 emails infect Windows PCs with malware: Beware of emails claiming that Apple has already announced the iPhone 5.

You could be infecting your Windows computer with malware. Read more...


Tuesday, September 27, 2011

Conficker: how to avoid infection and what to do if you are infected

Conficker: how to avoid infection and what to do if you are infected: Ahhh Conficker. A nasty family of malware that plagued computers the world over way back in November 2008. Sadly, it is still knocking about rather prolifically, so here are some top tips to avoid infection, and advice on what to do if you are infected. Read more…

Monday, September 26, 2011

Facebook price grid? $9.99 for gold membership? The charging hoax continues to spread

Facebook price grid? $9.99 for gold membership? The charging hoax continues to spread:

Duped Facebook users are sharing a message with their online friends, believing it will help them avoid charges of between $3.99 and $9.99 per month.

Of course, the chain letter is completely bogus - and should not be forwarded. Read more…




Wednesday, September 14, 2011

Facebook birthday T-shirt scam steals secret mobile email addresses

Facebook birthday T-shirt scam steals secret mobile email addresses:
Facebook scams are getting sneakier and sneakier - with the latest attack using the lure of a free T-shirt celebrating Facebook's birthday in an attempt to steal the secret backdoor key to your account.

The offer seems attractive enough - a webpage claiming to celebrate Facebook's 7th birthday, saying that it has over 1.9 million official T-shirts in stock.

Facebook birthday t-shirt scam

All you have to do is verify that you are a Facebook user, claims the following webpage. And this is where things get very sneaky.

Facebook birthday t-shirt scam

The webpage tells you to visit Facebook Mobile, and find on that page the personalised email address that you can use to post status updates or upload photos and videos straight to your profile.

Many people are probably unaware that such a thing exists - but every Facebook user has a secret mobile email address they can use for this purpose.

The important thing, of course, is to keep it secret. Because if someone else finds it out, they'll be able to post status messages to your Facebook page or upload videos and photos to your wall - which your friends will be able to see.

The scammers, unsurprisingly, want your secret mobile email address for Facebook. And so they claim that you have to hand it over to verify you are a legitimate Facebook user in order to get your T-shirt.

The scammers have even had the gall to make a YouTube video showing how to find the secret email address on the Facebook Mobile page, and where to enter it on their form:



The above video is made by a YouTube user called "vicsthedevil" and we have to assume that they are intimately involved in the scam. They posted the video on 5 September, the same day that they registered the website domain name where they are hosting their scam.

Of course, you're still hoping that you're going to receive a free T-shirt. So you may not baulk at the idea of completing a survey (which, by the way, earns commission for the scammers) and giving them your snail mail details so they can send through your free gift.

Facebook birthday t-shirt scam

Good luck, by the way, on that T-shirt. My hunch is that you won't ever receive one. But the scammers now have the ability to post to your Facebook page and upload pictures to your account, and you have helped them earn some money in the process.

If you were hit by this scam then you must refresh your Facebook mobile upload email address - that way the bad guys you just gave it too won't be able to use it as a secret backdoor into your account.

How to refresh your Facebook Mobile upload email address

Some commenters have asked how do you change your Facebook Mobile upload address. Unfortunately, Facebook has made it somewhat tricky to find this option (maybe that's why the scammers felt they had to make their own explanatory video!).

Visit www.facebook.com/mobile.

Refresh the page until you see an option like that displayed below. You may have to scroll down the page to find it.

Facebook Mobile email address

You should now see your Facebook Mobile upload address. Beneath it you should also see an option to "Find out more". Click it, and a screen like the following should pop up.

Upload email

On this page you should find an option to refresh your mobile email address - but note! Facebook warns that you can only refresh it a limited number of times.

If you don't change your mobile email address on Facebook, you're just asking for trouble. In the past, Facebook pages such as that belonging to the Van Gogh Museum have been hit by scammers who abused the mobile upload feature.

It would be great, of course, if there was a way of telling Facebook to not allow any email address to be used for mobile uploads, as I would imagine that many individuals and companies would find the permanent blocking of the feature attractive.

If you're a Facebook user and want to keep up on the latest threats and security news I would recommend you join the Sophos Facebook page - where more than 100,000 people regularly discuss the latest issues.

Follow @gcluley