Tuesday, April 30, 2013

One Per Cent: Chinese 'water army' hijacks online product reviews

One Per Cent: Chinese 'water army' hijacks online product reviews: Looking for online product reviews before you buy holiday gifts? Watch your step. Many of those "user reviews" may come from professionals paid to post favourable comments about their employers' products and denigrate their competitors', says a computer scientist who worked undercover in the industry.

Thursday, April 25, 2013

Weirder Web | Tag Archive | Black Market Reloaded

Weirder Web | Tag Archive | Black Market Reloaded: Black Market Reloaded, the most visible competitor to Silk Road in the world of Tor marketplaces, grew to almost $400,000 in sales this month

Securing Your VPS Web Server Through Mod_Security

Securing Your VPS Web Server Through Mod_Security: Mod_security is an Apache web server module designed to spot and defend against intrusions into your web applications.

Samsung Delays Release of Security Software for Galaxy Phones - NYTimes.com

Samsung Delays Release of Security Software for Galaxy Phones - NYTimes.com: In February, Samsung Electronics introduced Knox, a version of Android with security features to make the company’s phones more suitable for businesses, expected for release this spring. But the company has delayed the release of the software until summer, according to two people briefed on the company’s plans.

Friday, April 19, 2013

WordPress.com adds 2-factor authentication option

WordPress.com adds 2-factor authentication option: "WordPress users can finally secure their account(s) with two step authentication. The optional feature has been rolled out on Friday and is accessible to all users."

'via Blog this'

Former Hostgator employee arrested, charged with rooting 2,700 servers | Ars Technica

Former Hostgator employee arrested, charged with rooting 2,700 servers | Ars Technica: "A former employee of Hostgator has been arrested and charged with installing a backdoor that gave him almost unfettered control over more than 2,700 servers belonging to the widely used Web hosting provider."

'via Blog this'

CISPA's Problem Isn't Bad PR, It’s Bad Privacy | American Civil Liberties Union

CISPA's Problem Isn't Bad PR, It’s Bad Privacy | American Civil Liberties Union: Creates an exception to all privacy laws to allow companies to share our personal information, including internet records and the content of emails, with the government and other companies, for cybersecurity purposes;

Wednesday, April 17, 2013

The GPS-Enabled DJI Phantom Quadcopter Makes The AR.Drone Look Like A Toy | TechCrunch

The GPS-Enabled DJI Phantom Quadcopter Makes The AR.Drone Look Like A Toy | TechCrunch: "The Phantom, which has a list price of $849 but currently retails for about $680, comes mostly pre-assembled and is extremely easy to fly, thanks to its built-in compass and GPS module"

'via Blog this'

Exclusive: Ongoing malware attack targeting Apache hijacks 20,000 sites | Ars Technica

Exclusive: Ongoing malware attack targeting Apache hijacks 20,000 sites | Ars Technica: "Tens of thousands of websites, some operated by The Los Angeles Times, Seagate, and other reputable companies, have recently come under the spell of "Darkleech," a mysterious exploitation toolkit that exposes visitors to potent malware attacks."

'via Blog this'

Apache Darkleech Compromises

Apache Darkleech Compromises: "Dubbed “Darkleech,” thousands of Web servers across the globe running Apache 2.2.2 and above are infected with an SSHD backdoor that allows remote attackers to upload and configure malicious Apache modules."

'via Blog this'

Tuesday, April 16, 2013

Brute Force Attacks Build WordPress Botnet — Krebs on Security

Brute Force Attacks Build WordPress Botnet — Krebs on Security: "the botnet of infected WordPress installations now includes more than 90,000 compromised sites."

'via Blog this'

INFILTRATE - Security Conference // Home

INFILTRATE - Security Conference // Home: "INFILTRATE is a deep technical conference that focuses entirely on offensive security issues. Groundbreaking researchers focused on the latest technical issues will demonstrate techniques that you cannot find elsewhere. "

'via Blog this'

What 420,000 insecure devices reveal about Web security | Security & Privacy - CNET News

What 420,000 insecure devices reveal about Web security | Security & Privacy - CNET News: Using a simple technique, a researcher creates a benign botnet to survey the breadth of the Internet, and finds a back door flung wide open and beckoning the bad guys.

Friday, April 12, 2013

To Tibet, with Love | The Official Lookout Blog

To Tibet, with Love | The Official Lookout Blog: On March 25th 2013, the email account of a Tibetan activist was hacked and used to spearphish all the contacts in his address book.

Bing Delivers Five Times as Many Malicious Websites as Google

Bing Delivers Five Times as Many Malicious Websites as Google: Searches on Bing returned five times more links to malicious websites than Google searches, according to an 18-month study from German independent testing lab AV-Test.

Monday, April 8, 2013

Ira Winkler on why cybersecurity degrees are worthless

Ira Winkler on why cybersecurity degrees are worthless: But does a college degree have the same value as a certification? According to security expert Ira Winkler, it does not.

Sunday, April 7, 2013

How to Move Your Blog from WordPress to Blogger

How to Move Your Blog from WordPress to Blogger: Moving a blog from WordPress to Blogger is actually fairly simple as long as you've got administrative access to your WordPress blog.

Saturday, April 6, 2013

Wednesday, April 3, 2013

Tuesday, April 2, 2013

CSIS: 20 Critical Security Controls

CSIS: 20 Critical Security Controls: The Twenty Critical Security Controls have already begun to transform security in government agencies and other large enterprises by focusing their spending on the key controls that block known attacks and find the ones that get through.

Voluntary National Insurance contributions - GOV.UK

Voluntary National Insurance contributions - GOV.UK: The table explains who is eligible to pay voluntary National Insurance contributions and which class to pay

Tuesday, March 26, 2013

Speedtest.net - The Global Broadband Speed Test

Speedtest.net - The Global Broadband Speed Test: Are you getting the speed you pay for? Our Promise Index™ and Speedtest.net help keep your ISP honest!

Sunday, March 17, 2013

Social Media, Common Sense, and the Law

Social Media, Common Sense, and the Law: And then, down the road, you discover that this person you’ve been having work-related conversations with is not really your customer but someone who has stolen your client’s identity

Nerd Chick Adventures: Be on lookout for these social media scams � Redding Record Searchlight

Nerd Chick Adventures: Be on lookout for these social media scams � Redding Record Searchlight: Don’t fall victim. Here’s how to identify and avoid the most common social media ploys.

Internet, social media least trusted industries for privacy | Security & Privacy - CNET News

Internet, social media least trusted industries for privacy | Security & Privacy - CNET News: Internet and social media ranked at the bottom on a list of the most trusted industries for privacy, according to the Ponemon Institute.

Twitter Hacks Force Companies to Confront Security on Social Media - NYTimes.com

Twitter Hacks Force Companies to Confront Security on Social Media - NYTimes.com: What happened to Burger King — and, a day later, to Jeep — is every brand manager’s nightmare.

What you 'Like' in Facebook can come back to haunt you - CSO Online - Security and Risk

What you 'Like' in Facebook can come back to haunt you - CSO Online - Security and Risk: "Commercial companies, governmental institutions, or even one's Facebook friends could use software to infer attributes such as intelligence, sexual orientation

Thursday, March 14, 2013

Wednesday, March 13, 2013

HolisticInfoSec: toolsmith: Redline, APT1, and you – we’re all owned

We are in an exciting time for computer security, and I look forward to seeing Redline help new users dive headfirst into computer security awareness.


From My iPhone

Intelligence Official Warns Congress That Cyberattacks Pose Threat to U.S. - NYTimes.com

a cyberattack could cripple America's infrastructure and economy and suggested that such attacks pose the most dangerous immediate threat to the United States,

http://www.nytimes.com/2013/03/13/us/intelligence-official-warns-congress-that-cyberattacks-pose-threat-to-us.html?smid=tw-share&_r=0


From My iPhone

Tuesday, March 12, 2013

Scammers’ new target: your cell phone - Jennifer Waters's Consumer Confidential - MarketWatch

Scammers’ new target: your cell phone - Jennifer Waters's Consumer Confidential - MarketWatch: If you’ve got a mobile phone that receives text messages, chances are you’ve been hit with the latest scam from the bad guys: smishing

RSA 2013: Security wonks debate whether China will get the message to stop hacking - SC Magazine

RSA 2013: Security wonks debate whether China will get the message to stop hacking - SC Magazine: The jury is out on whether China will scale down its cyber espionage activity after the country was called out in a well-publicized report on a military hacking unit

HP Launches Big Data Security Products, Threat Research - Security -

HP Launches Big Data Security Products, Threat Research - Security -: HP this week released new big data tools designed to provide businesses with better information security intelligence gathering capabilities, and launched a new information security research group that's been tasked with providing better threat intelligence for HP's own security products.

Changes to cookies on our website - ICO

Changes to cookies on our website - ICO: The aim is to help us collect reliable information to make our website better, while remaining compliant with the rules on cookies and our own guidance.

Changes to cookies on our website - ICO

Changes to cookies on our website - ICO: The aim is to help us collect reliable information to make our website better, while remaining compliant with the rules on cookies and our own guidance.

Thursday, March 7, 2013

Wealth Inequality in America

I thought graphic illustration of the distribution of wealth in America quite shocking. It makes me think of Czarist Russia, before the revolution. Is that where we are heading?
When the middle class are hardly better off than the poor, and the richest people are 300 times better off than the middle class, it becomes blatantly obvious that this situation cannot last. My only questions are:
1) How long will this situation last?
and
2) What is going to be the "last straw" that brings on the revolution?

How Safe Is Your Phone From Hackers | NBC 7 San Diego

How Safe Is Your Phone From Hackers | NBC 7 San Diego:

Phones with popular operating systems may be more susceptible to hackers.

Thursday, February 21, 2013

Global Online Enrollment System (GOES)-Official U.S. Government Web Site to apply for Global Entry, FLUX, NEXUS, SENTRI, FAST

Global Online Enrollment System (GOES)-Official U.S. Government Web Site to apply for Global Entry, FLUX, NEXUS, SENTRI, FAST: The Global Online Enrollment System allows registered users to enter their own applications for U.S. Customs and Border Protection (CBP) Trusted Traveler Programs, and approved members to edit their information as needed (mistakes on the original application cannot be corrected once the application is certified - your mistakes will need to be brought to the attention of CBP during your interview).

Sunday, February 17, 2013

Security startup Nok Nok Labs wants to rid the world of passwords — Tech News and Analysis

Security experts say it's not about getting to a level of perfect security, an impossibility. The realistic goal is to minimize risk as much as possible. People find it hard to remember and multiple passwords and user names so they get sloppy — they share and duplicate passwords — and that leads to risk. Nok Nok's tools could be one way to alleviate it.

http://gigaom.com/2013/02/11/security-startup-nok-nok-labs-wants-to-rid-the-world-of-passwords/


From My iPhone

Point-of-Sale malware attacks – crooks expand their reach, no business too small | Naked Security

http://nakedsecurity.sophos.com/2013/02/16/point-of-sale-malware-attacks-no-business-too-small/

As before, the criminals are avoiding very large businesses but in addition to the commonly attacked hospitality industry and hotel targets there are smaller victims, including a single car dealership in Australia.