Centennial Man: 2016-06-19

Saturday, June 25, 2016

This does not happen often. Is there more here than has been reported?

AL governor axes officials, asks FBI for help after finding unauthorized access to state’s criminal justice database

Paul Gattis reports:

Gov. Robert Bentley has fired a high-ranking official in the state department of finance and placed a second on leave after concerns of a computer security breach emerged.

The breach came to light following an investigation by the Alabama Law Enforcement Agency, according to a letter Bentley wrote June 10 to the FBI.

Bentley has also requested that the FBI partner with the state of Alabama “to provide appropriate audit and investigative personnel to assist ALEA in determining the full scope” of the breach, according to the Bentley letter.

ALEA released the Bentley letter to AL.com on Friday as well as the termination letter to James Nolin, chief information officer in the finance department, of his “probationary state employment” and the letter advising Rex McDowell, assistant director of finance information/administrative services, that he has been placed on leave.

Friday, June 24, 2016

Let me toss a monkey into your wrench; Will I be able to customize the programming of my self-driving car? My Ethical Hacking students think so.

http://www.forbes.com/sites/bridaineparnell/2016/06/24/driverless-cars-should-kill-passengers-to-save-lives-but-then-people-wont-buy-them/#28292f494f6c

Driverless Cars Should Kill Passengers To Save Lives - But Then People Won't Buy Them

People want driverless cars to act for the greater good in traffic collisions – but they don’t want to be in the cars when they do so.

In a series of surveys, researchers asked people whether autonomous vehicles (AVs) should swerve to avoid hitting a group of pedestrians, even if that meant killing the occupant of the car. Most people gave the greater good answer, that saving many lives was better than saving one, but those people don’t want to be in a car that would make that choice.

… “Although people tend to agree that everyone would be better off if AVs were utilitarian (in the sense of minimizing the number of casualties on the road), these same people have a personal incentive to ride in AVs that will protect them at all costs,” the researchers said in a paper for Science magazine.

Something for my Computer Security students to consider.

http://www.computerworld.com/article/3088275/security/us-court-rules-that-fbi-can-hack-into-a-computer-without-a-warrant.html?google_editors_picks=true

U.S. court rules that FBI can hack into a computer without a warrant

A U.S. court has ruled that the FBI can hack into a computer without a warrant -- a move that is troubling privacy advocates.

The criminal case involves a child pornography site, Playpen, that had been accessible through Tor, a browser designed for anonymous web surfing.

The FBI, however, managed to take over the site in 2014, and then tracked down and arrested its members by hacking their computers. This allowed law enforcement to secretly collect their IP addresses.

One of the arrested suspects has argued that the evidence against him had been unlawfully seized. But a U.S. court in Virginia has ruled in favor of the FBI, according to court documents unsealed on Thursday.

… The suspect may have used Tor to keep his browsing anonymous, but his IP address still isn’t private information, the judge wrote in his ruling. This is because the IP address is given out to third parties in order to access the Internet and even the Tor network.

Privacy advocacy group Electronic Frontier Foundation is opposed to this part of the ruling.

“The implications for the decision, if upheld, are staggering,” wrote Mark Rumold, an attorney with the group in a blog post. Law enforcement could seize information from a person’s computer without a warrant, probable cause or any suspicion at all, he said.

… Morgan, however, said in his ruling that the rise of hacking has changed expectations about privacy.

“For example, hacking is much more prevalent now than it was even nine years ago,” he said. “Now, it seems unreasonable to think that a computer connected to the Web is immune from invasion.”

As a result, Tor users “cannot reasonably expect” to be safe from hackers, he added. The FBI also didn’t violate the Fourth Amendment of the U.S. Constitution by hacking into the suspect’s computer. Law enforcement should be able to use cutting-edge technology to stop crimes done in secrecy, Morgan said.

(Related) Why would this be different from any other evidence?

