Yahoo webcam images from millions of users intercepted by GCHQ

Found on The Guardian on Thursday, 27 February 2014
Browse Internet

GCHQ files dating between 2008 and 2010 explicitly state that a surveillance program codenamed Optic Nerve collected still images of Yahoo webcam chats in bulk and saved them to agency databases, regardless of whether individual users were an intelligence target or not.

The document estimates that between 3% and 11% of the Yahoo webcam imagery harvested by GCHQ contains "undesirable nudity". Discussing efforts to make the interface "safer to use", it noted that current "naïve" pornography detectors assessed the amount of flesh in any given shot, and so attracted lots of false positives by incorrectly tagging shots of people's faces as pornography.

All those images are of people who are adults I hope.

Facebook apologises to WhatsApp users for system crash

Found on BBC News on Sunday, 23 February 2014
Browse Internet

The team behind the instant messaging service blamed "server issues" for the crash.

Speaking after Wednesday's take over, Facebook founder Mark Zuckerberg described WhatsApp's services as "incredibly valuable".

It took some downtime to route all messages through Facebook's servers so they can be linked to the existing profiles.

WhatsApp: The inside story

Found on Ars Technica on Thursday, 20 February 2014
Browse Internet

Five years after launch, WhatsApp is among the world's most popular and profitable phone apps—and one which Facebook has just acquired for $16 billion, plus $3 billion for its founders and small staff.

"People need to differentiate us from companies like Yahoo! and Facebook that collect your data and have it sitting on their servers. We want to know as little about our users as possible. We don't know your name, your gender… We designed our system to be as anonymous as possible. We're not advertisement-driven so we don't need personal databases."

Now that Zucky has bought back his share of teenagers which ran away, the motives behind WhatsApp will most likely change. Facebook doesn't make money from unused data; several billion messages per day want to be tied to (and stored with) your FB profile.

OneDrive, Dropbox, Google Drive, and Box: Which cloud storage service is right for you?

Found on CNet News on Wednesday, 19 February 2014
Browse Internet

Microsoft is hoping that OneDrive will be the place where you store your photos, and the company is working on technology that will eventually sort all of the photos you take based on how important and meaningful they are.

Google Drive has the benefit of a built-in office suite, where you can edit documents, spreadsheets and presentations, even if you created the document in another program. The service also a large collection of extras, such as third-party apps that can send faxes or sign documents.

Just use the "cloud" buzzword and everybody is in awe. Those services might be useful for distributing data, like installers and iso images, but the idea of storing personal and confidental data there without some strong encryption should make people cringe; but you know the arguments: "it's just so convenient".

Comcast: Allowing Us To Get Immensely, Inconceivably, Ridiculously Massive Is 'Pro Consumer'

Found on Techdirt on Thursday, 13 February 2014
Browse Internet

Comcast is already the nation's largest fixed-line broadband company, largest cable TV provider, and third largest fixed-line phone company -- and that's before you include the company's NBC or other assets.

As for "growing" national telephone competitors, both AT&T and Verizon are in the process of gutting regulations across dozens of states so they can begin hanging up on unwanted DSL and phone customers they don't want to upgrade.

Less competition makes it easier to control the market and prices.

Why Facebook's Android App Wants to Read Your Text Messages

Found on International Business Times on Tuesday, 28 January 2014
Browse Internet

As the world celebrates Data Privacy Day while reeling from the latest revelations about the NSA using smartphone apps to monitor everything from your name to your sexual orientation - it may not be the best time for Facebook's Android app to request permission to read your text messages.

While people typically click Accept when presented with the permissions an app needs, in the current climate of heightened tension about privacy, people may begin to questions these permissions.

Simple. Facebook wants to know more about it's products to sell them better to customers; and the product is the user.

Facebook will LOSE 80% of its users by 2017 – epidemiological study

Found on The Register on Friday, 24 January 2014
Browse Internet

Princeton PhD students Joshua Spechler and Johan Cannarella used epidemiological modelling, traditionally employed to track the growth patterns of infectious diseases, to predict Facebook's imminent demise, citing the way that MySpace peaked in 2008 and then rapidly disappeared in three years.

“If the disease model holds, it suggests that Facebook will need to evolve/mutate in order to begin another curve or it will die out. It has to overcome the immunisation cycle,” he added.

Nobody can seriously believe that Facebook will stay around forever, or even decades. In a few years nobody will care about it anymore because the users finally realize that they are being sold.

Snapchat account registration CAPTCHA defeated

Found on Techienews on Thursday, 23 January 2014
Browse Internet

Snapchat’s security troubles continue as a security researcher has managed to hack its account registration CAPTCHA system with a program of less than 100 lines that took 30 minutes to develop.

Hickson has detailed the basics of the logic he implemented to develop the program through a blog post. “With very little effort, my code was able to “find the ghost” in the above example with 100% accuracy”, noted Hickson.

That leaves the question what people could want with a ton of those useless accounts.

Target's data breach: Yes, it gets worse

Found on CNet News on Saturday, 18 January 2014
Browse Internet

There appears to be no end in sight for just how bad the unprecedented hack attack at Target was last holiday season.

Now Reuters is reporting that cyberintelligence firm IntelCrawler has unearthed evidence pointing toward at least six ongoing schemes at U.S. merchants with credit card processing systems plagued by the same type of malicious software.

According to IntelCrawler's sources, the malware has been tested out and infected point-of-sale hardware across Australia and Canada as well as the United States.

It's a global economy. Identical payment terminals are in use in many different places around the world, so it shouldn't be much of a surprise that they can get infected everywhere.

Flaws Plague Leading Mobile Banking Apps

Found on Threatpost on Saturday, 11 January 2014
Browse Internet

An alarming percentage of mobile banking applications for iOS fail to implement basic protections that would safeguard against man-in-the-middle attacks, session hijacking, memory corruption, and credential theft.

Sanchez said 90 percent of the applications he looked at sent users to a number of links that were not encrypted with SSL, while close to half of the apps did not validate the SSL certificates presented, putting customers at risk to man-in-the-middle attacks where an attacker could inject malicious javascript or HTML code as part of a phishing scam, for example.

The management usually cares only about pretty looks, not about security. If you tell them you adjusted the layout by a few pixels to make it look nicer, you get praised. If you tell them that the project gets delayed by a month because the security models are not implemented correctly they think you're wasting time.