Gizmodo

Posts Tagged “

Security

ipod in chains

Masterlock's iCage Bike-Lock-Style Case Chains-Down Your iPod

An iPod case that doubles as a secure bicycle-lock-style chain for your iPod... I can't work out if this is marketing madness or shrewd targeting of a small customer sector by Masterlock. I mean, you'd have to work in a very crappy office environment indeed if you felt the need to chain your iPod to your desk while you skipped off for a coffee. Maybe it'll appeal to kids into baggy pants adorned with multiple chains. Hmmm. It's not uber-secure, consisting of a metal shell for the 'Pod and a three-digit numeric-combination lock and security cord, but it may deter the casual thief. Available for iPod classics and first and second gen nanos from later this month, prices starting at $15. [RegHardware]

iphone

Hacker to Bypass iPhone Passcode Lock During Live Webcast on September 11th

On September 11th, Data-forensics expert Jonathan Zdziarski will guide law enforcement personnel "and anyone else who has a need to access the not-so-readily available data on an iPhone" through the process of bypassing the passcode lock security using a custom firmware bundle during a 45-minute webcast on O'Reilly.com. This will enable users to "recover, process, and remove sensitive data stored on the iPhone, iPhone 3G, and iPod Touch." More »

security

Study: 88% of IT Pros Would Steal Passwords or Data if Fired

If you needed another reason to keep your sysadmins happy: Out of 300 IT pros polled by security company Cyber Ark, 88% said they would steal sensitive data or futz with master login passwords if they happened to be fired. Granted, this is a study publicized by a company that offers services to protect networks against internal rogue operators, but the more data like this that comes out, the nicer our brave IT managers are likely to be treated. Or, the more ridiculous security barriers will be put in place to keep the good ones from easily doing their jobs—one or the other. So perhaps we should have our own informal comment survey—IT dudes: Would you go 21st century postal on your employers if you were let go? [Ars Technica, Image: shearforce]

iphone

Apple Acknowledges Huge iPhone Security Flaw, Calls It "Minor," Announces Fix

Apple has acknowledged the huge iPhone security flaw we tested and reported on two days ago, promising an update for September that will fix the hole that can expose all your private emails, text messages and contacts. But instead of calling a spade a spade and acting as soon as possible, they have decided to minimize the problem: More »

security

A Million Rich People's Personal Info Sold for $65 on eBay

I don't know how many times people have to sell other people's personal information on eBay for everyone to learn about security, but apparently it's not enough yet: an ex-employee sold his company-provided computer on the auction site for $65, carrying banking data belonging to more than a million people. The new twist this time: these people are dirty rich, high-street bank customers of companies like American Express. Thankfully for them, the guy who bought the computer was not Robin Hood. More »

iphone

Huge iPhone Security Flaw Puts All Private Information at Risk

There's a huge security problem in the latest iPhone 2.0.2: if you have your JesusPhone password protected, using a very simple trick gives anyone full access to your cellphone private information in Mail, SMS, Contacts, and even Safari. The two-step trick is even simpler to the one used in the past to gain access to the phone to install unlocking cards or jailbreak. Fortunately, there's a way to avoid this obvious security breach until Apple fixes it. More »

phreaking

Hacker Rips Off $12,000 in Calls Using Homeland "Security" Phone System

Knowing that the government can keep us safe against evil dildos and penis pumpers, I don't really give much importance to the fact that a guy got into the U.S. Homeland Security Department phone system to make more than 400 calls to his buddies in friendly countries like Afghanistan, Saudi Arabia, and Yemen. According to security consultant John Jackson, the hacking was very low-tech and old school, which probably would make Steve "Blue Box" Wozniak proud, but it was an embarrassment for the agency: More »

security

Mexico's Rich Embedding GPS-Assisted RFID Tags Under Their Skin In Case of Kidnapping

Mexico has a pretty serious kidnapping problem—so serious that there is now a market for a $4,000 RFID implant procedure (plus a $2,200 annual fee) that promises to help track victims down. The system uses an implanted capsule under the skin that talks to an external GPS transmitter that you'll need to be kidnapped with in order to beam your location to the folks at Xega, who are selling the service. Anyone else see a gigantic hole in this setup? More »

