Read more of this story at Slashdot.
Feeds
34705 items (30192 unread) in 5 feeds
OpenSource
(5765 unread)
-
SourceForge.net: Front page news
(802 unread)
-
Slashdot: IT (4963 unread)
Security
(11355 unread)
-
Digg / Security (11355 unread)
Linux
(13072 unread)
-
-
Slashdot: Linux (1660 unread)
Slashdot: IT (2 unread)
-
China Expands Cyberspying In US, Report Says
Posted: October 22nd, 2009, 5:38pm CEST by samzenpus
Tags: security
An anonymous reader writes "A new report published by The US-China Economic and Security Review Commission wags a finger at the People's Republic of China for conducting Internet-borne espionage operations against United States high-tech companies. The paper, written by defense giant Northrop Grumman, provides a detailed case study of one such intrusion that moved large volumes of sensitive tech data out of a US firm in 2007. From a Wall Street Journal article, '"The case study is absolutely clearly controlled and directed with a specific purpose to get at defense technology in a related group of companies," said Larry Wortzel, vice chairman of the commission and a former U.S. Army attaché in China. "There's no doubt that that's state-controlled."' Wang Baodong, a spokesman for the Chinese Embassy in Washington, criticized the commission as "a product of Cold War mentality" that was "put in place to pick China to pieces." He added: "Accusations of China conducting, or 'likely conducting' as the commission's report indicates, cyberspace attacks or espionage against the US are unfounded and unwarranted.'" -
Time Warner Cable Modems Expose Users
Posted: October 22nd, 2009, 2:45pm CEST by samzenpus
Tags: security
eldavojohn writes "Wired is reporting on a simple hack putting some 65,000 customers at risk. The hack to gain administrative access to the cable modem/router combo is remarkably simple: '[David] Chen, founder of a software startup called Pip.io, said he was trying to help a friend change the settings on his cable modem and discovered that Time Warner had hidden administrative functions from its customers with Javascript code. By simply disabling Javascript in his browser, he was able to see those functions, which included a tool to dump the router's configuration file. That file, it turned out, included the administrative login and password in cleartext. Chen investigated and found the same login and password could access the admin panels for every router in the SMC8014 series on Time Warner's network — a grave vulnerability, given that the routers also expose their web interfaces to the public-facing internet.' If you use Time Warner's SMC8014 series cable modem/Wi-Fi router combo, watch for firmware to be released soon that they are reportedly in the process of testing."Read more of this story at Slashdot.