Re: Linked-in and its Phishing-like contacts option!
Bruce Platt <[email protected]> Fri, 26 Apr 2013 07:41:19 -0400
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <CAD3WRbL=LYo+iVjXgaa=z+ntz4WN68edLpHfnb4r8z4Nfu1nzA@mail.gmail.com> |
--===============0442723360== Content-Type: multipart/alternative; boundary=047d7b343df683041c04db4203cf --047d7b343df683041c04db4203cf Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I have a love/hate relationship with these as well. I was only tempted down this perfidious path a few years ago when a set of my Grandchildren asked me to get a Facebook account so we could interact that way as they live on the other coast from me. I started disliking it within five minutes when a former employer sent me a request to "friend" him. Then it became an issue of who can I not be "friends" with among my contemporaries. Same with Linked-In, same with Twitter. Up to this point I'm just addressing the personal inconvenience aspect of it, which is why I chose Crispan's post to which to reply. But, the larger issue is really the risk of exposing all sorts of personal / corporate information in a variety of unwitting ways. This is the part I hate. We've had many discussions about the risks of allowing people to use social media web sites from work. It's a losing battle. Entering one's email password is just one, and Linked-In is not the only villain. I just made some flight reservations yesterday. The airline website offered to add the reservation to my Calendar. Not let me download a .cal file, but to directly insert it into my calendar. Uh, no. Not today. But, this now get's added to our list of worst practices and meet's Paul's criteria of being part of overall operational security. I'm honestly not sure how we could block this stuff in a web-proxy, or be alerted by an IDS rule short of just blocking the sites. (Maybe this will start more discussion. How would one try this?) Mix these with BYOD, and it makes a daunting task indeed. Cheers --=20 +------------------------------------+ Bruce B. Platt, Ph.D. V.P. Research ei3 Corporation 136 Summit Avenue Montvale, NJ 07645 Phone: +1-201-802-9080 ext. 404 Facsimile: +1-201-802-9099 On Fri, Apr 26, 2013 at 12:53 AM, Crispin Cowan <[email protected]>w= rote: > I boycott all social media. I=E2=80=99m not opposed to social networking,= but I am > opposed to some dot.com monetizing my relationships; I do all my social > networking via open protocols like e-mail, and having a beer with a frien= d > =F0=9F=98=8A > > I broke this rule once, joining LinkedIn 5 years ago, because I needed a > job. LinkedIn was a total failure at getting a job, but attending ToorCon > and having a beer with someone I met there worked. I deleted my LinkedIn > account when I got tired of the =E2=80=9CFoo wants to connect with you=E2= =80=9D spam. I=E2=80=99m > *still* getting LinkedIn spam. > > Screw social networking web sites. I don=E2=80=99t have a FaceBook page o= r a > Twitter account, and never will. > > Funny, I never envisioned myself as Clint Eastwood yelling at kids to get > off my lawn, but here I am =F0=9F=98=8A > > Sent from Windows Mail > > *From:* Gautier . Rich > *Sent:* =E2=80=8EThursday=E2=80=8E, =E2=80=8EApril=E2=80=8E =E2=80=8E25= =E2=80=8E, =E2=80=8E2013 =E2=80=8E9=E2=80=8E:=E2=80=8E28=E2=80=8E =E2=80=8E= PM > *To:* Firewall Wizards Security Mailing List > > > Thoughts? I=E2=80=99m wondering why User Operational Security falls under= the > realm of Firewall Wizards.. Other than that, I=E2=80=99d say =E2=80=93 T= hey=E2=80=99re not alone > by any stretch of the imagination, and plenty of users seem to be perfect= ly > willing to accept the risk (or be unaware of it). However, not much you > can do on the firewall side other than turning off webmail access... > > > > *Richard Gautier, CISSP* > > Enterprise Architect, Federal Group > > [image: drc-logo] > > 650 Massachusetts Avenue NW > > Suite 510 > > Washington, DC 20001 > > Office: (571) 226-8828 *|* Cell: (703) 231-2156 > > [email protected] *|** * www.drc.com > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Mathew Wan= t > *Sent:* Monday, April 22, 2013 7:30 PM > *To:* Firewall Wizards Security Mailing List > *Subject:* [fw-wiz] Linked-in and its Phishing-like contacts option! > > > > Hiya all. > > > Has anyone else noticed the option to see who else they know is connected > on Linked-in? Have you noticed that if you click on the outlook button it > asks you for your WORK EMAIL PASSWORD!!!!! > > Bloody hell! It's not like the job of getting users to not submit this > information to other sites isn't already hard enough without this!!! The > "can't put brains in pumpkins " department must be having a field day ove= r > this. > > Am I the only one that think this is a touch negligent on the part of > Linked-in? Or should I just accept that it is corporate facebook, accepts > that they have the dame moral fibre and move on? > > Maybe I am expecting too much? Thoughts? > > -- > > Regards, > M@ > > -- > "Some things are eternal by nature, > others by consequence" > ------------------------------ > This electronic message transmission and any attachments that accompany > it contain information from DRC=C2=AE (Dynamics Research Corporation) or = its > subsidiaries, or the intended recipient, which is privileged, proprietary= , > business confidential, or otherwise protected from disclosure and is the > exclusive property of DRC and/or the intended recipient. The information = in > this email is solely intended for the use of the individual or entity tha= t > is the intended recipient. If you are not the intended recipient, any use= , > dissemination, distribution, retention, or copying of this communication, > attachments, or substance is prohibited. If you have received this > electronic transmission in error, please immediately reply to the author > via email that you received the message by mistake and also promptly and > permanently delete this message and all copies of this email and any > attachments. We thank you for your assistance and apologize for any > inconvenience. > > _______________________________________________ > firewall-wizards mailing list > [email protected] > https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards > > --047d7b343df683041c04db4203cf Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I have a love/hate relationship with these as well. =C2=A0I was only tempte= d down this=C2=A0perfidious=C2=A0path a few years ago when a set of my Gran= dchildren asked me to get a Facebook account so we could interact that way = as they live on the other coast from me. =C2=A0I started disliking it withi= n five minutes when a former employer sent me a request to "friend&quo= t; him. =C2=A0Then it became an issue of who can I not be "friends&quo= t; with among my contemporaries.<div> <br></div><div>Same with Linked-In, same with Twitter. =C2=A0</div><div><br= ></div><div>Up to this point I'm just addressing the personal inconveni= ence aspect of it, which is why I chose Crispan's post to which to repl= y.</div> <div><br></div><div>But, the larger issue is really the risk of exposing al= l sorts of personal / =C2=A0corporate information in a variety of unwitting= ways. =C2=A0This is the part I hate. =C2=A0We've had many discussions = about the risks of allowing people to use social media web sites from work.= =C2=A0It's a losing battle. =C2=A0Entering one's email password is= just one, and Linked-In is not the only villain. =C2=A0I just made some fl= ight reservations yesterday. =C2=A0The airline website offered to add the r= eservation to my Calendar. =C2=A0Not let me download a .cal file, but to di= rectly insert it into my calendar. =C2=A0Uh, no. =C2=A0Not today.</div> <div><br></div><div>But, this now get's added to our list of worst prac= tices and meet's Paul's criteria of being part of overall operation= al security. =C2=A0I'm honestly not sure how we could block this stuff = in a web-proxy, or be alerted by an IDS rule short of just blocking the sit= es. =C2=A0(Maybe this will start more discussion. =C2=A0How would one try t= his?)</div> <div><br></div><div>Mix these with BYOD, and it makes a daunting task indee= d. =C2=A0</div><div><br></div><div>Cheers<br clear=3D"all"><div><pre cols= =3D"72">--=20 +------------------------------------+ Bruce B. Platt, Ph.D. V.P. Research ei3 Corporation 136 Summit Avenue Montvale, NJ 07645 Phone: +1-201-802-9080 ext. 404 Facsimile: +1-201-802-9099</pre></div> <br><br><div class=3D"gmail_quote">On Fri, Apr 26, 2013 at 12:53 AM, Crispi= n Cowan <span dir=3D"ltr"><<a href=3D"mailto:[email protected]" t= arget=3D"_blank">[email protected]</a>></span> wrote:<br><blockqu= ote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc s= olid;padding-left:1ex"> <div><div dir=3D"ltr" style=3D"font-family:Calibri,'Segoe UI',Meiry= o,'Microsoft YaHei UI','Microsoft JhengHei UI','Malgun = Gothic','Khmer UI','Nirmala UI',Tunga,'Lao UI',= Ebrima,sans-serif;font-size:12pt"> <div>I boycott all social media. I=E2=80=99m not opposed to social networki= ng, but I am opposed to some <a href=3D"http://dot.com" target=3D"_blank">d= ot.com</a> monetizing my relationships; I do all my social networking via o= pen protocols like e-mail, and having a beer with a friend <span style=3D"f= ont-family:"Segoe UI Symbol","Apple Color Emoji"">=F0= =9F=98=8A</span></div> <div>=C2=A0</div><div>I broke this rule once, joining LinkedIn 5 years ago,= because I needed a job. LinkedIn was a total failure at getting a job, but= attending ToorCon and having a beer with someone I met there worked. I del= eted my LinkedIn account when I got tired of the=C2=A0=E2=80=9CFoo wants to= connect with you=E2=80=9D spam. I=E2=80=99m <strong>still</strong> getting= LinkedIn spam.</div> <div>=C2=A0</div><div>Screw social networking web sites. I don=E2=80=99t ha= ve a FaceBook page or a Twitter account, and never will.</div><div>=C2=A0</= div><div>Funny, I never envisioned myself as Clint Eastwood yelling at kids= to get off my lawn, but here I am <span style=3D"font-family:"Segoe U= I Symbol","Apple Color Emoji"">=F0=9F=98=8A</span></div> <div><div>=C2=A0</div><div>Sent from Windows Mail</div><div>=C2=A0</div></d= iv><div style=3D"padding-top:5px;border-top-color:rgb(229,229,229);border-t= op-width:1px;border-top-style:solid"><div><font face=3D"Calibri, 'Segoe= UI', Meiryo, 'Microsoft YaHei UI', 'Microsoft JhengHei UI&= #39;, 'Malgun Gothic', 'Khmer UI', 'Nirmala UI', Tu= nga, 'Lao UI', Ebrima, sans-serif" style=3D"line-height:15pt;letter= -spacing:0.02em;font-family:Calibri,"Segoe UI",Meiryo,"Micro= soft YaHei UI","Microsoft JhengHei UI","Malgun Gothic&q= uot;,"Khmer UI","Nirmala UI",Tunga,"Lao UI",E= brima,sans-serif;font-size:11pt"><b>From:</b>=C2=A0Gautier . Rich<br> <b>Sent:</b>=C2=A0=E2=80=8EThursday=E2=80=8E, =E2=80=8EApril=E2=80=8E =E2= =80=8E25=E2=80=8E, =E2=80=8E2013 =E2=80=8E9=E2=80=8E:=E2=80=8E28=E2=80=8E = =E2=80=8EPM<br><b>To:</b>=C2=A0Firewall Wizards Security Mailing List</font= ></div></div><div>=C2=A0</div> <div> <p class=3D"MsoNormal"><span style=3D"color:rgb(31,73,125);font-family:&quo= t;Calibri","sans-serif";font-size:11pt">Thoughts? I=E2=80=99= m wondering why User Operational Security falls under the realm of Firewall= Wizards..=C2=A0 Other than that, I=E2=80=99d say =E2=80=93 They=E2=80=99re= not alone by any stretch of the imagination, and plenty of users seem to be perfectly willing to ac= cept the risk (or be unaware of it).=C2=A0 However, not much you can do on = the firewall side other than turning off webmail access...</span></p> <p class=3D"MsoNormal"><span style=3D"color:rgb(31,73,125);font-family:&quo= t;Calibri","sans-serif";font-size:11pt">=C2=A0</span></p> <p class=3D"MsoNormal"><b><span style=3D"color:navy;font-family:"Arial= ","sans-serif";font-size:8pt">Richard Gautier, CISSP</span><= /b><span style=3D"color:navy;font-family:"Arial","sans-serif= ""> </span></p> <p class=3D"MsoNormal"><span style=3D"color:navy;font-family:"Arial&qu= ot;,"sans-serif";font-size:8pt">Enterprise Architect, Federal Gro= up</span><span style=3D"color:navy;font-family:"Arial","sans= -serif";font-size:10pt"></span></p> <p class=3D"MsoNormal"><img width=3D"36" height=3D"36" align=3D"left" alt= =3D"drc-logo" hspace=3D"12"><span style=3D"color:navy;font-family:"Ari= al","sans-serif";font-size:2pt"></span></p> <p class=3D"MsoNormal"><span style=3D"color:navy;font-family:"Arial&qu= ot;,"sans-serif";font-size:8pt">650 Massachusetts Avenue NW</span= ><span style=3D"color:rgb(31,73,125);font-size:8pt"></span></p> <p class=3D"MsoNormal"><span style=3D"color:navy;font-family:"Arial&qu= ot;,"sans-serif";font-size:8pt">Suite 510</span></p> <p class=3D"MsoNormal"><span style=3D"color:navy;font-family:"Arial&qu= ot;,"sans-serif";font-size:8pt">Washington, DC 20001</span><span = style=3D"color:rgb(31,73,125);font-size:8pt"></span></p> <p class=3D"MsoNormal"><span style=3D"color:navy;font-family:"Arial&qu= ot;,"sans-serif";font-size:8pt">Office: <a href=3D"tel:%28571%29%= 20226-8828" value=3D"+15712268828" target=3D"_blank">(571) 226-8828</a> </span><span style=3D"color:rgb(152,72,6);font-family:"Arial",&qu= ot;sans-serif";font-size:8pt">=C2=A0<b>|</b></span><span style=3D"colo= r:navy;font-family:"Arial","sans-serif";font-size:8pt">= =C2=A0 Cell: <a href=3D"tel:%28703%29%20231-2156" value=3D"+17032312156" ta= rget=3D"_blank">(703) 231-2156</a></span></p> <p class=3D"MsoNormal"><span style=3D"color:rgb(31,73,125);font-family:&quo= t;Arial","sans-serif";font-size:8pt"><a title=3D"mailto:rgau= [email protected]" href=3D"mailto:[email protected]" target=3D"_blank"><span styl= e=3D"color:blue">[email protected]</span></a></span><span style=3D"color:nav= y;font-family:"Arial","sans-serif";font-size:8pt">=C2= =A0 </span><b><span style=3D"color:rgb(152,72,6);font-family:"Trebuchet MS= ","sans-serif";font-size:8pt">|</span></b><b><span style=3D"= font-size:8pt;font-family:"Trebuchet MS","sans-serif""> </span></b><span style=3D"font-size:8pt;font-family:"Arial","= ;sans-serif"">=C2=A0</span><span style=3D"color:rgb(31,73,125);font-fa= mily:"Calibri","sans-serif";font-size:11pt"><span style= =3D"color:blue;font-family:"Arial","sans-serif";font-si= ze:8pt"><a href=3D"http://www.drc.com" target=3D"_blank">www.drc.com</a></s= pan></span><span style=3D"color:navy;font-family:"Arial","sa= ns-serif";font-size:8pt"> </span><span style=3D"color:rgb(31,73,125);font-family:"Arial",&q= uot;sans-serif";font-size:8pt"></span></p> <p class=3D"MsoNormal"><span style=3D"color:rgb(31,73,125);font-family:&quo= t;Calibri","sans-serif";font-size:11pt">=C2=A0</span></p> <p class=3D"MsoNormal"><b><span style=3D"font-family:"Tahoma",&qu= ot;sans-serif";font-size:10pt">From:</span></b><span style=3D"font-fam= ily:"Tahoma","sans-serif";font-size:10pt"> <a href=3D"m= ailto:[email protected]" target=3D"_blank">fir= [email protected]</a> [mailto:<a href=3D"mailto:f= [email protected]" target=3D"_blank">firewall-w= [email protected]</a>] <b>On Behalf Of </b>Mathew Want<br> <b>Sent:</b> Monday, April 22, 2013 7:30 PM<br> <b>To:</b> Firewall Wizards Security Mailing List<br> <b>Subject:</b> [fw-wiz] Linked-in and its Phishing-like contacts option!</= span></p> <p class=3D"MsoNormal">=C2=A0</p> <div> <div> <p class=3D"MsoNormal">Hiya all.</p> <div> <div> <div> <p class=3D"MsoNormal" style=3D"margin-bottom:12pt"><br> Has anyone else noticed the option to see who else they know is connected o= n Linked-in? Have you noticed that if you click on the outlook button it as= ks you for your WORK EMAIL PASSWORD!!!!!</p> </div> <p class=3D"MsoNormal" style=3D"margin-bottom:12pt">Bloody hell! It's n= ot like the job of getting users to not submit this information to other si= tes isn't already hard enough without this!!! The "can't put b= rains in pumpkins " department must be having a field day over this.</p> </div> <p class=3D"MsoNormal" style=3D"margin-bottom:12pt">Am I the only one that = think this is a touch negligent on the part of Linked-in? Or should I just = accept that it is corporate facebook, accepts that they have the dame moral= fibre and move on?</p> </div> <div> <p class=3D"MsoNormal">Maybe I am expecting too much? Thoughts?</p> </div> <p class=3D"MsoNormal">--</p> </div> <p class=3D"MsoNormal">Regards,<br> M@</p><span class=3D"HOEnZb"><font color=3D"#888888"> <div> <div> <p class=3D"MsoNormal">-- <br> "Some things are eternal by nature,<br> others by consequence"</p> </div> </div> </font></span></div><span class=3D"HOEnZb"><font color=3D"#888888"> </font></span></div><span class=3D"HOEnZb"><font color=3D"#888888"> <hr> <font size=3D"small"></font> <h5><font color=3D"gray">This electronic message transmission and any attac= hments that accompany it contain information from DRC=C2=AE (Dynamics Resea= rch Corporation) or its subsidiaries, or the intended recipient, which is p= rivileged, proprietary, business confidential, or otherwise protected from disclosure and is the exclusive property of DR= C and/or the intended recipient. The information in this email is solely in= tended for the use of the individual or entity that is the intended recipie= nt. If you are not the intended recipient, any use, dissemination, distribution, retention, or copying of = this communication, attachments, or substance is prohibited. If you have re= ceived this electronic transmission in error, please immediately reply to t= he author via email that you received the message by mistake and also promptly and permanently delete this messa= ge and all copies of this email and any attachments. We thank you for your = assistance and apologize for any inconvenience. </font></h5><font color=3D"gray"> </font> </font></span></div></div><br>_____________________________________________= __<br> firewall-wizards mailing list<br> <a href=3D"mailto:[email protected]">firewall-wizards@= listserv.icsalabs.com</a><br> <a href=3D"https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards"= target=3D"_blank">https://listserv.icsalabs.com/mailman/listinfo/firewall-= wizards</a><br> <br></blockquote></div><br></div> --047d7b343df683041c04db4203cf-- --===============0442723360== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ firewall-wizards mailing list [email protected] https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards --===============0442723360==--