Cloud Hosting

I think there's one thing we can all agree on:Internet security is now a global issue.

If you are a digital currency investor, you should be nodding.

After all, how many times have we griped and moaned over digital currency exchange outages that were caused by targeted attacks?

But internet security extends far beyond our investing niche. Internet security is a dinner table conversation where families fighting over whether or not our sitting President was placed in the White House through Russian hacking interference.

Last year, Wired predicted that we would see an increase in cyberattacks in 2017. Now, it's June, and we have witnessed the massive WannaCry malware attack, the French election being tampered with by hackers, and a clever Google Docs phishing scheme that affected thousands.

It's internet warfare.

This means that we need security and we need it now. And the companies that offer a solution to the problem will make money.

There is already a token out there that's tackling the cyberattack issue: Golem, the foundation of a new decentralized internet.

Golem came onto my radar right after Ethereum (ETH) did.

Its creators state that Golem, when implemented, will create a decentralized internet through existing hardware.

Essentially, it will piggyback off existing phones and computers to distribute and strengthen networks.

All an individual has to do is download the Golem application, and they will become part of the network.

Our current security issues exist because most internet protocols flow through warehouses filled with server farms. This means that hackers can easily target servers and bring them down through distributed denial-of-service (DDoS) attacks. Remember the Bitfinex attack that sent us through our first Ethereum drop?

Because Golem takes that centralized network and distributes it, it would answer most of our security issues. In fact, the amount of computing power required to take down a decentralized network has never existed. And it's unlikely that it ever will.

The simplicity of the idea has opened the wallets of many investors Golem's initial coin offering (ICO) sold out in less than 30 minutes.

Golem is up 6,000% from its ICO last year. It's trading for under $1but may not stay there for long.

Like all technologies, Golem will need work and development to become the powerhouse it has the potential to be.

Like Ethereum, Golem's development is happening in stages: Brass, Clay, Iron, and Stone.

Currently, we are approaching Brass Golem. As the first stage, Brass Golem will allow developers to show the world what their concept can do. It will be the first look at a fully decentralized internet. Basically, without getting into the technical details, Golem is going to be taking to the stage.

We know the product will be coming in the next two weeks. But the development team has been very firm on one thing since the beginning: They will not release a product before it's ready. In a way, this gives Golem credibility in a digital currency world crazed with ICO fever. We can't expect these things to happen overnight, but we can look at reveals (like brass) as indicators of things to come.

But since the time frame is confined to within two weeks, that means if you want to invest in Golem at a low price, you'll have to get in sooner rather than later.

As always, there is a "where to buy" section in each currency feature.

In Golem's case, 62% of trading activity happens on Poloniex. Poloniex is not as simple as Coinbase and requires that you transfer money into your account. You can transfer bitcoins or ether from your Coinbase account into Poloniex.

We are going to offer you more detailed information on how to buy soon. This information will include screencast tutorials.

You can sign up below and be put on our list to receive those updates.

P.S. We get a lot of questions about digital currency investing in the comments. The best way to get in touch with me is through my Twitter @AlexandraPerryC.

Sign up to receive the Wealth Daily newsletter - it's absolutely free! In each issue, you'll get our best investment research, designed to help you build a lifetime of wealth, minus the risk. Plus, by signing up, you'll instantly receive our new report: Surviving the Coming Economic Collapse.

We never spam! View our Privacy Policy

After getting your report, youll begin receiving the Wealth Daily e-Letter, delivered to your inbox daily.

View post:
Why Invest in Golem: It's a Security Powerhouse - Wealth Daily

To Mark Loveless, aninternet-enabled cordless drill seemed like a perfect recipe for an IoT security nightmare.

Duo Securitys senior security researcher confessed that it sounded silly and quite possibly part of a push by the electronics maker to inject smarts into devices that ultimately turned them into hackable punching bags for adversaries to exploit. So when he examined an internet-connected Milwaukee Tool cordless drill he was pleasantly surprised to find the devices smarts were implemented in a safe and responsible manner. The results of his findings are part of research published Monday, Bug Hunting: Drilling Into the Internet of Things (IoT).

My expectations for security were very low for a smart drill, Loveless said. But after examining the security, I feel like there is hope that consumer-device IoT can be done the right way.

The drill in question was a $250 Milwaukee Tool ONE-KEY M18 Fuel 1/2 Drill/ Driver. The drill comes with an asset-management platform called One-Key. The platform allows tool owners to use a smartphone app or website to track the drills whereabouts using GPS technology. It also allows for remote custom configuration of equipment (such as the drills torque), or disable it should it be stolen.

When it comes to the world of IoT devices, there is no shortage of faulty security to keep experts such as Loveless skeptical. From IoT botnet-fueled Mirai to the co-opting of theConficker worm to target hospital IoT devices, last year alone IoT malware activity more than doubled.

That is why after Loveless closely examined the drill he was impressed to find that the manufacturer appeared to have performed comprehensive threat modeling on the device, used reliable open source software libraries correctly, and implemented strong SSL encryption.

If DVR and CCTV makers took the steps Milwaukee Tool did, Mirai wouldnt have had a chance, he said.

Thats not to say all was perfect. Loveless investigation found what he called minor flaws. One was that static passwords were hard-coded into the smartphone app. Also found, the power drill could be readily identified by a potential thief remotely via Bluetooth scanning.

With a $100 Bluetooth antenna I could scan the neighborhood and find these expensive drills within a half-mile radius, Loveless said.

During his research, it was also discovered that the GPS data used for inventory tracking could be spoofed. Basically, if I stole your drill, I could fake the GPS data to make it look like another neighbor had the drill in his toolshed, he said.

The big caveat to his research? We are talking about a drill. If this were an insulin pump, pacemaker or security alarm these flaws would be a lot more serious, Loveless confessed.

In all, four vulnerabilities were identified by Duo Security, generating two unique CVEs.

CVE-2017-3214 relates to the fact, the ONE-KEY app includes master credentials in base-64 encoded format that are needed to obtain a bearer token. The bearer token allows for read-write access to information stored in Milwaukee Tools website.

With CVE-2017-3215, the One-Key app has a bearer token that doesnt expire and stays stored on the phone. A typical bearer token has an expiration time of 1-2 hours, these have an expiration time of one year, and are stored on the phone for reuse while the phone is logged in. In the event of a compromised phone, it is possible for an attacker to gain access to the bearer token and use it, according to the report.

Loveless told Threatpost that he believes the Milwaukee Tool drill is the exception, not the rule, when it comes to IoT security. As Milwaukee competitors are racing to catch up, they have raised the bar and made security a first thought not an afterthought.

Continued here:
Internet-Enabled Drill Demonstrates IoT Security Done Right - Threatpost