http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2013-06-04 07:24:49 - philosecurity : The phone rang Two different companies had been hacked, both in the same way The first was a very large corporation we ll call it Worldwide Company, Inc which managed hundreds of millions of dollars online The second was a small business that handled financial transactions we ll call them Local LLC The bank shut down both http://www.secuobs.com/revue/news/449155.shtmlhttp://www.secuobs.com/revue/news/449155.shtml Secuobs.com : 2010-02-24 00:19:14 - philosecurity - I m preparing to spend one week without buying or throwing away anything plastic This experiment was inspired by the movie Tapped, which artfully shows the terrible environmental damages, health risks and social conflicts caused by the mass manufacture and waste of plastics The first step is to list all of the necessities I typically use in http://www.secuobs.com/revue/news/194874.shtmlhttp://www.secuobs.com/revue/news/194874.shtml Secuobs.com : 2010-02-22 12:13:32 - philosecurity - As the global conflict for resources heats up, the Internet is just another battleground Last weekend I watched a terrific documentary about the bottled water industry called Tapped The second half of the movie is an intensive look at the plastic bottle manufacturing industry, and the enormous damage that these petroleum-based products cause to our http://www.secuobs.com/revue/news/194083.shtmlhttp://www.secuobs.com/revue/news/194083.shtml Secuobs.com : 2010-02-08 23:46:16 - philosecurity - Mike, the owner of a midsized web-hosting company, talks about the effects of the Payment Card Industry Data Security Standard PCI DSS on web hosting companies and small online merchants who are his customers s If PCI DSS were enforced today, what would happen m Well, all the small businesses would lie Right If you re a small outfit, and http://www.secuobs.com/revue/news/189776.shtmlhttp://www.secuobs.com/revue/news/189776.shtml Secuobs.com : 2010-02-01 09:57:37 - philosecurity - There s a wonderful quote in the Hitchhiker s Guide to the Galaxy The Ravenous Bugblatter Beast of Traal is a mindboggingly stupid animal, it assumes that if you can t see it, it can t see you- daft as a bush, but very ravenous Here on the Internet, we face a related problem Every time we type something into http://www.secuobs.com/revue/news/187208.shtmlhttp://www.secuobs.com/revue/news/187208.shtml Secuobs.com : 2010-01-25 01:59:21 - philosecurity - Recently, a friend of mine received a letter from Bank of America informing her that some credit card information on your Bank of America account may have been compromised at an undisclosed third-party location The letter went on to state that BofA had reviewed her account and saw no evidence that your account has been http://www.secuobs.com/revue/news/184956.shtmlhttp://www.secuobs.com/revue/news/184956.shtml Secuobs.com : 2010-01-03 01:16:06 - philosecurity - If your medical data, credit card number, Social Security number, personal email, or other information were stolen, would you even know about it After ten years handling incident response and forensics, I ve been repeatedly shocked at the number of times that organizations sweep data breaches under the rug When upper management is notified of a http://www.secuobs.com/revue/news/177588.shtmlhttp://www.secuobs.com/revue/news/177588.shtml Secuobs.com : 2009-12-30 07:45:19 - philosecurity - Governments store and gather a lot of private information about everyday citizens, in order to provide you with services such as health, transportation, safety, education, taxation, and much more How much of this will be handed over to private IT companies such as Google in the rush to the cloud What will happen to http://www.secuobs.com/revue/news/176659.shtmlhttp://www.secuobs.com/revue/news/176659.shtml Secuobs.com : 2009-12-24 23:25:40 - philosecurity - Recently I saw an ad which read Over 60pourcents of the US state governments have gone Google Does this mean that we ve now handed the majority of our state governments operational data to a single privately-controlled company which has well-publicized partnerships with other governments such as China To find out more, I contacted Google s press department A representative http://www.secuobs.com/revue/news/175702.shtmlhttp://www.secuobs.com/revue/news/175702.shtml Secuobs.com : 2009-11-25 23:47:01 - philosecurity - Hand-printed and designed by the talented Blake Brasher of Solid State Circus, this original T-shirt is for those of you who want to Go to a club or buy beer without having your ID swiped and all your personal details stored in the store s crappy unpatched Windows box Visit the doctor without having a high-res scan of http://www.secuobs.com/revue/news/165327.shtmlhttp://www.secuobs.com/revue/news/165327.shtml Secuobs.com : 2009-11-23 02:06:59 - philosecurity - Today is the final day to submit solutions for the Network Forensics Puzzle Contest 2 Ann Skips Bail The winner will receive a Lenovo IdeaPad S10-2 just like the free netbooks Sec558 students will get in Orlando The MOST ELEGANT solution wins Good luck After being released on bail, Ann Dercover disappears Fortunately, investigators http://www.secuobs.com/revue/news/163984.shtmlhttp://www.secuobs.com/revue/news/163984.shtml Secuobs.com : 2009-11-19 14:50:33 - philosecurity - Until the first blow fell, no one was convinced that Penn Station really would be demolished, or that New York would permit this monumental act of vandalism against one of the largest and finest landmarks of its age of Roman elegance Its destruction left a deep and lasting wound in the architectural consciousness of the city http://www.secuobs.com/revue/news/162969.shtmlhttp://www.secuobs.com/revue/news/162969.shtml Secuobs.com : 2009-11-18 13:12:57 - philosecurity - I really loved Robert Graham s article about the Brazilian power outages He writes Most rumors of hacker infiltrations are false If you investigate computers in any large organization hard enough, you ll find malware This doesn t mean hackers have broken in, because most viruses are not under control of the hacker who launched them Also, things get http://www.secuobs.com/revue/news/162499.shtmlhttp://www.secuobs.com/revue/news/162499.shtml Secuobs.com : 2009-11-16 07:01:34 - philosecurity - Today a traveler going through the Albuquerque airport was detained and is reportedly in the process of arrest after politely refusing to show his ID Phil Mocek, a Seattle area native, was traveling with his friend Jesse Gallagos when he politely declined to show ID to TSA agents According to reports from friend Ben Livingston, Phil http://www.secuobs.com/revue/news/161100.shtmlhttp://www.secuobs.com/revue/news/161100.shtml Secuobs.com : 2009-09-26 06:52:29 - philosecurity - Congratulations to all of our rock star investigators who solved the Network Forensics Puzzle Contest We received over 100 submissions, many of which were truly excellent Figuring out a winner was challenging, but in the end, one submission stood out over all We asked you for the most elegant solution It was possible to solve http://www.secuobs.com/revue/news/144701.shtmlhttp://www.secuobs.com/revue/news/144701.shtml Secuobs.com : 2009-09-19 18:12:42 - philosecurity - To our excellent contestants, We received so many great contest entries, including custom-written tools, that we will be taking a few more days to finish testing all of the code we received The winner will be announced on the PaulDotCom podcast next Thursday and posted on this site Great job everybody Stay tuned Did you like http://www.secuobs.com/revue/news/142555.shtmlhttp://www.secuobs.com/revue/news/142555.shtml Secuobs.com : 2009-09-13 00:00:59 - philosecurity - Today a local liquor store decided to swipe my identification card into their computer systems for the first time Here s my response To the management of Local Liquor Store , I ve been a customer of your store for about a year now My husband and I stop by to stock up for parties Your staff are always http://www.secuobs.com/revue/news/140448.shtmlhttp://www.secuobs.com/revue/news/140448.shtml Secuobs.com : 2009-09-07 06:50:09 - philosecurity - Here s a real copy of an American citizen s DHS Travel Record retrieved from the US Customs and Border Patrol s Automated Targeting System ATS This was obtained through a FOIA Privacy Act request and sent in