Part 1: Security Threats

A Facebook data breach revealed more than 530 million individuals’  personal information to hackers. This included the date of birth, user’s  name, current city, and posts made on their wall. The exposure was  discovered in 2021 even though it existed since 2019.

This breach happened when cybercriminals scraped data from Facebook’s  servers using a misconfiguration in their contact importer. As a  result, they could gain access to the personal information of millions  of people.

According to (Vojtko How to prevent security misconfiguration)  “The most common mistakes that lead to security misconfiguration are:  Unnecessary ports being left open, Unneeded services permitted to run,  Leftover pages still available to access, and Unused accounts with  certain privileges not being deleted.”

By not removing these things you are leaving the application open to  attacks. A couple of things we can do to prevent Security  Misconfiguration are: Remove unused features, Disable the use of default  accounts and passwords, and Limit access to administrator interfaces.

Part 2: Mobile devices

A desktop computer is more physically secure than laptops,  smartphones, and tablets because it is often kept in one location,  making it easier to protect. Desktop’s access to internet usually comes  from a single source, which help to fight malware easier.  

Each one of these items have different practices when it comes to  secure your device, these are a few ones that they have in common:

Always run updates, avoid public or suspicious Wi-Fi, enable remote  lock, enable user authentication, turn off device when not in use, and  restrict physical access to device.

I'm already implementing a few security practices on my mobile device  to protect it from being hacked. For example, I try to avoid social  media apps as much as possible ( I do not have Facebook, Twitter, Tik  Tok). Instagram is the only social media platform I have, and I always  try to share as less information about myself as possible.

Another practice I use is to always download files from a trustworthy source or page.

References:

Vojtko, Mark. “How to Prevent Security Misconfiguration.” Hashed Out by The SSL Store™, 28 Dec. 2020, https://www.thesslstore.com/blog/how-to-prevent-security-misconfiguration/.