Airports Suck

TSA's "Checkpoint Friendly" Laptop Bag Policy Starts Today

You know that new TSA policy that kind of sounds like a ploy to sell new generations of laptop bags? The one where, if you have specific types of bags that are deemed “checkpoint friendly” by the TSA, you won't have to take your laptop out while going through security lines at the airport? That goes into effect today. The new policy is supposed to speed things up, but if you can't trust that stupid-ass office schmuck in front of you to take out his (or her) laptop in the last 35 minutes you were all waiting in line god damn it, I don't see how having different categories of X-ray-able bags won't just add to the confusion. [Yahoo! News]

botnets

Giant Dutch Botnet Busted, Forced to Commit Ritualistic Suicide

When the Dutch High Tech Crime unit raided the 150,000-machine strong Shadow botnet, they didn't simply bust its 19- and 16-year-old basement-dwelling operators. Oh no. Instead of simply decapitating it from the top, the police enlisted the help of Kaspersky Labs to actually take full control, driving the cold dagger of the law even deeper into Shadow's own soulless guts. More »

Show Me PC

Police Forces Around the Country Are Using GPS Tracking Tags Without Warrants

As GPS tags and monitoring equipment reach rock-bottom pricing for law enforcement around the country, they're being used to track potential criminals' 24/7 whereabouts far more frequently. Currently, such usage does not require a warrant, but the Washington Post is reporting that growing unrest in the courts and amongst privacy advocates may change that. More »

Jews Win

Bacon Sets Off Airport Bomb Detector

According to German news site Nachrichten, a passenger at the Linz airport set off alarms when his suitcase full of bacon was mistaken for a bomb. The story was translated with Google, so it's high on hilarity and low on verifiable detail. More »

laptops

Solo Helps Travelers "FlyThru" Security With Checkpoint Friendly Laptop Cases and Sleeves

Bags deemed "checkpoint friendly" by the TSA are starting to roll out fast and furious now—bags with "creative" names like "ScanFast" and the newly announced "FlyThru" from Solo (I'm still waiting for the "CavitySearchFree"). The FlyThru claims to be "the first laptop case company to have fulfilled the design and testing requirements to be Travel Sentry approved," but when it really comes down to it, all of the bags basically have a cut-out area that makes it easy for security to view its contents. After that, its pretty much about what kind of style you prefer. More »

badass IT

A Look Inside Defcon's Network Ops Room, The Most Secure Conference Wi-Fi You'll Ever See

Network access at conferences sucks, pretty much without exception. That is, unless it's built by the badge-wearing network ops volunteers of the Defcon hacker convention, who are affectionately referred to as the "Goons" (read: IT badasses). Wired's Threat Level got a chance to look behind the scenes and snap some great photos of the network gear (and chain link fences, and padlocks, and German Shepherds) that make the Defcon network the fortress that it needs to be to keep a network full of hackers from tearing each other apart. More »

terrorists win

MIT Student Hackers Revealing How to Get Free Subway Rides Is National Security Threat

"Want free subway rides for life?" teased the description of the talk "Anatomy of a Subway Hack" by three MIT students at DefCon this past weekend, where they planned to explain security flaws in the payment system for Boston's T subway. Live! They were going to demo how they cracked the system's CharlieCard smartcards and the mag-stripe on its paper CharlieTickets and offer up open source tools they made while conducting their research, among other gaping holes. Apparently, however, that “constitutes a threat to public health or safety,” and “affects a computer system used by a government agency for national security purposes.” More »

security

Russian Hacker Mob Takes Over Georgian Web During Invasion

Coinciding with the conflict in South Ossetia, the Georgian government is claiming they have lost control of many, if not all, of their governmental web sites and are incapable of using them to update its citizens or the international community. The blog RBNexploit is claiming to be an unofficial spokesman for the Georgian web, and they're alleging that an infamous mafia of hackers for hire, the Russian Business Network, is involved. More »

hacks

Medeco High Security M3 Locks Hacked With Easy Credit Card Trick

With all the hacks going on this weekend at DefCon, the world's largest annual hacker convention, perhaps the most embarrassingly easy to crack was Medeco's high-security locks. According to a group of security researchers, all you need to get into an Medeco M3 lock, used in sensitive facilities such as the White House and the Pentagon, is a low-res image of someone's key and a credit card. More »

e-passport

E-Passports Can Be Hacked and Cloned in Minutes

Tests conducted for the UK's Times Online have concluded that the new high-tech e-passports being distributed around the world can be hacked and cloned within minutes. A computer researcher proved it by cloning the chips in two British passports and then implanting digital images of Osama bin Laden and a suicide bomber. Both passports passed as genuine by UN approved passport reader software. The entire process took less than an hour. More »