<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class="">In this issue:</div>
<div style="margin: 0px; font-family: Arial;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">1. EVENT: Laptop Tagging and Registration on Wed. 12/3</div>
<div style="margin: 0px; font-family: Arial;" class="">2. The Importance of Multi-Factor Authentication</div>
<div style="margin: 0px; font-family: Arial;" class="">3. Mozilla Releases Firefox 34</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">------------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Arial;" class="">1. EVENT: Laptop Tagging and Registration on Wed. 12/3</div>
<div style="margin: 0px; font-family: Arial;" class="">------------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">This Wednesday, there is an opportunity to register and tag your laptop. The next laptop tagging session is on February 4th, 2015.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Where: <b class="">Lobby of Building 10</b></div>
<div style="margin: 0px; font-family: Helvetica;" class="">When: <b class="">Wed., December 3, 11:00 am - 1:15 pm</b></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Cost: $10 cash (no cards) or MIT Cash Object</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Just as you might register a bike with the police, you can also register your laptop. Information Systems & Technology partners with MIT Police to provide STOP (Security Tracking of Office Property)
tags for laptops. The tag is affixed to the device, has a unique number, and is registered with a world-wide database.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Sgt. Cheryl Vossmer of the MIT Police says that although a STOP tag is not software that can track a device via GPS or other means, it has been very effective at providing a way for lost or stolen laptops
to be returned to their rightful owners.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Read <a href="https://www.stoptheft.com/" class="">
recovery stories here</a> of laptops with STOP tags.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline ; font-kerning: none" class=""><a href="http://kb.mit.edu/confluence/display/istcontrib/MIT+Police+Laptop+Tagging+and+Registration" class="">Learn more about
laptop registration at MIT</a></span>.</div>
<div style="margin: 0px; font-family: Helvetica; color: rgb(71, 135, 255); min-height: 17px;" class="">
<br class="">
</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">----------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Arial;" class="">2. The Importance of Multi-Factor Authentication</div>
<div style="margin: 0px; font-family: Arial;" class="">----------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">Over the past year, several university employees around the country were targeted by successful phishing attacks. </div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">Cyber criminals sent emails to employees, appearing to come from their university, that warned them about an issue requiring them to log in to their employee portal. When the employees clicked the link
to what appeared to be their university’s legitimate login portal, they landed on a page that was hosted by the criminals. Criminals were able to successfully use the victims’ credentials to modify direct deposit information so that salaries could be re-routed
to an account they controlled.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">These types of attacks, called phishing attacks, are an attempt to steal login credentials, and as a result, gain access to your online accounts. This is how they are able to take your money or your sensitive
information. With your credentials in hand, they can behave online as if they were you.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">One way of defeating this type of fraud is for online systems to require an additional factor for authentication. This factor should be something the attacker has no way of accessing. It will prevent an
attacker from pretending to be you, even if they have accessed your credentials. </div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">Factors in authentication are:</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<ul class="">
<li style="margin: 0px; font-family: Arial;" class="">something the user “is” such as a fingerprint
</li><li style="margin: 0px; font-family: Arial;" class="">something the user “knows” such as a password
</li><li style="margin: 0px; font-family: Arial;" class="">something the user “has” such as a smartphone.
</li></ul>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">In direct response to these attacks, a new feature has been added to
<a href="https://atlas.mit.edu/" class="">Atlas</a>, in addition to the web certificate authentication that is already in place. It requires users to enter the last four digits of their Social Security Number to better authenticate their identity when accessing
their personal sensitive information. </div>
<div style="margin: 0px; font-family: Arial;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">Multi-factor technology will be added to
<a href="http://ist.mit.edu/touchstone" class="">Touchstone</a>, called <a href="http://guide.duosecurity.com/" class="">
Duo Security</a>, that in the future will be required when users access critical MIT services and applications. This feature is not yet available to the MIT community.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class=""><a href="http://ist.mit.edu/news/payroll_scam" class="">Read the full story in IS&T News</a></div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class=""><a href="http://www.ren-isac.net/alerts/REN-ISAC_ADVISORY_University_Payroll_Theft_20141112_TLPWHITE.pdf" class="">REN-ISAC Advisory: University Payroll Theft Scheme</a> (.pdf)</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">----------------------------------------</div>
<div style="margin: 0px; font-family: Arial;" class="">3. Mozilla Releases Firefox 34</div>
<div style="margin: 0px; font-family: Arial;" class="">----------------------------------------</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">This week Mozilla released Firefox 34.0.5. Users of this browser will notice that the default search engine in Firefox 34 is Yahoo, rather than Google. Also included in this version are an improved search
bar, and the launch of <a href="https://developer.mozilla.org/en-US/docs/Tools/WebIDE" class="">
WebIDE</a> (the replacement for App Manager). SSL 3.0 support has been removed from this update due to
<a href="http://kb.mit.edu/confluence/x/GIEwCQ" class="">known security issues.</a> </div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class=""><a href="https://www.mozilla.org/en-US/firefox/34.0.5/releasenotes/" class="">Read the Notes for Firefox 34.0.5</a></div>
<div class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica;" class="">=======================================================================================</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Read all archived Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/" class=""><span style="color: rgb(4, 46, 238);" class="">http://securityfyi.wordpress.com/</span></a>.</div>
<div style="margin: 0px; font-family: Helvetica;" class="">=======================================================================================</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
Monique Buchanan<br class="">
IT Security Communications Coordinator<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu/secure" class="">http://ist.mit.edu/secure</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Please note I work from home on Fridays.</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>