The National Security Agency and its British counterpart, Government Communications Headquarters, have worked to subvert anti-virus and other security software in order to track users and infiltrate networks, according to documents from NSA whistleblower Edward Snowden.
The spy agencies have reverse engineered software products, sometimes under questionable legal authority, and monitored web and email traffic in order to discreetly thwart anti-virus software and obtain intelligence from companies about security software and users of such software. One security software maker repeatedly singled out in the documents is Moscow-based Kaspersky Lab, which has a holding registered in the U.K., claims more than 270,000 corporate clients, and says it protects more than 400 million people with its products.
British spies aimed to thwart Kaspersky software in part through a technique known as software reverse engineering, or SRE, according to a top-secret warrant renewal request. The NSA has also studied Kaspersky Lab’s software for weaknesses, obtaining sensitive customer information by monitoring communications between the software and Kaspersky servers, according to a draft top-secret report. The U.S. spy agency also appears to have examined emails inbound to security software companies flagging new viruses and vulnerabilities.
Group items tagged
12More
Popular Security Software Came Under Relentless NSA and GCHQ Attacks - The Intercept - 0 views
-
-
The efforts to compromise security software were of particular importance because such software is relied upon to defend against an array of digital threats and is typically more trusted by the operating system than other applications, running with elevated privileges that allow more vectors for surveillance and attack. Spy agencies seem to be engaged in a digital game of cat and mouse with anti-virus software companies; the U.S. and U.K. have aggressively probed for weaknesses in software deployed by the companies, which have themselves exposed sophisticated state-sponsored malware.
-
The requested warrant, provided under Section 5 of the U.K.’s 1994 Intelligence Services Act, must be renewed by a government minister every six months. The document published today is a renewal request for a warrant valid from July 7, 2008 until January 7, 2009. The request seeks authorization for GCHQ activities that “involve modifying commercially available software to enable interception, decryption and other related tasks, or ‘reverse engineering’ software.”
- ...9 more annotations...
-
The NSA, like GCHQ, has studied Kaspersky Lab’s software for weaknesses. In 2008, an NSA research team discovered that Kaspersky software was transmitting sensitive user information back to the company’s servers, which could easily be intercepted and employed to track users, according to a draft of a top-secret report. The information was embedded in “User-Agent” strings included in the headers of Hypertext Transfer Protocol, or HTTP, requests. Such headers are typically sent at the beginning of a web request to identify the type of software and computer issuing the request.
-
According to the draft report, NSA researchers found that the strings could be used to uniquely identify the computing devices belonging to Kaspersky customers. They determined that “Kaspersky User-Agent strings contain encoded versions of the Kaspersky serial numbers and that part of the User-Agent string can be used as a machine identifier.” They also noted that the “User-Agent” strings may contain “information about services contracted for or configurations.” Such data could be used to passively track a computer to determine if a target is running Kaspersky software and thus potentially susceptible to a particular attack without risking detection.
-
Another way the NSA targets foreign anti-virus companies appears to be to monitor their email traffic for reports of new vulnerabilities and malware. A 2010 presentation on “Project CAMBERDADA” shows the content of an email flagging a malware file, which was sent to various anti-virus companies by François Picard of the Montréal-based consulting and web hosting company NewRoma. The presentation of the email suggests that the NSA is reading such messages to discover new flaws in anti-virus software. Picard, contacted by The Intercept, was unaware his email had fallen into the hands of the NSA. He said that he regularly sends out notification of new viruses and malware to anti-virus companies, and that he likely sent the email in question to at least two dozen such outfits. He also said he never sends such notifications to government agencies. “It is strange the NSA would show an email like mine in a presentation,” he added.
-
The NSA presentation goes on to state that its signals intelligence yields about 10 new “potentially malicious files per day for malware triage.” This is a tiny fraction of the hostile software that is processed. Kaspersky says it detects 325,000 new malicious files every day, and an internal GCHQ document indicates that its own system “collect[s] around 100,000,000 malware events per day.” After obtaining the files, the NSA analysts “[c]heck Kaspersky AV to see if they continue to let any of these virus files through their Anti-Virus product.” The NSA’s Tailored Access Operations unit “can repurpose the malware,” presumably before the anti-virus software has been updated to defend against the threat.
-
The Project CAMBERDADA presentation lists 23 additional AV companies from all over the world under “More Targets!” Those companies include Check Point software, a pioneering maker of corporate firewalls based Israel, whose government is a U.S. ally. Notably omitted are the American anti-virus brands McAfee and Symantec and the British company Sophos.
-
As government spies have sought to evade anti-virus software, the anti-virus firms themselves have exposed malware created by government spies. Among them, Kaspersky appears to be the sharpest thorn in the side of government hackers. In the past few years, the company has proven to be a prolific hunter of state-sponsored malware, playing a role in the discovery and/or analysis of various pieces of malware reportedly linked to government hackers, including the superviruses Flame, which Kaspersky flagged in 2012; Gauss, also detected in 2012; Stuxnet, discovered by another company in 2010; and Regin, revealed by Symantec. In February, the Russian firm announced its biggest find yet: the “Equation Group,” an organization that has deployed espionage tools widely believed to have been created by the NSA and hidden on hard drives from leading brands, according to Kaspersky. In a report, the company called it “the most advanced threat actor we have seen” and “probably one of the most sophisticated cyber attack groups in the world.”
-
Hacks deployed by the Equation Group operated undetected for as long as 14 to 19 years, burrowing into the hard drive firmware of sensitive computer systems around the world, according to Kaspersky. Governments, militaries, technology companies, nuclear research centers, media outlets and financial institutions in 30 countries were among those reportedly infected. Kaspersky estimates that the Equation Group could have implants in tens of thousands of computers, but documents published last year by The Intercept suggest the NSA was scaling up their implant capabilities to potentially infect millions of computers with malware. Kaspersky’s adversarial relationship with Western intelligence services is sometimes framed in more sinister terms; the firm has been accused of working too closely with the Russian intelligence service FSB. That accusation is partly due to the company’s apparent success in uncovering NSA malware, and partly due to the fact that its founder, Eugene Kaspersky, was educated by a KGB-backed school in the 1980s before working for the Russian military.
-
Kaspersky has repeatedly denied the insinuations and accusations. In a recent blog post, responding to a Bloomberg article, he complained that his company was being subjected to “sensationalist … conspiracy theories,” sarcastically noting that “for some reason they forgot our reports” on an array of malware that trace back to Russian developers. He continued, “It’s very hard for a company with Russian roots to become successful in the U.S., European and other markets. Nobody trusts us — by default.”
-
Documents published with this article: Kaspersky User-Agent Strings — NSA Project CAMBERDADA — NSA NDIST — GCHQ’s Developing Cyber Defence Mission GCHQ Application for Renewal of Warrant GPW/1160 Software Reverse Engineering — GCHQ Reverse Engineering — GCHQ Wiki Malware Analysis & Reverse Engineering — ACNO Skill Levels — GCHQ
2More
shared by Gonzalo San Gil, PhD. on 17 Apr 15
- No Cached
5 Linux Laptops for Small Business - 0 views
www.smallbusinesscomputing.com/...aptops-for-small-business.html
linux laptops small business business small enterprise SMB open source free software support hardware implementtion savings performance
shared by Gonzalo San Gil, PhD. on 17 Apr 15
- No Cached
-
"A Linux laptop makes all kinds of sense for a small business. Not only is Linux the most secure computing platform, it's highly efficient, which means that computing power goes toward doing actual work instead of powering a bloated operating system." -
"A Linux laptop makes all kinds of sense for a small business. Not only is Linux the most secure computing platform, it's highly efficient, which means that computing power goes toward doing actual work instead of powering a bloated operating system."
5More
Xcerion's 'Icloud' Promises Marriage of Remote And Local Computing -- Xcerion -- Inform... - 0 views
-
Xcerion has continued to work toward the general release of its XML-based "Cloud OS," a service based on Xcerion XML Internet Operating System/3 (XIOS/3). The announcement of an official name for the service brings the company a step close to that goal; it also certainly reassures investors like Lou Perazzoli, one of the core architects of Microsoft (NSDQ: MSFT) Windows NT, and Terry Drayton, founder of HomeGrocer.com, that Xcerion's technology is almost ready for prime time.
-
Icloud relies on an XML virtual machine for local (and offline) operation. It thus combines the advantages of remote computing -- a central point for software distribution, storage, and updates -- with the advantages of local computing -- execution speed and user control without a bandwidth bottleneck.
-
Icloud offers an intriguing technology that Xcerion is calling "gesture-based computing." Jonas Thornholm, CFO of Xcerion, believes it may be the service's "killer app." Gesture-based computing is essentially real-time content sharing. It allows users to drag and drop documents from their computer to a friend's computer in real time, as if they two machines were dual monitors powered by a single machine.
- ...1 more annotation...
-
Another point of differentiation between Icloud and other WebTop systems is the breadth of Xcerion's ambitions: It's aiming not just to move the desktop into the Internet "cloud" but also to reinvent the economics of software development. Icloud developers can look forward to an Internet-based marketplace for their Web applications that includes monetization technology. They will be able to offer free, ad-supported, or fee-based software with minimal hassle.
-
Most quality online stores. Know whether you are a trusted online retailer in the world. Whatever we can buy very good quality. and do not hesitate. Everything is very high quality. Including clothes, accessories, bags, cups. Highly recommended. This is one of the trusted online store in the world. View now www.retrostyler.com
3More
shared by Paul Merrell on 03 Aug 08
- Cached
With Microsoft Midori, Platforms Take Shape In The Cloud -- Cloud Computing -- Informat... - 0 views
www.informationweek.com/...showArticle.jhtml
cherrypal cloud-computing desktoptwo eyeos g.h.o.st google icloud midori operating systems xcerion youos
shared by Paul Merrell on 03 Aug 08
- Cached
-
Meanwhile a Mountain View, Calif.-based startup called CherryPal just released a new mini-PC, known as the CherryPal, that is designed to operate solely via a Firefox browser. While the new machine, which will run on just 2 watts of power, has an embedded Linux-based OS, it's hidden from the user and is used mainly to boot up the browser to access common applications.
-
Several startups and open-source projects have built cloud-based operating systems, also known as WebTops, such as DesktopTwo, EyeOS, G.ho.st, and YouOS. To date these have mostly been of interest to the open-source development community, but the advent of browser-based "thin clients" like CherryPal and of projects like Midori indicates that fully cloud-based computing could make its way to the masses. Google is also said to be at work on a cloud OS, while a Swedish startup called Xcerion has gained attention for its hybrid, an XML-based system called iCloud.
-
Most quality online stores. Know whether you are a trusted online retailer in the world. Whatever we can buy very good quality. and do not hesitate. Everything is very high quality. Including clothes, accessories, bags, cups. Highly recommended. This is one of the trusted online store in the world. View now www.retrostyler.com
2More
Google and the Linux desktop - Stephen Vaughn-Nicols responds to DavidCoursey: Gooogle... - 0 views
-
Google's goal? To set up a cloud-based set of Windows file-compatible applications that will work hand-in-glove with Google Linux-powered desktops. Google already has the applications: Google Docs, GMail, Google Calendar, etc. etc. Now, just add an operating system where they, and not the boys from Redmond, call the shots, and they're in business.
-
Google's goal? To set up a cloud-based set of Windows file-compatible applications that will work hand-in-glove with Google Linux-powered desktops. Google already has the applications: Google Docs, GMail, Google Calendar, etc. etc. Now, just add an operating system where they, and not the boys from Redmond, call the shots, and they're in business.
2More
shared by Gonzalo San Gil, PhD. on 19 Mar 15
- No Cached
(# ! Another) 5 best Linux distros for beginners and newbies - Computer Business Review - 0 views
www.cbronline.com/...-beginners-and-newbies-4532152
linux distros beginners newbies another list enter open source free software
shared by Gonzalo San Gil, PhD. on 19 Mar 15
- No Cached
-
"by Jimmy Nicholls| 13 March 2015 Interested in the open source OS but unsure what to try? Linux has always been the outsider's operating system. Even more hipster than Apple's iOS and completely off the radar of most Microsoft Windows users, the open source OS umbrella covers an ever increasing collection of mutations and flavours, known to its users as distros (short for distributions)."