by an anonymous reader thanks The document reveals that the DHS is storing the reader s Credit card number and expiration really Full Name, http://www.secuobs.com/revue/news/138360.shtmlhttp://www.secuobs.com/revue/news/138360.shtml Secuobs.com : 2009-08-20 14:16:48 - philosecurity - SANS is sponsoring a prize for our Network Forensics Puzzle Contest The winner gets a free SANS On-Demand class worth up to 3500 depending on the class you pick Prizewinners will be announced during the Sec558 Network Forensics class in San Diego, 9 16-9 18 Remember, the MOST ELEGANT solution wins We highly encourage coding and automated solutions http://www.secuobs.com/revue/news/132763.shtmlhttp://www.secuobs.com/revue/news/132763.shtml Secuobs.com : 2009-08-14 21:28:41 - philosecurity - Prizewinner to be announced at Sec558 Network Forensics in San Diego, 9 16-9 18 Anarchy-R-Us, Inc suspects that one of their employees, Ann Dercover, is really a secret agent working for their competitor Ann has access to the company s prize asset, the secret recipe Security staff are worried that Ann may try to leak the company s secret recipe Security http://www.secuobs.com/revue/news/131013.shtmlhttp://www.secuobs.com/revue/news/131013.shtml Secuobs.com : 2009-08-07 07:26:09 - philosecurity - By Jonathan Ham How can you investigate a computer that isn t there any more No Hard Drive No Problem SANS Network Forensics Sec558 A lot has been written about methods for fingerprinting systems with active scanning methods eg nmap These of course require that the system be actively reachable, and that you don t mind totally giving away http://www.secuobs.com/revue/news/128776.shtmlhttp://www.secuobs.com/revue/news/128776.shtml Secuobs.com : 2009-08-05 04:19:12 - philosecurity - Here s where you can download my scary DEFCON presentation Reverse of the United States Great SealNovus Ordo Seclorum A New Order of the Ages Death of Anonymous Travel DEFCON 2009 PDF MD5sum c772681c37c9ad5d210c19c12eb43095 Thanks to everyone who sent in comments, suggestions, and encouragement Special thanks to the EFF lawyers for reviewing this beforehand you guys rock I ll have the full http://www.secuobs.com/revue/news/128024.shtmlhttp://www.secuobs.com/revue/news/128024.shtml Secuobs.com : 2009-07-30 02:24:15 - philosecurity - Bobby Dominguez wrote in to report on how the DHS is automatically collecting full travel itineraries, including hotel reservations, from electronic booking systems He writes I recently requested my file from the Dept of Homeland Security Customs It was interesting to see that they not only knew every flight I took, but also http://www.secuobs.com/revue/news/126347.shtmlhttp://www.secuobs.com/revue/news/126347.shtml Secuobs.com : 2009-07-16 01:50:38 - philosecurity - TSA works to create international harmonization of security I did not make that up Snapped this photo last week in Japan s Kansai International Airport http://www.secuobs.com/revue/news/121216.shtmlhttp://www.secuobs.com/revue/news/121216.shtml Secuobs.com : 2009-07-14 11:40:02 - philosecurity - The Bush Turnpike in Texas no longer accepts cash as of July 1, 2009 Based on the federal Coinage Act of 1965, I believe this is clearly illegal The Coinage Act 31 USC 5103 states United States coins and currency including Federal reserve notes and circulating notes of Federal reserve banks and national banks http://www.secuobs.com/revue/news/120312.shtmlhttp://www.secuobs.com/revue/news/120312.shtml Secuobs.com : 2009-07-13 21:29:57 - philosecurity - This week I m trying to think positively about mass surveillance It seems inevitable, after all Iran s Web Spying Aided By Western Technology, read the front page of the Wall Street Journal a few weeks ago European Gear Used in Vast Effort to Monitor Communications Judging by the Intelligence Support Systems industry marketing brochures, Iran s monitoring center is http://www.secuobs.com/revue/news/119995.shtmlhttp://www.secuobs.com/revue/news/119995.shtml Secuobs.com : 2009-07-08 23:48:43 - philosecurity - Josh Wright recently purchased a new Kindle Surprisingly, when hedownloaded one of his books onto the new Kindle, it offered to open itto the page where he had left off