ChamnanMuon.com: Security

Showing posts with label Security. Show all posts

Passwords have been the standard way to sign in to websites and apps for decades, but they're not perfect. They're often difficult to remember, and they can be easily compromised if they're not strong enough.

Image: Google Developers

Passkeys are a new type of authentication credential that is designed to replace passwords. They are stored on the user's device and are used to sign in to websites and apps without the need to enter a username or password. Passkeys are more secure than passwords because they are not stored on the server, and they are more convenient because they can be used across different devices and browsers.

To get started with passkeys, you will need to:

Make sure that your browser and operating system support passkeys.
Visit a website or app that supports passkeys.
When you are prompted to sign in, select the option to use a passkey.
Your device will scan for passkeys that are associated with the website or app.
Select the passkey that you want to use.

Once you have signed in with a passkey, you will not need to enter a username or password again. The passkey will be stored on your device and will be used automatically when you visit the website or app in the future.

Here are some of the benefits of using passkeys:

They are more secure than passwords.
They are more convenient than passwords.
They are cross-platform.
They are supported by major browsers and operating systems.

Google is already rolling out passkeys for Google Accounts. You can try them out at g.co/passkeys.

To get started, you'll need to enable passkeys in your Google Account settings. Once you've done that, you can start using passkeys to sign in to websites and apps that support them.

Here's how to get started:

Go to https://g.co/passkeys.
Sign in to your Google Account.
Click "Enable passkeys."
Follow the instructions on the screen.

Check what you need to create a passkey:

You can create passkeys on these devices:

A laptop or desktop that runs at least Windows 10, macOS Ventura, or ChromeOS 109
A mobile device that runs at least iOS 16 or Android 9
A hardware security key that supports the FIDO2 protocol

Your computer or mobile device will also need a supported browser like:

Chrome 109 or up
Safari 16 or up
Edge 109 or up

To create and use a passkey, your device must have the following enabled:

Screen lock
Bluetooth

If you want to use a passkey on a phone to sign in to another computer

If you are looking for a more secure and convenient way to authenticate to websites and apps, then you should consider using passkeys.

Here are some additional resources that you may find helpful:

I hope this blog post has helped you to understand what passkeys are and how to get started with them. If you have any questions, please feel free to leave a comment below.

Passkeys: The Future of Passwordless Login

Screen shot from WebChlaat's website

In today technology, the 21st century - era of Social Media and Cloud Computing - where we are living in connecting to one another thru ease of technology no matter where you stay, we can keep in touch each. To stay away from those internal or external cyber threats, we must learn how to stay safe online for those children and parents.

Seeing that Ezecom, Cambodia’s leading internet service provider, will soon launch WebChlaat - an online guide for children and their parents to help children enjoy the internet while staying safe from cyber bullying and inappropriate content, according to the company's news.

“WebChlaat” or ‘WebSmart” is a seven tip guide prepared by Ezecom in association with leading child rights advocacy groups Friends International and ChildSafe, which recently certified Ezecom as Cambodia’s first ChildSafe company.

Ezecom will be running a live banner on the CEN website (http://www.cen.com.kh/) in the next weeks – providing daily internet safety tips and a link to the WebChlaat site at http://webchlaat.com/.

Among the safety tips for children: be smart when making online friends, be smart what you share on the internet and be smart about emails from strangers.

For parents the tips include: be smart and prepared to answer tough questions, be smart about anti-virus software and be smart about cyber bullying and its consequences.

“As a parent myself of course I want my children to enjoy the learning opportunities, entertainment and other resources that the internet offers. But its important that we help parents and children talk openly about some of the dangers that lurk out there on the internet, so that we can all benefit from the power of the internet without falling victim to the perils,” said Ezecom CEO Paul Blanche-Horgan.

The WebChlaat website underlines Ezecom’s long term commitment to supporting education and children’s rights.

The company’s staff was recently the first workforce to be certified as ‘Child Safe’ by Friends International and ChildSafe, meaning that staff have received training on being aware and alert to evidence of child abuse and how to respond appropriately.

ABOUT EZECOM

Ezecom was launched in 2007 and has since become one of the country’s leading suppliers of communication services. Ezecom offers fiber optic, WIMAX, VPN and various other internet-based and telecommunications solutions to companies and consumers across Cambodia. Recently Ezecom acquired fiber optic company Telcotech thus expanding its nationwide coverage to 99% of the country.

Friends International is a world renowned Non-Governmental Organization (NGO) that works towards eradicating poverty by providing vocational education to marginalized children around the world. EZECOM provides internet for Friends International and their local NGO Mith Samlanh for the computer class room, giving children in need the chance to learn how to use computers.

ChildSafe is a world leader in child protection and awareness. EZECOM is proud to be a supporter of ChildSafe and to be able to call ourselves ChildSafe Citizens. In cooperation with Friends International and ChildSafe we have created WebChlaat.

Related Useful Resources You Have to Know:

- Free Security Check Ups by StaySafeOnline.org: Many computer security vendors offer free computer security checks for your computer. Please visit the above link to check your computer for known viruses, spyware, and more and discover if your computer is vulnerable to cyber attacks.

- Cisco Cyberspace Action for Education Campaign provides resources about online safety for families and educators.

- The Official Google Blog's security posts provide insights from Google employees into online safety with their products, technology and Google culture. The blog also offers helpful suggestions on how to make the most of your online experiences.
- Facebook Security Tips: There are hundreds of people working full time to help protect your account and keep scams off Facebook.

- Intel in Education - For K-12 Educators has free education resources.

- McAfee's 10-Step Internet Safety Plan for Your Family gives parents tips and tools on keeping their kids, tweens and teens safe and secure online.

- Microsoft's Safer Online helps you create safer web experiences for yourself and others by offering the latest online safety tips and resources.

- The PayPal Security Center teaches you how to remain safe while using PayPal's services.

- Symantec - The Family Resource Center provides Internet safety tips, a family online safety guide and information on cyberbullying and cybercrime.

- VISA - Learn the Facts helps consumers learn about various threats, how to spot them and what you can do to keep your information secure – online and off.

- ESET- Securing Our eCity Resources: Securing Our eCity is an initiative of ESET, an IT security company that produces anti-virus, anti-spyware, and other anti-malware software.

- National Information Security Center (Japan): The Japanese government has an international cybersecurity campaign to coincide with its Information Security Awareness Month in February. Through the campaign, Japan encourages international collaboration and domestic awareness of information security issues.

Let's Stay Safe Online from now on together! Do you have idea to add? Please drop your comment below.

Cambodia's First Stay-Safe-Online Guide for Children and Parents

CEH v8 Poster

For the past several years, information technology security was not a big concern for Cambodian business owner and CEO but current situation has been changed fast due to increasing number of local hackers and some foreign hackers who used to hack the governments' websites and local companies. By seeing so, SUNRISE Institute became an authorized partner of EC-Council in Cambodia where will organize the "Certified Ethical Hacker (CEH) Version 8", the world most popular IT security course conducting in 5 days on 12-16 May, 2014 from 8am-5:30pm at CKCC with approximated price $1,700 (it just estimated price only in Cambodia but outside this country, I think it may cost about $2,500).

What You Will Learn:

This class will immerse the students into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed. Students then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation. For more course outline, you can visit official EC-Council website.

EC-Council has globally trained more than 120,000 security professionals in 87 countries, and is a leading provider of IT Security certification and also actively engages and certify key government organizations and corporations worldwide.

Who Will Instruct You:

According to SUNRISE Institute's poster, the instructor will be from foreign country who has certified of CEH which recognized globally.

Who Will Attend this Course:

This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure. Personally, I think there will be less student that can pay by their own fee based on the high price of the course for them to invest on learning. But I am sure that companies, especially from bank industries - where our money are kept, will send and pay for their staff to attend this very useful course.

What Benefits from the Course:

Individually, the participants who attended they will bring back to contribute to their employers and be security experts for improving our ICT, especially they have opportunity to apply for global certificate on The Certified Ethical Hacker exam 312-50.

Are you interested? If so, please contact SUNRISE Institute at: 023 997 282/ 016/099 997 282.

Note: This institute is also the first place that opens IT Governance course in IT Assurance & Security Audit for public.

I am not a promoter for the institute on this course, and I have shared it as for the good deeds in improving ICT in Cambodia ONLY.

Do You Know Who Is the First CEH Certified in Cambodia?
Before I had attended the IT Assurance & Security Audit class which lectured by Cambodian professional lecturer, I did not know the word "CEH" is, since then I started query who is the first Cambodian guy who got certified this world-top certificate. Finally, I found him a person who I often met as well. He, Mr. Yeng Sok, is the First Certified Ethical Hacker in Cambodia; I do appreciate his great earning the international certificate.

Don't let this opportunity go without you! And let's produce more human resources in Advanced IT level!