Get Cocoon

Our mission is to take Internet security and privacy to a new level.

[ritchie]

Lightbeam

I’ve recently been trying to figure out how the LinkedIn People You May Know anti-feature seems so sketchy in the data it’s pulling from email exchanges and accounts that I’ve never specifically linked to the site. Apparently the LinkedIn mobile apps will rip your entire contact list, and even if you don’t use these apps, it appears to somehow reverse-link the rest of us (based on real names, not email addresses) from the suckers who do. There are some ongoing attempts to try to get this pulled in, but LinkedIn doesn’t appear to have done anything illegal so far, rather has just been sneaky in making excellent use of the EULAs and app permissions notifications that everyone clicks through without reading.

Anyway, Lightbeam/Collusion is a Firefox and Chrome plugin that will illustrate how many other entities are putting their fingers in when you visit what may seem like an unrelated site. From what I can tell, LinkedIn isn’t illicitly directly connecting to Gmail or any other contact services. Thanks for the heads up TJ!

wikipedia:

Lightbeam (called Collusion in its experimental version) is an add-on for Firefox that displays third party tracking cookies placed on the user’s computer while visiting various websites. It displays a graph of the interactions and connections of sites visited and the tracking sites to which they provide information.

[getcocoon-blog-blog]

Why We Love Privacy (And You Should, Too!)

Privacy can be elusive to those who surf the web in the raw. Myriad websites across the globe are made aware of our presence from the moment we query a search engine, login to a social media site, read a blog post, or search for a product at Amazon. Our digital footprint can spread far and wide via all of the devices that we utilize to access the Internet too. Today, corporations and government may know more about our daily habits than our partner or best friend does.

Online Privacy Defined

Though the definition of online privacy differs from person to person – most of us would agree that we should be able to control what personal data is shared with the outside world. In an ideal setting – we should know who has access to our personal data; what purpose they are using our data for; and be made aware of when they access our private data. The ability to control who gets to peep at what should inherently be under our control (unless we choose to place our private data in the public realm).

You can read more at the Cocoon blog.

[getcocoon-blog-blog]

Cocoon takes Security & Privacy to the Cloud

Virtual World Computing will appear on The Balancing Act® airing on Lifetime Television® on Wednesday morning, November 13 at 7 a.m. (ET/PT) with Host Julie Moran. The popular morning show will feature Cocoons free security plugin, bringing a whole new ...

Celebrity Host Julie Moran sits down with Jeff Bermant CEO on The Balancing Act® on November 13th and 20th at 7:00 am (ET/PT) on Lifetime TV to discuss in detail the benefits and features of protecting your privacy with Cocoon.

[getcocoon-blog-blog]

[Infoworld] 11 sure signs you've been hacked

[Oh No -I've been hacked!] Here is a pretty good article from Infoworld about how to tell if you have been hacked and what to do about the hack(s)if you have been compromised.

Fake antivirus messages

Unwanted browser toolbars

Redirected Internet searches

Frequent random popups

Your friends receive fake emails from your email account

Your online passwords suddenly change

Unexpected software installs

Your mouse moves between programs and makes correct selections 

Your antimalware software, Task Manager, or Registry Editor is disabled and can't be restarted

Your bank account is missing money

You get calls from stores about nonpayment of shipped goods

Infoworld states that "Most malicious hacking originates from one of three vectors: unpatched software, running Trojan horse programs, and responding to fake phishing emails."

[getcocoon-blog-blog]

The College Student’s Guide to Cyber-security

The dog day afternoons of summer are coming to a close. It's almost time for classes to begin. If you are not a geek - you might not be up on the latest cyber-security threats and this is why this cyber-security guide is meant for you. I won't make you suffer through a babble of techno-geek language either. You should be able to cruise through this short guide with ease.

Cyber-security on a PC

Back-up: How and why you should back up your personal computer.

Though this is one of the most neglected areas of computer maintenance,  it is essential to have a clean back-up source if your system has a hard disk failure (crashes) or your data and system files become compromised by a virus.

Use strong passwords: Check your password at Microsoft, is it strong?

[pullquote]A weak password such as 123456, password, abc123, or using your first name or pet’s name as your password is the Achilles heel of cyber-security. [/pullquote]

A weak password such as 123456, password, abc123, or using your first name or pet’s name as your password is the Achilles heel of cyber-security. Passwords are your first line of defense against cybercriminals. Create complex passwords for each site (do not share the same password at multiple sites), change them frequently and create accounts at sites that use good encryption.

Use a firewall: What is a firewall?

This guide includes cyber-security tips for college students and anyone who wants to better secure their pc, Mac, or Smartphone.

Find out more a the Cocoon blog here.

[getcocoon-blog-blog]

Add Cocoon to your Internet Tool Kit Today - The Cocoon Blog

The one thing that I have learned about Cocoon is that it has a place in my Internet tool kit for agenda that goes beyond Internet security and privacy.

[getcocoon-blog-blog]

The NSA Is Scaring Me!

From The Quivering Dog Department: Ever since Snowden leaked the NSA brouhaha in June - I've been a dog on a mission, digging up NSA bones everywhere I can.  My email is packed with alerts on NSA; surveillance; PRISM; XKeyscore.  

NOT THAT I HAVE ANYTHING TO HIDE. But - I do believe in privacy and just like I would not want the NSA taking a shower with me; I do not want them reading my vacation plans either.  So this morning - our company CEO (Jeff) sent me this (must have missed it in my alert deluge) --> NSA's data reach greater than first thought, says report 

These revelations, if proven true, would be reminiscent of claims made by Mark Klein in 2006, who worked as an AT&T technician in San Francisco. Klein blew the whistle on the NSA's involvement in domestic wiretapping, claiming the agency diverted Internet traffic through a splitter cabinet in a secure room, dubbed "Room 641A," which was to be used only by NSA personnel.

I remember 2006 when Klien blew that whistle. It was downplayed and eventually buried. That was seven years ago and during the interim -> look how far the NSA has reached. Does that disturb you? It makes me angry and also at the same time -> I fear for my own digital actions. If I search for "one of their keywords" will I be placed on the no fly list? If I meet with a privacy activist, will my friends and family be monitored because of my connection to my activist friend? America is getting scary and pretty soon I fear that there will be no place left to hide.  Please share your thoughts -don't let me be the only shivering dog shaking like a dustmop here. Type everything in code so that they don't read it. Friends don't let friends use clear text... 

[lookatluca-blog]

I cannot imagine how surreal the world must feel to Glenn Greenwald from one day to another. What will they accuse him of next? Excellent commentary today by Rachel Maddow

[getcocoon-blog-blog]

[From the *Deep Thoughts* Department]

[getcocoon-blog-blog]

From: The Watch Your Instagram "likes" & "followers" Department

That old Zeus malware is back and has been modified to harness fake likes and followers on Instagram.  RSA recently revealed that you can buy 1000 Instagram followers for $12.75 and get 1000 likes for $25.50 in underground Internet forums. On the same note, you can also purchase 1,000 credit card numbers for as little as $5.10.  Though Instagram works hard to stop spam - it is not likely that they will be able to keep up with an onslaught of automated bots. So, be sure to watch your Instagram "likes" and "followers".  If you see strange activity taking place > click on the picture > click on "..." [to the right of the comment field] > Click "Report Inappropriate" and select why you're reporting the picture. More info is here:http://www.ibtimes.co.uk/articles/499985/20130819/instagram-zeus-malware-virus-create-likes-followers.htm Use Instagram? 

