SaferPC.info

Security News and Issues

Each day owning a computer and maintaining it online becomes more of a challenge. Security is a major concern to computer users. SaferPC brings you Security News and Issues of interest to security conscious PC users.

     
 Title   Date   Author   Host 

Significant Changes in Air Passenger Screening Lie Ahead
The New York Times (NY)
by Eric Lipton
December 1, 2005

The Transportation Security Administration is making some of the most significant changes in the screening of airline passengers since procedures were revamped after the Sept. 11 terrorist attacks.

The changes include a new type of random search, a revision of the pat-down process and the end of a ban on small scissors and certain other sharp tools in carry-on luggage. The goal of the changes, which will be announced Friday and go into effect on Dec. 20, is to try to disrupt the now-familiar routine associated with security screening, a routine that federal officials fear would-be terrorists may have studied to figure out ways to circumvent it.

Signaling Vulnerabilities in Wiretapping Systems
Crypto
by Micah Sherr, Eric Cronin, Sandy Clark and Matt Blaze
November 30, 2005

In a research paper appearing in the Nov./Dec. 2005 issue of IEEE Security and Privacy, we analyzed publicly available information and materials to evaluate the reliability of the telephone wiretapping technologies used by US law enforcement agencies.

The analysis found vulnerabilities in widely fielded interception technologies. The vulnerabilities allow a party to a wiretapped call to disable content recording and call monitoring and to manipulate the logs of dialed digits and call activity. These countermeasures do not require cooperation with the called party, elaborate equipment, or special skill.

Trend Micro: RSS Is Worm Bot's Next Target
eweek.com
by Ryan Naraine
November 29, 2005

An anti-virus research engineer warns that the growth of RSS and the coming Internet Explorer 7 browser refresh will provide a lucrative target for bot worm attacks.

Security researchers at Trend Micro Inc. have pinpointed RSS (Really Simple Syndication) technology as a lucrative target for future bot worm attacks. David Sancho, senior anti-virus research engineer at Trend Micro, warned that RSS feed hijacking will become commonplace when Microsoft Corp. ships Internet Explorer 7, a browser refresh that will feature built-in RSS support. In a white paper titled "The Future of Bot Worms," Sancho said the IE7 release "will open some interesting possibilities to worm creators."

Cybercrime now bigger than the drug trade
The Sydney Morning Herald
by Reuters
November 29, 2005

Global cybercrime generated a higher turnover than drug trafficking in 2004 and is set to grow even further with the wider use of technology in developing countries, a top expert said on Monday.

No country is immune from cybercrime, which includes corporate espionage, child pornography, stock manipulation, extortion and piracy, said Valerie McNiven, who advises the US Treasury on cybercrime. "Last year was the first year that proceeds from cybercrime were greater than proceeds from the sale of illegal drugs, and that was, I believe, over $US105 billion [$A143 billion]," McNiven told Reuters.

Who's Afraid of Google? Everyone.
Wired
by Kevin Kelleher
November 24, 2005

It seems no one is safe: Google is doing Wi-Fi; Google is searching inside books; Google has a plan for ecommerce. Google has always wanted to be more than a search engine.

Even in the early days, its ultimate goal was extravagant: to organize the world's information. High-minded as that sounds, Google's ever-expanding agenda has put it on a collision course with nearly every company in the information technology industry: Amazon.com, Comcast, eBay, Yahoo!, even Microsoft.

Cracking safes with thermal imaging
lcamtuf.coredump.cx
by Michal Zalewski
November 21, 2005

This inexplicably brief "research" paper presents an interesting physical world attack that may be easily deployed by a determined attacker to compromise many high-security access control systems in use today.

In short, virtually all keypad entry systems - as used in various applications, including building access control, alarm system control, electronic lock safes, ATM input, etc - are susceptible to a trivial low-profile passphrase snooping scheme. This attack enables the attacker to quickly and unobtrusively recover previously entered passphrases with a high degree of success.

Sony BMG Rootkit Lawsuits
sonysuit.com
by Mark Lyon
November 20, 2005

Mark Russinovich analyzed the behavior of the software contained on some Sony music CDs in his blog entry of October 31, 2005 . His posting pointed out that the poor programming practices at First 4 Internet, the company responsible for the creation of th

Class Action Suits, Small Claims Court cases and other information linked from this site.

BBC NEWS | Technology | More pain for Sony over CD code
BBC News (UK)
November 17, 2005

Malicious hackers are exploiting the loophole opened by Sony BMG's uninstaller for its anti-copy CD code.

These are just proof of concept hacks, although security firms fear that users ridding themselves of Sony's CD software could soon face other dangers. Other security researchers have released tools that close the loophole opened by Sony's uninstaller.

Google Analytics - Does it make me Chicken Little?
Reliable Answers
by Shawn K. Hall
November 16, 2005

Does it make me Chicken Little if I am concerned about the power webmasters are willingly handing over to Google? You decide...

I stumbled across an interesting new feature of Google today. Frankly, this is one of those that makes me wish the Google staff all had their personal cell phone numbers listed on their website so I could give them a piece of my mind. The feature is "Google Analytics" and it's based on Urchin. Basically an "Urchin on Steroids" but with scary implications.

US wins battle to retain control of internet
The New Zealand Herald
by Rupert Cornwell
November 16, 2005

The US government has won its battle to retain control of the internet, under a compromise worked out ahead of this week's United Nations summit on the information society, which leaves the current addressing and traffic direction system intact.

Under the deal, an international forum, under UN auspices, will be set up to examine net issues. But day-to-day management of the internet will remain with the California-based internet Corporation for Assigned Names and Numbers (ICANN), a part-private, part public-body that reports to the Department of Commerce in Washington.

     

Help keep this page up-to-date. Submit a Virus Information News link for inclusion on this page.

Shawn K. Hall © 2003-2025 Powered by 12 Point Design
Professional Web Hosting and Design Services: 12 Point DesignAt Summit Chiropractic our mission is to improve your quality of life - We know that health is much more than just not feeling painReliable Answers - developer information, current news, human interest and legislative newsLocal Homeschool provides the most up-to-date support group listings in a geographical and searchable indexTwain Harte, CA - The closest you can get to Heaven on EarthSaferPC dispels security misunderstandings and provides you with a solid understanding of viruses and computer security
Google

AddThis Social Bookmark Button