Tue Feb 10, 2009 2:53PM EST
See Comments (110)
We're barely into February and already a rash of computer security breaches is shaping up to be one of the biggest technology stories of the year.
It certainly seems like we've been on this road for a while now. Late last month, the numbers tallied by McAfee pegged total economic losses due data theft and security breaches thanks to organized crime, malicious hackers, and inside jobs at a full one trillion dollars. The report even highlights the rise of a "cyber mafia," which breaks into corporate databases and targets executives, and often extorts money out of both along the way.
No business appears to be safe. The FAA reported Tuesday that it had 45,000 employee records stolen by hackers last week. And even Kaspersky, which makes security software, had its website broken into this weekend.
In a reaction to this and other news of security breaches, President Obama yesterday announced an immediate 60-day review of how the federal government handles computer security, with an eye on what the government is doing to protect essential domestic networks -- including electrical distribution control systems, banking networks, and travel back-ends like air traffic control systems -- not just government-run systems like Pentagon file servers.
Are you at risk? If there's a bright side in all this news it's that in general, hackers have been actively targeting bigger fish -- corporations and millionaires instead of average users -- simply because that's where the more valuable booty is. But still, the standard pitfalls of malware, phishing, and virus attacks remain at large, so every computer user is still vulnerable to getting ensnared in one of these traps unless precautions are taken.
Advice on avoiding hackers remains the same as ever:
> Update your operating system and web browser with the latest security patches.
> Install solid anti-malware software and ensure it's up to date.
> Use common sense when opening emails and clicking links. Employ a spam filter, and never click links embedded in an email unless you personally know the recipient. (And never click a link sent by your bank -- it's almost certainly phony.)
> Use a strong password on any site that houses personal information, and don't reuse that password on sites that you consider less secure or where you have doubts about their reliability or vulnerability.
Join in the discussion. Here you'll see the comments in the order they were posted.
The problem with these hackers is that they do not face much of a penalty if caught. the reward is far more than the punishment they would be subject to. I think they should be strung up. Let's start getting tough on criminals for once.
i knew it!! . . . the "blue man group" is merely a front to launder cash obtained from data theft!! . . .
The economy being what it is, the hacking problem is going to get worse. Out-of-work programmers and software engineers who know the tricks of the trade could easily fall into the employ of less reputable groups, or even do it on their own if they get desperate enough. I recommend avoiding online banking if you can avoid it, and paying your bills the old snail-mail way instead of doing everything online. Nothing is completely secure and nothing is sacred, but if you don't cut down your risks, you will get burned eventually.
Too bad that the cyber security research funding was cut from the Economic Stimulus Bill. I guess the loss of a trillion dollars a year is better than wasting tax money on research.
I agree penalties for this should be harsh. How about 5 year minimum/20 year maximum depending on the severity of the crime. That and these companies need to dump a LOT more money into proctecion. In order to beat the hackers they have to have people working full time on the latest hacking scams. The government should also have very intensive units dedicated to this exclusively and with proper funding.
and the Government just passed a "stimulus" more like a bailout bill and in it is a provision where they want to convert our medical records to electronic files and track everything for us.
Ask me about Identity Theft Protection before it is too late.
Can't hurt em if they're in this country. You're all assuming they're in the US. I believe many are in Asia or Russia. How do you go about prosecuting or even investigating them in that case? I agree with the suggestion that companies unplug. It's the only way.
They aren't hackers, they are lowlife crackers, I hate it when people who are supposedly tech-savvy can't even articulate the difference. Hackers come from a tradition of ingenuity tracing its roots back to MIT's AI lab and tech model railroad club. Crackers are just common criminals. Most of them can barely code and use apps created by other people in order to further their nefarious agenda.
1 Posted by spurrier925 on Thu Sep 3, 2009 9:37PM EDT Report Abuse
It's disgusting to think how much time and money these thieves cost us good citizens. The solution is to make these hackers pay dearly when they're caught. Not 1 or 2 years in prison, but a looooooot longer. Make these guys think twice about it, instead of having no disincentive at all.