[getcocoon-blog-blog]

[From: This is not a Facebook Bug Department]

Recently a Palestinian IT expert (Shreateh) tried to warn Facebook that they had a vulnerability that would let anyone post to anyone's page (and that page did not have to belong to a friend).  The IT expert went through the regular channels and reported the vulnerability through Facebook's "white hat" security disclosure service. This service pays you to report legitimate bugs. They responded that this was not a "bug," even though Shreateh was able to post on Zuckerberg's friends wall (Sarah Goodwin).  So - Shreateh ended up posting on Mark Zuckerberg's timeline to prove that this was a bug. Within minutes Shreateh was contacted by Facebook security and his Facebook account was disabled. Because Shreateh violated Facebook's terms of service - he would not receive a "bug reward." Bah Humbug!  Facebooks' response: "Exploiting bugs to impact real users is not acceptable behavior for a white hat," the engineer wrote, adding that researchers are allowed to create test accounts to aid their research. If you can post on a timeline that does not belong to your friend and they have their privacy locked down (like Mark Zuckerberg does) - if it is not a "bug", what the eHeck is it??? http://news.cnet.com/8301-1023_3-57599043-93/researcher-posts-facebook-bug-report-to-mark-zuckerbergs-wall/

[getcocoon-blog-blog]

Here is how to opt-out of Gmail (Gspam) "personalized ads"

Use Gmail? Google attorneys recently told a federal judge that reading Gmail users' emails to select which ads to show the user is just like a secretary opening a business letter.

The filing seeks to dismiss a class-action lawsuit that says Google is violating federal and state wiretap laws by reading user emails to make ad decisions.

Google’s brief uses a wrong-headed analogy; sending an email is like giving a letter to the post office,” says John M. Simpson, Consumer Watchdog’s Privacy Project director. “I expect the post office to deliver the letter based on the address written on the envelope. I don’t expect the mail carrier to open my letter and read it. -MoneyTalkNews

I use Gmail. Never for corresponding with family; friends; or anything that could send information about my likes, dislikes, or what I am doing today - or where I am going tomorrow. 

My Gmail might just be the most boring Gmail account on the planet. It is filled with Gmail alerts; tech/security/privacy exchanges - and overall stuff that nobody would ever want to scroll through.

But, even though my Gmail account is mundane - I still opted out of their ad services. It's really easy to do. Just go to your settings > click on the "GENERAL TAB," and scroll down to "IMPORTANCE SIGNALS FOR ADS."

Clever opt-out location in settings > making you scroll down the page...

Opting out of these two settings will opt you out of interest-based ads on search; Gmail; Google Display Network - though you will still see ads, they will not be related to factors like your gender, age, and interests.

Consumer Watchdog posted Google's filing here.

Do you use Gmail? Did you opt-out?

[getcocoon-blog-blog]

Top 10 mobile security apps for the back to school crowd

August is the last month of summer and also the beginning of the homestretch for back-to-school planning. It’s also time to seriously start thinking about securing your smartphone and to vet the apps that are already on your phone. Selecting top mobile security apps for your device should be at the top of your to do list.  Hackers are smart. They finagle ways to release malicious apps into the App Store or Google Play; and are quite adept in the art of social engineering too. The goal of securing your device is to cover all your security bases before the bad guys can out you. Before you download your next app, do this:  http://blog.getcocoon.com/top-mobile-security-apps/

[buzzfeed]

You don’t need to leave Earth to get some other-worldly scenery. 

[youraveragejoel-blog]

okay so we all feel our phones randomly vibrate in our pockets, right? what if that happens every time the gov’t is accessing it and spying on us…

[chottodoctor]

‘Encryption is a human right’: Wikipedia aims to lock out NSA

Wikipedia is taking steps to make its site “un-snoopable" to the NSA following revelations that its site users were being spied on. The measures will include the use of secure encryption for its logged-in users to minimize eavesdropping.

“[Wikipedia] believes strongly in protecting the privacy of its readers and editors. Recent leaks of the NSA’s XKeyscore program have prompted our community members to push for the use of HTTPS by default for the Wikimedia projects,” said Wikimedia on its website.

Coming to ‘Wikiplaces’ near you on Aug 21, 2013…maybe.

[whatevernevermind-deactivated20]

The primary business model of the Internet is built on mass surveillance, and our government’s intelligence-gathering agencies have become addicted to that data. Understanding how we got here is critical to understanding how we undo the damage.

The Public-Private Surveillance Partnership - Bloomberg (via whatevernevermind)