Posted November 22, 2012 A hacker claims he was disclosing a security flaw responsibly. But IRC transcripts show that the Goatse hacking group was instead musing about shorting AT&T stock, discussed selling 120,000 email addresses to spammers, and never told AT&T about the vulnerability in the first place. Here’s the full story.
Experian defends database security practices in face of investigations
Posted November 20, 2012 Data brokers are on the hot seat as the Irish regulators begin an investigation into Experian’s security methods and the US Congress demands more transparency into what’s collected and how it’s handled. Read the story now.
NASA suffers major data breach over stolen laptop that wasn’t encrypted
Posted November 15, 2012 The space agency is now, finally, after yet another unencrypted laptop theft, scrambling to require full disk encryption agency-wide. Read more.
iOS dictionary apps posting false piracy “confessions” onto users’ Twitter accounts
Posted November 14, 2012 An iOS dictionary application has rewarded those who bought it by hijacking their Twitter feeds to post cooked-up piracy confessions. The Japanese maker of the dictionary apps has apologised and posted fixed versions, but the #softwarepirateconfession tweets are still coming in at a good clip, much to the chagrin of law-abiding, [...]
Petraeus tripped up by trust in supposedly anonymous email account
Posted November 14, 2012 The US’s top spy guy, who resigned abruptly on Friday, conducted a romantic affair behind the thin sheet of a pseudonymous email account. It’s a good reminder to us all that email headers often spill the beans, revealing IP addresses that lead to our webmail hosts and geolocation. It’s a short [...]
DDoS marketing stunt backfires, entrepreneur jailed for nine months
Posted November 12, 2012 He meant to promote his anti-DDoS kit by shedding light on poor internet security at the Hong Kong stock exchange, but his two brief DDoS attacks instead wound up costing him his freedom for the better part of a year. Click here to read the full story.
Adobe Reader zero-day exploit thwarts sandboxing
Posted November 8, 2012 The vulnerability is selling for up to $50K on the black market, security researchers say, and has been included in a package of banking Trojans called the Blackhole Exploit Kit, which is the most prevalent exploit kit out there. Read all about it.
- Ridiculously redacted interpretation of FISA snooping law released
- Medical group fined $140K for tossing patients’ health records into public dump
- Texas student appeals court order to wear “Mark of the Beast” RFID tracking badge
- Crunch Your Own Damn Resumé
- NASA suffers major data breach over stolen laptop that wasn’t encrypted
-
Lisa Vaas: Thanks! Welcome!...
-
see- und lagercontainer: Very great post. I simply stumbled upon your weblo...
-
Eli: lol huh? This makes no sense. Judges don\'t unders...
-
Wayne Andrew McArdle: Thank-you Lisa for your insight, please keep Repor...
-
FREEDOM: Hello nice to see you posting about my finds if yo...
Follow @LisaVaas on Twitter
