Monday, September 17, 2007

So TJX earned the hacker between $23.5 and $235 Million. ...and I bet we could find lots more 'low hanging fruit' if we were so inclined.

http://www.infoworld.com/article/07/09/17/Symantec-says-stolen-bank-account-details-fetch-$400_1.html?source=rss&url=http://www.infoworld.com/article/07/09/17/Symantec-says-stolen-bank-account-details-fetch-$400_1.html

Symantec: Stolen bank account details fetch $400 online

The rise in threats to Internet security is driven by well-funded international gangs of criminals, Symantec says

By Jeremy Kirk, IDG News Service September 17, 2007

Stolen bank account numbers are commanding the highest price in an underground trade of personal details stolen by hackers, according to a survey released Monday by security vendor Symantec.

Bank account details command prices of up to $400, while credit card details sell for between $0.50 and $5, e-mail passwords from $1 to $350 each, and e-mail addresses from $2 to $4 per megabyte, according to Symantec's Internet Security Threat Report, which covers the first half of the year.



Let's be absolutely clear. The State of Ohio created this tape, but our friends at Interhack had to tell them what was on it? Does this sound like good management to you?

http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=19&articleId=302856&intsrc=hm_topic

Experts Say More Personal Data Is on Stolen Ohio Tape

Brian Fonseca Today’s Top Stories or Other Storage Stories

September 17, 2007 (Computerworld) -- An Ohio state government backup tape stolen in June contained far more personal data than was first believed, according to a computer forensics firm hired by the state.

When the incident was discovered, state officials said the device contained data on all 64,467 Ohio state employees and tens of thousands of other people, including Ohio teachers.

Two reports released last week by Columbus, Ohio-based Interhack Corp. said an examination of a copy of the missing tape revealed that it also held the names and Social Security numbers of 47,245 Ohio taxpayers and 19,388 former state employees.

Ron Sylvester, a spokesman for the Ohio Department of Administrative Services, said that Interhack investigators also uncovered banking information on 100 state businesses and the federal employee ID numbers from 40,088 businesses.

The incident is expected to cost the state almost $3 million, including $2.3 million to provide affected individuals with credit protection services from Debix Inc., Sylvester said.



It occurred to us the other day that virtual machines could greatly enhance security. Think of a user working on a project he wants to keep secret. He can define a machine with no network connections, no floppy or USB drives... no way for anyone else to access the files.

http://www.news.com/Virtualization+homes+in+on+desktops/2100-7339_3-6208181.html?part=rss&tag=2547-1_3-0-5&subj=news

Virtualization homes in on desktops

By Stephen Shankland Story last modified Mon Sep 17 04:00:03 PDT 2007

When Parallels Desktop was released in June 2006, it opened the door for hundreds of thousands of Apple users to run Windows at the same time as they ran the Mac operating system.

It also introduced the masses to the notion of desktop virtualization.

Virtualization, until recently, has focused largely on the server, where the idea of enabling one server to act as many has clear cost benefits.

While Windows-on-a-Mac is still the most widely known use for the technology, there are reasons why desktop virtualization may soon expand into new areas.

So far, many of those areas are in the corporate arena, where businesses are aiming to offer more secure environments or perhaps run older in-house software that only works with older operating systems, while at the same time having desktops running modern operating systems. It also has benefits in terms of disaster recovery, provided the virtual machines are well backed-up.

... VMware offers technology for both desktop virtualization approaches. Its Virtual Desktop Infrastructure takes the server-based approach, while two other options handle things directly on the desktop, one for power users and the other for standard cubicle dwellers.

... Virtualization means that people don't have to switch entirely to a different operating system. If people find even one Linux application that they really want to run, desktop virtualization can make that feasible.



You have to be careful not to hand customers the rope to hang you with....

http://games.slashdot.org/article.pl?sid=07/09/16/2116248&from=rss

Comcast Slightly Clarifies High Speed Extreme Use Policy

Journal written by Alien54 (180860) and posted by Zonk on Sunday September 16, @06:35PM

from the that's-some-customer-service-right-there dept.

The Internet Businesses Networking Games

Alien54 writes "Comcast has finally clarified what 'excessive use' is when it comes to their cable internet service. A customer is exceeding their use limit if they: download the equivalent of 30,000 songs, 250,000 pictures or 13 million emails in a month. '[A Comcast spokesperson] said that Comcast's actions to cut ties with excessive users is a "great benefit to games and helps protect gamers and their game experience" due to their overuse of the network and thus "degrading the experience."'" Maybe they could put that limit in terms other than 'email' or 'songs'?



Can't wait!

http://it.slashdot.org/article.pl?sid=07/09/17/0110219&from=rss

Big Brother Really Is Watching Us All

Posted by Zonk on Sunday September 16, @09:06PM from the hi-guys dept. Security Privacy Science

siddesu writes "The BBC has a nice high-level overview of some technologies for surveillance developed in the US and the UK. 'The US and UK governments are developing increasingly sophisticated gadgets to keep individuals under their surveillance. When it comes to technology, the US is determined to stay ahead of the game ... But it [a through-the wall sensing device in development] will also show whether someone inside a house is looking to harm you, because if they are, their heart rate will be raised. And 10 years from now, the technology will be much smarter. We'll scan a person with one of these things and tell what they're actually thinking.'"




Research?

http://www.bespacific.com/mt/archives/015999.html

September 16, 2007

NTIS Search Engine Provides Archive Access Back to 1964

"Search the NTIS [National Technical Information Service] collection of 3 million products back to 1964 at no charge to you."



For all you Mac lovers...

http://digg.com/apple/The_Free_Mac_Classroom_Over_200_apps

The Free Mac Classroom (Over 200 apps!)

Absolutely the biggest list of free educational applications for the Mac! Over 200 free apps listed and categorized.

http://web.mac.com/simon_elliott/iWeb/simon_elliott%40mac.com/Software.html

No comments: