Security flaw inadvertently exposes iPad 3G user data
Yesterday, AT&T admitted that the personal data of Apple iPad 3G customers had been exposed due to a security flaw. The news was first reported by Gawker and was later confirmed by AT&T.
According to the company, the exposure of personal information was limited to the email addresses of iPad 3G customers, who will be notified formally of the data exposure. In an electronic statement, AT&T spokesman Mark Siegel said, “This issue was escalated to the highest levels of the company and was corrected by Tuesday; and we have essentially turned off the feature that provided the email addresses.”
U.S. Senators introduce far-reaching legislation to protect against cyber attack
According to a Wired report published yesterday, U.S. Senators Joe Lieberman and Susan Collins have co-sponsored a bill that would empower Department of Homeland Security to assume control over the United States’ “critical infrastructure” in the event of an “imminent cyber threat.”
Over the last decade, U.S. dependence upon its cyber-infrastructure has continued to increase. Critical services and operations are increasingly structured around government networks, which are often interconnected via the magic of Al Gore’s internet. This means that any internet outage, local or nationwide in scope, has the potential to decrease the ability of the government to operate. The question is, though, just how much control Homeland Security officials would wield and when and how they would be authorized to use it.
Facebook announces plan to rescue your privacy, avert the Facepocalypse
In an event held at the company’s New York headquarters today, Facebook CEO Mark Zuckerberg announced plans to fix what the now infamous Facebook Social Graph broke. Responding to weeks of internet-based complaints and, even worse, congressional discussion, Zuckerberg explained that simplified options to configure privacy settings are in the works and should be rolled out within the next several weeks.
Following the obligatory remarks on the company’s evolution and growth, Zuckerberg got straight to the point and told people what they wanted to hear. In the official Facebook blog, Zuckerberg writes, “Today we’re starting to roll out some changes that will make all of these controls a lot simpler. We’ve focused on three things: a single control for your content, more powerful controls for your basic information and an easy control to turn off all applications.” Basically, this means that Facebook’s privacy settings will be fixed and the Facepocalypse can be averted. This of course means you won’t have to worry about securing your profile or, even worse, deleting it altogether.
Google Maps reminds us that Wi-Fi may be unsecured but it’s never really free
This past Friday, May 14, 2010, Google Inc (GOOG) admitted that, since 2006, the company has inadvertently been collecting private network traffic from unsecured wireless connections. How did they do it? Did they strategically position satellites around the globe? Did they deploy sophisticated keystroke logging software to unwitting Gmail users? No, in a move straight from a Scooby Doo villain’s playbook, they strapped a camera to a car and drove around neighborhoods disguised as harmless cartographers.
That’s right. It seems Google’s fleet of cars responsible for driving around cities in more than 30 countries has been taking more than photographs for Google Maps. The tricked out vehicles also picked up and recorded private information, such as user names, passwords, and other unencrypted traffic. So, who is affected? Should we be worried?
Facebook Privacy: How to Secure Your Profile from the Social Graph
One of yesterday’s big tech stories was Facebook’s unveiling of the its Social Graph concept. While CEO Mark Zuckerberg may have gone to great lengths to emphasize the benefits of connecting all of the dots on the internet, privacy and security experts almost immediately began cautioning that the changes could be detrimental in terms of user privacy.
As has been the custom in past updates, the social media giant illogically turns on new options by default and advises the user, via an attractive graphic, that they have the choice to “Understand your privacy” and read the details of the change. Even then, the wording is ambiguous, at best. How good or bad are the changes? In the interest of objectivity, it’s still too early to form an educated opinion. In light of the significant changes, though, it is a good time to review some simple steps that every Facebook user should consider, when determining what and how much information they share.
Internet Privacy: Why Library of Congress Twitter Archives Could be a Bad Thing
Today the Library of Congress announced, via a tweet, that they are set to obtain the entire archive of tweets. That’s right….every tweet. Specific details have yet to be published, but, reportedly, archives dating back to March 2006 will be kept for their historical value. At first glance, it does make sense, and they’re doesn’t seem to be anything heinous about it. Some tweets are historic in nature.
Take for example the first tweet from President Barack Obama, shortly after winning the 2008 Presidential elections, where he said…or tweeted: “We just made history. All of this happened because you gave your time, talent and passion. All of this happened because of you. Thanks” Just like a letter written by President Roosevelt to Winston Churchill discussing the Allied Alliance or an apology note from President George H. Bush to the Japanese Prime Minister regarding his unfortunate regurgitation, a simple, 140-character tweet can carry significant historical weight.
What about all those other tweets, though? You know…the ones that you may not have given much thought to before hitting the tweet button?
Patch Tuesday: A Review of the Must-Have Fixes from Microsoft, Adobe and Oracle
For most System Administrators, Patch Tuesday is a regular event that signals that there is work to be done. For home computer users, it’s when their computer (if properly configured) either automatically installs new Microsoft patches or prompts them to do so. Inevitably, a reboot or two will be required. While it may seem like a bit of a pain, it’s a crucial task that affords effective protection against the most obvious and popular avenues of exploit often used by hackers.
This Tuesday was no different, in the sense of Microsoft patches. This time around, though, Adobe and Oracle joined in the update fun by making available some critical patches that system administrators and home users alike should install as soon as possible. What’s included on this list that you should know about? Let’s go through the list to make sure you’re in-the-know.
Cell Phones: The Drama of Tracing a Phone Call
So you’re watching the next suspense-filled, albeit repetitive, episode of 24. Everyone has a cell phone. Even the bad guys. Every now and then one of the CTU agents will pull up a screen on their workstation to triangulate the location of someone’s cell phone. And within less than a minute, they’ve located their suspect. Welcome to the 21st century.
In my last article, Landlines: The Drama of Tracing a Phone Call, I discussed how tracing a call over a land line didn’t quite match up with what Hollywood likes to show you. However, with cell phone technology there are quite a few differences, but you’ll be pleased to know that Hollywood isn’t far off the mark. Herein, we will cover the basics of a cellular network and discover how a cell phone call is traced and how the phone can be tracked.
Has Google Gone Quixote in the Fight to Save Adobe Flash?
The past few months have not been kind to Adobe Flash. For that matter, the past few years haven’t been much better. It was excluded from the initial, 2007 release and each subsequent update of the Apple iPhone. It hurt, but it was acceptable. After all, it was a phone…a smartphone…but a phone all the same.
The exclusion of the reigning king of streaming video, from the Apple iPad, though? That was too personal. It’s a computer. Computers have Flash. If they don’t, users can’t watch Hulu. If you can’t watch Hulu, what is the point of. recreational computing?
Read more…
ATM Hacker Sentenced to Twenty Year Prison Term for Credit Card Theft
Both companies large and small, as well as home computer users, lose millions of dollars a year, thanks to the electronic theft of credit card information. A bane for businesses who risk incurring the ire of consumers, the number of reported cases only continues to increase, as technology becomes more and more embedded into our daily lives. In a small victory for all parties involved, accused hacker, Albert Gonzalez, was sentenced to 20 years in prison after entering a guilty plea regarding the credit card theft crimes with which he was charged.
A Miami, FL native and 28-year old college drop, Gonzalez admitted his part in the operation of a credit card crime ring whose reach circled the globe. Among the list of companies affected, at least in part, by his hacking activities, is TJX Cos Inc (the operator of such well-known stores as Marshall’s and TJMaxx), Barnes & Noble, and BJ’s Wholesale Club. Gonzalez and his accomplices managed to steal somewhere around 40 million payment card numbers, by breaking into the company’s websites.
