Hackers Breach Russian Bank and Steal $1 Million Due to Outdated Router

Found on Bleeping Computer on Thursday, 19 July 2018
Browse Various

"The router had tunnels that allowed the attackers to gain direct access to the bank’s local network," Group-IB experts said. "This technique is a characteristic of MoneyTaker. This scheme has already been used by this group at least three times while attacking banks with regional branch networks."

On July 3, MoneyTaker used this system to transfer funds from PIR Bank's account at the Bank of Russia to 17 accounts they created in advance. Moments after the stolen funds landed in these accounts, money mules withdrew it from ATMs across Russia.

It has to be a quite organized group to pull that off. Looks like people can make a living out of that.

A $225 GPS spoofer can send sat-nav-guided vehicles into oncoming traffic

Found on Ars Technica on Wednesday, 18 July 2018
Browse Technology

A new proof-of-concept attack demonstrates how hackers could inconspicuously steer a targeted automobile to the wrong destination or, worse, endanger passengers by sending them down the wrong way of a one-way road.

The most effective is to give civilian GPS signals the same type of encryption military GPS has used for decades. Unfortunately, that would do nothing to protect people using the massive number of GPS devices already in use. Another countermeasure is to develop trusted ground infrastructure to help GPS devices verify their location. This, too, is at best a long-term solution because of the cost and constraints in government policies.

As usual, nobody will care about security as long as it can be avoided. It will take a few dramatic accidents until the pressure is growing big enough.

What's in a name? For Cambridge Analytica, about a quid apparently

Found on The Register on Tuesday, 17 July 2018
Browse Various

The firms – Cambridge Analytica, SCL Elections, SCL Group, SCL Commercial, SCL Social and SCL Analytics – were all too heavily associated with the furore surrounding an app that sucked up information on 87 million Facebook users to continue operating. Similarly, Cambridge Analytica US and SCL US both filed for bankruptcy.

The administrators said that the initial plan was to try and sell off the firm, sending an "email taster" to about 18,000 prospective buyers, along with marketing pushes on social media. Sales details were sent out to 13 parties and four offers were received.

Nobody will buy anything from this massive failure; you'd have to put money on top to make someone take it.

It walks, it talks, it falls over a bit. Windows 10 is three years old

Found on The Register on Monday, 16 July 2018
Browse Software

Flushed with success having "fixed" the disastrous Windows Vista with the jumped-up service pack of Windows 7 in 2009, Windows boss Steven Sinofsky had a relatively free hand with the next version of the platform.

Coming six years after the release of the beloved Windows 7, Windows 10 had a lot to live up to.

From now on changes would be incremental, regular and a lot more frequent. Whether users wanted them or not.

It's Microsoft biggest failure; apart from Vista. They don't listen to users, but spy on them and shove everything they want down the throats of the users without giving them much of a choice.

Retiring worn-out wind turbines could cost billions that nobody has

Found on Energy Central News on Sunday, 15 July 2018
Browse Technology

The life span of a wind turbine, power companies say, is between 20 and 25 years. But in Europe, with a much longer history of wind power generation, the life of a turbine appears to be somewhat less.

In Texas, there are approximately 12,000 turbines operational in the state. Decommissioning these turbines could cost as much as $2.3 billion.

"The blades are composite, those are not recyclable, those can't be sold," Linowes said. "The landfills are going to be filled with blades in a matter of no time."

It's well known that wind turbines are special waste; but it's still called green energy, because the problem only arises in 1-2 decades.

Researchers find that filters don’t prevent porn

Found on Techcrunch on Saturday, 14 July 2018
Browse Censorship

In a paper entitled Internet Filtering and Adolescent Exposure to Online Sexual Material, Oxford Internet Institute researchers Victoria Nash and Andrew Przybylski found that Internet filters rarely work to keep adolescents away from online porn.

This research follows the controversial news that the UK government was exploring a country-wide porn filter, a product that will most likely fail. The UK would join countries around the world who filter the public Internet for religious or political reasons.

Censorship never works.

Compromised JavaScript Package Caught Stealing npm Credentials

Found on Bleeping Computer on Friday, 13 July 2018
Browse Software

A hacker has gained access to a developer's npm account and injected malicious code into a popular JavaScript library, code that was designed to steal the npm credentials of users who utilize the poisoned package inside their projects.

"We determined that access tokens for approximately 4,500 accounts could have been obtained before we acted to close this vulnerability. However, we have not found evidence that any tokens were actually obtained or used to access any npmjs.com account during this window," Silverio said.

This is the third incident in the past year when a hacker has inserted malicious code in an npm package.

The sooner NPM vanishes, the better.

Mastercard goes TITSUP in US, UK: There are some things money can't buy – like uptime

Found on The Register on Thursday, 12 July 2018
Browse Various

"Couldn’t pay for petrol. It’s a disgrace you can’t trust cards to pay when you need them to work. Doesn’t say much for the resilience of digital payments."

Mastercard customers have been protesting loudly on Twitter that their pieces of plastic are certainly not fantastic.

Last month, Visa suffered a major outage in Europe at a particularly unfortunate time. Millions of Friday night payments were unable to be completed, and settling the bar tab after the traditional Friday night booze up proved problematic.

Now if someone would only invent an alternative that's resistant against downtimes and outages. Maybe, just maybe, it would be possible to use paper and metal to create different units representing a monetary value which can be exchanged between people.

iPhone crashing bug likely caused by code added to appease Chinese gov’t

Found on Ars Technica on Wednesday, 11 July 2018
Browse Technology

Wardle, who is now a macOS and iOS security expert at Digital Security, said he was perplexed when a friend first reported her fully patched, non-jailbroken device crashed every time she typed Taiwan or received a message with a Taiwanese flag.

He eventually found that the crashes were being caused by code that classified messages based on emojis they contained. He also noticed that the error seemed to be triggered when iOS had country codes that included China or language settings including Chinese (his friend’s phone specified the region as the US and the language as English, followed by Chinese.)

Remember, big corporations will happily bend over for a dictatorship as long as they can make money by selling their products there, while their PR divisions try to uphold the fake image of morals and ethics.

PayPal told customer her death breached its rules

Found on BBC News on Tuesday, 10 July 2018
Browse Legal-Issues

PayPal wrote to a woman who had died of cancer saying her death had breached its rules and that it might take legal action as a consequence.

It said that Mrs Durdle owed the company about £3,200 and went on to say: "You are in breach of condition 15.4(c) of your agreement with PayPal Credit as we have received notice that you are deceased... this breach is not capable of remedy."

Well how does she dare to die before paying every cent back to PayPal first? Honestly, it's better to stay away from that bank company and keep a safe distance.