on his old Kindle In other words,Amazon tracked not just the books he was reading, but specificallywhich sections of the http://www.secuobs.com/revue/news/118197.shtmlhttp://www.secuobs.com/revue/news/118197.shtml Secuobs.com : 2009-07-02 00:30:44 - philosecurity - This week I discovered that someone had opened up a new Chase card in myname Scouring the Chase site for the appropriate number to reportfraud, I stumbled onto their “Identity Protection” page and receivedthis rather ironic pop-up Click to enlarge Sherri DavidoffPGP-signed text: 2009-07-02 current Did you like this article Shareithttp://www.secuobs.com/revue/news/116062.shtmlhttp://www.secuobs.com/revue/news/116062.shtml Secuobs.com : 2009-07-01 05:33:33 - philosecurity - Saw this sign in the Baltimore airport last week: “Self-Service Check-In:You Will Need a Major Credit Card” and then in small print: “ForIdentification Only” Yes, apparently American Airlines will only giveboarding passes to individuals who have been thoroughly vettedaccording to the strict standards of American Express, Mastercard, orVISA and perhaps Discover Sherri Davidoff PGP-signed text: http://www.secuobs.com/revue/news/115681.shtmlhttp://www.secuobs.com/revue/news/115681.shtml Secuobs.com : 2009-06-30 00:18:05 - philosecurity - The illustrious John Strand has an update for us regarding Verizon’s demoEVDO system security This summer John is launching his new SANSclass, Security Architecture for Systems Administrators Shortly afterwe posted the article about the openness of the Verizon EVDOdemonstration terminals, we were contacted by Verizon Afterdiscussing the issue at length http://www.secuobs.com/revue/news/115025.shtmlhttp://www.secuobs.com/revue/news/115025.shtml Secuobs.com : 2009-06-10 12:41:31 - philosecurity - John Strand is the author of this week’s article John is the owner ofBlack Hills Information Security and a member of PaulDotCom SecurityWeekly He is also a SANS Instructor and a regular presenter atvarious security conferences Last week I was plucking around at mylocal Verizon Wireless store looking for a http://www.secuobs.com/revue/news/107902.shtmlhttp://www.secuobs.com/revue/news/107902.shtml Secuobs.com : 2009-05-29 02:53:54 - philosecurity - Walking into the doctor’s office, I was surprised to see a new sign infront of the receptionist, which read: “Red Flag Identity Theft RuleWe are now required by law to ask for a Photo ID at the time of eachvisit Please have your Photo ID ready for the receptionist to scan”As an http://www.secuobs.com/revue/news/102913.shtmlhttp://www.secuobs.com/revue/news/102913.shtml Secuobs.com : 2009-05-18 06:39:37 - philosecurity - On May 15, the first phase of TSA’s Secure Flight program took effectafter years of development By the end of the year, when you book aflight, the airline will send your name as specified on yourgovernment-issued ID, birthdate, gender, and itinerary to TSA’scentralized Secure Flight system, where you will be checked http://www.secuobs.com/revue/news/97522.shtmlhttp://www.secuobs.com/revue/news/97522.shtml Secuobs.com : 2009-05-11 10:15:57 - philosecurity - Today I got a charming letter in the mail from Citibank informing methat: “A paper trail is an identity thief’s best friend Sign up forpaperless statements and you can rest easy knowing all your accountinformation is locked away safely online” Ahahahahaha…ha… ha… When’sthe last time you heard about millions of credit card http://www.secuobs.com/revue/news/94321.shtmlhttp://www.secuobs.com/revue/news/94321.shtml Secuobs.com : 2009-04-26 22:57:46 - philosecurity - Sherri Davidoff PGP-signed text: 2009-04-26 current Last week, theevening before speaking at the RSA Conference in San Francisco, we sawa large black suitcase sitting by the main entrance of the CourtyardMarriott It appeared to have been left behind by an unfortunatetraveler We walked up to the front desk to let the hotel know “Oh,”http://www.secuobs.com/revue/news/88429.shtmlhttp://www.secuobs.com/revue/news/88429.