U.S. General Services Administration

When Your Smart ID Card Reader Comes With Malware

When Your Smart ID Card Reader Comes With Malware

| | A Little Sunshine, CAC reader, CERT/CC, David Dixon, Michael Danberry, militarycac.com, Saicoo, The Coming Storm, U.S. General Services Administration, Will Dormann
Millions of U.S. government employees and contractors have been issued a secure smart ID card that enables physical access to buildings and controlled spaces, and provides access to government computer networks and ...
Krebs on Security
IRS: Selfies Now Optional, Biometric Data to Be Deleted

IRS: Selfies Now Optional, Biometric Data to Be Deleted

| | A Little Sunshine, id.me, Internal Revenue Service, IRS, , Sen. Ron Wyden, U.S. General Services Administration
The U.S. Internal Revenue Service (IRS) said Monday that taxpayers are no longer required to provide facial scans to create an account online at irs.gov. In lieu of providing biometric data, taxpayers ...
Krebs on Security
IRS To Ditch Biometric Requirement for Online Access

IRS To Ditch Biometric Requirement for Online Access

| | A Little Sunshine, id.me, Internal Revenue Service, Sen. Ron Wyden, The Washington Post, U.S. General Services Administration
The Internal Revenue Service (IRS) said today it will be transitioning away from requiring biometric data from taxpayers who wish to access their records at the agency's website. The reversal comes as ...
Krebs on Security
US Government Sites Give Bad Security Advice

US Government Sites Give Bad Security Advice

| | A Little Sunshine, John LaCour, OMB, Phishing, PhishLabs, U.S. General Services Administration, White House Office of Management and Budget
Many U.S. government Web sites now carry a message prominently at the top of their home pages meant to help visitors better distinguish between official U.S. government properties and phishing pages. Unfortunately, ...
Krebs on Security
U.S. Govt. Makes it Harder to Get .Gov Domains

U.S. Govt. Makes it Harder to Get .Gov Domains

| | .gov, Cybersecurity and Infrastructure Security Agency, John Levine, Other, The Internet for Dummies, U.S. Department of Homeland Security, U.S. General Services Administration
The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity ...
Krebs on Security
It’s Way Too Easy to Get a .gov Domain Name

It’s Way Too Easy to Get a .gov Domain Name

| | cisa, Cybersecurity and Infrastructure Security Agency, DOTGOV Bill, dotgov.gov, exeterri.gov, John Levine, The Coming Storm, town.exeter.ri.us, U.S. Department of Homeland Security, U.S. General Services Administration, Web Fraud 2.0
Many readers probably believe they can trust links and emails coming from U.S. federal government domain names, or else assume there are at least more stringent verification requirements involved in obtaining a ...
Krebs on Security