IT news, malware, virii, trojans (both kinds), generalized IT sarcasm, 2nd ugliest blog on the net, vaguely related to ThermionicEmissions
Thursday, October 31, 2019
The Entire Multiverse Has Blown Up
Microsoft just signed on with Oracle's OpenJDK; the official open source Java. They want to be good citizens within this group.
Ok, we need to look this gift horse in the mouth. First a linux subsystem under Windows. Now open source Java? Santa, the Easter Bunny, and Jesus will be by your house after work, with your one million dollar Publishers Clearing House check.
So about those DNA genetic makeup services... Why shouldn't you use them?
Well, firstly, there's the sharing with the letter agencies. Second, insurance will want to get their hands on the data. Third, you'll only be disappointed when you find out one of your parents was a donkey in stone age Scotland.
Then there's this: GEDmatch is a service that matches your profile to other profiles that have been uploaded. The only problem is that there are way too many ways to get into the site. GEDmatch was apparently secured by the aforementioned donkey (before he graduated from Security School).
Just Don't Do It.
What is web.com? The company that owns Network Solutions and register.com.
And they just disclosed a small security breach. Someone got into their network and accessed millions of records in late August.
Stolen were names, addresses, phone numbers, email addresses, and information about services offered to customers. And shoe sizes.
The good news is that no credit card information was compromised.
Why?
They encrypt the credit card information before it goes into their databases, per PCI (Payment Card Industry) standards.
Why not encrypt everything?
Because they're stupid.
Affected customers are being notified.
Customers are urged to go to web.com's headquarters and hang around, insisting to talk to the CEO and generally being a pest.
Who's in your firmware?
And why should you care?
This video gives you some idea of the problems and the soon-to-be problems.
11 best CAD software(s) for linux
Never let anyone tell you there's a shortage of linux offerings.
McAfee has been observing a new phishing campaign against O365, using a fake voicemail message. The victim gets an email that they missed a call and please login to their account to check their voicemail. When the attached HTML file is loaded, it redirects to the phishing site. Users login and POOF - the phishers have their credentials. Surprisingly, McAfee products will recognize this.
Last but not least, Kortrijk, a vacation spot in Belgium, uses a mobile phone provider's data to count the people in the town and where they come from. Even better, city officials will try to cross-reference this with credit and debit card databases. The city pays Proximus 40,000 EuroYens a year for this data.
Enough, I say. Time to anonymize services. This whole tracking thing has gotten way out of hand.
Subscribe to:
Post Comments (Atom)
Corona Malware
This blog has been suspended for a bit because it's practicing social distancing. Or no one reads it. Or I'm too lazy. Or the str...
-
Crafty Web Skimming Domain Spoofs “https” What WHO calling the coronavirus outbreak a pandemic means it means more headlines to bea...
-
Microsoft delivers emergency patch to fix wormable Windows 10 flaw Modern RAM used for computers, smartphones still vulnerable to...
-
The Internet of Things is a security nightmare reveals latest real-world analysis: unencrypted traffic, network crossover, vulnerable OS...
No comments:
Post a Comment