* Posts by NonSSL-Login

385 publicly visible posts • joined 13 Nov 2015

Page:

London's Met Police splash the cash on e-learning 'cyber' training for 4k staffers

NonSSL-Login
Holmes

Cyber means on the interwebz

Police already spend way too much time dealing with people offended by comments made on social media, be it twitter or facebook.

I assume this cyber training is how to do deal with these easy cleanup rate + good for stats 'hate crimes' a bit faster as cyber does just mean something on the internet to them. They will be taught how to make requests to service providers and how to be a voyeur over your ICR (Internet connection records) but I doubt there will be any actual real cyber crime training.

The police need to stop spending limited resources attending obvious joke twitter comments or the 5th time a persistent caller calls about a comment they take offence too, even when its not directed at them, and that old age saying 'catch real criminals'.

Google Chrome will check for leaked credentials every time you sign in anywhere

NonSSL-Login
Big Brother

Preference

I would rather not be logged in to google, ever, than gain the benefits of their password breach notifications.

Good feature for those that are happy for Google to hoover up all their personal data though!

Hashing and only sending part of the hash is probably the best way they could have done it for speed and security reasons. Saying that, those pesky 3 letter agencies probably have some way to abuse the limited data sent anyway.

Judge to interview Assange over claims Spanish security firm snooped on him during Ecuador embassy stint

NonSSL-Login

Employing the fox the guard the hens

A security company that offers security but uses that access to break your security probably won't get many people wanting to use them now that cat is out of the bag.

CIA and US security services don't care if they fuck up a companies reputation or destroys it from them using and abusing it. Yet all these companies keep doing their dirty work.

He cannot get a fair extradition trail when the other party has access to his confidential conversations with his own lawyers over the subject.

Mozilla locks nosy Avast, AVG extensions out of Firefox store amid row over web privacy

NonSSL-Login

Every company slurps as much data as they can get away with as new-age marketing types have told them its all about monetizing data now.

Lets add bluetooth and an app to <device>, say a toothbrush, and then we can track how, when and where they use the device and sell the data is another new trick.

Lets sell you an expensive tv but then pipe our own adverts straight to it while also sending back to the mothership what programmes they watch, when and for how long!

Its happening everywhere and laws and regulations dont seem to stop them taking the piss every chance possible. We need more to protect us from data slurping companies.

UK parcel firm Yodel plugs tracking app's random yaps about where on map to snap up strangers' tat

NonSSL-Login

Despite so many deliveries a day, they manage to screw mine up every time.

Used to get told they tried to deliver but I was out so many times when no one had even approached my door but heard that in the last year they introduced something where drivers have to take a photo to prove they were at the property as so many were apparently lying about deliveries.

Instant dread when I see Yodel as the delivery type after paying. I tend to ask up front that Yodel isn't used when I remember.

Second time lucky: Sweden drops Julian Assange rape investigation

NonSSL-Login

Re: Sex by Surprise

Wake-up sex with a consensual sex partner is enjoyed by many around the world.

'Literally a paperweight': Bose users fume at firmware update that 'doesn't fix issues'

NonSSL-Login
Megaphone

Blame Microsoft

I blame Bill Gates and Microsoft.

Microsoft started the pattern of releasing stuff with the thought of allowing customers to find the bugs which they will then fix with a patch at a later date.

Then software companies and game companies started doing the same. Release bugged to hell software with promises of a software fix or two further down the line.

Now its hardware with firmware updates being pushed out the door without proper testing and it's 50/50 if it gets a firmware update to fix the fault and if so how many patches they will get to fix the various issues that should have been fixed before the product was released.

As much as im all for patching quickly for best security practises, there is no way I would update firmware on my TV or other electronic equipment without reading reviews of others using it first to see what new problems have been introduced. It can be weeks to a month later I update now, if at all.

Denial of service kingpin hit with 13 months denial of freedom and a massive bill to pay

NonSSL-Login

Re: Protest via DDoS ?

In general you may be right but it's not that black and white.

When Paypal, VISA and other similar companies stops allowing their services to be used by a company or organisation for political reasons, it can end a company or organisation as it struggles to find other ways of payment. This has happened with some VPN companies, Wikileaks and even some hosting companies because of political pressure.

The little guy has no way to really voice their opinion on that with it being noticed or heard but taking VISA and Paypal offline via DDoS made enough attention to get that fact on the main news channels. Operation Payback got coverage like those gluing themselves to floors in London recently. Both inconvenienced people but the London protests were legal to organise and participate in, if you kept to the law. DDoS'ing a site is not.

That did not stop media companies hiring Aieplex to DDoS torrent sites though which is well documented. Pretty sure no one in Bollywood or Aieplex went to jail though. The same with the anti-piracy companies that cause denial of service on perfectly legal trackers by faking clients that don't exist and other tricks to cause issues. Which goes back to my original point of it seems to be ok for governments, companies and the rich to do all these things which anyone else would go to jail for.

NonSSL-Login
Linux

Double standards

" Anyone who weaponizes web traffic in this manner will be vigorously pursued and prosecuted by my office"

Except when government departments do it, along with creating and distributing malware and hacking people. Just not the little people!

DDoS is annoying but akin to sit-in at a shop, which would deny it business sales while it occurred. To that extent I think people should be able to protest via DDoS but start using it for blackmail and crime you get arrested like you would if a sit-in got violent or other crimes got committed.

It's a very fine line though

NonSSL-Login

Re: Good

As well as those kind of amplified reflective attacks, they can also just send packets straight at the target spoofing the source IP. Be it sheer volume of packets, syn or whatever.

That gives them 1 or 10gbit of shared bandwidth on each paid server hosted in each data centre that doesnt block spoofed packets. These servers shouldn't be underestimated despite what we hear about the size of DNS/NTP/etc reflective attacks as they alone can be damaging enough if incoming from a few different peering links.

Hate hub hacked, Cisco bugs squished, Bluekeep attacks begin, and much, much more

NonSSL-Login

Re: Hate hub hacked

That always depends what side of an argument you are on. A terrorist to one is freedom fighter to another.

It can be better to gain root, keep quiet and observe in case some of the fanatics on these sites decide to plan something. Showing your cards and going public with the hack just makes them more secure and your intel on them goes dark.

What do you get when you allegedly mix Wireshark, a gumshoe child molester, and a court PC? A judge facing hacking charges

NonSSL-Login

I would like to know..

..which medical conditions meant you are not fit for jail but are fit enough to do IT work like laptop forensic analysis?

Sounds like a magic get out of jail card condition he has.

WhatsApp slaps app hacker chaps on the rack for booby-trapped chat: NSO Group accused of illegal hacking by Facebook

NonSSL-Login

Re: "... a misuse, which is contractually prohibited."

It's more a front door than backdoor.

Maybe that is how the WhatsApp CEO can keep a straight face while saying they don't want backdoors.

It's ok you choosing to disable backups but has the other end of your conversations? If not, un-encrypted backups on googles/NSA's servers.

Antivirus hid more than 9,000 'cybercrime' reports from UK cops, says watchdog

NonSSL-Login
FAIL

Oops

It's almost as if someone called Bobby'); DROP TABLE reports; filled in a cyber report :D

Considering the police don't turn up for burglaries and other crimes these days, it amazes me that they will spend a lot of time and effort investigating when someone calls someone else a name on Facebook. Must be easy stats for the books....

I had the constabulary visit recently because I took three pictures of tree's/landscape in the park. Someone thought that was suspicious, despite there being no one being within view of the camera, followed me back to my car and reported my number plate. Despite no crime reported and taking pictures is perfectly legal as well as me having no previous for anything whatsoever, they thought it was worth sending two coppers to my door to question me.

On top of that, now my name is in the Police National Database until im 100 years old with that info so if for instance some young jogger in the park claims someone was taking photos of them, without any other info, a search for camera/photos and that park and i'm now number one suspect if they have no other info.

Self reported non-crimes and the police are now firmly in my bad books. Need a filter for 'real crimes' (c)

Now to find some police report forms with the EICAR string ready to paste in....j/k ;)

Stalker attacks Japanese pop singer – after tracking her down using reflection in her eyes

NonSSL-Login
Meh

Creepy vs Fun Game

Be it reflections in objects or posting the ridiculous route their Uber driver took took from their home to where their latest picture of a cold beverage on a table was taken....people don't realise how much stalker info they post. Exif viewing browser plugins will often pinpoint addresses from images posted on forums because their is no EXIF cleaning on most.

Finding random peoples home address from twitter and social media posts has always been a fun game for me when I have a few minutes spare and has taught me how to be even more careful with what I post and where as a result. There will be no photos of shiny bronze vases or teapots taken while naked and uploaded for sale to Ebay either...

I love the way someone gets described as a fan, despite going well out of their way to attack the girl. Confused fan.

Im not creepy enough to post anonymously....yet!

Google Maps gets Incognito fig leaf: We'll give you vague peace of mind if you hold off those privacy laws

NonSSL-Login

Yet all the governments keep letting them get away with lying about what data they keep, so they will keep on lying and paying the pitiful (by their standards) fines.

The fact they still have the Location permission in android needed for a bluetooth connection irks me too.

vBulletin zero-day KOs Comodo user forums – that's 245,000 accounts at risk of compromise

NonSSL-Login
FAIL

Layers of security

A lot of VBB installs that were vulnerable to this bug were not exploitable because of other server hardening techniques.

One would have thought a security company would have made sure their websites and customer facing servers were hardened being that a security breach affects their security related brand...

Google takes sole stand on privacy, rejects new rules for fear of 'authoritarian' review

NonSSL-Login

Re: Privacy? Not on today's internet...

Even with all that, there are other things which can give you away, such as HTML5 canvas, timing of video/audio drivers responses (yes its a thing and workable) and one of my biggest bug bears as among all the tricks I do to stay anonymous is screen resolution.

Obviously the site needs it to display but it would be nice if sites didn't get that info and pages could be rendered to your screen resolution without the site knowing what yours actually is.

On top of those methods, I use a fake Browser User agent which changes every 5 minutes. Also help sites that want to send you malware as you get a nice .DMG file when they think you are using Safari on a Mac rather than Firefox on Linux for example. This is where it would be nice again for the site not to know screen resolution so if I fake my browser as Chrome on Android, a screen res of 4k wouldn't give that away + make my http fingerprint so unique.

I'm often telling people a VPN only gives you some privacy from your ISP (who generally won't MITM your connection to remove that protection) and in the UK from the police & 20 odd other services who can see your ICR/Internet connection record for the last 2 years but there is nothing to stop them submitting a request to google for your email account, your search history and probably sites you visited anyway because they had ad-trackers on most of the sites on the internet.

Google are going to fight anything privacy related that stops them tracking you and making money from us so its a surprise they are in an organisation where their single veto can block everything so they can make a privacy groups manifesto less private for citizens. Yes money makes the world go around but just because a company has monetised the internet with adverts, which was created for sharing information, should we structure it so they can continue to profit by stripping our privacy away? I think not.

Confused why Trump fingered CrowdStrike in that Ukraine call? You're not the only one...

NonSSL-Login

Six of one, half a dozen....

Part of me thinks this is terrible abuse that cannot go unpunished. Another part of me thinks Joe Biden is a horrible corrupt politician and it would be great for him and family to be brought down in anyway possible.

Throw in Hillary, Chris Dodd and other well known politicians and the corruption smells so bad, none of them should be in a position of power.

Hard to tell why Crowdstrike is mentioned.

Why do cloud leaks keep happening? Because no one has a clue how their instances are configured

NonSSL-Login

API's among other methods.

NonSSL-Login
Pirate

Clouds - When it rains it pours

Part of it the problem is not having the expertise or specialists available in your company to secure the cloud projects but I can't help but think that if data is almost insecure by default or very complicated to make secure, then the cloud services are to blame.

If access rights is easy to screw up or are that difficult employees just give full acess rights to make their app work, something is wrong at a fundamental level.

Adding more API's, services or features doesn't mean lowing security if done right.

MPs call for 'immediate' stop to facial recog in UK as report underlines bias risks in 'pre-crime' algos used by coppers

NonSSL-Login
Meh

If only...

...these technologies were used for their sole advertised purpose of stopping terrorism or catching dangerous criminals, then most people would be fine with them.

But time and time again the police, the government and security services will use and abuse every bit of technology for every reason other than that. Hence the backlash and no wanting the new super duper 'terrorism stopping' technology.

Be it the RICO terrorist law that the BBC used to spy and catch tv licence evaders or actual hardware, none of these solutions apply to the single and narrow scope it gets sold to us as. The creep to other areas is fast and unlimited and its great to see MP's on top of it, despite the fact nothing will change and we will be ever more increasing spied on.

How many non-speed pr parking related ANPR cameras do you think you get recorded on using any main roads, just so they can work out where people are if they use their own cars. Tracking peoples movement through their credit car actions. Now they want to know who walked where on what day so they can catch future criminals, despite not having enough police to turn up to burglaries although they manage to lock up people in cells who put the wrong rubbish in the wrong colour bins. Yet we are supposed to trust them with privacy invading technology to prevent 'future crimes' through computer algorithms. You turn up at the station after pub closing 5 times a week, obviously a drug dealer or something if the algorithy see's you wearing trainers too /sarcasm

Your ugly mug may be scanned yet again – but at least you'll be able to board faster at Gatwick

NonSSL-Login
Big Brother

Besides the security services siphoning off the data for their own uses, I cynically suspect the real reason is so people have more time in an area of the airport where they can spend money and make the airport more profit.

Yes, TfL asked people to write down their Oyster passwords – but don't worry, they didn't inhale

NonSSL-Login

Badly designed system

Obviously not a well thought out system!

The article mentions you can put a Two together discount on the Oyster card which intrigued me but checking their official site (twotogether-railcard.co.uk) it says you cannot use this discount for London Oyster fares in London, which I thought was the only place Oyster cards worked?

--------------

Your Two Together Railcard discount WON'T apply to:

Season tickets, including Travelcard Season tickets

Oyster pay as you go fares in London

Eurostar tickets

Tickets for special excursions or Charter trains and some coach/bus links, including Railair services

Rail/sea journeys to Calais, Ireland, Northern Ireland and the Isle of Man

Most London Underground and Docklands Light Railway ticket

Watch as 10 cops with guns and military camo storm suspected Capital One hacker's house…

NonSSL-Login
Meh

Re: Darwin Award Contender

Logging in from the same VPN provider (what the story says) is hardly proof that a particular person committed a crime, especially when some popular providers have millions of customers.

Using the same VPN node might narrow it down but if a VPN provider only has one or two nodes for a particular state and one of them is faster, then all the users in that area will use that node.

Obviously she did a lot of stupid stuff that indicated she was the hacker but the VPN side is the least of the evidence.

As for VPN users being hackers...many UK peeps use a VPN now since a law was brought in forcing ISP's to keep 2 years of ICR's (Internet connection records) which logs every DNS request, ip, port and website we visit and allowed the police + everyone and their dog to access the data. VPN users get to give them a single record for a VPN node along with the middle finger, hacker or not.

Real hackers tunnel through their VPN tunnel so the IP doing the business is not the VPN node IP seen in their ICR....

Backdoors won't weaken your encryption, wails FBI boss. And he's right. They won't – they'll fscking torpedo it

NonSSL-Login

Re: Stalin would be so proud of him

How sure are you that those areas do not have backdoors done in a way of plausible deniability by the manufacturers?

-UEFI made it easier to implant and hide a backdoor over BIOS and gave much more memory to play with

-TPM/Trusted Platform Module was introduced in Intel chips to offer extra security where in fact there were so many holes it made things like bitlocker and such totally insecure. Sell it as security while it weakens it, sounds and smells like a backdoor.

-Some HDD manufacturers are known to give their source code and signing keys to the agencies so they can compile their own firmware with backdoors that cannot be found with most usual methods.

-American owned Broadcom made some network cards with plenty of space to put your own code and someone showed how a rootkit could be installed on the network card in this space. Coincidence or manufacturers giving the agencies the capability to backdoor their products?

-Not to mention software companies like WhatsApp not long ago bringing out a 'backup' 'feature' that it nags you to use which saves your messages unencrypted on google servers. If that is not an in your face backdoor for the security services then i'll eat my grey hat.

Assume everything is being backdoored in some way now, especially if an american company.

UK Home Secretary doubles down on cops' deeply flawed facial recognition trials

NonSSL-Login
Trollface

Re: Oh fantastic

Reg: "All right, but apart from the sanitation, the medicine, education, wine, public order, irrigation, roads, a fresh water system, and public health, what have the Romans ever done for us?"

Xerxes: "Well Caelius Aurelianus translated that Soranus of Ephesus geezers words describing phrenetis, mania and melancholy!"

Reg: "Whats that got to do with anything?"

Everyone: "precisely!"

NonSSL-Login

Re: You can pretty much guarantee that when the government starts talking

Every time. Without fail.

While we were raging about Putin's meddling and Kremlin hackers, Five Eyes were pwning Yandex, Russia's Google

NonSSL-Login
Holmes

No Shit Sherlock

If you have not read every story in the papers where the UK or US complain about Russian or Chinese hacking and not thought 'we are hypocrites, why make a song and dance about stuff we are doing daily too?' then you have not been keeping up with what the spy agencies of the world do.

The Five eyes countries are hacking every other country for economical and political benefit daily with hundreds of operations going targeting thousands of people. So is China, Russia, North Korean, Iran and many other countries you hear little about.

We talk about Russia influencing elections but forget how many coups the CIA have been involved with and the fact the US and UK military have departments just dealing with social media influencing to point people towards whatever goal we want.

So next article ask once again, are hypocritical much?

UK's MoD is helping itself to cops' fingerprint database 'unlawfully', rules biometrics chief

NonSSL-Login
Coat

How many organisations and partners have the police allowed to copy the full database than just search it?

Considering DNA and fingerprints are supposed to be deleted after such in many circumstance, which probably isnt happening, I wonder who has backups of the full data. Without doubt someone is hoarding them under the .national security' banner. Who are they sharing the data with?

Google takes the PIS out of advertising: New algo securely analyzes shared encrypted data sets without leaking contents

NonSSL-Login
Stop

Algorithmic Hash then?

Sounds like an advanced kind of hash with lots of potential flaws which will probably be used to try and get around GDPR data sharing.

Recently had a form to fill in which stated the data would be anonymised and shared with governments. Reading further thought government white papers and official pdf's, it seems the data us actually pseudo-anonymous, specifically so they can use the same algorithm/hash on the same sample points (ie, name, DoB) in other 'anonymised' data-sets and get the same unique identifier and match up the different 'anonymous' data-sets to the same people/family. Thus creating a big combined dataset of one person/family unit from different data sources that claimed on paper they would be completely anonymous.

So I tend to look deeper now at anything that claims to make my data anonymous via some hashing or similar tricks. In the above case I opted out of the data share and do every chance I get now.

Just remember, they are only doing this so they can share and monetise data and it's likely your data.

Never trust those wanting your data and saying they will keep it secure. It's like saying your data in storage is safe because the site uses SSL and has a padlock icon from an AV company.....

'Cynical and bullying' TalkTalk hackerhacker getsgets 4 yearsyears behindbehind barsbars

NonSSL-Login

Re: I've been caught ...... I must have Asperger's.

The UK doesn't diagnose Asperger's as a condition since DSM5 which was released in 2013. Before that someone with Aspergers would get a diagnosis of Aspergers but after that date they have ASD. Just a different place on the spectrum than others with ASD.

So the original posters intention was to say he must have got diagnosed well before the case.

This is grim, Vim and Neovim: Opening this crafty file in your editor may pwn your box. Patch now if not already

NonSSL-Login
Joke

Re: Smug

Doesn't really make up for the 30 minutes wasted trying to quit out of Vim in the past but,,,,I feel ya!

UK Home Sec kick-starts US request to extradite ex-WikiLeaker Assange

NonSSL-Login

Hardly a surprise

Extradition to the US has likely always been the agenda and knowing that was the reason he holed himself up in the embassy anyway.

When you are such a political hot potato as he is, every trick in the book is used by the governments involved.

Supra smart TVs aren't so super smart: Hole lets hackers go all Max Headroom on e-tellies

NonSSL-Login

Re: Not impressed with so called smart TVs full stop.

MPAA DRM and geo-restrictions screwing people over everywhere. Encrypted recordings, Youview which launches iPlayer and other apps which refuse to work over a VPN, even though the TV can say exactly where it is due to the signal it is getting.

Don't even get me started on HDMI/HDCP.

Usability for loads of things are fucked and people should be aware than 9 out of 10 times the tv problems are due to the Hollywood studios and stuff they force tv makers to do and the things they force tv channels to do via licencing agreements.

They are the reason you cant watch legit content on linux, 4k on some android box's, nothing at all on rooted phones and force shitty DRM on tv' and other equipment through their part of being part of HDMI organisation.

We would not need smart tv's if Hollywood were not so anal with pushing DRM.

Millions of personal files exposed by insurance biz, serial web hacker strikes again, and more from infosec land

NonSSL-Login
Holmes

Re: Huawei spying

Previously the stated concern was backdoors were being made at the chipset level rather than the software level, which would be much hard to find or prove.

All seems total bollocks though and until we see some solid evidence, will treat the claims as such. All the time we continue to find intentional or not backdoors in US products, such as Cisco hard coded credentials, SSH keys etc or Intels various weird patents for ways that allow executing code beyond ring 0 which seem to only have uses as a backdoor.

Lots of backdoors which could have plausible deniability but are actually there and reported on, compared to not many Huawei bugs like that in comparison.

Give me a Huawei phone without Broadcom radio and with Kaspersky AV on any day over the US alternatives!

Get out of Huawei, it's an avalanche of news from everyone's favourite Chinese bogeyman

NonSSL-Login
Coat

Different day, different bogeyman

Yesterday it was Russia and Kersperky. Today it's Huawei and China. Who tomorrow?

America's politicians need a new boogeyman to bully to try and damage their business either out of spite or to try and get people to use home grown technology thinking it will help the economy. Its horrible politics and you would think most would see through the lies but......the blindness to reality is gob-smacking.

Eggheads confirm: Rampant Android bloatware a privacy and security hellscape

NonSSL-Login
Mushroom

Re: Insecure dead things

It works without root.

Something every samsung user should look at.

NSA: That ginormous effort to slurp up Americans' phone records that Snowden exposed? Ehhh, we don't need that no more

NonSSL-Login
Trollface

The real NSA mantra is to collect as much as data as possible all the time, so this does not fit in to that.

They would never give up a data source unless it was completely useless and they have argued for years that this type of collection was 100% needed.

Think that goes to show whatever the NSA say, you can't trust their word.

Wannacry-slayer Marcus Hutchins pleads guilty to two counts of banking malware creation

NonSSL-Login

Re: So now he has admitted to creating nasty malware.

He didn't reverse wannacry and find the kill switch, he just noticed a domain the

infected call out to was unregistered and registered it probably in the hope of seeing what data clients where sending. He did not know at the time registering that domain would kill wanncry.

Silk Road 2 + Dread Pirate Roberts 2 + 1 Liverpudlian = over 5 years in prison

NonSSL-Login

Re: ""crime" and "morally wrong" can be tenuous"

Is it morally wrong to kill those those who feel damaged over the post-it notes being out of stock at work because Sally from accounting helps herself to a pad for home while at the cupboard?

As Alexa's secret human army is revealed, we ask: Who else has been listening in on you?

NonSSL-Login
Big Brother

It's a sad case of affairs when we have awesome technology and gadgets available to us but we don't want to use them because the way the big companies have implemented these gadgets to spy and store as much as possible about us.

More people would embrace technology if they could trust it. At the moment they can't and long term plans of the companies involved suggest this will be the norm for a long time.

Who needs foreign servers? Researchers say the USA is doing a fine job of harboring its own crimeware flingers

NonSSL-Login

Re: This is not exactly news

While I understand the reasons for blocking incoming datacentre traffic, it's quite annoying for VPN users but luckily only a few sites block by ASN or netblock. Saying that, I don't take down the VPN to access those few sites or create static routes so they just lose me as a visitor.

Since the UK decided that every network connection will be logged for a year in the form of ICR's (Internet connection record) and that everyone and their dog (Scottish and Welsh ambulance service, local councils, food standards agency among others...) can access your viewing + whatever protocol usage, many now live behind a VPN to regain some sort of privacy from big brother. Now we have some admins punishing us for that.

DRM and geofencing forced on media streaming providers means amazon now wont work if your IP resolves to a VPN provider name, despite the tv knowing it's proper location due to the tv signals its getting. Makes the service unusable so amazon loses a customer.

Needs to be a better way to keep privacy without being blocked by overzealous blocking.

UK pr0n viewers plan to circumvent smut-block measures – survey

NonSSL-Login
FAIL

Stats will show...

that one person watches 54,578 hours of porn per hour....once someones age ID details are entered in to the BugMeNot site.

Hackers cop a FILA thousands of UK card deets after slinking onto clothing brand's servers

NonSSL-Login

Re: JavaScript intercepts credit card data?

Single use virtual numbers on each online transaction. It already happens for some of my transactions automatically as my banks systems get invoked too.

Schneier: Don't expect Uncle Sam to guard your web privacy – it's Europe riding to the rescue

NonSSL-Login

Re: In the USA

The copyright cartels are another example of this. Nothing has been done to stop their ever increasing laws and control on the internet and hardware in our homes, all in the name of profit.

Would love for more EFF type organisations to fight for us but also have government realise there are human and moral judgements to be made with technology, not just industry money winning everything they want.

Hapless engineers leave UK cable landing station gate open, couple of journos waltz right in

NonSSL-Login

Re: Not really secret

On the same road as the Experian building. Makes sense as that's another company that lets data thieves just walk right in :P

Did you know?! Ghidra, the NSA's open-sourced decompiler toolkit, is ancient Norse for 'No backdoors, we swear!'

NonSSL-Login

Gift Horse...

NSA checklist for Ghidra:

1) Code Ghidra in such a way that it cannot see or decode new generation of NSA nastys

2) Give it away free and try and make it the industry standard

3) Profit!

Revealed: Numbers show extent of security fears about security biz Kaspersky Lab

NonSSL-Login

Re: It's not just Kaspersky

Qihoo 360 is a popular AV product and has a very talented team behind it like Kaspersky.

They are known in the security world for finding and reporting exploits, pulling apart malware and pretty much all the usual stuff. Just not really penetrated the market in the west yet, although they are making some headway on mobile.

Accused hacker Lauri Love loses legal bid to reclaim seized IT gear

NonSSL-Login

Re: Something not ringing true here ...

Personally I think it's a screw up of language somewhere along the line and the reality is that some of the drive was readable and the rest was encrypted in a trucrypt volume.

Rather than encryption kicking in, they meant to say that they couldn't read the encrypted part. That is my best guess anyway.

Firmware for hard drives probably needs to be signed(?) so not straight forward to do even if you could modify it to delete content on a certain sector or block read.

Page: