Read more of this story at Slashdot.
Feeds
31256 items (26743 unread) in 5 feeds
OpenSource
(5366 unread)
-
SourceForge.net: Front page news
(802 unread)
-
Slashdot: IT (4564 unread)
Security
(9869 unread)
-
Digg / Security (9869 unread)
Linux
(11508 unread)
-
-
Slashdot: Linux (1582 unread)
OpenSource (10 unread)
Slashdot: IT
-
Pasadena Police Encrypt, Deny Access To Police Radio
Posted: February 8th, 2012, 6:15am CET by Soulskill
Tags: encryption
An anonymous reader writes "There is media (but not public?) outcry over the Pasadena, CA police switch from analog radio that can be picked up by scanners to encrypted digital radio that cannot. 'On Friday, Pasadena police Lt. Phlunte Riddle said the department was unsure whether it could accommodate the media with digital scanners. Riddle said the greatest concern remains officer safety. "People who do bank robberies use scanners, and Radio Shack sells these things cheap," Riddle said. "We just had a robbery today on Hill Avenue and Washington Boulevard," Riddle said. "The last thing I want to do is to have the helicopter or the officers set up on the street and the criminals have a scanner and know where our officers are." Just prior to the switch over, city staffers said they would look into granting access to police radio chatter, most likely by loaning media outlets a scanner capable of picking up the secure signal.'" -
Proposed Law Would Give DHS Power Over Privately Owned IT Infrastructure
Posted: February 7th, 2012, 6:17pm CET by timothy
Tags: business
CelticWhisper writes "H.R. 3674, the Promoting and Enhancing Cybersecurity and Information Sharing Effectiveness Act (PRECISE Act), would allow the U.S. Department of Homeland Security to require improved security practices from those businesses managing systems whose disruption could prove detrimental to critical life-sustaining or national-security initiatives." As the article points out, this is just "one of 30 or so such bills currently percolating on the Hill."Read more of this story at Slashdot.
-
No More SSL Revocation Checking For Chrome
Posted: February 7th, 2012, 5:35pm CET by timothy
Tags: chrome
New submitter mwehle writes with this bit from Ars Technica: "Google's Chrome browser will stop relying on a decades-old method for ensuring secure sockets layer certificates are valid after one of the company's top engineers compared it to seat belts that break when they are needed most. The browser will stop querying CRL, or certificate revocation lists, and databases that rely on OCSP, or online certificate status protocol, Google researcher Adam Langley said in a blog post published on Sunday. He said the services, which browsers are supposed to query before trusting a credential for an SSL-protected address, don't make end users safer because Chrome and most other browsers establish the connection even when the services aren't able to ensure a certificate hasn't been tampered with."Read more of this story at Slashdot.
-
Cops Set Up Extortion Sting On Symantec's Source Code Thieves
Posted: February 7th, 2012, 4:11pm CET by timothy
Tags: crime
Sparrowvsrevolution writes "Hackers linked with Anonymous leaked another 1.26 gigabytes of Symantec's data Monday night, what they say is the source code company's PCAnywhere program. More interestingly, also posted a long private email conversation that seems to show a Symantec exec offering the hackers $50,000 to not leak the company's data and to publicly state they had lied about obtaining it. Symantec has responded by revealing that in fact, the $50,000 offer had been a ruse, and the 'Symantec exec' was actually a law enforcement agent trying to trace the hackers. It adds that all the information the hackers have released, including a 2006 version of Norton Internet Security, is outdated and poses no threat to the company or its customers. Symantec says the Anonymous hackers began attempting to extort money from the company in mid-January, and it responded by contacting law enforcement, though it won't comment on the results of the fake payoff sting while the investigation is still ongoing."Read more of this story at Slashdot.
-
Defendant Ordered To Decrypt Laptop Claims She Had Forgotten Password
Posted: February 7th, 2012, 9:08am CET by Unknown Lamer
Tags: encryption
wiedzmin writes "A Colorado woman that was ordered by a federal judge to decrypt her laptop hard-drive for police last month, appears to have forgotten her password. If she does not remember the password by month's end, as ordered, she could be held in contempt and jailed until she complies. It appears that bad memory is now a federal offense." The article clarifies that her lawyer stated she may have forgotten the password; they haven't offered that as a defense in court yet.Read more of this story at Slashdot.
-
Defendant Ordered To Decrypt Laptop Claims She Had Forgotten Password
Posted: February 7th, 2012, 9:08am CET by Unknown Lamer
Tags: encryption
wiedzmin writes "A Colorado woman that was ordered by a federal judge to decrypt her laptop hard-drive for police last month, appears to have forgotten her password. If she does not remember the password by month's end, as ordered, she could be held in contempt and jailed until she complies. It appears that bad memory is now a federal offense." The article clarifies that her lawyer stated she may have forgotten the password; they haven't offered that as a defense in court yet.Read more of this story at Slashdot.
-
Sandboxed Flash Player Coming To Firefox
Posted: February 6th, 2012, 10:55pm CET by Soulskill
Tags: mozilla
Trailrunner7 writes "Adobe, which has spent the last few years trying to dig out of a deep hole of vulnerabilities and buggy code, is making a major change to Flash, adding a sandbox to the version of the player that runs in Firefox. The sandbox is designed to prevent many common exploit techniques against Flash. The move by Adobe comes roughly a year after the company added a sandbox to Flash for Google Chrome. Flash, which is perhaps the most widely deployed piece of software on the Internet, has been a common attack vector for several years now, and the attacks in some cases have been used to get around exploit mitigations added by the browser vendors. The sandbox is designed to prevent many of these attacks by not allowing exploits against Flash to break out into the browser itself."Read more of this story at Slashdot.
-
Moglen: Facebook Is a Man-In-The-Middle Attack
Posted: February 6th, 2012, 7:42pm CET by Soulskill
Tags: facebook
jfruh writes "In an email exchange with privacy blogger Dan Tynan, Columbia law professor Eben Moglen referred to Facebook as a 'man in the middle attack' — that is, a service that intercepts communication between two parties and uses it for its own nefarious purposes. He said, 'The point is that by sharing with our actual friends through a web intermediary who can store and mine everything, we harm people by destroying their privacy for them. It's not the sharing that's bad, it's the technological design of giving it all to someone in the middle. That is at once outstandingly stupid and overwhelmingly dangerous.' Tynan is a critic of Facebook, but he thinks Moglen is overstating the case."Read more of this story at Slashdot.
-
Symantec Identifies Android Trojans That Mutate With Every Download
Posted: February 6th, 2012, 2:04pm CET by samzenpus
Tags: android
angry tapir writes "Symantec researchers have identified a new premium-rate SMS Android Trojan that modifies its code every time it gets downloaded in order to bypass antivirus detection. This technique is known as server-side polymorphism and has already existed in the world of desktop malware for many years, but mobile malware creators have only now begun to adopt it."Read more of this story at Slashdot.
-
Facebook Malware Goes Viral
Posted: February 6th, 2012, 6:12am CET by samzenpus
Tags: facebook
itwbennett writes "Just a few hours after a fake CNN news report appeared on Facebook Friday, more than 60,000 users had gone to the spoofed, malware bearing page according to Sophos Senior Security Advisor Chester Wisniewski. Facebook didn't respond to IDG News Service's request for information on 'how widespread the problem was or whether its own security had been breached, but Wisniewski said that there are a number of ways that status updates could appear without users' knowledge.'"Read more of this story at Slashdot.