techinsidr

Has anyone tried to verify this?

Beklin is stating they fixed the vulnerabilities BEFORE yesterday's disclosure..but they didn't go a great job telling anyone:

http://www.securityweek.com/belkin-security-fixes-were-alrea...

This may help: http://www.bishopfox.com/blog/2013/10/linkedin-intro/

and the blog post announcing it: https://engineering.linkedin.com/mobile/linkedin-intro-doing...

Good! Intro is a Security and privacy disaster:

[Podcast: Understanding the Dangers of LinkedIn Intro] http://www.securityweek.com/podcast-understanding-dangers-li...

It's likely a windows-based platform, as Windows has been almost exclusively the platform targeted by memory parser POS malware.

An interesting example of how through correlation and context, metadata can reveal more than you'd think....

http://www.securityweek.com/how-metadata-reveals-more-about-...

A few pieces here...

http://www.securityweek.com/south-korea-cyber-attacks-used-d...

http://blog.trendmicro.com/trendlabs-security-intelligence/s...

Seems to be really about misconfiguration and serving as a reminder for developers to check permissions on AWS buckets. While some data is obviously stored in public bucks for a reason, it's clear that much of the data Rapid7 was able to find in the "open" buckets was not intended to be made available to the public. It's not a security flaw with AWS, but an administrative oversight really, but at least a good reminder for everyone to go check their buckets :)

Seems to be working fine from Chicago...

Doesn't appear to be confirmed whatsoever. That rumor was based on an "anonymous" phone call. On Sunday, another report shows the complete opposite, with Belize officials denying any claims of his capture:

http://www.upi.com/Top_News/World-News/2012/12/02/Official-d...

According to the report, outages could actually get worse before they get better, particularly for mobile. Mainly because many wireless cells are on backup electric power, but running out of that backup power.

The Company sold 26.9 million iPhones in the quarter, representing 58 percent unit growth over the year-ago quarter. Apple sold 14.0 million iPads during the quarter, a 26 percent unit increase over the year-ago quarter. The Company sold 4.9 million Macs during the quarter, a 1 percent unit increase over the year-ago quarter. Apple sold 5.3 million iPods, a 19 percent unit decline from the year-ago quarter.

Exactly. And any update feature, which is typically built into most networking products, could enable a backdoor to be installed at a later date. Could be clean now, but doesn't mean always!

I think many startups and successful entrepreneurs can appreciated this part:

"...People like me who made all the right decisions and invested in themselves are being forced to bail out all the people who didn't. The people that overspent their paychecks suddenly feel entitled to the same luxuries that I earned and sacrificed 42 years of my life for."

This part is so true: "Obviously, our present government believes that taking my money is the right economic stimulus for this country. The fact is, if I deducted 50 percent of your paycheck you'd quit and you wouldn't work here. I mean, why should you? Who wants to get rewarded only 50 percent of their hard work? Well, that's what happens to me."

Excellent article.

Obama's Tweet leads to Reddit overload: http://www.reddit.com/r/IAmA/comments/z1c9z/i_am_barack_obam...

I'm not from FireEye, but XP is not the only OS vulnerable. Rapid7 has created an exploit for Metasploit and was able to successfully execute an attack against a fully patched Windows 7 SP1 with Java 7 Update 6.

http://www.securityweek.com/new-java-exploit-spotted-wild

Also, the email address (anon@prvt.org) in the post is dead and bounces with a 550 error.

http://www.securityweek.com/person-referencing-anonymous-cla...

This is the same old debate, and RIM HAS NOT handed over customer encryption keys -- they don't have access to them:

http://www.securityweek.com/rim-disputes-indian-media-cannot...

RIM has been saying the same thing for years, that it "does not have the ability to provide its customers’ encryption keys"

Probably because our sketchy senators tried to sneak gun control and abortion amendments into the cybersecurity bill:

http://www.securityweek.com/gun-abortion-amendments-stall-se...

It's well known that he is the largest Shareholder.

Especially a smaller (albeit well-off) company than some of the bigger ones who caved.

This story is incorrect to boot. It was Yahoo! VOICES with an (S) not Yahoo Voice.

I agree -- more people need to be aware of the Mobile spam reporting, it's actually quite cool.

I agree -- Sneaky, but probably not as malicious as most headlines are making it.

http://www.securityweek.com/sneaky-ios-malware-surfaces-app-...

Markus Jakobsson and Kim-Kwang Raymond Choo did an interesting experiment on this -- and their conclusion? Yes, these scammers really are usually from Nigeria.

http://www.securityweek.com/are-nigerian-scams-nigeria

A little more detail: http://www.securityweek.com/microsoft-unauthorized-certifica...

Seems as though there is some truth and some doubt. Perhaps not "Bogus" but rather "Over-Hyped" --

http://www.securityweek.com/china-wrongfully-accused-over-ba...

I've been using BBEdit since I had a Mac LC II. Great program and I still use it to this day. Glad it's still around!