Security
State of SCADA Security Worries Researchers
Recent reports painted a bleak picture of the security issues plaguing industrial control systems, but the situation is exacerbated by the fact that administrators are naïve about the dangers, researcher said.
Source: eWeekTags: SCADASecurityDo you password-protect your gadgets?
How paranoid are you about data security?
We all love shiny new gadgets, but unfortunately they’re also attractive to burglars, muggers and pickpockets. Thieves are generally looking to offload your gadgets for some quick cash, but the data they contain may be of far more value to you.
Source: The Age (Australia)Tags: HardwareSecurityHackers may be able to 'outwit' online banking security devices
Criminal hackers have found a way round the latest generation of online banking security devices given out by banks, the BBC has learned.
After logging in to the bank's real site, account holders are being tricked by the offer of training in a new "upgraded security system". Money is then moved out of the account but this is hidden from the user.
Source: BBCTags: HackersEncryptionSecurityHow to monitor devices with Cacti
There are many ways to monitor devices: netflow, span port, switchport and so on. Today I will explain how to monitor bandwith, CPU, … of routers and switches using SNMP and Cacti.
Source: Ciscozine Tags: HardwareSoftware-ProgrammingRemotely start your car using an Arduino
This DIYer had a 1st generation iPhone lying around, so he decided to put it to good use. You can use any phone to accomplish this, even a $10 prepaid phone. An SMS to the iPhone goes through an Arduino which tells yours car to start or stop from anywhere. There’s some custom circuitry and programming which is all included in the instructions. When a text message is sent to the iPhone, the iPhone tells the Arduino to start the engine, and the iPhone sends a message back reporting that the start has commenced.
Requirements:
Source: BlobugTags: ArduinoTechnologySoftware-ProgrammingHackersOver 3 years later, "deleted" Facebook photos are still online
Facebook is still working on deleting photos from its servers in a timely manner nearly three years after Ars first brought attention to the topic. The company admitted on Friday that its older systems for storing uploaded content "did not always delete images from content delivery networks in a reasonable period of time even though they were immediately removed from the site," but said it's currently finishing up a newer system that makes the process much quicker.
Source: ArstechnicaTags: FacebookPrivacyPHP security patch creates critical vulnerability
The PHP Group released PHP 5.3.10 on Thursday in order to address a critical security flaw that can be exploited to execute arbitrary code on servers running an older version of the Web development platform.
The vulnerability is identified as CVE-2012-0830 and was discovered by Stefan Esser, an independent security consultant and creator of the popular Suhosin security extension for PHP.
Source: CSO OnlineTags: SecuritySoftware-ProgrammingAnonymous sits in on FBI conference call
A member of the Anonymous collective infiltrated a conference call between Scotland Yard and the FBI last month.
An unknown member accessed the 17-minute call using the conference telephone number and password. The call was recorded and posted to YouTube. It revealed a conversation between five members of the agencies who discussed alleged Anonymous and LulzSec operatives.
Source: IT News (Australia)Tags: AnonymousGOVLaw and OrderFacebook's Zuckerberg defends hacking
Facebook's billionaire CEO Mark Zuckerberg calls himself a hacker.
For most people, that word means something malicious - shady criminals who listen in on private voicemails, or anonymous villains who cripple websites and break into email accounts.
Source: News24Tags: FacebookIndustry NewsHackersWhile the world braces for e-threats, India moves slow
After the first four "real'' battlefields of land, air, sea and now increasingly space, India needs to get very serious about the virtual front as well. The country should begin planning a full-fledged military cyber command, instead of the current piecemeal and disjointed steps to bolster cyber-security, grappling as it already is with incessant online espionage and other attacks from China, Pakistan and others.
Source: India Times Tags: IndiaIndustry NewsSecurityBrain drain: Protecting your organization's IP
Global healthcare provider Best Doctors employs the most robust technologies and practices available to protect the privacy of its members' personal data—but that's just a part of doing business in this industry. Less obvious but equally important is the degree of vigilance with which the company protects its brand name, which is trademarked in dozens of countries worldwide.
