August 2006 Archive

Corporation says hackers still matter

August 31st, 2006

A Red Hat executive has announced that “hackers still matter.” Hacking software for fun is still okay, I guess. And maybe even a productive endeavor? Techcrunch must be regular tech sector corporate reading material now.

Boy, if we could just get law enforcement to quit locking up everyone who discloses a security vulnerability for altuistic reasons (like forcing some byzantine software manufacturer to fix it), we’d be in business. Maybe they should start reading blogs too.

Teen profiles cracked at MySpace

August 31st, 2006

No sooner did MySpace start providing security measures to protect underage profiles, someone broke the privacy protection.

Actually, it was broken for a while, but nobody was talking. This leads me to believe it wasn’t much of a breach, or someone would have whispered about it, and the blogs would have roared (long before someone “dugg” it). According to MySpace officials, the problem has since been fixed.

Browser picks up breadcrumbs

August 31st, 2006

A “new” browser technology is being launched that automatically deletes caches, browsing history, cookies and saved forms. I wouldn’t exactly call this new, as anyone with the latest version of Firefox knows. Maybe Mozilla needs another public relations firm.

Nevertheless, there is a “new” feature coming in Browzar - supposedly a toolbar that points to a custom search engine for results. Hmm. As former Internet Explorer users privacy wonks get to searching, I wonder how long it will be until law enforcement gets to subpoena-ing.

I’d rather have a browser independent of my search results. Firefox gives you that flexibility. Combined with any number of internet/system cache cleaners, and you are A-okay from the desktop. My combination of choice is Firefox and/or a hacked Safari (yes, there are alternatives to Google for Safari users - see here). CacheOut X from NoName Scriptware cleans out stray cookies, browsing history, and miscellaneous scripts (and when I run out of tin-foil hats, user and system logs, etc. as well). I am sure there is a Windows equivalent. If you really want to drive your ISP nuts as well, throw in TOR/Privoxy (available to all).

***UPDATE***

Law enforcement won’t be much of a worry after all - Browzer may not make it past a dozen users. It seems, as Michael Arrington and others point out, that Browzer may be nothing more than an adware machine.

***UPDATE***

More “Browzing” at Web3.0log. I hope the founders didn’t spend a lot of money or time on this thing, as it is looking dead already.

AT&T loses grip on data

August 30th, 2006

Not as though that this something new, after AT&T was found handing the NSA data, but there is a twist. Instead of the info being phone call records, handed out voluntarily, this time it is credit card data taken by “unauthorized personnel” (uh..hackers).

The potential victims (estimated at 19,000) are folks who purchased products and services from AT&T’s website. No worries there - anyone affected will be liable for no more than the standard $50 or so that applies in the case of credit card fraud. Nonetheless, AT&T has made a point of promptly notifying everyone involved. Good for them.

***UPDATE***

Unfortunately, that data is purportedly being used for phishing attacks. Yes, already.

Security concerns at YouTube

August 30th, 2006

But they’re not the kind you are thinking about now.

No, instead of charging YouTube with having some type of security flaw, a government contractor charged that Coast Guard vessels have security flaws, via YouTube.

Had you there for a second, didn’t I?

Passports get tagged

August 29th, 2006

The US State Department is good and ready to issue passports with embedded RFID chips. They’ve been doing it for a few weeks right in my backyard, and now they’ve secured a contract with Infineon Technologies (of Germany) to supply chips going forward.

The RFID chips will, of course, have plenty of information on them - name, date of birth, gender, place of birth, date of passport issuance, passport number and expiration date for starters. Conveniently, there will also be a digital photo of you in storage, because you know it is really much tougher to hold a passport photo up close to someone’s face for recognition purposes (versus having it pop up on a little screen you have to look down at). The Infineon chips are also ready for more in the way of biometrics.

I’d really like to say I feel much safer now, but in reality I’m just pissed. My passport doesn’t expire for another five years, so I can’t fly to Chicago to get one of the non-RFID flavors.

***UPDATE***

Bruce Schneier says renew your passport now, whether you like it or not!

StopBadware strikes AOL

August 29th, 2006

AOL is not having a good summer, so maybe it is good that summer is coming to an end. The company released a slew of search data into the open, then decided to “go free” because it’s subscriber base was disappearing. Ad revenue was the new name of the game, with ad ons like cheap music as a balancing act. Now they get to dance around the fact their free software might be associated with spyware/adware, as StopBadware.org has called them out for funky install/uninstall procedures.

AOL replied, noting that these issues were not such a big deal, and should be fixed forthwith. I agree with the first premise, and am hoping they hold to their word on the second.

YouTube “Star” Emmalina hacked and retired

August 27th, 2006

An Australian gal who found fame via YouTube is retiring from her video blogging, citing invasion of her privacy after her personal computer was hacked.

This would generally be too sensationalist for Spamroll, but I am hoping someone will provide some details as to exactly how someone found her PC (presumably) and how they got in.

Such info could help protect other online video starlets, don’t you think? You know, the ones who expose every detail of their private lives on med-res video for the entire world to see? Naw, I just wanted a stupendous headline for the Monday morning traffic :-).

At least you know we’re honest over here, eh? But if anyone has that info, please provide anyway.

Comedian’s security tips wrapped in irony

August 26th, 2006

Bruce Schneier noted that Stephen Colbert is flogging computer security tips. The irony is that they are only viewable in Internet Explorer.

Yes, there are some comments that suggest some workarounds, including clicking on that big red pop-up warning bar. Unfortunately, none of them worked for me either, and I already have .wmv capability through Flip4Mac.

Maybe the videos are just too popular right now. Then again, I don’t listen to Hollywood when I’m molding my political views, and maybe you shouldn’t listen to comedians when developing your computer security task list either.

Winning the stock spam battle

August 25th, 2006

BBC News reported on a new study which suggests stock spammers are actually winning at their game. Of course, everyone taking their tips make up the other side of those trades. Hint hint - someone else is losing.

It is a damn shame it is so difficult to borrow those penny stocks. 6% pops on two day short covers would be a great little meal ticket.