Tag: security

  • Hackers Clone E-Passports

    “A German computer security consultant has shown that he can clone the electronic passports that the United States and other countries are beginning to distribute this year. [Lukas Grunwald], a security consultant with DN-Systems in Germany and an RFID expert, says the data in the chips is easy to copy.

    “The whole passport design is totally brain damaged,” Grunwald says. [His opinion that RFID passports are a huge waste of money.]”

    Wired via hittegodsbyrån

    Taas on siis todistettu, että suomalaisviranomaiset selittävät tiukan paikan tullen ihan tuulta taivasta:

    “Suomen uudet passit täyttävät kaikki biometrisille passeille asetetut vaatimukset. Niissä ei ole tietosuojaongelmia, toteaa sisäasiainministeriön poliisiosaston lupahallinnosta vastaava lupahallintopäällikkö Anne Aaltonen viitaten Keskisuomalaisessa tänään torstaina 20.7. julkaistuun kirjoitukseen.”

    Sisäasiainministeriö via YLE24

    EFFIhän ampui tämän lööperin alas tuoreeltaan:

    “Sisäministeriö vakuuttelee tiedotteessaan, että Suomen passin tietoturva on kunnossa ja että passin sirulle ei tallenneta mitään mitä ei tietolehdellä jo ole. Tiedotteessa sirupassien salausta kehutaan GSM-tasoiseksi.

    Ministeriössä ei ilmeisesti tiedetä, että GSM-puhelimissa käytetty salaus murtuu tavallisella pöytätietokoneella alle sekunnissa. “Toivottavasti sisäministeriö on väärässä suojauksen laadun suhteeen”, muotoilee oikeustieteen tutkija Ville Oksanen.”

    EFFI

  • Swedish police Web site shut down by hacker attack

    “The Web site of Sweden’s national police was shut down after a hacker attack that investigators on Friday said could be a retaliation for a crackdown on […] The Pirate Bay.

    Meanwhile, the government faced allegations that police had acted under pressure from U.S. authorities when they targeted the file-sharing site in raids earlier this week.”

    Physorg.com via Juha
    some links added

  • BlueFrog Folds

    “In an interview with Wired News, Blue Security CEO Eran Reshef said the Israel-based company was closing its service Wednesday since he did not want to be responsible for an ever-escalating war that could bring down internet service providers and websites around the world and subject its users to denial-of-service attacks from a well-organized group in control of a massive army of computer drones.”

    Wired via Juha

  • What's New in Firefox 1.5.0.3

    Firefox 1.5.0.3 is a security update that is part of our ongoing program to provide a safe Internet experience for our customers. We recommend that all users upgrade to this latest version.

    • Security fix for denial of service vulnerability.”

    Mozilla

  • Torvalds creates patch for cross-platform virus

    “The reason that the [Windows/Linux cross-platform virus] is not propagating itself in the latest kernel versions is due to a bug in how GCC handles specific registers in a particular system call. [Linus Torvalds] has coded a patch for the kernel to allow the virus to work on even the latest Linux kernel.”

    NewsForge via Juha

  • Starforce enforces DRM by instant reboot (without warning)

    “This copy protection system installs a driver that runs at the highest level of access on the system, which gives it low level access to the PCs hardware and any drivers and processes. This driver runs regardless of whether the game runs; keeping an eye out for any suspicious activity such as attempting to copy a protected disc. If something suspicious is detected, it forces the PC to make an immediate reboot, regardless of any other applications running and whether or not the user has any unsaved work.”

    cdfreaks.com via Juha

  • WordPress 2.0.2 Security Release

    “An important security issue has been brought to the attention of the WordPress team and we have worked diligently to bring you a new stable release that addresses it. Our latest version 2.0.2 contains several bugfixes and security fixes.”

    WP Dev Blog via BlogsNow

  • What is passclicks?

    “Passclicks is a new way to login to websites without users having to remember thir old style textual password. Studies have revealed that humans are way better in remembering visual things than textual things. With passclicks your normal textual passwords are replaced with a sequence of clicks on an image.”

    mininova labs via hittegodsbyrån

  • Sisäministeriö vaatii TeliaSoneralta korvauksia

    “Sisäministeriö vaatii TeliaSoneralta vahingonkorvauksia koskien ministeriön matkapuhelinten tietoturvariskiä. […]

    Ministeriö sanoo pyytäneensä yhtiöltä muutamia numeroita, mutta TeliaSonera lähetti suojaamattomalla sähköpostilla tuhansia salaisia kännykkänumeroita ja niiden luottamuksellisia tunnistetietoja.

    TeliaSoneran mukaan tietoturvariskiä ei ole ollut.”

    YLE24