Friday, March 28, 2008

Friday News Feed

Opinion: A new type of Bluetooth security Security capabilities built into Bluetooth are good but not great. Columnist Craig Mathias suggests a new way to use Bluetooth to significantly improve mobile security.




Analyst: Money will lead to more mobile spying programs The economics of so-called spy programs for getting confidential information from mobile phones is changing, meaning the programs will become more common in the future, according to a security analyst. Read more...




Gone in 2 minutes: Mac gets hacked first in contest
Within 2 minutes, he directed the contest's organizers to visit a Web site that contained his exploit code, which then allowed him to seize control of the computer, as about 20 onlookers cheered him on.





Google: Web sites slow to fix serious Flash flaws





Hannaford may not have to pay banks' breach costs under PCI, says Gartner





March 28, 2008 Putin defies Convention on Cybercrime
http://www.crime-research.org/news/28.03.2008/3277/
Russia has refused to sign the European Convention on Cyber Crime. A corresponding resolution has been passed by the RF President Vladimir Putin. Russia did not manage to agree upon appropriate terms for cross-border access to data-processing networks. Several experts believe Russia will lose nothing in case of signing the Convention.





House to probe shady Pentagon contract given to 22-year-old
rawstory.com — Times story reveals that the Pentagon gave an inexperienced 22-year-old a $300 million contract to provide ammo to Afghanistan. The shady deal resulted in decades old, substandard munitions being delivered to US and Afghan troops. AEY is apparently still in business, and it is hiring, according to this Craigslist ad.More… (World News)




Several people have written to let us know that Dancho Danchev has updated his blog with new data on the IFRAME SEO poisoning attacks. In short, he finds that the attacks are ongoing and bigger websites are being used. Read the blog entry here: http://danchev.blogspot.com/2008/03/massive-iframe-seo-poisoning-attack.html





Ten Security Land Mines
Good list of common corporate security pitfalls.






Posted at 10:50 AM ET, 03/28/2008
The Curious Case of Dmitry Golubov
Earlier this month, Security Fix took a look at Dmitry Ivanovich Golubov, a Ukrainian politician once considered by U.S. law enforcement to be a top cybercrime boss.
Golubov took rather strong exception to the way he was characterized in that post, denying involvement in any type of cybercrime activity. The problem, Golubov claimed, is that the FBI confused him with someone else.
According to Golubov, he was the victim of identity theft. Someone gained access to his passport, scanned it and posted it online along with a note confessing his involvement in a multinational credit card theft ring.
http://blogs.washingtonpost.com/securityfix/







Web developers, fix thy Flash Robert Lemos, 2008-03-28 Flaws that allow cross-site scripting attacks through Adobe Flash files could let attackers compromise online accounts and local networks. Yet, Web publishers have been slow to fix their sites, a security researcher says.






Verizon wants fat pipes, not a badge; MPAA urges ISP filters
At the Tech Policy Summit in Los Angeles yesterday, the MPAA pitched its ISP filtering plan as a way to "unclog the Internet," but Verizon made clear once more than it has no interest in policing Internet content. Well, except for child porn.
March 28, 2008 - 09:38AM CT - by Nate Anderson

Google AdWords PhishingMarch 27, 2008Google AdWords customers have been the target of a phishing scam.






Wait, Weren't Big Newspapers Needed For Credibility?
from the so-much-for-that-plan dept
Over the last few years, it's been amusing to watch defenders of mainstream journalism trash online journalism by claiming that traditional journalists can do real investigative journalism, whereas online-only sources are too easily suckered into fake stories. In fact, one of the loudest complaints about the demise of newspapers is that no one will do "investigative" reports any more. There's no doubt that newer journalism properties get stories wrong at times, but traditional journalists seem just as likely to screw up as well. Witness the big news about the LA Times getting totally suckered into believing a completely made up story concerning Tupac Shakur's murder. Who broke the LA Times mistake? The online site, TheSmokingGun.com. This isn't to say that new media is any better than traditional media -- but it does highlight that for all the supposed "authority" of traditional journalists and their lofty standards, there's a pretty long track record of stunning mistakes and poorly fact-checked stories made by them.
14 Comments Leave a Comment..






StubHub Scalping Suit Tests Website Protection
By PEYTON BURGESS
A class action suit alleging the online ticket broker StubHub aids and abets scalpers is shaping up as a test of a law that protects Internet service providers from liability for the illegal activity of their users. more






Hackers may have accessed Sony PlayStation network
Sue Marquette Poremba March 27, 2008
Some users of the Sony PlayStation network may have had their passwords changed and personal information exposed through unauthorized access, the gaming platform provider has disclosed.






FTC settles security breach case with Reed Elsevier and Seisint
Jim Carr March 28, 2008
In addition to settling its case against discount retailer TJX, the Federal Trade Commission on Thursday announced a settlement with data brokers Reed Elsevier and Seisint on charges that they failed to provide reasonable and appropriate security for sensitive consumer information, leading to identity theft.





Local Area Network Droids
By Duncan Graham-Rowe 03/11/2008 2 Comments
IRobot is developing communications robots for the military.





Whistleblower: Voting Machine Company Lied to Election Officials About Reliability of Machines







Malware cited in Hannaford breachAP - 8 minutes ago
PORTLAND, Maine - Unauthorized software that was secretly installed on servers in nearly all of Hannaford Bros. Co.'s supermarkets enabled the massive data breach that compromised up to 4.2 million credit and debit cards, the company said Friday.





Motorola splitting into two, Mobile Devices to be its own company

No comments: