[IS&T Security-FYI] SFYI Newsletter, August 27, 2012

[Monique Yeaton]

In this issue:


1. Putting Data in the Cloud

2. Back to School: Protecting Kids' Identities



-----------------------------------

1. Putting Data in the Cloud

-----------------------------------


The central question for anyone doing cloud computing is, "do you have control?" Reliance on a cloud vendor (like Dropbox, Google, Apple's iCloud and Amazon's EC2) could lead to breaches and in some recent high-profile cases, already has. Epsilon last year and Dropbox this year reported breaches of their systems.


The problem is that individuals can put personal- or business-sensitive data into a cloud storage service, where anyone with access to the server could potentially read the file. While the design of the cloud service allows third parties to access their user's accounts, it also leaves the data less secure than a system that encrypted the data before sending it into the cloud.


These five best tips come from an article posted by CNN<http://www.cnn.com/2012/08/09/tech/web/cloud-security-tips/index.html>:


  1.  Back up everything - in the cloud or on the ground
  2.  Use a bunch (maybe hundreds) of different passwords
  3.  Don't link all of your accounts together
  4.  Use two-factor authentication on Google and Facebook
  5.  Don't use "find my Mac" on Apple computers


For interest, read Mat Honan's story<http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/>, who lost all his photos and other data by using cloud-based services when he was hacked.



--------------------------------------------------------

2. Back to School: Protecting Kids' Identities

--------------------------------------------------------


As back-to-school time approaches, children may be thinking about meeting up with friends to share stories about their summer adventures.  But when it comes to personal information, parents and kids need to be careful about sharing too much.  These days the casual use of sensitive data (like a Social Security number on a registration form, permission slip, or health document) can lead to identity theft, a serious crime that impacts thousands of kids each year.


The FTC has resources available for parents to help them protect their children from ID theft.


Read the full article<http://business.ftc.gov/blog/2012/08/its-back-school-time-protecting-kids-identities>.



===================================================================================

Read all Security FYI Newsletter articles and submit comments online at http://securityfyi.wordpress.com/.

===================================================================================


Monique Yeaton
IT Security Communications Consultant
MIT Information Services & Technology (IS&T)
(617) 253-2715
http://ist.mit.edu/security


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/ist-security-fyi/attachments/20120827/68c700cc/attachment.htm