[nfbcs] Fwd: Publishing request:

[David Andrews]

>I have been asked to circulate this...


Dave



>A blog has been created, 
><http://blindsecblog.wordpress.com>blindsecblog.wordpress.com,  to 
>allow blind security practitioners a forum to question strategies, 
>share knowledge and learn about Cybersecurity. The major focus will 
>be on strategies to achieve security tasks, new advances in 
>knowledge and equipment, and opportunities to remove misconceptions. 
>Below is a discussion relating to a large problem in our nation today.
>
>Social Engineering is the leading Cybersecurity threat to date. 
>There are people who still fall prey to false stories, who are lead 
>to reveal information that shouldn't be discussed and other 
>fictitious schemes meant to mislead innocent call center agents, 
>secretaries and C level employees. These schemes are happening all 
>over America and in other countries. The answer is education and 
>awareness. They must be made aware of some of the techniques used, 
>be told what to ask before revealing information, and not to discuss 
>things inside your business with those outside your company. Another 
>attack is probing for information to be used about someone. When a 
>pretend customer calls an agent to obtain information, computers 
>should be written to ask specific, revealing information before 
>giving the user the information that a client may be attempting to 
>obtain. A profile of people should be created and a random question 
>taken from that information which would require an accurate response 
>to receive information.
>
>These are two areas where education and information are 
>advantageous. A blind person can educate people in this area as well 
>as any other. A blind person can achieve Ethical Hacking. What blind 
>people need is a belief in their selves and an education. If anyone 
>has anything to add to this, wishes to start a new discussion or has 
>information to impart, please share it with all of us. I will be 
>putting weekly posts out here an attempt to create conversation and 
>encourage discussions with different clubs, groups and educational 
>facilities. We can lead those who want to be Cybersecurity 
>employees, let others know of opportunities and share what we have 
>learned. Once the gathering gets large enough, we can start having 
>monthly meetings on line if so desired. There are groups who build 
>and learn from each other. Our group needs to do the same. Thanks 
>for reading my thoughts and I look forward to reading some of your responses.
>
> 
>Charles E. Black
>
>
>Charles E. Black
><mailto:charleseblack at att.net>charleseblack at att.net
>(803) 463-004