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - United Airlines stock temporarily lost more than $1 billion in value lastweek, due to an “accidental” reposting of an old news article whichindicated that UA was bankrupt From the New York Times: “An erroneousheadline that flashed across trading screens Monday, saying United hadfiled for a second bankruptcy, sent the airline’s stock plummetinghttp://www.secuobs.com/revue/news/85432.shtmlhttp://www.secuobs.com/revue/news/85432.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - Driving across the country, we took a quick detour into Michigan off ofI-90 We stopped at a gas station to fill up As we pulled up to thepump, Jonathan noticed that the handle was topped with a plastic bag“Looks like this one’s closed” Oddly enough, all the pump handleswere covered with plastic http://www.secuobs.com/revue/news/85431.shtmlhttp://www.secuobs.com/revue/news/85431.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - A few months ago I walked into Radio Shack, looking for a short-range FMtransmitter I asked the woman behind the counter if the store sold FMtransmitters “I don’t know,” she frowned “The Internet’s down Ican’t access our product catalog” Gah Weeks later, I walked into aU-Haul to rent a truck The computers http://www.secuobs.com/revue/news/85430.shtmlhttp://www.secuobs.com/revue/news/85430.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - Early one recent Sunday, I took the train from Boston to New York City tovisit the Transit Museum When I arrived in New York, it was still tooearly for the museum to be open I decided to step outside at PennStation and grab a sandwich I was surprised to see these signs: “NYPDSecurity http://www.secuobs.com/revue/news/85429.shtmlhttp://www.secuobs.com/revue/news/85429.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - Last week, the NSA was granted a patent which supposedly allows them to“Spot Network Snoops”1 At first glance, the patent seems ratherobscure and boring However, it could have major implications foranonymity and privacy on the Internet Back in 2005, the same NSAinventor, Michael Reifer, and a colleague were granted a http://www.secuobs.com/revue/news/85428.shtmlhttp://www.secuobs.com/revue/news/85428.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - You can tell a lot about a company’s information security posture in 30seconds As a security consultant, I’m often amazed at how much I caninfer from a simple walk between the front door and the conferenceroom If you see many computers of the same make and model with thesame type of label, http://www.secuobs.com/revue/news/85427.shtmlhttp://www.secuobs.com/revue/news/85427.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - Sign on the old historical archive in Santa Fe, New Mexico One chillyday last September, United Airlines’ stock temporarily crashed morethan $1 billion due to an accidental re-release of an old news reportabout its 2002 bankruptcy The New York Times reported that “shares ofUnited traded at one cent… down 9992 percent, or http://www.secuobs.com/revue/news/85426.shtmlhttp://www.secuobs.com/revue/news/85426.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - The motto on the very first official United States coin was “Mind YourBusiness” Designed by Benjamin Franklin in 1787, the front of thecoin also bore a picture of the sundial with with word Fugio Latin,“I fly” Franklin was fond of aphorisms, and the design has beentaken to mean, “Time Flies, Mind http://www.secuobs.com/revue/news/85425.shtmlhttp://www.secuobs.com/revue/news/85425.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - Credit bureaus and credit card companies have direct control over therisk of identity theft They control the systems for granting andrescinding credit, including fundamental mediums for communication andrelated security features Oddly, that doesn’t stop them from tryingto profit when things go wrong Credit companies strongly push theiridentity theft “protection” services, http://www.secuobs.com/revue/news/85424.shtmlhttp://www.secuobs.com/revue/news/85424.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - One midsummer night in 1977, the power went out in New York City“Thousands of people took to the streets and smashed store windowslooking for TVs, furniture, or clothing… The police made 3,776arrests, although…many thousands escaped before being caught 1,037fires burned throughout the City…” Blackout History Project Thetroublemakers weren’t faceless terrorists but http://www.secuobs.com/revue/news/85423.shtmlhttp://www.secuobs.com/revue/news/85423.