I fell for the oldest social engineering trick in the book

CSO Security & Risk Online
Salted Hash – IT Security News
By Bill Brenner
April 09, 2012

I’ve written countless stories about social engineering, with security experts far and wide telling our readers never to open a link from someone we don’t know. We’ve also published advice about making sure a message from a friend is for real before opening. That didn’t stop me from falling for one of the oldest tricks in the book.

It came in as a direct message on Twitter Friday, from Network World writer Brandon Butler, who sits in the next cube over from me at the office. He’s a nice, mild-mannered chap, so when I got a tweet in his name, I opened the link without thought. Well, that’s actually not true. I did have thoughts –based on his tweet:

“Hello somebody is saying very bad rumors about you… (URL removed)”

I’ve been in this profession for a long time, and have found myself on the receiving end of blistering criticism plenty of times. It’s a simple byproduct of the job. And yet I had to know who was spreading bad rumors about me. And I had to know right that second!

I clicked the link and got a slow-loading site that ended in a request for my Twitter username and password. Another huge red flag. But someone was out there spreading rumors about me, you see, and I had to know what it was. So I plugged in my credentials.

As the screen of my Android froze up, I got the sinking feeling that I had just committed an act of supreme dumbness. By then, it was too late.

Soon after that, a friend on Twitter sent me this message:

“Guessing you didn’t mean to post that…”

It turns out the bad guys started using my Twitter account to send out a variety of spam messages to friends, including the one I fell for.

I changed all my passwords for everything, and the Twitter madness ceased.

This morning, Brandon came in and apologized profusely. It turns out he fell for the same trick as me, and the tweet I got from him was the result.

I laughed pretty hard over that. Sometimes, when you do something stupid, all you can do is laugh, fix what you’ve done and move on.

But Brandon hasn’t been writing about security for the past eight years like me. I should know better by now.

Go ahead and have a good laugh at my expense. I deserve it.

 

Direct Link:  http://blogs.csoonline.com/data-privacy/2125/i-fell-oldest-social-engineering-trick-book?source=ctwartcso

 

 

The Reaction To ‘Girls Around Me’ Was Far More Disturbing Than The ‘Creepy’ App Itself

 

FORBES

by Kashmir Hill

Forbes Staff

April 2, 2012

 

 

 

Welcome to The Not-So Private Parts where technology & privacy collide

 

  • All men are creepy stalkers looking for new digital aids to help them catch and rape women.
  • All women are damsels-in-distress who have no idea how much danger they are exposing themselves to with every Foursquare check-in.
  • “You’re too public with your digital data, ladies,” may be the new “your skirt was too short and you had it coming.”

 

Those are my takeaways from the past week’s furor over “Girls Around Me,” a geolocation app created by Russian-based i-Free Innovations, that used public data from Foursquare and Facebook to create a map showing ladies in one’s immediate area. The app has been in the Apple iTunes store for months, but got widespread attention after a write-up in Cult of Mac on Friday that described it as “a tool for rapists and stalkers.” Cult’s John Brownlee fired up the app to display it for friends at a BBQ, pulling up a map of their Boston neighborhood dotted with the photos of “girls with publicly visible Facebook profiles who have checked into these locations recently using Foursquare.” The app’s creators tell me the app was downloaded over 70,000 times.

After seeing it, one of Brownlee’s friends “went pale,” apparently terrified, when told that many people don’t understand their privacy settings and so probably have no idea they’re making themselves so easily findable (and thus stalk-able and rape-able). After the alarming write-up, Foursquare revoked the app’s access to its API. Shortly thereafter, i-Free Innovations pulled the now-useless app from the iTunes store.

i-Free did itself no favors in its design of ‘Girls Around Me,’ consisting of Bond-style silhouettes of naked ladies dancing and posing provocatively, but I think the reaction to the app was overblown. For one, how do we know that the women who could be found on this map did not want to be visible in this way? A recent Pew study found that women are the savvier sex when it comes to privacy settings, visiting them and ramping them up at much higher rates than men. Those Bostonians who popped up on Brownlee’s map may want to be publicly broadcasting where they are. There are, after all, dating apps, such as Blendr, that do offer exactly that to both men and women. Sometimes we can be found because we want to be found.

 

 

 

Many of us have become comfortable putting ourselves out there publicly in the hopes of making connections with friends and with strangers, whether through Facebook, Twitter, or OKCupid. It’s only natural that this digital openness will transfer over to the ‘real world,’ and that we will start proactively projecting our digital selves to facilitate in-person interactions. (For example, KLM is now allowing passengers to link their digital identities to their seats on the plane so that people can choose seatmates accordingly.)

We increasingly live in a ‘creepy’ world, in which we can find and manipulate information in unforeseeable ways. These new information flows sometimes feel ‘creepy’ because they’re new, unfamiliar, and to some people, unexpected. In this case, I think the backlash is rife with overly-aggressive privacy protectionism. The women “exposed” by ‘Girls Around Me’ have chosen to be on Foursquare, and the company tells me that the app was only able to pull up a woman’s Facebook profile if she chose to link it to her Foursquare account. In rejecting and banishing the app, we’re  choosing to ignore the publicity choices these women have made (assuming, as Brownlee, does, that they did not intend to be that public), in the name of keeping them safe. And we make the ugly assumption that men who might want to check out women in the area have nefarious intentions. If you extend this kind of thinking ‘offline,’ we would be calling on all women to wear burkas so potential rapists and stalkers don’t spot them on the streets and follow them home.

I’m sorry, my friends, but I think apps like ‘Girls Around Me’ are the future. Some of us Foursquare users and public Twitterers are choosing to give up our privacy — and how much to give up, depending on the settings we choose. We don’t fear making connections with strangers; we crave it. Companies like Apple are patenting technologies that allow our phones to broadcast our identities to those around us and alert us when we have things in common. This is inevitable, and we can’t and shouldn’t assume that all strangers are rapists and stalkers waiting to pounce. (And for those that are, we may not be far from a future in which the “digital identities” projected include the fact that this particular guy is on a sex offenders’ registry or that this particular lady has been described by past beaus as “stalkery.”)

“Since the app’s launch we’ve seen numerous positive comments from users who claimed that the app helped them to discover ‘hot spots’ – venues that are popular among girls or boys,” wrote the app’s creators in a statement emailed this weekend. “Since the apps launch til last Friday nobody ever raised a privacy concern because, again, it is clearly stated that Girls Around Me cannot show the user more data than social network already does.”

As Roger Kay notes, there are some people who “haven’t woken up to how vulnerable we are with all our information out there waving in the wind.” And Brownlee ended his piece by noting that though their app is “creepy,” the i-Free folks weren’t doing anything wrong and might even provide a benefit:

This is an app you should download to teach the people you care about that privacy issues are real, that social networks like Facebook and Foursquare expose you and the ones you love, and that if you do not know exactly how much you are sharing, you are as easily preyed upon as if you were naked. I can think of no better way to get a person to realize that they should understand their Facebook privacy settings then pulling out this app.

Yes, people, think about your privacy settings. They’re important. But critics, also remember that some of us have thought about our privacy settings, chosen accordingly, and don’t mind showing up on geo-mapping apps. We’re not all damsels-in-distress going pale at the thought of being seen in public places and digital spaces.

 

Check Out:  Nine Creepy Apps for Android, iOS, and the Web

 

Direct Link:  http://www.forbes.com/sites/kashmirhill/2012/04/02/the-reaction-to-girls-around-me-was-far-more-disturbing-than-the-creepy-app-itself/

 

Which Web Browser Is the Most Secure?

 

Zone Alarm News

February 28, 2012

 

Which Web Browser Is the Most Secure?

When a massive spam attack posted violent and pornographic images across the news feeds of many Facebook users last year, many wondered how hackers had launched the attack. Turns out, it was by exploiting a vulnerability in users’ web browsers.

The event shed light on an often-overlooked issue of online security, your web browser. There are many browsers available, such as Mozilla Firefox, Google Chrome, and Microsoft’s Internet Explorer. But the real question is: which browser offers the most protection from malware, adware, viruses, and hackers?

Many browsers are fighting for market share, and therefore paying more attention to their security, but popularity and security are not always equal.

A recent Accuvant study revealed that Chrome (the second most popular browser) ranks as the most secure web browser when compared to Internet Explorer (the most popular) and Firefox. Interestingly, this month the German government named Chrome the most secure browser, perhaps lending weight to the study. However, critics have pointed out that the study was commissioned by Google (creator of Chrome), and the findings may therefore be skewed.

Still, according to the study, Chrome ranks the highest in creating and putting into use new safety measures to boost its security, with Internet Explorer only slightly behind Chrome. Firefox was deemed the least secure in the study.

Despite these recent findings, the browser wars remain a hot-button issue, with various entities dubbing some browsers more secure than others. During the 2011 hacker conference, Pwn2Own, hackers attacked four popular browsers: Internet Explorer, Apple Safari, Mozilla Firefox, and Google Chrome. The hackers were able to quickly compromise Internet Explorer and Safari. In fact, these hackers were able to hack the browsers so thoroughly that they managed to write files on the hard drive of the computer they were attacking. Interestingly (and contrary to the Accuvant study findings), Chrome and Firefox both resisted hacking attacks during the exercise.

Regardless of the browser, manufacturers are always working to ensure users can enjoy surfing the web safely and securely—and that’s the good news. The bad news, as the Pwn2Own conference revealed, is that cybercriminals worldwide are also working hard to figure out new ways to hack your browser.

This means that it’s important for users to educate themselves about this threat and take the steps necessary to lessen their chances of falling victim to a browser security breach. What should you do? Keep the following tips in mind.

  • If you plan to download a new or different browser, make sure you are downloading a legitimate version. Go directly to the manufacturer’s site, and ignore ads or popups (which may be tricks to get you to install a corrupt version).
  • Set your online preferences to allow for software updates. Some browsers, such as Internet Explorer and Safari, will automatically update with your operating system. But others, including Firefox, automatically update themselves to deploy security patches and provide enhanced security features.
  • Set your browser’s security settings to the highest possible to prevent others from exploiting your browser.
  • Disable popups in your browsers or install security software that prevents popup windows. Deploying infected popups is a popular way that hackers trick users into downloading malware.

No matter which browser you use, always follow safe practices and be alert to any unusual or suspicious functioning when you log onto the web.

 

Direct Link:  http://blog.zonealarm.com/2012/02/which-web-browser-is-the-most-secure.html

 

 

Facebook denies accessing users’ text messages

CNET
by Steven Musil

 

Social network says a Sunday Times report that it is using smartphone apps to access text message data is “completely wrong.”

Facebook is being accused of snooping on its users’ text messages, but the social network says the accusations are inaccurate and misleading.

The company is among a wide-ranging group of Web entities, including Flickr and YouTube, that are using smartphone apps to access text message data and other personal information, according to a Sunday Times report (behind a paywall). The newspaper said Facebook “admitted” to reading users’ text messages during a test of its own messaging service. The report also says information such as user location, contacts list, and browser history are often accessed and sometimes transmitted to third-party companies, including advertisers.

Facebook representatives did not immediately respond to a CNET request for comment, but the company told the Business Insider that the Sunday Times report was “completely wrong.”

 

There is no reading of user text messages. On the Android App store, the Facebook app permissions include SMS read/write.

Lots of communications apps use these permissions. Think of all those apps that act as replacements to the build-in sms software.

The company said the permission exists because it has performed some testing of products that require short message service to communicate with the Facebook app. But Facebook says it hasn’t made any such features available to the public.

“So the Sunday Times is completely wrong when it says Facebook is reading people’s SMS. Wrong on the terminology, and wrong on the suggestion that it has been implemented,” the company said.

 

Smartphone privacy concerns have increased in the past couple of weeks after it was revealed that when Path–a popular iOS and Android application–was found to be collecting user contact information without permission. Twitter also acknowledged that it retained data on its servers for 18 months after users selected the “Find Friends” feature on its smartphone app.

 

Updated at 1:20 p.m. PT with Facebook statement: “Facebook is currently running a limited test of mobile features which integrate with SMS functionality. SMS read/write is not currently implemented for most users of the mobile app. As part of this test, we declared the presence of that functionality within our app store permissions starting with the 1.7 version of our application. If Facebook ultimately launches any feature that makes use of these permissions, we will ensure that this is accompanied by appropriate guidance/educational materials.”

 

 

Censoring of Tweets Sets Off #Outrage

The New York Times
By SOMINI SENGUPTA
January 27, 2012

SAN FRANCISCO —

It started five years ago after a young engineer in San Francisco sketched out a quirky little Web tool for telling your friends what you were up to. It became a bullhorn for millions of people worldwide, especially vital in nations that tend to muzzle their own people.

Peter Macdiarmid/Getty Images

 

Checking Twitter on Friday in Cairo. Twitter helped protesters organize in Egypt, but a new policy could alter that dynamic.

But this week, in a sort of coming-of-age moment, Twitter announced that upon request, it would block certain messages in countries where they were deemed illegal. The move immediately prompted outcry, argument and even calls for a boycott from some users.

Twitter in turn sought to explain that this was the best way to comply with the laws of different countries. And the whole episode, swiftly amplified worldwide through Twitter itself, offered a telling glimpse into what happens when a scrappy Internet start-up tries to become a multinational business.

“Thank you for the #censorship, #twitter, with love from the governments of #Syria, #Bahrain, #Iran, #Turkey, #China, #Saudi and friends,” wrote Björn Nilsson, a user in Sweden.

Bianca Jagger asked, almost existentially, “How are we going to boycott #TWITTER?”

Zeynep Tufekci, an assistant professor at the University of North Carolina at Chapel Hill, took the other side. “I’m defending Twitter’s policy because it is the one I hope others adopt: transparent, minimally compliant w/ law, user-empowering,” she wrote.

Twitter, like other Internet companies, has always had to remove content that is illegal in one country or another, whether it is a copyright violation, child pornography or something else. What is different about Twitter’s announcement is that it plans to redact messages only in those countries where they are illegal, and only if the authorities there make a valid request.

So if someone posts a message that insults the monarchy of Thailand, which is punishable by a jail term, it will be blocked and unavailable to Twitter users in that country, but still visible elsewhere. What is more, Twitter users in Thailand will be put on notice that something was removed: A gray box will show up in its place, with a clear note: “Tweet withheld,” it will read. “This tweet from @username has been withheld in: Thailand.”

Think of it as the digital equivalent of a newspaper responding to old-fashioned government censorship with a blank front page.

“We have always had the obligation to remove illegal content. This is a way to keep it up in places where we can,” said Alex Macgillivray, general counsel at Twitter. “We have been working on this awhile. We needed to figure out how to deal with this as a company.”

The majority of Twitter’s 100 million users are overseas and it has several offices abroad working to expand its business and drum up local advertising. Twitter’s president, Jack Dorsey, said this week that it would open an office in Germany, which prohibits Nazi material online and offline.

The announcement signals the choice that a service like Twitter has to make about its own existence: Should it be more of a free-speech tool that can be used in defiance of governments, as happened during the Arab Spring protests, or a commercial venture that necessarily must obey the laws of the lands where it seeks to attract customers and eventually make money?

Tim Wu, a professor at Columbia Law School and author of “The Master Switch,” said the changes could undermine the usefulness of Twitter in authoritarian countries.

“I don’t fault them for wanting to run a normal business,” he said. “It does suggest someone or something else needs to take Twitter’s place as a political tool.”

Professor Wu urged the company to use discretion: “Twitter needs to be careful not to be in a position where it’s no longer helpful to a rebellion against oppressive governments. It needs to remain its old self in some circumstances.”

Twitter’s policy of allowing its users to adopt pseudonyms made it particularly useful to many protest organizers in the Arab world, and its chief executive went so far as to call it “the free-speech wing of the free-speech party.”

But Professor Wu wondered aloud if the new policy would have allowed Egyptians to organize protests using the service.

Twitter insists its new system is a way to promote greater transparency, not less. The company says it will not filter content before it is posted. It will not remove material that may be offensive, only that which it thinks is illegal. And it said it would also try to notify users whose posts had been withheld by sending them an e-mail with an explanation.

The company identifies the locations of its users by looking at the Internet Protocol addresses of their computers or phones. But it also allows users to manually set their location or choose “worldwide.” Essentially that is a way to circumvent the blocking system entirely. A user in Syria can simply change her location setting to “worldwide” and see everything.

Jillian C. York, director for international freedom of expression at the Electronic Frontier Foundation, a civil liberties group, successfully tried this herself after Twitter announced its new approach. “Unfortunately it is a necessary evil when offering a service in certain countries,” Ms. York said of the new system.

Critics on Twitter surmised that the company had been pressed to adopt country-specific censorship after a major investment by a Saudi prince, a theory that Mr. Macgillivray quickly dismissed.

Facebook also handles requests to remove content that is illegal in certain countries, though it does not explain what it removes and for what reason. In its search results, Google signals what it is required to redact under a certain country’s law — and in the case of YouTube, a Google product, it can block content country by country.

Twitter has followed in Google’s footsteps in another respect. It has opted to post some of the removal requests it receives on Chilling Effects, a site jointly run by the Electronic Frontier Foundation and several American universities. Mr. Macgillivray was previously on the legal team at Google and, as a student at Harvard, he worked on Chilling Effects.

“We have always tried to let people talk and tweet. That has not been good for despots,” Mr. Macgillivray said in response to the criticism. “There is no change in policy. What this does is it strengthens, when we are legally required to, our ability to withhold something and to let people know it has been withheld.”

Still, not long after the announcement, there were calls for a silent protest on Saturday — and naturally, a hashtag to go with it.

“I’m joining the #TwitterBlackout & won’t tweet tomorrow,” wrote a user identified as Omar Johani. “Time to go back to getting news 12 hours after it happened.”

 

Direct Link:  http://www.nytimes.com/2012/01/28/technology/when-twitter-blocks-tweets-its-outrage.html?nl=todaysheadlines&emc=tha26

 

Federal Contractor Monitored Social Network Sites

By
Published: January 13, 2012

 

 

 

WASHINGTON —

The Department of Homeland Security paid a contractor in 2009 to monitor social networking sites — like Facebook, blogs and reader comments on a news article — to see how the residents of Standish, Mich., were reacting to a proposal to move detainees from Guantánamo Bay, Cuba, to a local prison there, according to newly disclosed documents.

While it has long been known that the department monitors the Internet for information about emerging threats to public safety like a natural disaster or a terrorist attack, the documents show that its Social Networking/Media Capability program, at least in an early stage, was also focused on “public reaction to major governmental proposals with homeland security implications.”

A department official said Friday that the social network monitoring program did not produce reports about public opinion, but instead focused exclusively on monitoring crises like hazardous material spills, shooting incidents and natural disasters.

Still, the newly disclosed documents show that in August 2009, during an early test of the program, a contractor compiled reactions among residents of Standish, Mich., to the short-lived detainee proposal. It found that most people “were opposed to the plan,” arguing it could make the community a terrorist target, but that others characterized these concerns as “hysteria.”

To produce the report about Standish, the contractor used “Facebook, Twitter, three different blogs and reader comments” on an article on The Washington Post’s Web site, highlighting “public sentiments in extensive detail,” according to a summary of the report that was included as an example in a “Social Networking/Media Capability Analyst Handbook” dated February 2010.

Asked about the Standish report on Friday, department officials provided a series of explanations. After initially accepting it as something produced by the program, an official later said the report was instead created by a contractor as a sample during a period when the social networking component of its media monitoring program was still being designed. It started on a small scale in January 2010 and expanded the following June.

Chris Ortman, a department spokesman, acknowledged that the report was included in the February 2010 handbook, but he said it was there “only as an example of a weekly report format.” No such report on public sentiment was ever distributed as a working document of the department’s National Operations Center, which runs the monitoring program, he said.

He added that the handbook had since been revised and no longer included that example because it “does not meet our operational requirements or privacy standards,” which “expressly prohibit reporting on individuals’ First Amendment activities.”

The report about Standish residents was part of nearly 300 pages of documents about the monitoring program obtained under the Freedom of Information Act by the Electronic Privacy Information Center, a nonprofit advocacy group.

Ginger McCall, director of the group’s Open Government Program, said it was appropriate for the department to use the Internet to search for emerging threats to public safety. But, she said, monitoring what people are saying about government policies went too far and could chill free speech.

“The Department of Homeland Security’s monitoring of political dissent has no legal basis and is contrary to core First Amendment principles,” she said.

She also pointed out that while other sample reports in the February 2010 handbook discuss content that is inappropriate and should be removed, the Standish one does not. “This Standish report is being held up, as is, as an example that should be emulated,” she said.

While the names of blog and mainstream news sources are logged in the sample reports, the documents show that such reports — whatever their topic — are not to include personally identifying information; for example, a quotation taken from Twitter would say it came from “a Twitter user” rather than citing a specific Twitter account.

In an interview on Friday, John Cohen, the department’s principal deputy counterterrorism coordinator, said the broader media-monitoring program dated to 2006 and had evolved over time. He said that it had extensive privacy protections and that policy makers had decided that they did not want reports like Standish because they were not helpful.

“Today this capability is focused solely on rapidly identifying and obtaining information regarding events that are ongoing, and providing information that can help inform an effective response to that event,” he said, describing the reports as covering only topics like “major traffic accidents, haz-mat spills, reports regarding suspicious packages, shootings, etc.”

This week, Reuters reported on a department privacy review related to the monitoring efforts that described the news media channels the program covers. The Reuters report received significant attention after The Drudge Report, a popular news aggregation Web site, highlighted that Drudge was on the list.

Many of the newly disclosed documents relate to the department’s efforts to outsource some of its “media monitoring and social media/networking support services.” In early 2010, for example, companies seeking the contract had to spend 24 hours monitoring news media coverage.

They were asked to produce short reports about threats and hazards, as well as “any media reports that reflect adversely on the U.S. Government and the Department of Homeland Security (D.H.S.) ability to prevent, protect and respond, to recovery efforts or activities related to any crisis or events which impact National Planning Scenarios.”

The documents indicate that in May 2010 a procurement official awarded an $11.3 million contract to General Dynamics Advanced Information Systems.

One passage in the documents raised another question. It says the program should also compile reports about the department and other federal agencies, including “both positive and negative reports on FEMA, C.I.A., C.B.P., ICE, etc., as well as organizations outside of D.H.S.”

While most of the acronyms stand for agencies dealing with emergencies, border security and the like, “C.I.A.” usually refers to the Central Intelligence Agency. However, Mr. Ortman said it was a typo — intended as “C.I.S.,” the department’s Citizenship and Immigration Services bureau.

 

Direct Link:  http://www.nytimes.com/2012/01/14/us/federal-security-program-monitored-public-opinion.html?_r=1&nl=todaysheadlines&emc=tha26

 

From fake Apple stores to WireDoo: 2011′s craziest tech stories

Los Angeles Times
December 31, 2011

Crazy_tech_stories_2011

Images clockwise from top left: A fake Apple store in Kunming, China, photographed by BirdAbroad; Charlie Sheen arriving at his Comedy Central Roast, photographed by Allen J. Schaben / Los Angeles Times; emoticon face made by Deborah Netburn; Alec Baldwin as Pan Am head Juan Trippe in Martin Scorsese’s movie “The Aviator,” photographed by Andrew Cooper/ Miramax Films.

 

2011 was a big year for tech news–Steve Jobs died, Facebook and Twitter revolutionized the revolutionary experience in the Middle East, a new iPad came out, a new iPhone came out, and the world got to meet SIRI, Google+ and the Kindle Fire.

It was also a hilarious year, as tech reporters and savvy Facebook sharers and Tweeters found a steady stream of crazy tech stories to keep them entertained.

From the spate of fake Apple Stores in China to the news that Amazon founder Jeff Bezos was building a 10,000-year clock, here is a list of 11 great stories from 2011 that made us grateful to be alive and paying attention in this completely insane age of the Internet.

