Connect with us

E-Business

Dell Speeds Up Process to Address eDellroot Certificate Security Lapses

Published

on

Kindly share this post

Dell Inc., has reacted to Nigeria CommunicationsWeek report (http://www.nigeriacommunicationsweek.com.ng/e-business/dell-acknowledges-new-laptops-contain-security-vulnerability#sthash.zudmO6JW.dpuf) on Wednesday, saying that it has taken critical steps in address the issue.

Dell Inc., a major U.S. Computer Company had acknowledged a security hole exists in some of its recently shipped laptops that could make it easy for hackers to access users’ private data.

A pre-installed program on some newly purchased Dell laptops that can only be removed manually by consumers makes them vulnerable to cyber intrusions that may allow hackers to read encrypted messages and redirect browser traffic to spoofs of real websites such as Google or those belonging to a bank, among other attacks.

But in a twitter message sent to our reporter, Laura Thomas, chief blogger for Direct2Dell.com disclosed that it came to Dell’s notice that a certificate (eDellRoot), installed by “Dell Foundation Services” application on the PCs, unintentionally introduced a security vulnerability. According to Thomas, “The certificate was implemented as part of a support tool and intended to make it faster and easier for our customers to service their system. Customer security and privacy is a top concern and priority for Dell; we deeply regret that this has happened and are taking steps to address it.

“The certificate is not malware or adware. Rather, it was intended to provide the system service tag to Dell online support allowing us to quickly identify the computer model, making it easier and faster to service our customers. This certificate is not being used to collect personal customer information. It’s also important to note that the certificate will not reinstall itself once it is properly removed using the recommended Dell process.

“We have posted instructions to permanently remove the certificate from your system here. We will also push a software update starting on November 24 that will check for the certificate, and if detected remove it. Commercial customers who reimaged their systems without Dell Foundation Services are not affected by this issue. Additionally, the certificate will be removed from all Dell systems moving forward.

“Your trust is important to us and we are actively working to address this issue. We thank customers such as Hanno Böck, Joe Nord and Kevin Hicks, aka rotorcowboy, who brought this to our attention. If you ever find a potential security vulnerability in any Dell product or software, we encourage you to visit this site to contact us immediately

*****Update 11/25/2015*****
“Since Monday, our teams have been working hard to address the security issue caused by the eDellRoot certificate. When we became aware of the issue, we immediately dug into all our applications that get pre-loaded on our PCs. We can confirm we have found no other root certificates on our factory installed PC images. What we did find was that the Dell System Detect application and its DSDTestProvider root certificate had similar characteristics to eDellRoot. Thank you again Hanno Böck for calling this to our attention, as well as topg who commented below”.

In the case of Dell System Detect, the Chief Blogger for Direct2Dell.com said that customer opts to download the software proactively to interact with our support website so they (Dell) can provide a better and more personalized experience.

“Like eDellRoot, the certificate in question was designed to make it faster and easier for our customers to get support. Unlike eDellRoot, this certificate is not related to software that was pre-installed on our systems.

“The impact from Dell System Detect is limited to customers who used the “detect product” functionality on our support site between October 20 and November 24, 2015. The application in question was removed from the support site on November 24 and a replacement application without the certificate is now available. We are proactively pushing a software update to address the issue for our consumer systems. Our commercial customers can either manually remove the certification or use their system management tools like SCCM to do so (we will be providing instructions on this shortly). If you choose the manual option, we have updated instructions on our site http://www.dell.com/support/edellroot to permanently remove this certificate.

“Note, these are updated instructions for removing both eDellRoot and DSDTestProvider from any folders where they may be stored. If you previously uninstalled eDellRoot, we recommend you go through the process again to ensure a thorough sweep.

“WIRED has noted that “security is far easier to promise than it is to achieve.” We know that your trust is harder to win than it is to lose. Once we know we have addressed these issues and our customers have what they need to ensure their systems are safe, we will provide an account of how the issues were introduced – not only for your information, but so we can improve our processes.

“In today’s world of ever-increasing cybersecurity threats, we all need to be vigilant. And that is the promise that we make – Dell will remain ever vigilant against security threats and we will respond with the utmost speed and accuracy when we become aware of issues that can impact our customers”.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

NDPC Partners Gates Foundation, KPMG on Open Banking Frameworks

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC), in partnership with Bill Gates and Melinda Foundation and KPMG are developing open banking frameworks in a move to deepen financial inclusion.

NDPC Partners Gates Foundation, KPMG on Open Banking Frameworks

L-r:; Anna Wallace, Senior Programme Officer for Regulatory and Consumer Protection Technologies at the Bill & Melinda Gates Foundation,; Dr. Vincent Olatunji , national commissioner of the NDPC; and John Anyanwu, KPMG Head of Cybersecurity and Privacy,

This was the focus of discussion when Dr. Vincent Olatunji , national commissioner of the NDPC, received Anna Wallace, Senior Programme Officer for Regulatory and Consumer Protection Technologies at the Bill & Melinda Gates Foundation, and John Anyanwu, KPMG Head of Cybersecurity and Privacy, in Abuja.

The commission revealed in a statement on X (formerly Twitter) that the purpose of the meeting was to discuss open banking frameworks for Nigeria, a project coordinated by the Gates Foundation.

Open banking refers to the practice of providing third-party financial service providers with access to bank account information, transaction data, and other financial data through the use of application programming interfaces.

The meeting served as a pivotal step in recognising NDPC’s crucial role in the project, formalising engagement to ensure robust input in the areas of data protection and privacy.

NDPC emphasised the crucial role of digital identity in the financial sector as well as open banking, stressing the importance of implementing measures to safeguard digital identities to foster trust and confidence

Dr. Olatunji also addressed challenges posed by digital lending companies regarding transparency in data processing activities.

The NDPC Boss noted that the Commission was already working with other stakeholders to tackle the challenges.

He highlighted the misconception among some banks regarding the roles of a Chief Information Security Officer and a Data Protection Officer, emphasising the legal requirement for all data controllers to have a Data Protection Officer.

 

 

 


Kindly share this post
Continue Reading

E-Business

32m Attacks Thwarted on World Password Day

Published

on

Kindly share this post

Passwords serve as the foundation of our digital lives, but they also serve as the gateway for cybercriminals to hack into sensitive personal information. Considering their essential function, passwords remain a prime target for increasingly sophisticated cybercriminal attacks.

Therefore, taking proactive measures to safeguard accounts and personal information is imperative.

To mark World Password Day on May 2nd – highlighting the essential role passwords play in protecting our lives online – Kaspersky experts are providing essential tips to enhance password security, ensuring that users data stays out of the hands of attackers.

Weak and simple passwords have always been an attractive target for scammers as cracking them gives criminals access to multiple types of data – personal data, financial information, medical records etc.

Kaspersky telemetry indicates more than 32 million attempts to attack users with password stealers took place in 2023, this followed more than 40 million incursions in 2022.

These alarming statistics highlight the need for users to create strong, unique and varied passwords for different accounts. This way they can mitigate the risks of cyber threats and maintain personal security online.

To enhance password security, Kaspersky experts recommend the following steps and practices:

The ‘association method’ helps create strong and memorable passwords

The association approach involves creating a password from a sequence of words or ideas that have personal significance but are not easily guessable by others. A password can be based on a favourite quote, a memorable song lyric, or a unique combination of objects. This technique generates strong passwords without requiring complex memorisation, helping to maintain security while reducing the risk of forgetting. For example, a phrase “I first visited Paris in 2008” could be transformed into a password “IfvPin2o:o8”.

Are regular passwords too boring? How about emoji?

If using the same password everywhere becomes too much and you lack the imagination to make up something new, emoji-passwords could be a non-standard and safe option. Since they are a part of the Unicode standard, it is potentially possible to use them as passwords.

One of the most significant pros is that scammers cannot brute-force emoji-passwords, since various tools and dictionaries can’t crack combinations like these. More detailed information on how to set up an emoji password and the necessary requirements is available here.

The most obvious option is not the safest one

Using common passwords or default values such as “1234”, “password” or “admin” could make personal data and accounts vulnerable to scammers, since they use automated tools to guess the correct combinations.

It may take several seconds to find the right answer and gain access to personal data. A strong and complicated password includes a mix of letters, numbers, and symbols, while avoiding personal information such as names or birthdays.

Additionally, there are online public free services that allow everyone check how strong their passwords are to mitigate possible risks.

Old, but gold: one account – one password

This practice ensures that if one account is compromised, others remain secure. By creating a unique password for each account, you minimise the damage a hacker can do if they manage to steal one.

This approach isolates security breaches and helps protect sensitive data. According to a global survey, the average user has approximately 8 accounts. Remembering even 2-3 long and complicated passwords (containing up to 15 symbols) could be impossible for the majority of users.

In this case it is both safe and useful to shift the responsibility of remembering all the passwords to a security solution, such as Kaspersky Password Manager.


Kindly share this post
Continue Reading

E-Business

Embracing AI to Help Reshape Business Dynamics and Customer Interaction

Published

on

Kindly share this post

By Tamara Rajić, Director of Business Strategy EMEA at Infobip

World Innovation and Creativity Day fell on the 21st of April, reminding us of the boundless potential inherent in human ingenuity and technological advancement. Artificial Intelligence (AI) stands at the forefront of this celebration, reshaping the landscape of business operations and customer engagement.

The combination of advanced data analytics with cloud computing has propelled AI into the spotlight, making its integration more accessible across industries.

Unlocking AI’s potential – why companies can’t afford to miss out

What is remarkable is how AI adoption is growing its accessibility to the public. Platforms such as OpenAI, ChatGPT, and Dall-E have opened the doors to AI technologies, empowering individuals, and businesses alike to effortlessly explore and incorporate AI-driven solutions into their plans. This has sparked a culture of innovation and empowerment, enabling businesses to harness AI to expand their performance and efficiency.

Take AI-driven communication tools, like chatbots and virtual assistants for example. They are changing customer service experiences by delivering personalised, efficient, and proactive interactions. These solutions not only streamline support processes but also forge deeper connections with customers, fostering satisfaction, loyalty, and ultimately, business growth. Furthermore, AI empowers businesses to gather actionable insights from customer data, facilitating informed decision-making and targeted strategies.

Data quality plays a crucial role in the successful implementation of AI. Without complete and consistent data, implementing AI-powered technologies can lead to inaccurate results and hinder business decision-making. This is why it is important for businesses to invest in data quality assurance processes. And by analysing customer feedback across various channels, AI offers a deeper understanding of preferences and needs, enabling businesses to tailor their offerings and communication strategies accordingly. This level of personalisation increases the customer experience, promoting long-lasting relationships and brand loyalty.

Chatbots and virtual assistants are some of the most widely used AI-powered communication solutions out there, spanning across multiple industries and business types. They provide instant responses to inquiries, assist with product recommendations, and help with tasks like order tracking and appointment scheduling.

Navigating challenges in AI implementation

AI-driven automation streamlines processes, reduces manual workloads, and enhances operational efficiency, driving competitiveness and revenue growth. By leveraging AI-powered insights, businesses can identify high-value opportunities, estimate market trends, and improve resource allocation, thereby increasing ROI and market share.

This innovation is expected to catalyse significant transformations in traditional sectors such as banking and retail, leading to more personalised experiences and innovative consumer approaches. By understanding individual preferences, behaviours, and purchasing patterns, these sectors can offer tailored product recommendations, targeted promotions, and customised services.

With this being said, it is important to underline the critical function AI serves in customer support. By reducing wait times through AI-powered chatbots and providing assistance through the customer’s preferred communication channel, businesses can ensure a significant uptake in customer satisfaction.

Integrating AI into existing tools and systems does not come without its challenges. Businesses can encounter compatibility issues, data silos, and a shortage of skilled professionals with expertise in AI and machine learning within their talent pool. Demonstrating ROI in the early stages of AI technology adoption can also be challenging due to these obstacles. It is therefore important to identify high-potential use cases and the most impactful areas where AI can drive business growth and positive customer satisfaction and start from there.

Overcoming obstacles – to maximise AI’s potential

With its increasing accessibility and transformative potential, AI is fostering innovation, and amplifying creativity. By taking into consideration AI-driven insights and solutions, businesses can personalise interactions, streamline operations, and anticipate customer needs. However, this journey is not without trial and error. It demands careful navigation of data quality and integration complexities. Nonetheless, businesses should embrace AI as a catalyst for creativity and innovation, to unlock new possibilities, enriching the human experience and propelling organisations towards a future where the boundaries between humanity and technology seize to exist.


Kindly share this post
Continue Reading

Trending