How To Use VeriSign SSL Certificates Fight Phishing

You might know,Internet is full of scam ,and there are lot of money to be scammed.And if you are running a e-business online and own a website,you might be the victim of Internet phishing.


Phishing attacks are becoming so sophisticated now that many of us can no longer tell the difference between a fake or legitimate Website.

According to one recent estimate there are approximately eight million daily phishing attempts worldwide.*

The impact is costly for a business - whether an employee or its customers have been attacked, or the company Web site has been compromised.What solution we have?

Add a VeriSign® SSL Certificates to your site
The solution is you can add a SSL Certificates to your site. Give your customers peace of mind from search to browse to buy by securing your transactions with VeriSign® SSL Certificates and activating the VeriSign Trust™ Seal with VeriSign Seal-in-Search™ and daily Web site malware scanning.

Learn more about  how to set up  VeriSign SSL Certificates, Fraud Alert: Phishing - The Latest Tactics and Potential Business Impact to learn about:

1. Growing trends in phishing;
2. The potential impact on your business; and
3. How SSL technology can help prevent phishing attacks.

Protect your organization, give your visitor and customers the confidence to do business with you
online..You know your reputation worth more than that.Visit VeriSign.

Know More About Email fraud Scam

This summary is not available. Please click here to view the post.

Hack The uncrackable Password

Since most users also use dictionary words as the root to their “complex” password, and follow other common conventions (capitalized letters are at the beginning, numbers are at the end), a simple hybrid attack will break most of them in less than a day. Trust me, I know -- I do it for a living.

Quate from Roger A. Grimes*

The importance of longer password length

THE conventional thinking is that the additional complexity presents such an increased workload for the hacker that complexity is the holy grail of password hacking prevention. After all, conventional wisdom says that all the good Web sites require complexity. Heck, a Microsoft Windows log-on password requires complexity. Every new password creation advice on complexity - but gives scant consideration to the equal (or better) importance of longer password length.

They're all wrong! Character-for-character, password length is more important for security than complexity. Requiring complexity but allowing passwords to remain short makes passwords more vulnerable to attack than simply requiring easier-to-remember, longer passwords.

For everyone using six- to nine-character passwords with “complexity,” I appreciate it. I get paid to break in to systems for a living, and you make my job easier.

Strength is provided by increasing the number of possible passwords the attacker has to guess (let’s call this the keyspace even though it really isn’t appropriate in this context). The keyspace is represented mathematically as X^L, where X is the number of possible characters that can be in the password and L is the length. If you do the basic analysis, you can see that changes in L are more significant, character for character, than changes in X.

But conventional wisdom will have you believe that increasing complexity forces the password attacker to use significantly more possible characters in their attack. In the X^L formula example, forcing the use of capitalized letters requires the value of X to go from 26 for all possible lower case letters to 52 for both upper case and lower case letters. And if you include nonalphanumeric characters, X goes up to 94 to support all the normal single characters you can type on a 101 keyboard. Windows will allow you to use any Unicode character, which includes upwards of 65,000 different symbols.

Of course, most people only use the 94 standard keyboard keys. And if people actually evenly used the 94 characters of potential complexity, short passwords would be uncrackable, because 94^8 = 6,095,689,385,410,816 possible passwords -- which is uncrackable using anything known today or in the near future.

when trying to increase the strength of your passwords, my advice is to consider length as much or more than you consider complexity. For my money, length is all the protection I need. Make your admin and root passwords 15 or more characters long and forget about complexity -- at 15 characters-plus, they are all but make it nearly uncrackable.


*Roger A. Grimes is contributing editor of the InfoWorld Test Center. He also writes the Security Adviser blog.