Imagine for a moment the following scenario: you’re the manager for a busy bank branch in a major city. You come back from lunch and are told by one of your employees that someone from corporate IT dropped by to check on a reported problem with a branch PC. You don’t remember putting in a trouble ticket with IT, but apparently the guy left after looking under a desk and re-plugging a network cable or something. It took less than five minutes. You think nothing of it and go back to approving loans. Three days later, you get a call from the head of corporate security, wanting to know why someone at your branch has been performing wire transfers from the accounts of customers who’ve never used your branch to accounts at offshore banks. A few hours later, you’re unplugging the bank’s network equipment while he’s shouting at you over the phone about gigabytes of corporate data being pulled down from something in your bank. And when the security team and police arrive to investigate, they find a little nondescript box plugged into a network port, connected to a broadband cellular modem. Something like this happened to banks in London last year . A man posing as an IT contractor wired networked keyboard-video-monitor (KVM) switches connected to cellular routers into PCs at two bank branches. The ring involved with the thefts was only caught because they decided to go for a third score, and their “technician” was caught in the act. The digital heists were a variation on the hacker “drop box” strategy: boldly walking into a place of business and planting a device, often hidden in plain sight, to use as a Trojan horse to gain remote access to the business’ network. Read 27 remaining paragraphs | Comments
Read more here:
Palm-sized pwnage: Ars tests the Pwn Plug R3
mpicpp sends this news from CNET: Reports are emerging that Samsung smart TVs have begun inserting short advertisements directly into video streaming apps, with no influence from the third-party app providers. The news comes just days after Samsung made headlines for another incursion into users’ lounge rooms, when it was revealed that its TV voice recognition software is capable of capturing personal information and transmitting it to third parties. … The issue has been reported on the Plex streaming service — a brand of media player that allows users to stream their own video from a personal library or hard drive and push it to a smart TV. Samsung says this was not intentional, and that they’ve fixed it so the ads should no longer show up. Read more of this story at Slashdot. 
ageoffri writes: When Star Wars fans learned that George Lucas was making the prequels, most were filled with excitement and anticipation. When Episodes 1-3 were actually released, many found them unsatisfying, and became disillusioned with Lucas’s writing. Now, it appears Disney felt the same way. Though they bought Lucasfilm and began production on Episode 7, they weren’t interested in using the scripts Lucas had already worked on. In an interview, he said, “The ones that I sold to Disney, they came up to the decision that they didn’t really want to do those. So they made up their own. So it’s not the ones that I originally wrote [on screen in Star Wars: The Force Awakens].” After what happened with the prequels, that may be for the best — but others may worry about Episode 7’s plot being entirely in the hands of Disney and JJ Abrams. Read more of this story at Slashdot. 
Instant coffee machine manufacturer Keurig is recalling some 7 million crappy coffee makers because they’re burning people with scalding water. Read more…