Les administrateurs se sentent en sécurité sous TOR, mais ce sont des amateurs qui ne maîtrisent pas la technologie.
Source : Plusieurs sites de vente de drogue du « Deep Web » français piratés
Étiquette : vulnerability (Page 38 of 40)
On Thursday T-Mobile revealed that hackers had breached Experian’s network and stolen a trove of T-Mobile’s data, which the carrier had sent to Experian to perform credit checks on potential customers seeking financing for phones or cellular plans. The data stolen from those 15 million victims includes their names, addresses, and birthdates, as well as encrypted social security numbers, drivers’ license ID numbers, and passport ID numbers.
Source : Hack Brief: Hackers Steal 15M T-Mobile Customers’ Data From Experian | WIRED
Lenovo seems to be testing the boundaries of trust.
Source : Lenovo collects usage data on ThinkPad, ThinkCentre and ThinkStation PCs | Computerworld
The environmental and public health cost of VW’s fraud is significant, but it’s easy to imagine industries and scenarios where it’d be much worse. Perhaps the best we can hope for is that the avoidance of regulatory frameworks on Internet of Things won’t have the kind of occasional systemic impact that large-scale financial misconduct has accustomed us to.
Source : The price of the Internet of Things will be a vague dread of a malicious world
Un million d’euros. C’est la somme qu’a promise, lundi 21 septembre, l’entreprise Zerodium à qui trouvera une faille informatique dans iOS 9, le nouveau logiciel qui équipe les iPhones. Zerodium est une nouvelle venue sur le marché de la sécurité informatique, mais pas une inconnue. Emanation de l’entreprise française Vupen, elle est spécialisée dans les failles dites « zero day », qu’elle achète à des hackers puis revend au plus offrant, le plus souvent de grandes agences de renseignement occidentales qui cherchent un moyen d’espionner leurs cibles – Vupen, puis Zerodium, ont affirmé ne pas travailler avec des régimes autoritaires.
Source : Le business des « zero day », ces failles inconnues des fabricants de logiciel
We’re reminded of this sad truism every time there’s a major leak—like the 2012 dump of passwords belonging to LinkedIn users, for example. Now researchers who have cracked more than 11 million Ashley Madison passwords have released the top 100 choices users of that site picked. It won’t come as a shock to hear that the passcodes are no better.
Source : Top 100 list shows Ashley Madison passwords are just as weak as all the rest | Ars Technica
The security of Internet-connected baby monitors got a failing grade from researchers who found critical vulnerabilities in all nine of the models they reviewed.
Source : 9 baby monitors wide open to hacks that expose users’ most private moments | Ars Technica
Tous ces panneaux (une vingtaine dans la métropole lilloise) reçoivent leurs informations à afficher par radio, selon un langage particulier, envoyé depuis un émetteur central. J’écoute comment (l’émetteur) parle, et je parle ensuite le même langage que lui, mais je parle plus fort (en envoyant un signal radio plus puissant)
After weeks of investigation, volunteer editors on English Wikipedia announced today that they blocked 381 user accounts for “black hat” editing.
Source : Hundreds of “black hat” English Wikipedia accounts blocked following investigation « Wikimedia blog
I think GCHQ was doing half theater and half genuine threat response here. The likelihood that The Guardian had anything hidden in the trackpad was low, but from GCHQ’s perspective they’d hide something in the trackpad so why wouldn’t anyone else?
Source : The Way GCHQ Obliterated The Guardian’s Laptops May Have Revealed More Than They Intended