Source: CSO Online Tags: Industry NewsEFF ready to sue if "innocent customers" can't get Megaupload data back
The Electronic Frontier Foundation (EFF) today officially asked all parties involved in the Megaupload criminal case to refrain from deleting any data stored on servers once leased by the file-hosting service—and it suggested it was willing to sue over the matter.
Source: ArstechnicaTags: EFFLaw and OrdermegauploadAMD sets out its plans for 2013, hints at a possible ARM future
AMD today laid out its plans for the next couple of years at its Financial Analyst Day. The plans are a mix of familiar and logical extensions of the company's current products, but contained some more surprising elements: specifically, AMD opened the door to future processors that include ARM CPUs.
Source: ArstechnicaTags: AMDHardwareTechnologyARMXbox Live Bans User For Getting Hacked
After his Xbox Live account was stolen, Josh had to file a Better Business Bureau complaint in order to make MIcrosoft pay attention to him and restore his account access. After three months, he was delighted to log back in to his account, but surprised to learn that he had been banned for a "code of conduct violation." What did his account do to get banned? It was trying to steal other accounts. Imagine that.
Source: Consumerist Tags: XBoxMicrosoftGamesIndustry NewsVeriSign admits multiple hacks in 2010, keeps details under wraps
VeriSign, the company responsible for guiding most of the world's Internet users to the correct websites and once the largest encryption certificate issuing authority, has acknowledged that it was successfully hacked several times in 2010.
The admission was disclosed last fall in a VeriSign filing with the U.S. Securities and Exchange Commission (SEC), but did not come to light until today when Reuters reported on its investigation of new SEC guidelines on such disclosures.
Source: PC Advisor (UK)Tags: VerisignSecurityHackersFacebook IPO decoded: An at a glance look at the numbers behind Facebook's big reveal
Facebook’s initial public offering got more attention from the digerati than most superstars garner in any given day.
Much digital ink was spilled in anticipation, but much more is sure to come as investors, analysts and journalists scour the social network’s SEC registration statement for juicy tidbits and telling details. (For instance, founder Mark Zuckerberg spent a cool $692,679 flying friends and family on private aircraft in 2011 – it’s because of his “comprehensive security program.”) Here’s a taste of a few facts and numbers that jumped out from the filing immediately.
Source: The StarTags: FacebookIndustry NewsHITBSecConf2012 - Amsterdam brings new hackathon, Capture The Flag and keynotes by Bruce Schneier and Andy Ellis
Amsterdam, The Netherlands, 1 February 2012 – Hack In The Box Security Conference is back again in Amsterdam this year for the European leg of its annual circuit.
Source: HITBSecConf2012 - AmsterdamTags: HITBSecConfHITB2012AMSHITBIntel Invests In Web Security Startup Solera Networks
Web traffic analytics firm Solera Networks is expected to announce Monday that it has raised $20 million from Intel Capital, chip leader Intel's (INTC) VC unit, and other investors.
Salt Lake City-based Solera Networks uses deep-packet inspection technology to identify security risks in Web traffic. Two companies in IBD's Computer Networking group, Allot Communications (ALLT) and Procera Networks (PKT), also sell Internet traffic analytical tools, and both are doing pretty well.
Source: Investors.com Tags: IntelIndustry NewsBasics of embedded firewalls - Exploding the myths
Today there are over 5 billion intelligent, connected devices. The leading technology analyst firm International Data Corporation (IDC) is predicting the number will rise to 15 billion by 20151. Our reliance on embedded devices is growing as embedded devices are showing up in almost every area imaginable.
Source: EE TimesTags: SecurityHardwareSarah Palin hacker loses appeal against evidence deletion
The former college student imprisoned for hacking the email account of Sarah Palin has had his appeal against the charge on which he was convicted rejected by a US court.
David Kernell, who has already been released after serving 11 months for his hacking the former vice Presidential candidate’s Yahoo account in 2008, had appealed against his conviction for obstructing the course of justice.
Source: Tech WorldTags: HackerLaw and OrderGOV|
|