1. Fake Apple stores popping up in China: We’d heard of people knocking off purses and shoes and wallets, but a whole store? That was new. So when a young American living in China blogged about a spate of fake Apple stores that had opened in her adopted city of Kunming, the Internet went crazy. The best part were the photos she had on her blog that showed the familiar pale wood surfaces, the glowing white Apple logo, and even workers dressed in those distinctive blue shirts.

2. The IE IQ hoax: For one brief, glorious moment, tech reporters thought it just might be possible that people who used the Internet Explorer browser were actually dumber than those who used other browsers. A company called Aptiquant put out a study that seemed to prove it. The story spread like wildfire, until it was revealed to be a hoax. When the truth came out, the guy behind it all had this to say: “It was just a joke, and I didn’t really mean to insult anybody.” 

3. Jeff Bezos spends millions on a 10,000-year clock: This year we learned that Amazon founder Jeff Bezos has invested $42 million in a clock that will keep ticking for 10,000 years. Brian Eno (of all people) dubbed the project, which broke ground earlier this year, “the long now.” “If you think something is important, and you think nobody else is going to do it, then it’s a useful thing to do,” Bezos told Wired.

4. MC Hammer’s search engine: Remember this little gem? In October former rapper and ordained minister MC Hammer (AKA Stanley Kirk Burrel), announced WireDoo, a new search engine that he hoped would put Google and Bing out of business. Four months later the search engine is still in pre-beta, but you are invited to sign up for a test drive when it’s ready.

5. Wife of Rovio executive dons Angry Birds dress: This was just a blip, but it was such a fun blip. While attending a formal event at the Finnish Palace, Teija Vesterbacka donned the most tasteful version of an Angry Birds dress we could possibly imagine. It was also an unexpected show of support for her husband, Peter Vesterbacka, chief marketing officer of Rovio, the company that makes the wildly popular Angry Birds game–he’s usually dressed in an Angry Birds sweatshirt of some sort, but was wearing tails that night.

6. The rise of Rebecca Black: It feels like Rebecca Black’s song “Friday” is a part of our shared past–like the kids from “Saved by the Bell” or the Spice Girls. But YouTube sensation Black is a totally 2011 phenomenon. The video for “Friday” went up on the video-sharing site in mid-February of this year. It spent about four weeks in obscurity before achieving world domination.

7. Nathan Myhrvold puts out a cookbook: What does a cookbook conceived by Nathan Myhrvold, former chief technology officer of Microsoft and holder of hundreds of patents, look like? Well, it’s 2,400 pages collected into six volumes, and costs $625. It’s called “Modernist Cuisine,” it came out in March of this year and it focuses on the science and technology (of course) of cooking. Unexpected, and reportedly brilliant.

8. Patent wars come to emoticons: If you’ve been following tech this year you are aware that there has been a huge patent war raging between Apple Inc. and its smartphone rival Samsung Electronics. A particularly low note in the battle? This year, Samsung went after Apple for the way it uses emoticons. It all sounds silly to us, but believe it or not, Samsung does indeed own a patent on smartphone use of emoticons. : \

9. HP’s TouchPad mania: First no one wanted it. HP dropped the price. Still, no one wanted it. And so HP dropped the price again. And again. Then the company announced it would no longer make the product and dropped the price for a final time to $99. Then it sold out.

10. Charlie Sheen looks for an intern on Twitter: Charlie Sheen’s crazy call for a marketing intern went out on Twitter in early March, just days after he was fired from “Three and a Half Men.” The listing read: “Do you have #TigerBlood? Are you all about #Winning? Can you #PlanBetter than anyone else? If so, we want you on #TeamSheen as our social media #TigerBloodIntern!” The whole thing was basically a marketing ploy for Internships.com, which paid Sheen to post the ad, but it worked. After about an hour, his Twitter message had resulted in more than 127,000 clicks through to Internships.com via the Bit.ly shortened link in the tweet.

11. Alec Baldwin’s American Airlines Twitter rant: The ultimate technology story of 2011 weaves together a tale of bad celebrity behavior, some furious and impulsive Twitter rants, the mobile Scrabble-like game Words With Friends and corporate explanations via Facebook pages. You can read all about it here.

 

Direct Link:  http://latimesblogs.latimes.com/technology/2011/12/111-crazy-tech-stories-from-2011-fake-apple-stores-the-iq-of-ie-users-and-more-.html

 

Victims in hacking of security analyst Stratfor targeted after speaking to news media, online

By Associated Press

Monday, December 26, 2:40 PM

 

NEW YORK — Victims of a data breach at the security analysis firm Stratfor apparently are being targeted a second time after speaking out about the hacking.

Stratfor said on its Facebook page that some individuals who offered public support for the company after it revealed it was hacked “may be being targeted for doing so.”

The loose-knit hacking movement “Anonymous” claimed Sunday through Twitter that it had stolen thousands of credit card numbers and other personal information belonging to the company’s clients. Anonymous members posted links to some of the information Sunday and more on Monday.

Stratfor, based in Austin, Texas, said its affected clients and its supporters “are at risk of having sensitive information repeatedly published on other websites.” The company has resorted to communicating through Facebook while its website remains down and its email suspended.

A message posted online Monday by a group asserting it spoke for Anonymous mocked victims who spoke to The Associated Press about the experience of learning that their credit card information was stolen and used to make unauthorized charitable donations. The message also ridiculed someone who criticized the hacking on Facebook, saying “we went ahead and ran up your card a bit.”

A Stratfor spokesman would not say whether the information was encrypted in its database or what the company has learned since the incident began.

Anonymous has said the data was not encrypted. If true, that would be a major embarrassment for a security-related company.

The spokesman, Kyle Rhodes, said the company could not discuss any details because several law enforcement agencies are investigating the incident.

The data was posted in a series of releases in links embedded in online messages that, in turn, were linked to from Twitter.

Some of the files appear to be alphabetical listings of Stratfor clients with related credit card information. The amount posted suggests that information about more than 100,000 individuals and thousands of companies was exposed. The posts also contain files of emails within Stratfor’s information technology department, and what appears to be a list of passwords for Stratfor IT staff.

The posted data identifies thousands of major financial, defense and technology firms, media companies, government agencies and multiple units of the United Nations as Stratfor clients. The hackers said this was evidence that they had breached Straftor’s “private clients,” a claim the company denied.

“Contrary to this assertion, the disclosure was merely a list of some of the members that have purchased our publications and does not comprise a list of individuals or entities that have a relationship with Stratfor beyond their purchase of our subscription-based publications,” Stratfor said in an email and on Facebook.

The hackers initially claimed their goal was to use stolen the credit information to donate to charities at Christmas, and some victims confirmed unauthorized transactions were made from their credit accounts in recent days. The messages also said the hackers are targeting companies “that play fast and loose with their customers’ private and sensitive information.”

Stratfor provides political, economic and military analysis to help clients reduce cyber security risks, according to a description on its YouTube page. It charges subscribers for its reports and analysis, delivered through the web, emails and videos.

The company’s home page carried a banner Monday that said its “website is currently undergoing maintenance.”

Anonymous warned it plans more attacks this week. The movement has previously claimed responsibility for attacks on credit card processors Visa Inc. and MasterCard Inc., eBay Inc.’s PayPal, as well as banks, groups in the music industry and the Church of Scientology.

The Privacy Rights Clearinghouse, a watchdog that tracks data breaches, made the Stratfor hacking its 121st such incident of the year targeting credit cards.

Anonymous, reported to be a loose-knit group of hackers, became famous for attacking the companies and institutions that oppose anti-secrecy website WikiLeaks and its founder Julian Assange. The message Monday said the attacks could be averted. “Have you given our comrade Bradley Manning his holiday feast yet, at a fancy restaurant of his choosing?” Manning is the Army private facing court martial for allegedly sending hundreds of thousands of diplomatic documents and Iraq and Afghanistan war zone field reports to WikiLeaks. A seven-day hearing into the biggest national security leak in U.S. history ended Thursday.

 

Direct Link:  http://www.washingtonpost.com/business/victims-in-hacking-of-think-tank-stratfor-are-targeted-after-speaking-to-news-media-and-online/2011/12/26/gIQAXfT7IP_story.html

 

© 2012 G.E. Investigations Blog Suffusion theme by Sayontan Sinha