Thursday, January 10, 2019

Those who don’t have the resources (time & treasure) to do it right must find the resources to do it over. If I was a cruel professor, I’d have my students read and summarize the report (no more than 50 pages, please)
Eileen Yu reports:
A culmination of bad system management and undertrained IT staff, amongst other gaps, had resulted in Singapore’s most severe cybersecurity breach last July, according to the committee formed to review the events leading up to the SingHealth incident.
[…]
The 454-page report published today outlined 16 recommendations the committee said were made in light of its findings, testimonies from witnesses and Singapore’s Cyber Security Agency (CSA), and public submission, as well as feedback from the Solicitor-General and key organisations including Ministry of Health, SingHealth, and the IT agency responsible for the local healthcare sector, Integrated Health Information System (IHIS).
Read more on ZDNet.




Beware “professional reporting” on Computer Crime. Some strange claims here. A procedure for my Computer Security students to revise. Note that they did not report a “summer” scam until December. Maybe that’s Okay under Napoleonic law?
Caddo Schools scammed out of nearly $1 million
The Caddo Parish School System is scammed out of nearly $1 million in tax payer money.
… Caddo Schools makes monthly payments to the charter school. Over the summer, a bank out of Nigeria hacked into Charter Schools USA's account and changed the banking information on file with Caddo Schools. $988,000 was deposited into the wrong account.


(On the other hand)
Some of $1M scammed from Caddo schools has been found
… Law enforcement authorities have found much of the nearly $1 million stolen in an international phishing scheme against Caddo Public Schools but have not recovered the money, a detective said Tuesday.
Nearly $714,000 has been found and frozen in U.S. bank accounts, said Capt. Bobby Herring, a detective with the Caddo Parish Sheriff's Office.
Authorities continue to look for an additional $275,000
… Caddo Schools employees reported the theft to law enforcement authorities on Dec. 12, Herring said. They disclosed the theft to the public only Tuesday, in a news release.
School district spokeswoman Mary Nash-Wood said in an interview that the delay in the notification occurred because information regarding the scope and nature of the scam was still being gathered.
… The school district news release said the theft occurred when an unknown individual fraudulently posed as an employee with Charter Schools USA, which operates the Magnolia school. The individual spoofed an official Charter Schools USA email account to change banking information on file with Caddo Schools, which then sent money to the wrong bank account.
… "There was a time in the summer where our charter school parent company's email system was hacked into," Goree said.
The email account from which the communication originated was based in a country in Africa. Sheriff's deputies declined to disclose which country.
… A similar phishing scam targeted the Independence Bowl in November, but the organization had safeguards that protected it, Herring said.




Intelligence and Big Data. An interesting article.
Weapons of Mass Consumerism: Why China Wants Your Personal Information
… This is our new reality: cyber powers, including China, are collecting and compiling data on private citizens, including Americans and other nationals, not just potentially to make a quick buck but also (and more consequentially) to pursue national security objectives through tactics known and still unknown—because they haven’t been deployed or developed yet.
… But most intriguing is the possibility that Beijing doesn’t even know why or how it might be able to use this data set, yet nonetheless figures that it’s worth acquiring it now, with an anticipation of putting it to use later.




Perspective. Only old folks believe that if you see it on the Internet it must be true? Maybe we just find the fake stuff humorous?
People older than 65 share the most fake news, a new study finds
Older Americans are disproportionately more likely to share fake news on Facebook, according to a new analysis by researchers at New York and Princeton Universities. Older users shared more fake news than younger ones regardless of education, sex, race, income, or how many links they shared. In fact, age predicted their behavior better than any other characteristic — including party affiliation.
… Today’s study, published in Science Advances, examined user behavior in the months before and after the 2016 US presidential election.
… Across all age categories, sharing fake news was a relatively rare category. Only 8.5 percent of users in the study shared at least one link from a fake news site.
… But older users skewed the findings: 11 percent of users older than 65 shared a hoax, while just 3 percent of users 18 to 29 did.




Time waster alert.
Google Chrome Labs experiment is Etch A Sketch for your browser
Google allowing its developers to do their own thing for Chrome Labs can lead to cool experiments the rest of us can play with. One of those developers, for instance, has created a virtual Etch A Sketch for your browser. And, yes, it works even on browsers other than Chrome, including Firefox and Opera. Aptly called Web A Skeb, the experiment works just like the drawing toy and is even as tough to draw on
… The only way to draw on Web A Skeb is to twist its dials using your mouse or trackpad, because its developer's original purpose was to create an experiment that uses knobs for input.


No comments: