Showing posts with label McAfee. Show all posts
Showing posts with label McAfee. Show all posts

Crack One Account's Password, To Crack All Others

Bill Bennett

People are rarely good at dealing with computer passwords. According to a survey carried out in Europe by McAfee, a computer security specialist, almost half of all users never change their passwords. That's risky enough but the survey also found that roughly one in four respondents use the same password for all their online accounts. In other words, if one account is cracked, everything is cracked.

McAfee also found that most people don't use the recommended longer, more complex, passwords made up of a mixture of upper and lower case letters, numbers and even punctuation characters. Worse still, many passwords are fairly obvious things like a pet's name or a hobby.

This is why many security conscious websites will automatically nag you to select a more complex, so-called strong password. It may be annoying, even patronising, but this kind of enforced security is ultimately a good thing.

Reluctance to use strong passwords is hardly surprising. It's not too difficult to remember one or two passwords - even complex ones - but today's online world requires us to use dozens.

An ability to remember, say, 25 complex, meaningless 12-character passwords that change every six weeks or so is the kind of skill that used to be a requirement for getting a job with a travelling freak show.

On the other hand, writing them on a Post-It note and sticking it on your monitor isn't much of an answer. The dangers of poor password management can be catastrophic. Not only could criminals get control of your bank account but they also could easily move on to ruining your entire life and destroying your business. Identify theft is terrifying so something needs to be done.

There are plenty of practical tools to help manage passwords. Alongside its other security features, Norton Internet Security 2008 ($100) includes an Identity Safe that secures your log-in information for websites in a central store. This automatically prompts you to save details when you log in to a new site and then fills in the information when you return. It allows multiple log-ins for sites so, for example, two people can securely access Yahoo! Mail from a single computer.

If you don't want to spend money, Keepass (http://keepass.info) is a free, solid encrypted password database. It's very secure - if you keep the program running and leave your computer you'll have to log-in again before using it.

Sphere: Related Content

McAfee Buys SafeBoot BV For $350 Million

Software maker McAfee will buy privately held SafeBoot BV for US$350 million in cash, adding data encryption technology to its line of anti-virus programmes and other computer security products.

The move gives McAfee technology to address a problem that has made big news in recent months: data breaches that occur when computers with sensitive information are stolen.

Clothing retailer Gap Inc last month joined a long list of companies and government agencies that have had to face the issue when it disclosed that a laptop computer containing social security numbers of about 800,000 job applicants had been stolen.

SafeBoot is McAfee's first acquisition since it brought in outsider Dave DeWalt as chief executive in April. McAfee is working to revamp its product line and complete a financial audit that has kept it from filing results for 2006.

The company said that more acquisitions might be in store as DeWalt looks to build out McAfee's product line.

"We continue to look at tuck-in acquisitions in the small to medium category as one of the levers for building our product suite as part of our broader approach to security risk management," said said McAfee spokesman Joris Evers.

As of the end of June, the software maker had a cash war chest of about US$1.4 billion on its books that it could use toward acquisitions.

SafeBoot of Nieuwegein in the Netherlands sells software that allow users to encrypt files, folders, entire hard drives or information stored on devices such as mobile phones. Once it is encrypted, data is useless unless it is unlocked with a password.

The market for encryption software products is about US$1 billion per year, according to McAfee, which said it hopes to close the deal in the fourth quarter.

Interest in data encryption software has grown as the recent rash of data breaches has put businesses in the position of having to confront the reality of complying with disclosure laws in many European countries and at least 39 US states.

They require notifying individuals whose data has been lost, a process that can damage the reputation of a company and send customers fleeing. Disclosure requirements are often waived if the data is encrypted.

McAfee said it plans to add SafeBoot technology to products targeted at consumers, small businesses and large corporations.

When McAfee enters the encryption market, it will compete with PGP Corp, a privately held company that McAfee's corporate predecessor, Network Associates, bought in 1997 and sold in 2002.

"Customer demand for encryption is much higher today than it was when McAfee sold PGP, so now is the right time to acquire SafeBoot and make encryption a key part of our data security offering," Evers said.

SafeBoot has some 4200 customers, including more than 150 companies listed in the Fortune 500, according to McAfee.

According to PGP's website, it has 80,000 customers, including 95 of the companies in the Fortune 100.

McAfee's purchase of SafeBoot could prompt rivals including Symantec Corp, the world's biggest maker of computer security software, and EMC Corp's RSA security division, to look at buying the handful of remaining encryption software companies, said Jefferies & Co analyst Katherine Egbert.

Besides PGP, Germany's Utimaco Safeware AG sells such products. Officials at the company's US offices in Foxboro, Massachusetts, couldn't be reached for comment.

PGP chief executive Phillip Dunkelberger said in an interview that he is not interested in selling his company.

He said his plan is for PGP to keep developing encryption products that are compatible with data and security software and hardware from other companies.

Sphere: Related Content