Smart Life Store Security News Feed

Planet War
From the bloody civil wars in Africa to the rag-tag insurgencies in Southeast Asia, 33 conflicts are raging around the world today, and it?s often innocent civilians who suffer the most. Each photo and summary has deep back story links.

Anonymous Buzzkill
A worrisome set of posts from Princeton University's 'Freedom to Tinker" Blog: In many situations, it may be far easier to unmask apparently anonymous online speakers than they, I, or many others in the policy community have appreciated. Today, I'll tell a story that helps explain what I mean. Second post: what BoingBoing knows about John Doe. Third, and most concerning post: The traceability of an online anonymous comment. Related post: a well researched review of the privacy concerns around the roll-out of, and push-back against, Google Buzz.

Cracking the PS3
George Hotz started a blog chronicling his journey to a software-only PS3 crack. Despite tackling a platform that has held strong for three years, Hotz claimed to have gained read/write access to all system memory after five weeks. Although the PS3 actually ships with Linux support, these cracks circumvent the hypervisor that place strict restrictions on low-level hardware access. You may know Hotz as the geohot who released first hardware iPhone jailbreak, added a software-only jailbreak for all iPhones and iPod Touches, and won multiple awards (pdf) at ISEF 2007 for building a working holographic display system while a senior in high school.

What Israel can teach us about (airport) security
What Israel can teach us about (airport) security. At Ben Gurion Airport in Tel Aviv, it?s all about eye contact. Expert: ?[T]hey?re not looking for liquids, they?re not looking at your shoes. They?re not looking for everything they look for in North America. They just look at you... Even today with the heightened security in North America, they will check your items to death. But they will never look at you, at how you behave. They will never look into your eyes... and that?s how you figure out the bad guys from the good guys.? Oh, and get this: ?The goal at Ben Gurion is to move fliers from the parking lot to the airport lounge in 25 minutes tops.?

Bruce Schneier's work isn't peer reviewed. He has no peers.
Is aviation security mostly for show? An essay by Bruce Schneier.

Hello? Can you hear me now?
Karsten Nohl and a team of fellow researchers has cracked the 64-bit encryption used in 80% of the world's GSM phones. Nohl had previously cracked the encryption in the MIFARE smartcard system, demonstrating that the encryption on that device can be cracked in approximately no time whatsoever. These, of course, aren't the first gaping holes in cellphone security to come to light; indeed, lack of security seems to be part of the design spec. Perhaps all new cellphones should be just be distributed with a deck of cards.

Chowned
While many Linux users cite the system's security against malware, the appearance of malware disguised as a screensaver reminded everyone that no system is 100% safe. Ubuntu users were quick to identify the virus, identify the perpetrators, and create a fix, but this isn't the first time this has happened, and will in all likelihood not be the last. The criticism in the community is directed squarely at the user base: "In general the lesson to be learned is if you want a secure system, don't download any software outside the official package sources without at least looking at the source code first."

Deep politics
Lobster: The Journal of Parapolitics was started in 1983 by Robin Ramsay and Stephen Dorril, two conspiracy enthusiasts who weren't actually nuts and believed in proper research. The magazine primarily covered the activities of the British security and intelligence services and what they term 'parapolitics'. They've had a brochure website for a while with some sample articles, but starting from the current issue the full journal will be free online (PDF download). The pair had a falling-out some time ago and have gone their separate ways. On his personal site Dorril, now also the author of a well-received study of Mosley and the Blackshirts, offers early back issues of the magazine for free download too.

ClimateGate?
The University of East Anglia's Climatic Research Unit suffered a security breach this week. Hackers made off with thousands of email correspondences between some of the world's top climate scientists, and posted them to the Internet1. Tony Hake has posted an article at The Examiner, highlighting what he feels are the most egregious examples of scientists manipulating and hiding data to support the established theories about Climate Change. Some of the scientists involved counter that the quotes are taken out of context, and that "People are using language used in science and interpreting it in a completely different way". 1 I'm not going to link to them, but the Examiner article mentions where to get them.

"We are supposed to notify a supervisor. You?re a supervisor, right?"
Do I have the right to refuse this search?

This is just getting embarassing!
You know, if I ran the BNP, I think I would think twice about this whole "trusting people with the members list" idea.

Need Firefox 0.8?
Remember when your computer just worked? Did you click 'OK' to that recommended update on programs like iTunes, Adobe Reader, or Yahoo Messenger, only to realize that the older version ran faster or had better features? Then Version Download may be your solution. Includes back-level versions of browsers, audio and video, security and anti-virus, FTP, file-sharing and communications software.

What Does DHS Know About You?
What Does DHS Know About You? A lot. The complete (annotated) report. [PDF]

The First Ripples of the Silver Tsunami
Nearly 1 in 5 young adults is out of work. Student debt is the highest its ever been. With a 10 year job growth of negative 230,000 jobs, the pool of available jobs is the lowest its ever been as a ratio to available college grads. And even with this dwindling tax base, in order to sustain Medicare and Social Security by 2020, we will need to tax 1.5 workers for every retiree. The dominant media narrative now is focused on the racial tensions surrounding Obama's health care reform. But in reality, the strongest opposition to Obama now comes not from young whites, who stand to benefit the most from medical reform. It is largely from 'angry white seniors' who fear cuts in the their Medicare. Are you ready for the Silver Tsunami?

Beyond war and crisis
Sustainable Security is a website launched this month by the Oxford Research Group "to be an important platform for promoting a better understanding of the real threats to global security in the 21st century and the policies that should be implemented to address those threats at their root cause." It highlights "four interconnected drivers of global insecurity: climate change; competition over natural resources; global militarism; and poverty and marginalisation. Prof. Paul Rogers makes the case for a rethink of the security paradigm.

It's all Greek to Me
In 1984 computer pioneer Ken Thompson wrote one of the seminal works of computer security, Reflections on Trusting Trust [PDF]. In it he postulated putting a trojan horse inside a compiler as a means of infecting software compiled by it. 25 years later somebody has finally done just that. Researchers at anti-virus house Sophos have discovered a virus that places a backdoor into applications compiled with the Delphi language. They've identified at least 3000 separate Delphi applications that have had this backdoor compiled into them so far, including banking programs and programs used for cellphone programming.

And like that... he's gone
Gone Forever: What Does It Take to Really Disappear?

Why Can't MS Do This?
An 8 year old critical security bug in the Linux kernel? No problem, we can fix that without even rebooting. You heard me, it is possible to apply a source code patch to a running kernel without reboot.

Neurosecurity
Neurosecurity: security and privacy for neural devices. "An increasing number of neural implantable devices will become available in the near future due to advances in neural engineering. This discipline holds the potential to improve many patients' lives dramatically by offering improved?and in some cases entirely new?forms of rehabilitation for conditions ranging from missing limbs to degenerative cognitive diseases. The use of standard engineering practices, medical trials, and neuroethical evaluations during the design process can create systems that are safe and that follow ethical guidelines; unfortunately, none of these disciplines currently ensure that neural devices are robust against adversarial entities trying to exploit these devices to alter, block, or eavesdrop on neural signals. The authors define 'neurosecurity'?a version of computer science security principles and methods applied to neural engineering?and discuss why neurosecurity should be a critical consideration in the design of future neural devices." [Via Mind Hacks]

CitiApartments
San Francisco's largest residential landlord is refusing to give back security deposits. CitiApartments is possibly going broke and, according to the head of the San Francisco Tenants Union, refusing to refund many tenants security deposits (he says they're getting three to four complaints a week). CitiApartments' buildings are filled with vacancies because their business model is purchasing buildings and then harassing and intimidating tenants into moving out so they can raise the rent. The end of the SFAppeal article states: "if a person really wanted to push back against whatever it is that CitiApartments is doing, they could pretty easily twist the knife a bit on craigslist simply by flagging every single CitiApartments listing." Here is the website dedicated to fighting CitiApartments and here are links to a three part series on CitiApartments by the San Francisco Bay Guardian. And here is an article on CitiApartments parent company from San Francisco Business Times.

You See, In Order to Save the Village America, We Have to ...
Michael Scheuer, the former chief of the CIA's "bin Laden Station", and the initially anonymous author of Imperial Hubris, pulls an O'Reilly on yesterday's Glenn Beck broadcast:"The only chance we have as a country have right now is for Osama bin Laden to deploy and detonate a major weapon in the United States [...] only Osama can execute an attack which will force Americans to demand that their government protect them [...] with as much violence as necessary." Earlier this month, Scheuer even wrote a speech he proposed bin Laden give. Disturbingly, bin Laden recommended Hubris in a September 2007 speech; if he's still alive, let's hope he doesn't follow Scheuer's media appearances. The video has spread off of political blogs onto sites nearer the mainstream, but mounting calls of treason are rendered a bit hyperbolic when compared with Article III and with U.S. v. Gadahn, the country's first treason indictment since 1952 and the only one post-9/11 ... not to mention reminiscent the worst of the right.

An Unclear Future
Clear, the "security service" that allowed travellers to bypass TSA security lines, offered a Father's Day discount if you purchased a one-year membership by June 21. On June 23, Clear ceased operations. Sorry, no refunds.

The dry, technical language of Microsoft's October update did not indicate anything particularly untoward.
Its reach is impossible to measure precisely, but more than 3 million vulnerable machines may ultimately have been infected. : The inside story on the Conficker Worm at New Scientist.

Now, where did I put that plane factory?
Hiding in "plane" sight. Images and details of the significant efforts made by the United States to prevent the Japanese from bombing our west coast aircraft factories. I wonder what this effort would take today to "fool" Google Maps/Earth. From the article: "The idea of deceiving the enemy as to what you are doing is not new. Trying to hide individual items from observation is not new, trying to hide whole factories from aerial bombing during The Second World War was new. After December 7, 1941 the Lockheed and Boeing aircraft factories along the West Coast were put under netting to try and hide them from Japanese aircraft attack."

Protect Yourself, Your Family, Your Identity
The commercials are all over television — and they certainly are attention-grabbing. They?re the ones where the heavy, bald guy is sitting in his easy chair talking in a squeaky female voice about all the clothes he bought — including a bustier. Or the little old lady speaking with the gruff voice of a younger man about the sweet motorcycle she now owned. Identity theft is a serious crime — one that is occurring with an alarming frequency. The Identity Theft Manifesto explains how criminals get your personal info, and what you can do about it.