#Anti-Theft Device

[premierweird]

[gadgetnew05]

Magnetic Mini GPS Tracker Without Subscription - Real-Time Monitoring for Cars, Kids, Elderly, Luggage https://amzn.to/4eypwqd

[lichqueenlibrarian]

“Average Starfleet starship is stolen 3 times a year” factoid actually just statistical error. The average starship is stolen 0 times. The starship Enterprise which has been stolen at least 10,000 times by its own crew during its five year mission is a statistical outlier and should not have been counted.

[officialpenisenvy]

you WILL look at my novelty skull shaped memento mori bottle opener.

[didnt-hear-idsb-live-again]

I just can’t believe I’ve wanted to be here my entire sentient life and I’ve accomplished it and like. Lol sorry we’re Qantas & we’re incompetent and now u got no clothes1!!1!1!1!1

[adelesbian]

yall do remember people were against self check outs when they started being a thing right or was that smth we all collectively forgot

[todayworldnews2k21]

Google Rolls Out 3 New Anti-Theft Features For Android Users; Heres How To Access

Google Anti-Theft Features For Android: Google has reportedly begun rolling out three new anti-theft features for Android, aimed at enhancing device security and protecting user data. These updates will help users lock, track, and protect their phones from unauthorized access, even if stolen or lost.  These features, which include Theft Detection Lock, Offline Device Lock, and Remote Lock, will…

[techdriveplay]

What Are the Best Ways to Protect Your Car from Theft?

The unfortunate reality is that car theft is a persistent issue, impacting car owners globally. Despite advancements in security technology, thieves continually adapt, finding new ways to circumvent these systems. Today, we delve into the best ways to protect your car from theft, equipping you with practical advice and advanced tactics to safeguard your vehicle. Fact: According to the National…

[jcmarchi]

Here's Why You Should Always Log Out of WordPress

New Post has been published on https://thedigitalinsider.com/heres-why-you-should-always-log-out-of-wordpress/

Here's Why You Should Always Log Out of WordPress

We may think we know WordPress security. But we can’t underestimate the task at hand. It seems that surprises lurk around every corner.

Consider a recent report from the security firm We Watch Your Website, for example. The report claims that 60% of hacked WordPress sites stem from stolen session cookies. I sure didn’t see that one coming.

We know about using strong passwords and setting file permissions. We understand the importance of updating our WordPress installs. We may even use a security plugin or two.

However, even the most security-conscious among us can miss things. That one oversight can lead to a hacked website. And that’s despite taking a bevy of security measures.

Stolen session cookies weren’t on the radar. So, what can we do to prevent this from happening? The author of this report has some advice.

How to Prevent Stolen Session Cookies

Thomas J. Raef is the author of “The Real Attack Vector Responsible for 60% of Hacked WordPress Sites in 2023.” His report demonstrates the threat of stolen session cookies in great detail. And a recent appearance on the WP Tavern Jukebox podcast shed more light on the subject.

But what about remedies? How do we stop these attacks from impacting our websites? I asked Raef for some preventative tips. The answer is as simple as logging out.

Our interview was lightly edited for clarity and brevity.

How do session cookies get stolen?

Thomas J. Raef: If it’s not WordPress, they’re frequently stolen via cross-site scripting. However, WordPress uses the HttpOnly option in the headers. So, that prevents cookie theft in WordPress via XSS.

The main way is by info stealers. If you Google the term, you’ll see it’s almost as popular as ransomware. Some ransomware hackers are starting to use info stealers more for their infections. Info stealers are designed to evade detection from most anti-malware programs. Some are dedicated to evading detection on Windows, others on Macs.

They typically steal everything possible in about 10 seconds. Some ask, why would they bother stealing WordPress session cookies if they’re also stealing bank logins, etc. But look at the cybercriminal industry. What do they need for the majority of their attacks? Oh, a legitimate website to infect unsuspecting visitors.

They steal the session cookies because it totally bypasses 2FA (Two-Factor Authentication), MFA, etc. because the user is still authenticated. As long as the cookie hasn’t expired.

Raef’s report shows that nearly 60% of hacked WordPress websites were the result of stolen session cookies. Image credit: We Watch Your Website

How can we secure our devices against this type of threat?

TJR: The easiest way is to remember to log out. That’s it! When you log out you expire the cookie. If you just close your browser window, it leaves the cookie active. So, if it’s stolen, it can be used by anyone.

One simple prevention is using SolidWP (Solid Security). Their Trusted Devices feature uses the IP address to generate the session cookie. If it’s stolen, it can’t be used anywhere other than where it was originally created. Those two things are the best way to prevent session cookies from being used against your sites.

Are there any changes the WordPress project could take to increase the security of session cookies?

TJR: Possibly. If there was a procedure that checked for inactivity after 30 minutes, and then automatically logged out the user, that might help. But I believe that would involve JavaScript and that’s getting too complicated. They already include the HttpOnly option, so they’re doing a lot to prevent this from being even bigger.

Do you have any other advice for web designers managing WordPress sites?

TJR: Make sure that everyone with admin access to your site is also focused on sanitary procedures for all local devices. We’re seeing more and more sites being infected due to malware on the local device of an admin. It can steal usernames, passwords, and session cookies.

2FA can stop the usage of username and password, but not session cookies. Tell all devs to log out! It’s quite simple and 100% effective.