No evidence feds tampered with alleged Russian hacker’s computer, judge says

Mike Carter reports the latest development in the federal prosecution of Russian hacker Roman Seleznev:

A federal judge has refused to suppress key evidence in the pending trial of accused Russian mega-hacker Roman Seleznev.

U.S. District Judge Richard Jones said Seleznev’s accusations that federal agents tampered with his computer — and the dueling opinions of prosecution and defense experts about whether that occurred — should be considered by the jury in Seleznev’s upcoming federal trial.

Sure, because a jury of 12 citizens is perfectly equipped to consider testimony about evidence of computer tampering by the government.

Thursday, June 23, 2016

"Amateurs talk about tactics, but professionals study logistics." It makes you wonder what could be more valuable than disrupting communications (and recruiting)?

http://www.securityweek.com/us-militarys-cyber-force-reluctant-cut-internet-syria

US Military's Cyber Force Reluctant to Cut Internet in Syria

The US military is wary of cutting Internet connections to Islamic State strongholds such as Raqa in Syria, even though the Pentagon is waging cyber-war against the jihadists, officials said Wednesday.

… CYBERCOM deputy leader Lieutenant General Kevin McLaughlin said the Pentagon has gained important experience fighting the IS group online.

"It's given us the opportunity to learn and mature and kind of plow back in lessons learned in a real circumstance that it might have taken us several years to learn," McLaughlin told lawmakers.

For my Computer Security students.

http://www.nytimes.com/2016/06/22/business/dealbook/goodbye-password-banks-opt-to-scan-fingers-and-faces-instead.html?_r=0

Goodbye, Password. Banks Opt to Scan Fingers and Faces Instead.

… Millions of customers at Bank of America, JPMorgan Chase and Wells Fargo routinely use fingerprints to log into their bank accounts through their mobile phones. This feature, which some of the largest banks have introduced in the last few months, is enabling a huge share of American banking customers to verify their identities with biometrics. And millions more are expected to opt in as more phones incorporate fingerprint scans.

Other uses of biometrics are also coming online. Wells Fargo lets some customers scan their eyes with their mobile phones to log into corporate accounts and wire millions of dollars. Citigroup can help verify 800,000 of its credit card customers by their voices. USAA, which provides insurance and banking services to members of the military and their families, identifies some of its customers through their facial contours.

Some of the moves reflect concern that so many hundreds of millions of email addresses, phone numbers, Social Security numbers and other personal identifiers have fallen into the hands of criminals, rendering those identifiers increasingly ineffective at protecting accounts. And while thieves could eventually find ways to steal biometric data, banks are convinced they offer more protection.

(Related). Part of what banks are up against.

http://www.securityweek.com/goznym-trojan-targets-major-us-banks

GozNym Trojan Targets Major US Banks

The GozNym banking Trojan has been observed targeting the customers of some of the largest financial institutions in the United States, IBM Security warned on Wednesday.

… In a redirection attack, the malware hijacks the victim’s browsing session and takes them to a fake website that looks exactly like the legitimate site. On these phishing sites, victims are instructed to provide personal and financial information that cybercriminals can use to conduct fraud.

In GozNym’s case, the redirection attacks are designed to trick both users and security researchers. The fake bank webpages are made to look like they are hosted on the targeted organization’s genuine URL and they even display the SSL certificate in the browser’s address bar.

Even as an avid science fiction fan, this seems farfetched and illogical.

http://www.newsweek.com/robots-tax-europe-electronic-persons-ai-473542?piano_d=1

Robots May Pay Taxes Under European Proposals

Robots in Europe may soon be given legal rights and considered “electronic persons,” following a draft report from the European Parliament that aims to address the rise of automated workers.

Under the plans, bosses would be required to pay social security on their robot workers’ behalf, as well as adhere to new taxation rules and legal liability frameworks.

… Speculation surrounding how robots may evolve into advanced artificial intelligence machines in the future is also included in the report, which it warns may have severe consequences for humanity.

“Ultimately, there is a possibility that within the space of some decades artificial intelligence might surpass human intellectual capacity [I’d say that has already happened in at least one case… Bob]

The draft report. [Note: This is a “.do” file. Change the extension to “.PDF” to open it. Bob]

Misusing technology for fun and profit?

http://www.theatlantic.com/technology/archive/2016/06/tech-and-other-peoples-problems/488297/?utm_source=feed

The Perils of Using Technology to Solve Other People's Problems

I found Shane Snow’s essay on prison reform — “How Soylent and Oculus Could Fix the Prison System” — through hate-linking.

Friends of mine hated the piece so much that normally-articulate people were at a loss for words.

… In Snow’s essay about prison reform, he identifies violence, and particularly prison rape, as the key problem to be solved, and offers a remedy that he believes will lead to cost savings for taxpayers as well: all prisoners should be incarcerated in solitary confinement, fed only Soylent meal replacement drink through slots in the wall, and all interpersonal interaction and rehabilitative services will be provided in Second Life using the Oculus Rift virtual reality system.

Blockchain, my students would do well to learn all about it.

http://www.wsj.com/articles/blockchain-payments-company-raises-60-million-for-push-into-china-1466679772

Blockchain Payments Company Raises $60 Million for Push Into China

Circle Internet Financial Ltd., maker of an app that lets people send money to each other via bitcoin’s blockchain—the Internet network underlying the digital currency—says it is heading to China.

… Circle has already secured licenses in the U.S. and U.K. to swap dollars, pounds, euros and bitcoins via the Blockchain.

There must be an App to help shareholders dig out information like this. If not, can we create one?

http://www.fool.com/investing/2016/06/22/how-bad-management-led-to-american-express-costco.aspx

How Bad Management Led to American Express' Costco Disaster

On Feb. 15, 2015, American Express CEO Ken Chenault announced that the company was walking away from its co-branded credit card partnership with Costco. The market responded immediately, sending the stock down 6%. This month, as Costco completes its transition to Visa, American Express' stock has continued its downward spiral. Amex stock today is down over 21% since the announcement.

Blame for this fiasco is squarely on the shoulders of American Express management. The company knowingly created large customer concentrations, ignored the risks of this overreliance, and ultimately erased over $40 billion in shareholder value as key customers walked away from the company over the last 18 months.

When American Express first disclosed the end of its Costco partnership last year, management told shareholders for the first time that 10% of the 112 million American Express cards in circulation were co-branded with Costco. For a company of American Express' size and sophistication, that is a shocking concentration to have in any one customer.

Perspective.

https://www.buzzfeed.com/carolineodonovan/internal-uber-driver-pay-numbers?utm_term=.wiPDWxOw0#.py76a40Nb

Uber Data And Leaked Docs Provide A Look At How Much Uber Drivers Make

Uber says that its drivers are as much its customers as its passengers are, and that its ride-hail platform is a path to personal freedom and financial independence. In 2013, the company told the Wall Street Journal that the “typical” Uber driver takes in more than $100,000 in annual gross fares. (Uber now disputes this characterization.)

More recently, Uber chief adviser and board member David Plouffe has touted the ride-hail platform as a pathway to a modest, more attainable American dream. But according to leaked internal price modeling data, and Uber’s own calculations provided to BuzzFeed News in response to that leak, drivers in some markets don’t take home much more than service workers at major chains like Walmart when it comes to net pay.

… Based on these calculations, it’s possible to estimate that Uber drivers in late 2015 earned approximately $13.17 per hour after expenses in the Denver market (which includes all of Colorado), $10.75 per hour after expenses in the Houston area, and $8.77 per hour after expenses in the Detroit market, less than any earnings figure previously released by the company.

Perspective.

http://www.cnet.com/news/amazon-leapfrogs-to-third-biggest-video-streamer-by-traffic/

Amazon leapfrogs to third biggest video streamer by traffic

… Amazon Video accounted for 4.3 percent of downstream internet traffic during peak evening viewing hours in North America, according to network equipment maker Sandvine in its twice-yearly Global Internet Phenomena Report Wednesday.

That's still far behind the 35.2 percent of traffic that Netflix gobbles up, and the 17.5 percent commanded by YouTube. But Amazon's No. 3 ranking is a leap from eighth place a year ago.

This too seems to be a management error but it raises the question: Are chargers really cheap enough to add to disposable packaging? What is next? Wheaties chargers?

http://hothardware.com/news/kfc-india-debuts-takeout-box-that-doubles-as-a-greasy-smartphone-charger

KFC India Debuts Takeout Box That Doubles As A Greasy, Craptastic Smartphone Charger

… KFC India has debuted a limited edition version of its 5-in-1 combo, which comes in what’s called a Watt a Box. Besides the greasy chicken and sides that you’d usually find inside your meal box, there’s also a 6100 mAh power bank that can be used to recharged your Android smartphone or iPhone (both microUSB and Lightning cables are included).

For my geeky students?

http://www.cnet.com/news/want-to-develop-an-app-but-have-no-expertise-google-now-has-a-course-for-you/

Want to develop an app but have no expertise? Google now has a course for you

… The company on Wednesday launched an app-development course with online university Udacity, aimed specifically at the building of apps for its Android operating system. The difference between this and other Google-approved programs is that this one is aimed at people with no previous development experience.

… The course outline says that it takes 165 hours to complete -- that's around 21 days of full-time study (for 8 hours per day). It also adds that the "base salary" of an Android developer falls between $52,400 and $136,000 in the US.

(Related). Perhaps we could create an App to run these Apps?

http://www.makeuseof.com/tag/13-ways-earn-extra-money-smartphone/

13 Ways to Earn Extra Money With Your Smartphone

Are Money-Making Apps Worth It?

The definition of “worth it” depends on what you’re expecting. For a college student or a stay-at-home parent, these apps may be the difference between living like a pauper or a king.

Here are three things to keep in mind:

1. It’s pocket change at best. Even if you sink in full-time hours, you won’t be earning a full-time income. These apps can be used to fund hobbies or help you get out of debt, but that’s about it.

2. Time-value is low. Are you willing to spend 10 hours on your phone to earn $50? For some people, an hour of leisure is worth more than that, even if the cash is low-effort. Figure out how much one hour is worth to you before diving in.

3. Payout thresholds. Most apps require you to earn a certain amount of dollars before you can request a payout — and these thresholds can be as high as $50 or $100 sometimes. That’s a big commitment, and many don’t make it that far.

If you’re still interested, great! Here are some of the better ones we’ve found. Even if you don’t like all of them, we’re sure you’ll find at least one or two that intrigue you.

Wednesday, June 22, 2016

Interesting on several levels. Look at how politicians (not just the Clintons) deflect this and compare it to the really bad job Sony did when faced with a similar breach and disclosure.

http://www.bloomberg.com/news/articles/2016-06-21/clinton-foundation-said-to-be-breached-by-russian-hackers

Clinton Foundation Said to Be Breached by Russian Hackers

The Bill, Hillary and Chelsea Clinton Foundation was among the organizations breached by suspected Russian hackers in a dragnet of the U.S. political apparatus ahead of the November election, according to three people familiar with the matter.

The attacks on the foundation’s network, as well as those of the Democratic Party and Hillary Clinton’s presidential campaign, compound concerns about her digital security even as the FBI continues to investigate her use of a personal e-mail server while she was secretary of state.

Clinton Foundation officials said the organization hadn’t been notified of the breach and declined to comment further. [The whole world knows, but they “haven’t been notified.” Bob]

… Before the Democratic National Committee disclosed a major computer breach last week, U.S. officials informed both political parties and the presidential campaigns of Clinton, Donald Trump and Bernie Sanders that sophisticated hackers were attempting to penetrate their computers, according to a person familiar with the government investigation into the attacks.

The hackers in fact sought data from at least 4,000 individuals associated with U.S. politics -- party aides, advisers, lawyers and foundations -- for about seven months through mid-May, according to another person familiar with the investigations.

… The Republican Party and the Trump campaign have been mostly silent on the computer attacks. In an earlier statement, Trump said the hack was a political ploy concocted by the Democrats.

… If the Democrats can show the hidden hand of Russian intelligence agencies, they believe that voter outrage will probably outweigh any embarrassing revelations, a person familiar with the party’s thinking said.

… Bloomberg News reported Friday that the hackers who hit the DNC and Clinton’s campaign burrowed much further into the U.S. political system than initially thought, sweeping in law firms, lobbyists, consultants, foundations and policy groups in a campaign that targeted thousands of Google e-mail accounts and lasted from October through mid-May.

There’s an App for that!

http://www.makeuseof.com/tag/this-windows-app-alerts-you-when-your-accounts-are-hacked/

This Windows App Alerts You When Your Accounts Are Hacked

Unfortunately, data breaches are increasingly common these days, and even huge websites like LinkedIn are falling to hackers.

It’s important to know if you’ve had any of your accounts compromised, and we can attest that some websites that check your email address against known breaches are great tools to stay informed.

Sites like Have I Been Pwned? are great, but if you have to manually check it from time to time to know if you’ve been attacked, you might miss a critical notification. The Windows 10 app Hacked?, powered by Have I Been Pwned? (HIBP?), will check your email address twice a day for breaches.

… If you’re not on Windows 10 yet, you can also use the main page of HIBP to regularly check for new breaches. Just click the Notify me button at the top to get alerts, similar to the Modern app.

https://haveibeenpwned.com/

There’s nothing like a good debate to wake my students up!

Tech Companies Fight Back After Years of Being Deluged With Secret FBI Requests

The Federal Bureau of Investigation, the Department of Justice, and technology and internet companies have been waging a little-known war for years over how much information companies are obligated to hand over about customers during national security investigations — absent a court order.

In early June, when Yahoo disclosed three secret government requests for customer information — called national security letters — one of those requests revealed that the FBI might have been exceeding its authority by asking for email records, such as headers or browsing information, in addition to basic subscriber information.

While the revelation that the FBI kept asking for those records surprises some academics, lawmakers, and privacy advocates – national security attorneys and large technology companies have known about the problem for years, and have been arguing with FBI attorneys over what’s allowed and what’s not.

Revising the recently revised revisions to changed FAA rules. These may be tentative.

http://www.bespacific.com/faa-issues-new-commercial-drone-rules/

FAA issues new commercial drone rules

by Sabrina I. Pacifici on Jun 21, 2016

“The Federal Aviation Administration (FAA) is amending its regulations to adopt specific rules for the operation of small Unmanned Aircraft Systems (sUAS) in the National Airspace System (NAS) through a final rule. These changes address the classification of sUAS, certification of sUAS remote pilots, and sUAS operational limitations. This advisory circular (AC) provides guidance for conducting sUAS operations in the NAS in accordance with Title 14 of the Code of Federal Regulations (14 CFR) part 107.”

See 107-2 – Small Unmanned Aircraft Systems (sUAS)

So, Microsoft just won, right?

http://www.computerworld.com/article/3086839/security/microsoft-invokes-supreme-court-opinion-in-ireland-email-case.html?google_editors_picks=true

Microsoft invokes Supreme Court opinion in Ireland email case

… In a decision Monday in a separate case on the extraterritorial application of a provision of the Racketeer Influenced and Corrupt Organizations Act (RICO), the Supreme Court set out the ground rules for its analysis, pointing out that “absent clearly expressed congressional intent to the contrary, federal laws will be construed to have only domestic application.” The court was applying a canon of statutory construction known as the presumption against extraterritoriality.

It stated that the “the question is not whether we think ‘Congress would have wanted’ a statute to apply to foreign conduct ‘if it had thought of the situation before the court,’ but whether Congress has affirmatively and unmistakably instructed that the statute will do so."

Something I can pull from for my next IT Governance class. I’ll change the format, I don’t PowerPoint.

http://www.bespacific.com/looking-forward-corporate-governance-of-the-successful-21st-century-company/

Looking Forward: Corporate Governance of the Successful 21st Century Company

by Sabrina I. Pacifici on Jun 21, 2016

da Silveira, Alexandre Di Miceli, Looking Forward: Corporate Governance of the Successful 21st Century Company (Presentation Slides) (June 20, 2016). Available for download at SSRN: http://ssrn.com/abstract=279828

“This is a PPT presentation that discusses what is coming next on corporate governance (CG) and in which ways the successful business of the 21st century will differ from its successful 20th century counterpart. The presentation is divided into five key messages:

1) This is a moment of lower trust in big business around the world due to successive financial crises, CG misconducts, and politically-related corruption scandals;
2) There is an increasingly criticism on the standard narrative for CG based on shareholder value maximization;
3) One of the few consensuses in this changing world is that stakeholders have increasingly higher expectations about the role of companies in society;
4) There is a new approach for CG and the successful business of the 21st century based on: ethical culture & intrinsic values, stakeholder orientation, and conscious capitalism; and,
5) There is growing evidence that adopting this new approach to CG pays off.”

Interesting, but we’ve been teaching these languages for decades.

http://www.marketwatch.com/story/half-of-the-high-paying-jobs-in-america-now-require-this-skill-2016-06-21?reflink=MW_GoogleNews&google_editors_picks=true

Half of the high-paying jobs in America now require this skill

If terms like SQL, Python and JavaScript aren’t on your radar, employers may not be interested in hiring you.

Roughly half of the jobs in the top income quartile — defined as those paying $57,000 or more per year — are in occupations that commonly require applicants to have at least some computer coding knowledge or skill, according to an analysis of 26 million U.S. online job postings released this month by job market analytics firm Burning Glass and computer science education firm Oracle Academy in Redwood City, Calif. In simple terms, coders write the instructions that tell computers what to do; in-demand programming languages include SQL, Java, JavaScript, C# and Python.

… However, there is good news for those without coding skills: You can acquire these skills without having to study computer science in college — sometimes for free. CodeAcademy is one of the better programs, according to technology magazine Wired (and its free), but there are plenty of others, including Girl Develop It and Udacity.

We have a 3D printer and I have a key to the room it’s locked in…

http://www.makeuseof.com/tag/10-educational-toys-can-3d-print/

10 Educational Toys You Can 3D Print

Tuesday, June 21, 2016

An interesting article. My concern, as a Computer Security manager would be that their hackers have found a less detectable method of hacking into my systems. But that does not stop everyone involved (or not) from claiming success!

http://www.nytimes.com/2016/06/21/us/politics/china-us-cyber-spying.html?_r=0

Chinese Curb Cyberattacks on U.S. Interests, Report Finds

Nine months after President Obama and President Xi Jinping of China agreed to a broad crackdown on cyberespionage aimed at curbing the theft of intellectual property, the first detailed study of Chinese hacking has found a sharp drop-off in almost daily raids on Silicon Valley firms, military contractors and other commercial targets.

But the study, conducted by the iSight intelligence unit of FireEye, a company that manages large network breaches, also concluded that the drop-off began a year before Mr. Obama and Mr. Xi announced their accord in the White House Rose Garden. In a conclusion that is largely echoed by American intelligence officials, the study said the change is part of Mr. Xi’s broad effort to bring the Chinese military, which is considered one of the main sponsors of the attacks, further under his control.

Another “must have” surveillance App? Do the people who buy these know what they are doing?

http://spectrum.ieee.org/cars-that-think/transportation/sensors/the-ai-dashcam-app-that-wants-to-rate-every-driver-in-the-world

The AI Dashcam App That Wants to Rate Every Driver in the World

If you’ve been out on the streets of Silicon Valley or New York City in the past nine months, there’s a good chance that your bad driving habits have already been profiled by Nexar. This U.S.-Israeli startup is aiming to build what it calls “an air traffic control system” for driving, and has just raised an extra $10.5 million in venture capital financing.

Since Nexar launched its dashcam app last year, smartphones running it have captured, analyzed, and recorded over 5 million miles of driving in San Francisco, New York, and Tel Aviv. The company’s algorithms have now automatically profiled the driving behavior of over 7 million cars, including more than 45 percent of all registered vehicles in the Bay Area, and over 30 percent of those in Manhattan.

Using the smartphone’s camera, machine vision, and AI algorithms, Nexar recognizes the license plates of the vehicles around it, and tracks their location, velocity, and trajectory. If a car speeds past or performs an illegal maneuver like running a red light, that information is added to a profile in Nexar’s online database. When another Nexar user’s phone later detects the same vehicle, it can flash up a warning to give it a wide berth. (This feature will go live later this year.)

… Nexar estimates that if 1 percent of drivers use the app daily, it would take just one month to profile 99 percent of a city’s vehicles. “We think that it’s a service to the community to know if you’re a crazy driver or not,” says Shir.

That community includes insurance companies, who Nexar suggests could save billions by cherry-picking only the best drivers to cover.

Security(?) at the cost of your privacy? Was the Privacy Policy language deliberate? What would you do with videos of someone’s home?

Guardzilla has eyes even when you don’t!

From the not-exactly-a-glowing-review dept., SLC Security writes:

Look familiar? Well this device started showing up in all the big box retailers last year so we decided to give one a try. Hooking the device up to a EVDO hotspot on Verizon was interesting at best. During our testing we discovered that the device streams continuously back to Guardzilla (even if you don’t subscribe to their monitoring) all the time. So this “security” device has some serious “privacy” issues.
[…]
Here’s the problem. Even when you don’t subscribe to the recording and playback features offered by Guardzilla the devices still stream to Guardzilla and we assume that the video is being stored otherwise why would you send it? What tipped us off was the fact that the device uses nearly 1GB of bandwidth per day even when your not viewing the camera. So basically your allowing Guardzilla to see into your protected space and to hear everything that goes on in this space because these devices are constantly streaming even when you are not using them.
Read more on SLC Security. In an update, they state that Guardzilla confirmed that that’s how the device operates.
I wonder what the FTC would say about all this.

[From the article:

The Guardzilla Privacy Policy:

Practecol takes reasonable efforts to ensure that your personal information is protected while you use the Services. [Not while you don’t? Bob]

Oh and theres this line:

Also, video, audio, and other information received or recorded by your Guardzilla device may be stored on our servers or the servers of third parties.

Another surveillance technique? (Beware of perverts/stalkers bearing gifts?)

Can the previous owner of your security camera spy on you? Webcam privacy scare highlights Internet of Things security difficulties

Caleb Chen writes:

Over the weekend, the security community heard rumors about a potential issue with the NETGEAR Internet of Things wireless security camera. A user reported to the privacy subreddit that after returning the device and not uninstalling the app or deleting an account, the user was still able to see camera footage from the new owner’s camera – a clear privacy breach. The user accuses NETGEAR of having poorly planned out processes for change of ownership scenarios. The reaction from the tech community lacked disbelief and sympathy. Many others reported similar issues with brands other than NETGEAR. In fact, there are websites that list all the world’s internet of things (IoT) cameras that are plugged in but not configured to keep the world out.

Centennial Man

Saturday, June 25, 2016

Friday, June 24, 2016

Thursday, June 23, 2016

Wednesday, June 22, 2016

Tuesday, June 21, 2016

Search This Blog

Followers

Blog Archive

Links

About Me