In an Age of Cyber War, Where Are the Cyber Weapons?

chicksdaddy writes “MIT Tech Review has an interesting piece that asks an obvious, but intriguing question: if we’re living in an age of cyber warfare, where are all the cyber weapons? Like the dawn of the nuclear age that started with the bombs over Hiroshima and Nagasaki, the use of the Stuxnet worm reportedly launched a global cyber arms race involving everyone from Syria to Iran and North Korea. But almost four years after it was first publicly identified, Stuxnet is an anomaly: the first and only cyber weapon known to have been deployed. Experts in securing critical infrastructure including industrial control systems are wondering why. If Stuxnet was the world’s cyber ‘Little Boy, ‘ where is the ‘Fat Man’? Speaking at the recent S4 Conference, Ralph Langner, perhaps the world’s top authority on the Stuxnet worm, argues that the mere hacking of critical systems is just a kind of ‘hooliganism’ that doesn’t count as cyber warfare. True cyber weapons capable of inflicting cyber-physical damage require extraordinary expertise. Stuxnet, he notes, made headlines for using four exploits for “zero day” (or previously undiscovered) holes in the Windows operating system. Far more impressive was the metallurgic expertise needed to understand the construction of Iran’s centrifuges. Those who created and programmed Stuxnet needed to know the exact amount of pressure or torque needed to damage aluminum rotors within them, sabotaging the country’s uranium enrichment operation.” Read more of this story at Slashdot.

Continue reading here:
In an Age of Cyber War, Where Are the Cyber Weapons?

If you’re still not sure if your details were thieved in that massive Adobe hack, you can use this t

If you’re still not sure if your details were thieved in that massive Adobe hack , you can use this tool to see if your email featured in the smash’n’grab. Read more…        

Read More:
If you’re still not sure if your details were thieved in that massive Adobe hack, you can use this t

Hackers Have Seized 38 Million Adobe Customer Records

At the start of October, Adobe quietly explained that hackers had acquired data from 3 million of its customers’ accounts. Now, it’s admitted that that the number is actually in excess of 38 million . Read more…        

Read the article:
Hackers Have Seized 38 Million Adobe Customer Records

Firefox and Chrome Will Soon EOL On XP

Billly Gates writes “While Windows XP is still going strong the sun is rapidly setting on this old platform fast. Firefox plans to end support for XP which means no security fixes or improvements. Chrome is being discontinued a little later as well for Windows XP. Windows XP has its die-hard users refusing to upgrade as they prefer the operating system or feel there is no need to change. The story would not be as big of a deal if it were not for the feared XPopacalypse with a major Virus/worm/trojan taking down millions of systems with no patches to ever fix them and software not being patched to protect them. Does this also mean webmasters will need to write seperate versions of CSS and javascript for older versions of Chrome and Firefox like they did with IE 6 if the user base refuses to leave Windows XP?” Read more of this story at Slashdot.

Originally posted here:
Firefox and Chrome Will Soon EOL On XP

FBI Seized 144,000 Bitcoins ($28.5 Million) From Silk Road Bust

SonicSpike writes “An FBI official notes that the bureau has located and seized a collection of 144, 000 bitcoins, the largest seizure of that cryptocurrency ever, worth close to $28.5 million at current exchange rates. It believes that the stash belonged to Ross Ulbricht, the 29-year-old who allegedly created and managed the Silk Road, the popular anonymous drug-selling site that was taken offline by the Department of Justice after Ulbricht was arrested earlier this month and charged with engaging in a drug trafficking and money laundering conspiracy as well as computer hacking and attempted murder-for-hire. The FBI official wouldn’t say how the agency had determined that the Bitcoin ‘wallet’ — a collection of Bitcoins at a single address in the Bitcoin network — belonged to Ulbricht, but it was sure they were his. ‘This is his wallet, ‘ said the FBI official. ‘We seized this from DPR, ‘ the official added, referring to the pseudonym ‘the Dread Pirate Roberts, ‘ which prosecutors say Ulbricht allegedly used while running the Silk Road.” Read more of this story at Slashdot.

Read this article:
FBI Seized 144,000 Bitcoins ($28.5 Million) From Silk Road Bust

35,000 vBulletin Sites Have Already Been Exploited By Week Old Hole

realized writes “Last week Slashdot covered a new vBulletin exploit. Apparently hackers have been busy since then because according to security firm Imperva, more than 35, 000 sites were recently hacked via this vulnerability. The sad part about this is that it could have all been avoided if the administrator of the websites just removed the /install and/or /core/install folders – something that you would think the installer should do on its own.” Web applications that have write access to directories they then load code from have always seemed a bit iffy to me (wp-content anyone?) Read more of this story at Slashdot.

Original post:
35,000 vBulletin Sites Have Already Been Exploited By Week Old Hole

DOJ Hasn’t Actually Found Silk Road Founder’s Bitcoin Yet

Techdirt has an interesting followup on the arrest and indictment of Silk Road founder Ross Ulbricht, in connection to which the FBI seized 26, 000 or so Bitcoins. From the Techdirt piece: “However, in the criminal complaint against Ulbricht, it suggested that his commissions were in the range of $80 million — or about 600, 000 Bitcoins. You might notice the disconnect between the 26, 000 Bitcoins seized and the supposed 600, 000 Ulbright made. It now comes out that those 26, 000 Bitcoins aren’t even Ulbricht’s. Instead, they’re actually from Silk Road’s users. In other words, these were Bitcoins stored with user accounts on Silk Road. Ulbricht’s actual wallet is separate from that, and was apparently encrypted, so it would appear that the FBI does not have them, nor does it have any way of getting at them just yet. And given that some courts have argued you can’t be forced to give up your encryption, as it’s a 5th Amendment violation, those Bitcoins could remain hidden — though, I could see the court ordering him to pay the dollar equivalent in restitution (though still not sure that would force him to decrypt the Bitcoins).” The article also notes that the FBI’s own Bitcoin wallet has been identified, leading to some snarky micropayment messages headed their direction. Read more of this story at Slashdot.

More here:
DOJ Hasn’t Actually Found Silk Road Founder’s Bitcoin Yet

Google Knows the Wi-Fi Passwords of All Android Users

A new privacy fuss is kicking off around Google’s Android mobile OS, with security boffins claiming that the software’s backup tools mean that a copy of everyone’s Wi-Fi password history is now saved to Google’s servers. Which may mean it could be legally compelled to hand them out, should a government come calling. Read more…        

Read More:
Google Knows the Wi-Fi Passwords of All Android Users

Feds tell major internet companies to decrypt and hand over users’ account passwords

At CNET, Declan McCullagh reports that the U.S. government has demanded that large Internet companies provide them with users’ stored passwords, which are typically encrypted.        

More:
Feds tell major internet companies to decrypt and hand over users’ account passwords