Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


 Cybersecurity Ramifications of the 2021 Storming of the United States Capitol

   Adam Engst

   Hidden amidst the physical cleanup and repairs necessary after [1]a mob
   of rioters stormed and occupied the US Capitol are significant
   cybersecurity concerns. At Wired, Lily Hay Newman writes about [2]the
   cybersecurity implications of the invasion, explaining some of the
   breaches that happened and discussing others that could have happened
   if foreign intelligence agents piggybacked on the takeover.

   Jake Williams, founder of Rendition Infosec, wasn't surprised, noting,
   'You have to step back and realize that foreign intelligence could have
   looked at this and said, 'Yeah, this is going to be an opportunity.''
   Other experts commented on the massive amount of work needed to assess
   the damage and remediate or monitor any potentially compromised
   accounts, devices, and networks.

   We should all take to heart the words of Kelvin Coleman, executive
   director of the National Cyber Security Alliance, who said, 'Any time
   there's a physical breach of a space, I automatically assume it was a
   digital compromise as well.'

   After all, if someone's going to break into your house, exposed data
   and account credentials may be more valuable than your personal
   belongings. For data protection, Apple's [3]FileVault drive encryption
   system, [4]particularly when running on a Mac with a T2 security chip,
   guarantees that data cannot be extracted (iPhones and iPads are
   similarly protected). Turn it on in System Preferences > Security &
   Privacy > FileVault. Also, be sure to use a password manager like
   [5]1Password or [6]LastPass instead of recording passwords in a
   physical notebook that could be stolen.

   [7]Read original article

References

   1. https://en.wikipedia.org/wiki/2021_storming_of_the_United_States_Capitol
   2. https://www.wired.com/story/capitol-riot-security-congress-trump-mob-clean-up/
   3. https://support.apple.com/en-us/HT204837
   4. https://www.macworld.com/article/3571181/how-filevault-and-the-t2-security-chip-work-together-in-newer-macs.html
   5. https://1password.com/
   6. https://www.lastpass.com/
   7. https://www.wired.com/story/capitol-riot-security-congress-trump-mob-clean-up/

.