-
"by Jimmy Nicholls| 13 March 2015 Interested in the open source OS but unsure what to try? Linux has always been the outsider's operating system. Even more hipster than Apple's iOS and completely off the radar of most Microsoft Windows users, the open source OS umbrella covers an ever increasing collection of mutations and flavours, known to its users as distros (short for distributions)."
2More
shared by Gonzalo San Gil, PhD. on 18 Aug 14
- No Cached
CentOS / Redhat Iptables Firewall Configuration Tutorial - 0 views
www.cyberciti.biz/...irewall-configuration-tutorial
iptables firewall security linux sysadmin tutorial configuration
shared by Gonzalo San Gil, PhD. on 18 Aug 14
- No Cached
-
"How do I configure a host-based firewall called Netfilter (iptables) under CentOS / RHEL / Fedora / Redhat Enterprise Linux? Netfilter is a host-based firewall for Linux operating systems. It is included as part of the Linux distribution and it is activated by default. This firewall is controlled by the program called iptables. Netfilter filtering take place at the kernel level, before a program can even process the data from the network pack"
-
"How do I configure a host-based firewall called Netfilter (iptables) under CentOS / RHEL / Fedora / Redhat Enterprise Linux? Netfilter is a host-based firewall for Linux operating systems. It is included as part of the Linux distribution and it is activated by default. This firewall is controlled by the program called iptables. Netfilter filtering take place at the kernel level, before a program can even process the data from the network pack"
2More
shared by Gonzalo San Gil, PhD. on 04 Dec 14
- No Cached
The Linux Foundation Releases Report Detailing Linux User Trends Among World's Largest ... - 0 views
www.linuxfoundation.org/...ailing-linux-user-trends-among
linux foundation releases report user trends world largest companies detailing
shared by Gonzalo San Gil, PhD. on 04 Dec 14
- No Cached
-
"SAN FRANCISCO, December 3, 2014 - The Linux Foundation, the nonprofit organization dedicated to accelerating the growth of Linux and collaborative development, today announced the immediate release of the "2014 Enterprise End User Trends Report," which shares new and trending data that reveals Linux is the primary platform for the cloud and users consider the operating system more secure than alternative platforms. The findings also show a 14-point increase in Linux deployments over the last four years, while deployments on Windows have experienced a 9-point decline. "
-
"SAN FRANCISCO, December 3, 2014 - The Linux Foundation, the nonprofit organization dedicated to accelerating the growth of Linux and collaborative development, today announced the immediate release of the "2014 Enterprise End User Trends Report," which shares new and trending data that reveals Linux is the primary platform for the cloud and users consider the operating system more secure than alternative platforms. The findings also show a 14-point increase in Linux deployments over the last four years, while deployments on Windows have experienced a 9-point decline. "
2More
Free Software Directory | fsf.org - 0 views
-
"The Free Software Directory is a catalog of useful free software that runs under free operating systems. FSF staff and volunteers work together to collect detailed information about free software programs and organize it in a clear and accessible format. "
-
"The Free Software Directory is a catalog of useful free software that runs under free operating systems. FSF staff and volunteers work together to collect detailed information about free software programs and organize it in a clear and accessible format. "
2More
shared by Gonzalo San Gil, PhD. on 28 Oct 14
- No Cached
Sony BMG copy protection rootkit scandal - Wikipedia, the free encyclopedia - 0 views
en.wikipedia.org/...opy_protection_rootkit_scandal
sony copy protection rootkit scandal XCP MediaMax
shared by Gonzalo San Gil, PhD. on 28 Oct 14
- No Cached
-
"The Sony BMG CD copy protection rootkit scandal of 2005-2007 concerns deceptive, illegal, and potentially harmful copy protection measures implemented by Sony BMG on about 22 million CDs. When inserted into a computer, the CDs installed one of two pieces of software which provided a form of digital rights management (DRM) by modifying the operating system to interfere with CD copying. " [Source: arstechnica.com # ! … coming from one of the main #Malware #distributors… # ! :D [# Just one Reference: http://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootkit_scandal] See on Scoop.it - The Benefits of Sharing]
-
"The Sony BMG CD copy protection rootkit scandal of 2005-2007 concerns deceptive, illegal, and potentially harmful copy protection measures implemented by Sony BMG on about 22 million CDs. When inserted into a computer, the CDs installed one of two pieces of software which provided a form of digital rights management (DRM) by modifying the operating system to interfere with CD copying. "
2More
shared by Gonzalo San Gil, PhD. on 31 Jan 16
- No Cached
Why Linux is still better than Windows 10 | InfoWorld - 0 views
www.infoworld.com/...ll-better-than-windows-10.html
windows vs linux still better free software vs. proprietary software
shared by Gonzalo San Gil, PhD. on 31 Jan 16
- No Cached
-
"Linux still beats Windows 10 Microsoft's release of Windows 10 has added a new wrinkle to the eternal "Windows versus Linux" discussions online. And recently a Linux redditor took the time to install Windows 10 and do some exploring. While he found Windows 10 to be a prettier version of Windows, it wasn't long before he realized that Linux still beats Windows as a desktop operating system. deathmatch 5 battle fight contest arm wrestle challenge Review: WebEx and GoToMeeting meet their match Adobe Connect and Zoom lead six mostly stellar Web conferencing services for desktops and mobile devices Read Now R3D3MPT10N posted his thoughts in the Linux subreddit:"
-
"Linux still beats Windows 10 Microsoft's release of Windows 10 has added a new wrinkle to the eternal "Windows versus Linux" discussions online. And recently a Linux redditor took the time to install Windows 10 and do some exploring. While he found Windows 10 to be a prettier version of Windows, it wasn't long before he realized that Linux still beats Windows as a desktop operating system. deathmatch 5 battle fight contest arm wrestle challenge Review: WebEx and GoToMeeting meet their match Adobe Connect and Zoom lead six mostly stellar Web conferencing services for desktops and mobile devices Read Now R3D3MPT10N posted his thoughts in the Linux subreddit:"
3More
shared by Gonzalo San Gil, PhD. on 22 Feb 16
- No Cached
Software Piracy Hurts Linux Adoption, Research Finds - TorrentFreak [# ! Note...] - 0 views
torrentfreak.com/adoption-research-finds-160221
software piracy hurts linux adoption research finds no way just wrong identifiation
shared by Gonzalo San Gil, PhD. on 22 Feb 16
- No Cached
-
-
# ! No way. Piracy has nothing to do with Linux. It's just another 'biased' press #vane #try to #identify #opensource and '#crime'...
-
-
" Ernesto on February 21, 2016 C: 24 News New research suggests that software piracy has a detrimental effect on the adoption of Linux desktop operating systems. Piracy is one of the reasons why Windows has been able to maintain its dominant market position, making open source alternatives "forgotten victims" of copyright infringement."
-
" Ernesto on February 21, 2016 C: 24 News New research suggests that software piracy has a detrimental effect on the adoption of Linux desktop operating systems. Piracy is one of the reasons why Windows has been able to maintain its dominant market position, making open source alternatives "forgotten victims" of copyright infringement."
3More
Russia gears up to build its own 'independent internet' | The Times of Israel - 0 views
-
The Russian government is reportedly considering building an “independent internet infrastructure” that it can use as an alternative to the global Domain Name System, or DNS system. Last month, Russia’s Security Council asked the government to start building a backup DNS system citing “the increased capabilities of Western nations to conduct offensive operations.”
-
However, some defense experts say the move could “have more to do with Moscow’s own plans for offensive cyber operations,” according to the Defense One website. The alternative DNS would also serve the so-called BRIC nations — Brazil, Russia, India, China, and South Africa — and would operate independently of international organizations.
-
Russian president Vladimir Putin set a deadline of August 2018 to complete the infrastructure.
1More
Stand up for your freedom to install free software - Free Software Foundation - working... - 0 views
-
[Microsoft has announced that if computer makers wish to distribute machines with the Windows 8 compatibility logo, they will have to implement a measure called "Secure Boot." However, it is currently up for grabs whether this technology will live up to its name, or will instead earn the name Restricted Boot. When done correctly, "Secure Boot" is designed to protect against malware by preventing computers from loading unauthorized binary programs when booting. In practice, this means that computers implementing it won't boot unauthorized operating systems -- including initially authorized systems that have been modified without being re-approved. ...]
2More
Windows XP: How end of support sparked one organisation's shift from Microsoft | ZDNet - 1 views
-
Good story of how a UK Company responded to Microsoft's announcement if XP end of life. After examining many alternatives, they settled on a ChromeBook-ChromeBox - Citrix solution. Most of the existing desktop hardware was repurposed as ChromeTops running Chrome Browser apps and Citrix XenDesktop for legacy data apps. excerpt/intro: "There are the XP diehards, and the Windows 7 and 8 migrators. But in a world facing up to the end of Windows XP support, one UK organisation belongs to another significant group - those breaking with Microsoft as their principal OS provider. Microsoft's end of routine security patching and software updates on 8 April helped push the London borough of Barking and Dagenham to a decision it might otherwise not have taken over the fate of its 3,500 Windows XP desktops and 800 laptops. "They were beginning to creak but they would have gone on for a while. It's fair to say if XP wasn't going out of life, we probably wouldn't be doing this now," Barking and Dagenham general manager IT Sheyne Lucock said. Around one-eighth of corporate Windows XP users are moving away from Microsoft, according to recent Tech Pro Research. Lucock said it had become clear that the local authority was locked into a regular Windows operating system refresh cycle that it could no longer afford. "If we just replaced all the Windows desktops with newer versions running a newer version of Windows, four years later we would have to do the same again and so on," he said. "So there was an inclination to try and do something different - especially as we know that with all the budget challenges that local government is going to be faced with, we're going to have to halve the cost of our ICT service over the next five years." Barking and Dagenham outsourced its IT in December 2010 to Elevate East London, which is a joint-venture between the council and services firm Agilisys. Lucock and systems architect Rupert Hay-Campbell are responsible for strategy, policy
-
Meanwhile, some organizations missed the end of life deadline and are now paying Microsoft for extended support. E.g., the U.S. Internal Revenue Service, which is still running 58,000 desktops on WinXP. http://arstechnica.com/information-technology/2014/04/irs-another-windows-xp-laggard-will-pay-microsoft-for-patches/
1More
How to use the NMAP Security Scanner on Linux - 1 views
-
"Nmap is a free and open source network discovery and security auditing utility that is widely used in the Linux users community as it is simple to use yet very powerful. Nmap works by sending data packets on a specific target (by IP) and by interpreting the incoming packets to determine what posts are open/closed, what services are running on the scanned system, whether firewalls or filters are set up and enabled, and finally what operation system is running. Those abilities are used for a wide variety of reasons and howtoforge.com is not encouraging nor suggesting the use of nmap for malicious purposes"
1More
EU Might Force OEMs to Offer Choice of Browsers During Setup > Comments - 0 views
-
Maybe the EU can right the marketplace and restore competition by identifying all proprietary formats, protocols and interfaces used by Microsoft in an anti-competitive way; then issue a directive to either replace these locks with open standard alternatives, or pay a monthly anti-competitive reimbursement penalty until such time as the end user effectively replaces these systems. This approach is similar to the "WiNE solution" put forward to Judge Jackson as part of the USA anti-trust remedy. Judge Jackson favored a break up of Microsoft into two divisions; Operating systems and other businesses. Few believed this was enforceable, with many citing the infamous "Chinese Wall" claims made by Chairman Bill
8More
shared by Paul Merrell on 12 Sep 08
- Cached
Fight over 'forms' clouds future of Net applications | Pagalz.com - Blog - 0 views
www.pagalz.com/...uds-future-of-net-applications
2.0 flash forms javascript microsoft mx w3c web whatwg xaml xforms xul
shared by Paul Merrell on 12 Sep 08
- Cached
-
As Net heavyweights vie to define the next generation of Web applications, the Web’s main standards body is facing a revolt within its own ranks over electronic forms, a cornerstone of interactive documents.
-
“The W3C is saying the answer is XForms. Microsoft is saying it’s XAML. Macromedia is saying its Flash MX. And Mozilla is saying it’s XUL.
-
Though the success of one method or another might not seem to make much difference to the person filling out an order form, the fate of open standards in the process could determine whether that form can relay the data it collects to any standards-compliant database or banking system, or whether it can only operate within certain proprietary systems. The fate of a standard could also determine whether the order form could be accessed in any standards-compliant Web browser, or if it would be available only to users of a particular operating system–an outcome that has browser makers and others worried about the role of Microsoft.
- ...5 more annotations...
-
browser makers still want a standards-based forms technology to help the Web steer clear of proprietary application platforms. They’re particularly concerned about Microsoft’s sprawling vision for Windows “Longhorn” applications built in the XML-based XAML markup language using Longhorn’s Avalon graphics system. Browsers like Mozilla Firefox, Opera and Apple’s Safari will be useless to access these Internet-based Windows applications.
-
The evolution versus revolution debate over forms centers on the use of scripting–specifically JavaScript–to perform important tasks in forms-based applications.
-
HAT approach works OK for small examples,” Pemberton said. “But actors like the Department of Defense say ‘no scripting.’”
-
“The WHAT approach works OK for small examples,” Pemberton said. “But actors like the Department of Defense say ‘no scripting.’”
-
“I understand where WHAT is coming from, but they are browser makers, not forms experts,” Pemberton said. “It is important to build something that is future-proof and not a Band-Aid solution. Forms (technology) is the basis of the e-commerce revolution and so it is important to do it right.”
5More
NSA Based Malware Used In Massive Cyber-Attack Hitting 74 Countries - 0 views
-
Apparent National Security Agency (NSA) malware has been used in a global cyber-attack, including on British hospitals, in what whistleblower Edward Snowden described as the repercussion of the NSA’s reckless decision to build the tools. “Despite warnings, @NSAGov built dangerous attack tools that could target Western software. Today we see the cost,” Snowden tweeted Friday. At least two hospitals in London were forced to shut down and stop admitting patients after being attacked by the malware, which operates by locking out the user, encrypting data, and demanding a ransom to release it. The attacks hit dozens of other hospitals, ambulance operators, and doctors’ offices as well.
-
The Blackpool Gazette in the northwest reported that medical staff had resorted to using pen and paper when phone and computer systems shut down. Elsewhere, journalist Ollie Cowan tweeted a photo of ambulances “backed up” at Southport Hospital as the staff attempted to cope with the crisis.
-
Other disruptions were reported in at least 74 countries, including Russia, Spain, Turkey, and Japan, and the number is “growing fast,” according to Kaspersky Lab chief Costin Raiu. Security architect Kevin Beau said it was spreading into the U.S. as well. The malware, which Microsoft tested briefly earlier this year, was leaked by a group calling itself the Shadow Brokers, which has been releasing NSA hacking tools online since last year, the New York Times reports. Times journalists Dan Bilefsky and Nicole Perlroth wrote: Microsoft rolled out a patch for the vulnerability in March, but hackers apparently took advantage of the fact that vulnerable targets—particularly hospitals—had yet to update their systems. The malware was circulated by email. Targets were sent an encrypted, compressed file that, once loaded, allowed the ransomware to infiltrate its targets. Reuters reported that the National Health Service (NHS), England’s public health system, was warned about possible hacking earlier in the day, but that by then it was already too late.
- ...2 more annotations...
-
A Twitter account with the handle @HackerFantastic, the co-founder of the cyber security company Hacker House, tweeted that the firm had “warned the NHS with Sky news about vulnerabilities they had last year, this was inevitable and bound to happen at some stage.” “In light of today’s attack, Congress needs to be asking @NSAgov if it knows of any other vulnerabilities in software used in our hospitals,” Snowden tweeted. “If @NSAGov had privately disclosed the flaw used to attack hospitals when they *found* it, not when they lost it, this may not have happened.” Disclosing the vulnerability when it was found would have given hospitals years, not months, to update their systems and prepare for an attack, he added.
-
witter user @MalwareTechBlog added, “Something like this is incredibly significant, we’ve not seen P2P spreading on PC via exploits at this scale in nearly a decade.” Patrick Toomey, a staff attorney with the American Civil Liberties Union’s (ACLU) National Security Project, said, “It would be shocking if the NSA knew about this vulnerability but failed to disclose it to Microsoft until after it was stolen.” “These attacks underscore the fact that vulnerabilities will be exploited not just by our security agencies, but by hackers and criminals around the world,” Toomey said. “It is past time for Congress to enhance cybersecurity by passing a law that requires the government to disclose vulnerabilities to companies in a timely manner. Patching security holes immediately, not stockpiling them, is the best way to make everyone’s digital life safer.”