Your Password Isn't as Strong as You Think It Is - And Other Lessons in Cyber Safety

Last night I got an email from a former colleague who I hadn't heard from in a while. The email didn't have a subject line and simply read "Here's the summary for Monday" and a PDF was attached. My Spidey Senses were triggered and I deleted the email without viewing the PDF. Obviously, his old email account was compromised. Unfortunately, this kind of attack works too often which is why nefarious characters keep using them. 

There are at least three lessons to take away from the email that I received last night and the ones like them that land in inboxes everywhere every day. First, if you have an email account that you no longer use, close it. Second, use secure, complex passwords passphrases. Third, if you get an email that you think is suspicious, delete it. 

How Easy It Is To Crack Your Password

This is a video in which Kevin Mitnick explains why your "clever" use of "@" in place of "a" in your password isn't fooling anyone. He demonstrates how quickly hackers can crack passwords and explains why you should use passphrases along with two-factor authentication. 

Beware of Social Engineering

I showed this video, another one featuring Kevin Mitnick, to my networking students a couple of weeks ago and they laughed at how gullible the people were who fell for the social engineering attack. Don't be the security manager from Motorola. 

Kevin Mitnick was one of the most wanted hackers in the world in the 1980's and 1990's. His autobiography, Ghost in the Wires, is a fascinating read for anyone who is interested in the world of hacking. He's now a security consultant for a firm called KnowBe4 and he published The Art of Invisibility which is about how to minimize and protect your digital footprints.