Category: Tech

The cloud farms

Got farmed.

Traffic sent to and from Google, Facebook, Apple, and Microsoft was briefly routed through a previously unknown Russian Internet provider Wednesday under circumstances researchers said was suspicious and intentional.

Ironic that one of the protocols that allows the Internet to route around outages was used.

Uber hack

Uber concealed huge data breach of 57M users and drivers.

Uber did not report the incident to regulators or to affected customers, but instead paid $100,000 to “hackers” to get rid of the data in order to keep the breach under wraps, according to the report. It says further that no security numbers or trip location information was taken in the attack, and that it doesn’t believe the info that was leaked was ever used, though it doesn’t specify who was responsible.

This isn’t their first trip to the data breach penalty box. I wonder if they’ll get another $20k fine?

From the rooftops, sister.

Preach it.

“It’s not that I don’t like computing or I don’t like computers. I mean, I am a computer scientist,” she said. “Many of the leading opponents of paperless voting machines were, and still are, computer scientists, because we understand the vulnerability of voting equipment in a way most election officials don’t. The problem with cybersecurity is that you have to protect against everything, but your opponent only has to find one vulnerability.”

Related via Instapundit

Digital security is your business.

‘Terrified’ 60-year-old woman told to pay up for illegally downloading porn
Edit: Just to reinforce the lessons of the article, the demand for payment is legit, although unethical. The woman supposedly had her machine cracked, vector unknown. A file-sharing program was installed without her knowledge and it was sharing copyright material.
It’s the cost of being online. Buy/subscribe to anti-malware/anti-virus programs. Keep your machines up to date, upgrade the machines if the OS goes out of date.

Trust Nothing

A version of Piriform’s CCleaner was injected with a trojan during the build.

Based on further analysis, we found that the 5.33.6162 version of CCleaner and the 1.07.3191 version of CCleaner Cloud was illegally modified before it was released to the public, and we started an investigation process. We also immediately contacted law enforcement units and worked with them on resolving the issue. Before delving into the technical details, let me say that the threat has now been resolved in the sense that the rogue server is down, other potential servers are out of the control of the attacker, and we’re moving all existing CCleaner v5.33.6162 users to the latest version.

Equifax

It’s a biggie.

“This is massive,” said Paul Martini, chief executive officer of Iboss, a cybersecurity firm. “This overshadows any other breach that we’ve seen to date — not just the volume, the size, but the type of data that was in that database.”

Navigation