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - Last week marked the original official deadline for the DigitalTelevision Transition, after which analog television broadcasts wouldbe terminated The official deadline was recently extended to June12, 2009 To ease the transition, the US government launched the TVConverter Box Coupon Program, which “allows US households to obtainup to two coupons, each http://www.secuobs.com/revue/news/85422.shtmlhttp://www.secuobs.com/revue/news/85422.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - The National Drug Intelligence Center has developed software calledahem “HashKeeper” “as its principal tool to expedite the analysis ofelectronic media” Hahahaha… Apparently, “HashKeeper is availablefree of charge” Contact the National Drug Intelligence Center formore information National Drug Intelligence Center c/o Mr SteveGironda Telephone: 814-532-4987 E-mail: ndicdomexrequest@usdojgovHat tip to John Masterson Sherri Davidoff PGP-signed text: 2009-03-01current Did http://www.secuobs.com/revue/news/85421.shtmlhttp://www.secuobs.com/revue/news/85421.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - For $40, anyone can purchase a cheap wireless AP and plug it into thecompany network Often, employees do this simply for the sake ofconvenience, not realizing that it opens the company to attackCriminals also deliberately plant wireless access points, which allowthem to bypass the pesky firewall and remotely access the networkhttp://www.secuobs.com/revue/news/85420.shtmlhttp://www.secuobs.com/revue/news/85420.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - No matter where you go, your computer leaves footprints on the networkWhen you connect to the network, logon to your workstation, or surfthe web, these activities leave trails throughout your employer orISP’s network– even when the administrators are not deliberatelytrying to monitor your activity Forensic analysts traditionally focuson hard http://www.secuobs.com/revue/news/85419.shtmlhttp://www.secuobs.com/revue/news/85419.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - In the great debates of Pirates vs Ninjas and Emacs vs Vi, there is oneoverarching question: Do Pirates and Ninjas use Emacs or ViPhilosecurity has conducted countless hours of research, interviewedreal ninjas and pirates in their natural environs, and launchedintensive laboratory studies involving monkeys in order to bring you,our readers, the scientifically http://www.secuobs.com/revue/news/85418.shtmlhttp://www.secuobs.com/revue/news/85418.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - This week, IBM ran a full-page ad in the Wall Street Journal, whichadvertised that: New York’s “Real Time Crime Center can quickly querymillions of pieces of information to uncover previously unknown datarelationships and points of connection” In Poland “personal andvehicle IDs can be instantly checked in an EU-wide database” InChicago: city http://www.secuobs.com/revue/news/85417.shtmlhttp://www.secuobs.com/revue/news/85417.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - I love the Minneapolis airport For an information security geek, itnever fails to provide some interesting gem Wandering through theairport this week I ran across a Delta “Helpline” kiosk formerlyNorthwest’s Rebook Service Center Every time I walk through theairport I see these gray kiosks closed up and pushed aside in http://www.secuobs.com/revue/news/85416.shtmlhttp://www.secuobs.com/revue/news/85416.shtml Secuobs.com : 2009-04-20 05:26:53 - philosecurity - Cephalopod autopsies Nope, today’s article is about conducting forensicson a Squid web proxy/cache Just as complicated, but less smellyChances are pretty good that you’re reading this page through a webproxy right now, especially if you’re in an enterprise environmentWeb proxying and caching have become increasingly popular, for bothfiltering traffic and speeding http://www.secuobs.com/revue/news/85415.shtmlhttp://www.secuobs.com/revue/news/85415.shtml