One thing we’re starting to see more of is hackers attacking from the local device. Not stealing session cookies or anything else, just piggybacking on a legitimate admin session.

We see the legit IP address of an admin, and they’re doing their work and then suddenly from the same IP address at the same time, the legit admin is working – BAM! – a bogus plugin is installed from the same IP address!

The hackers have control over the local device and they’re attacking from that device. This supports the fact that you MUST be concerned about the health and well-being of your local devices.

Your Device Is Also a Factor in Website Security

A compromised computer or mobile device can impact your website’s security. On the surface, this theory makes sense. However, we typically don’t hear much about it.

Website security usually means a focus on the site itself. We attempt to filter out malicious traffic. And we employ various methods to prevent direct attacks.

It’s past time to look at our devices as well. You know, the systems we use to log into our websites. Good security should start there.

An info stealer can do untold damage in mere seconds. We won’t know the consequences until it’s too late. Let’s do something about it.

Follow best practices to secure your device – and encourage your clients and colleagues to do the same. A few simple steps could prevent a catastrophe.

And to follow Raef’s advice: Be sure to log out of your website! An expired session cookie is useless. Thus, it can’t do any harm.

Many thanks to Thomas J. Raef for chatting with us! Check out more of his security advice at We Watch Your Website.

Related Topics

Top

[ur-mag]

Shoppers rage after Loblaws supermarket chain installs anti-theft devices that ‘make it feel like a prison’ | In Trend Today

Shoppers rage after Loblaws supermarket chain installs anti-theft devices that ‘make it feel like a prison’ Read Full Text or Full Article on MAG NEWS

[thatdogmagic]

...that your audience won't hate.

This is a method I started using when NFTs were on the rise - thieves would have to put actual work into getting rid of the mark - and one that I am now grateful for with the arrival of AI. Why? Because anyone who tries to train an AI on my work will end up with random, disruptive color blobs.

I can't say for sure it'll stop theft entirely, but it WILL make your images annoying for databases to incorporate, and add an extra layer of inconvenience for thieves. So as far as I'm concerned, that's a win/win.

I'll be showing the steps in CSP, but it should all be pretty easy to replicate in Photoshop.

Now: let's use the above image as our new signature file. I set mine to be 2500 x 1000 pixels when I'm just starting out.

Note that your text should not have a lot of anti-aliasing, so using a paint brush to start isn't going to work well with this method. Just use the standard G-Pen if you're doing this by hand, or, just use the text tool and whichever font you prefer.

Once that's done, take your magic wand tool, and select all the black. Here are the magic wand settings I'm using to make the selections:

All selected?

Good.

Now, find a brush with a scattering/tone scraping effect. I use one like this.

You can theoretically use any colors you want for this next part, but I'd recommend pastels as they tend to blend better.

Either way, let's add some color to the text.

Once that's finished,

You're going to want to go to Layer Property, and Border Effect

You'll be given an option of choosing color and thickness. Choose black, and go for at least a 5 in thickness. Adjust per your own preferences.

Now create a layer beneath your sig layer, and merge the sig down onto the blank layer.

This effectively 'locks in' the border effect, which is exactly what we want.

Hooray, you've finished your watermark!

Now let's place that bad boy into your finished piece.

You'll get the best mileage out of a mark if you can place it over a spot that isn't black of white, since you'll get better blending options that way. My preference is for Overlay.

From here, I'll adjust the opacity to around 20-25, depending on the image.

If you don't have a spot to use overlay, however, there's a couple other options. For white, there's Linear Burn, which imho doesn't look as good, but it still works in a pinch.

And for lots of black, you have Linear Light

Either way, you're in business!

EDIT since this has escaped my usual circles, and folks aren't as familiar with my personal usage:

An example of one of my own finished pieces, with watermark, so you can see what I mean about 'relatively unobtrusive'-- I try to at least use them as framing devices, or let them work with the image somehow (or, at the very least, not actively against it).

I know it's a bummer for some people to "ruin" their work with watermarks, which is part of the reason I developed this mark in particular. Its disruption is about as minimal as I can make it while still letting it serve its intended purpose.

There's other methods, too, of course! But this is the one I use, and the one I can speak on. Hope it helps some of you!

[unexpectedyarns]

As someone who used to work a loss-prevention job with a retail store, I can tell you:

Sometimes items like canes have a hidden anti-theft device. Have someone take off the handle (if removable) and the rubber tip, and look inside them and the shaft of the cane for an anti-theft tag.

Some manufacturers also bury those in the soles of high-ticket shoes, under the insoles.

Random question but do you have any idea why my cane might randomly set off the snesirs in shops. I keep getting stopped when leaving as every now and then itll just go off and it only started after i got my cane

I honestly have no idea, once when I was like 14 my underwire bra set off a Walmart sensor 😭 I think it's just certain kinds of metal idk

[suzilight]

Saw this in a Ford photo gallery.  Is it custom?  Locks down the gear shift and the ignition.  

[thesleepiestselkie]

went to target didn't think twice abt what i was wearing bc like it's target who give a shit

got complimented on my shirt by the cashier

it's a minecraft logo font "creeper awwww man" t-shirt

i do not play minecraft

i stole the t-shirt from my dead brother bc it reminded me of him

[ifitmoves]

If It Moves…™ Device is a security device that utilizes motion detection to help protect your things and recover your things. Buy Now.