Thursday, October 31, 2019

The Entire Multiverse Has Blown Up


Microsoft just signed on with Oracle's OpenJDK; the official open source Java. They want to be good citizens within this group.

Ok, we need to look this gift horse in the mouth. First a linux subsystem under Windows. Now open source Java?  Santa, the Easter Bunny, and Jesus will be by your house after work, with your one million dollar Publishers Clearing House check.



So about those DNA genetic makeup services... Why shouldn't you use them?
Well, firstly, there's the sharing with the letter agencies. Second, insurance will want to get their hands on the data. Third, you'll only be disappointed when you find out one of your parents was a donkey in stone age Scotland.

Then there's this: GEDmatch is a service that matches your profile to other profiles that have been uploaded. The only problem is that there are way too many ways to get into the site. GEDmatch was apparently secured by the aforementioned donkey (before he graduated from Security School).

Just Don't Do It.




What is web.com? The company that owns Network Solutions and register.com.
And they just disclosed a small security breach.  Someone got into their network and accessed millions of records in late August.

Stolen were names, addresses, phone numbers, email addresses, and information about services offered to customers. And shoe sizes.

The good news is that no credit card information was compromised.
Why?
They encrypt the credit card information before it goes into their databases, per PCI (Payment Card Industry) standards.
Why not encrypt everything?
Because they're stupid.

Affected customers are being notified.
Customers are urged to go to web.com's headquarters and hang around, insisting to talk to the CEO and generally being a pest.




Who's in your firmware?
And why should you care?
This video gives you some idea of the problems and the soon-to-be problems.



11 best CAD software(s) for linux
Never let anyone tell you there's a shortage of linux offerings.




McAfee has been observing a new phishing campaign against O365, using a fake voicemail message. The victim gets an email that they missed a call and please login to their account to check their voicemail. When the attached HTML file is loaded, it redirects to the phishing site. Users login and POOF - the phishers have their credentials. Surprisingly, McAfee products will recognize this.



Last but not least, Kortrijk, a vacation spot in Belgium, uses a mobile phone provider's data to count the people in the town and where they come from. Even better, city officials will try to cross-reference this with credit and debit card databases. The city pays Proximus 40,000 EuroYens a year for this data.

Enough, I say. Time to anonymize services. This whole tracking thing has gotten way out of hand.

No comments:

Post a Comment

Corona Malware

This blog has been suspended for a bit because it's practicing social distancing. Or no one reads it. Or I'm too lazy. Or the str...