Skip to main content

Privacy

Apple rejecting applications that access UDIDs

posted onMarch 26, 2012
by l33tdawg

Reports coming out from TechCrunch and AppleInsider claim that Apple has started to reject applications which attempt the access a devices unique device identifier or UDID.

As part of a more stringent ruleset regarding customer privacy, application developers who previously made use of the UDID (aka the serial number the mobile network uses to identify mobile devices on its network), as a means of tracking customer. 

Firefox to enable encrypted Google searches by default

posted onMarch 22, 2012
by l33tdawg

Mozilla is currently testing a new feature that would see encrypted Google searches enabled by default for all Firefox users. 

"We are currently testing the change to use SSL for built-in Google searches in our Firefox nightly channel," said Johnathan Nightingale, senior director of Firefox engineering, in an email. "If no issues are uncovered, it will move through our Aurora and Beta release channels before eventually shipping to all our Firefox users. This will include migrating the changes to our non-English version of Firefox, as well."

How Sabu was outed by former Anons long before his arrest

posted onMarch 22, 2012
by l33tdawg

When the FBI arrested LulzSec leader Hector "Sabu" Monsegur, they did so in a hurry—hours before the arrest, Sabu was doxed, his identity posted to the Internet. With his name public, federal agents feared that he would start destroying evidence to protect himself, so they ended their covert surveillance and moved in, according to Fox News.

Efforts to name and shame the LulzSec crew during its 50-day rampage were common. Many of these doxings were inaccurate, a result of faulty inferences or deliberate attempts to mislead on the part of the LulzSec hackers.

Employers who ask job seekers for Facebook passwords

posted onMarch 21, 2012
by l33tdawg

In their efforts to vet applicants, some companies and government agencies are apparently going beyond merely glancing at a person's social networking profiles and instead asking for credentials to be able to login and poke around for themselves.

Questions have been raised about the legality of the practice, which is also the focus of proposed legislation in Illinois and Maryland that would forbid public agencies from asking for access to social networks. 

Pwned List now offering post-breach notification service to businesses

posted onMarch 21, 2012
by l33tdawg

Nine months ago, Pwned List was created to answer a simple question for users: Is your account among the millions whose credentials have been spilled onto the web?

Head over to PwnedList.com, type in your email address or username, and the site will check it against a database that has now grown to 12 million compromised credentials collected from crawling public sites where hackers post stolen data. 

Researchers disclose Facebook 'deactivated friend attack'

posted onMarch 20, 2012
by l33tdawg

University College of London student, Shah Mahmood, along with Yvo Desmedt, Chair of Information Communication Technology, has discovered what they're labelling as a “zero day privacy hole” in Facebook.

The vulnerability which they call “deactivated friend attack” was presented at the IEEE International workshop on security and social networking in Switzerland. They say the attack works like this:

Millions of US government and military e-mail addresses offered for sale

posted onMarch 20, 2012
by l33tdawg

It appears that cyber criminals are offering millions of harvested US government and US military e-mail addresses for sale. 

Security researcher Dancho Danchev has profiled a particularly interesting underground service that offers segmented databases of harvested e-mails broken down by country or multiple gTLDs which would allow for better spam campaign targeting and attacks.

Pay the TSA $100 and they'll let you bypass airport security screening

posted onMarch 16, 2012
by l33tdawg

Do you hate full body scans and other wise getting hassled during airport security screening? Who doesn't! Well, for $100, the Transport Security Administration (TSA) will now allow you to walk right through.

The TSA is rolling out expedited screening at airports with what its calling “Precheck” - special lane for background checked travellers who can keep their shoes belts and jackets on, leave laptops and liquids in carry on bags and walk through a metal detector rather than a full body scanner.