Friday, December 23, 2011


I have alarming visions of a hacker somewhere saying, “So, you steal all our nuclear, military, scientific and business secrets do you? I'm going to retaliate! All your games are belong to us!”
Hacks of Chinese gaming sites may have affected 38,000,000
December 22, 2011 by admin
C. Custer writes:
Yesterday, the Chinese internet was shaken by the news that IT portal and community CDSN has been hacked and data for its more than six million users had been stolen, including usernames and passwords. Today, reports have it that CDSN wasn’t the only site affected.
Duowan, a games site, was hacked and hackers stole the data of its over eight million users. 7K7K, also a gaming site, reportedly lost data for 20 million users, and hackers also got info from 10 million accounts by hacking 178.com, another game site.
[...]
Actually, aside from the CDSN hack, none of the other hacks have been officially confirmed yet; however, much of the stolen account information has been published online (see, for example, the image of Duowan usernames and passwords above), so the reports appear to be fairly accurate. This certainly appears to be very bad news for Chinese net users — and gamers in particular — but we’ll keep an eye on this and update once more has come to light.
38,000,000? This has been an incredibly bad year for gamers’ information security.
None of the sites appear to have any breach notifications on their home pages at this time.


A beautiful infographic, showing the relative size of 2011 breaches...
Data loss incidents in 2011


Not every hack makes sense. Perhaps this one was done by some evil/geeky ornithologist?
Hacking a turducken? Seriously, folks?
December 22, 2011 by admin
LordKaT.com posted a curious message to members last week that they should change their passwords. It begins:
If you have an account on this site, you should change your password. Why?
Something strange happened on the site this morning. Our Turducken is Tasty, Tuesday Tech Talk, and How to Do It videos were removed from the site, along with a forum post about Battlemaster.
Nothing else appears to have been changed, but logs were truncated due to SQL server performance issues. So, we can’t exactly pinpoint what happened via Drupal.
We can’t pinpoint what happened via server logs either. There doesn’t appear to be any red flags in our server logs. SQL doesn’t appear to have been compromised, and there’s no evidence of the database being downloaded.
[...]
The database contains your: username, hashed and salted password, e-mail address, and any other additional information you provided in your profile.
Read more on LordKaT


French law is different, but technology should be the same. What kind of technical expert failed to prove that you could target specific emails?
FR: Appeal court authorizes seizure of entire electronic mailbox contents
December 22, 2011 by Dissent
Joseph Vogel writes:
Two undertakings that were subject to investigatory searches by the Competition Authority have complained of the mass undifferentiated seizure of their electronic mailboxes. The mailboxes contained items unrelated to the investigation, including personal and private emails and correspondence with the undertakings’ lawyers.
According to the Competition Authority, the current state of IT techniques and the constraints inherent in the search and seizure procedure allow for only the entire contents of company electronic mailboxes to be seized. The authority held that attempting to extract only certain elements would paralyse the investigation for weeks and would affect the integrity of the data extracted.(1) The mere fact that the mailboxes contained certain elements that might be used as evidence of the alleged actions was justification for their integral seizure. The first president of the Paris Court of Appeal confirmed this view, finding in the first case(2) that the administrative authorities had convincingly dispelled the arguments put forward by the expert engaged by the undertakings, who had attempted to demonstrate that it was possible to extract only certain items from mailboxes. The Court of Cassation recently upheld the principle of the seizure of the entire contents of a mailbox on the basis that its items allegedly cannot be seized separately, and considered that the court which reviewed the operations had not been required to appoint experts to find alternative techniques for the seizure of such documents.(3)


Looks like I concentrated on the right stuff after all. HTML5, CSS and image/sound/video content.
"According to new research from HTTP Archive, which regularly scans the internet's most popular destinations, the average size of a single web page is now 965 kilobytes, up more than 30% from last year's average of 702KB. This rapid growth is fairly normal for the internet — the average web page was 14KB in 1995, 93KB by 2003, and 300KB in 2008 — but by burrowing a little deeper into HTTP Archive's recent data, we can discern some interesting trends. Between 2010 and 2011, the average amount of Flash content downloaded stayed exactly the same — 90KB — but JavaScript experienced massive growth from 113KB to 172KB. The amount of HTML, CSS, and images on websites also showed a significant increase year over year. There is absolutely no doubt that these trends are attributable to the death throes of Flash and emergence of HTML5 and its open web cohorts."
If you have a personal home page, how big is it?

No comments: