True password confessions of a security expert

Password tweezers

I have a confession. It's hard to admit, and I know it might make me a bit of a social pariah and an outcast in the industry I work in but I need to get this off my chest:

I used a single password for many online services *deep breath* for a long time.

Continue reading

Google's Nest Thermostat can be easily hacked to spy on owners

Nest spy

When Google bought Nest Labs for $3.2 billion seven months ago, I described the move as the start of a home invasion. Google already knows a lot about you, including where you live, what your interests are, where you go on the Internet and in the real world (via Android), and its acquisition of Nest, which makes smart thermostats and (not so smart) smoke detectors, meant it would potentially also know what you get up to in your own home.

As it turns out, Google using Nest products to find out what customers are doing is just one worry. A team of researchers has discovered an easy hack that allows anyone to gain control of Nest’s smart thermostat and turn it into a spying device which can reveal when you’re at home or away, and even divulge your Wi-Fi credentials.

Continue reading

Edward Snowden can stay in Russia for at least three more years

Edward Snowden can stay in Russia for three more years

The enfant terrible of the tech world, and the thorn in the side of the NSA, Edward Snowden has been granted permission to stay in Russia for a further three years. The former NSA analyst turned whistle-blower sought exile in the country a year ago and on August 1st he was granted an extension. The three-year residency permit was approved a week ago, but has only just been made public by Snowden's lawyer. Anatoly Kucherena explained that Snowden himself would hold a press conference as soon as possible, reported Russia Today.

The US has tried to force Russia to hand over Snowden so he can face charges in his home country, but for the time being, he will be able to stay where he is. If he feels inclined, the permits allows for him to travel abroad for up to three months, and he is free to travel wherever he wants within Russia. Although he has not expressed an interest in doing so, Snowden would be eligible to apply for permanent residence in Russia in five years' time.

Continue reading

Google email scanning technology catches pedophile sharing abuse photos

Google email scanning technology catches paedophile sharing abuse photos

The scanning of personal emails is almost universally regarded as a terrible thing. Just like the activities of the NSA, when email providers start rifling through private information, it has a tendency to upset people. The justification for governmental mass surveillance has always been that it helps to combat crime -- and of course we never have to wait for long before the words "terrorists", "extremists", and "attack" are used. Google has just demonstrated how email scanning can be used to catch criminals. In this case, Google's image recognition software was used to identify images of child abuse sent via email by a Texan man.

A 41 year old man was arrested after the system detected suspicious material. The police were alerted and requested the user's details from Google after child protection services were automatically notified of the findings. The convicted sex offender's account triggered an alert after automatic, pro-active scans detected illegal pictures and Google then reported it to the National Center for Missing and Exploited Children. Google is understandably tight-lipped about how its technology works, but as the Telegraph points out, we do already know a little about the methods used.

Continue reading

Wearable technology is easily tracked

Wearables-2014-header-640x480_contentfullwidth

Users of wearable technology can have their information tracked with just $70 worth of hardware, according to a new study.

Research carried out by security firm Symantec used a simple set-up combining a Raspberry Pi computer and a Bluetooth radio module, to scan for signals. The technology was taken to parks and sporting events where it was able to record data being broadcast from gadgets close by.

Continue reading

Microsoft announces Windows Phone 8.1 Update 1, Cortana coming to new markets

Windows Phone 8.1 Update 1

Today, Microsoft announces the first major update for Windows Phone 8.1, called Update 1. It introduces new features and improvements over the version which the software giant unveiled earlier this year at Build 2014, and makes way for Cortana to arrive in new markets.

In Windows Phone 8.1 Update 1, Microsoft adds Live Folders, allowing users to group live tiles on the Start screen. Like the name suggests, it is able to display updating information on its tile, coming from the items it contains. A live folder can be created by dragging a live tile on top of another.

Continue reading

Google is reading your email to track hotel visits -- helps you have fun away from home

bellhop

Traveling and staying in hotels can be quite the adventure -- both good and bad. Of course, the quality of the lodging can determine the overall experience. If you check in and find a dead hooker under the bed, or stains all over the rug, you are going to have a bad time. Conversely, staying in a quality hotel can be quite the luxurious experience. Frankly, I have been on vacations where staying in the big comfy bed all day and watching movies was the highlight. Let's not forget room service -- eating fried mozzarella sticks and dripping marinara sauce everywhere? Who cares, its a hotel! The maid will clean it, right?

Unfortunately, leaving the hotel and looking for something to do in the vicinity can be an ordeal. I mean, going to a restaurant or attraction sight unseen could prove to be hit or miss. Choose the wrong restaurant and you will be stuck on the toilet for the rest of your vacation -- yuck! Today, Google announces that it wants to help users have a good time while on vacation. While that sounds great, the search giant is doing it in a creepy way -- by reading your emails!

Continue reading

Dating site OkCupid freely admits lying to its customers

Dating site OkCupid freely admits lying to its customers

There was widespread condemnation of Facebook when it was revealed that the social network had been manipulating users' newsfeeds as part of a social experiment. Official complaints may have been made but it doesn’t seem to have served as a lesson for other websites. Now it transpires that OkCupid -- the dating website whose slogan is "We use math to get you dates" -- has been fiddling the figures in a series of experiments on its users. The weird thing is, the site is openly bragging about it.

In a blog post unashamedly titled "We Experiment On Human Beings!", founder Christian Rudder writes that "OkCupid doesn’t really know what it’s doing". Seems like something of an odd admission. The blog post details three experiments the dating site conducted on its subscribers. There must have been more because the post is prefaced with the words "Here are a few of the more interesting experiments OkCupid has run". Does "interesting" just mean "less controversial"? Who knows?

Continue reading

Tech startups working to protect your privacy

Privacy

Addressing the Hackers on Planet Earth (HOPE) conference over the weekend of 18 July, Edward Snowden entreated hackers, engineers and activists to fight surveillance by building a new generation of privacy tools for everyone to use. In fact, privacy startups are already hard at work building tools to help web users protect their privacy in areas such as analytics, encryption and search.

However, there is still much work to do to put these tools into the hands of the ordinary web user.

Continue reading

Russia offers a $112,000 bounty to anyone who can crack Tor

Putin-640x438_contentfullwidth

Russia's government has issued a 4 million rubles (about $112,000) bounty to anyone who cracks the Tor anonymity network's encryption protocols.

Tor, which began as a secret project from the US Naval Research Laboratory, works by piling up layers of encryption over data, nested like the layers of an onion, which gave the network its original name, The Onion Router (TOR).

Continue reading

The tracks of my bargains – sacrificing privacy for a good deal

retail store shop camera surveillance

The increased popularity of smartphones means that, unless we specifically opt not to, most of us leave a record of our location wherever we go.

This information is of course valuable to marketers and a new study by customer engagement specialists PunchTab reveals that consumers are concerned about how location data is used.

Continue reading

Forget.me now handles 'right to be forgotten' requests for Bing as well as Google

forgetme_bing

Back in May, the EU Court of Justice ruled that people have a "right to be forgotten" from search results. Google fairly quickly set up an online form to allow complainants to put forward their case for censoring their appearance in results. It didn’t take long for Microsoft to follow suit, and Bing users were soon afforded the same option.

Forget.me was one service that offered to take care of Google removal requests for people, and at the time CEO Bertrand Girin promised that "if Bing and Yahoo get their Right to be Forgotten forms in order, we’ll be able to provide you with the possibility of submitting your URL to all three search engines at the same time." For Microsoft, that day has come.

Continue reading

Search engine Indexeus can tell you if your passwords are available to hackers online

indexeus_contentfullwidth

While the rest of the world is debating the rights and wrongs of the "right to be forgotten" in the European Union, one Portuguese entrepreneur with remarkably few scruples has been making a fast buck out of the idea. Indexeus, designed by 23-year-old Jason Relinquo of Portugal, is a search engine that boasts a searchable database of "over 200 million entries available to our customers".

The site allows anyone to search through millions of records from some of the larger data breaches of late -- including the recent massive breaches at Adobe and Yahoo! -- listing huge amounts of information such as email addresses, usernames, passwords, Internet address, physical addresses, birthdays and other information that may be associated with those accounts.

Continue reading

Do Not Track is bolstered by EFF's Privacy Badger extension

Do Not Track is bolstered by EFF's Privacy Badger extension

Online security and privacy are hotter topics than ever. Just this weekend, Edward Snowden made an appearance at the Hope X 2014 hacker event, and called for those in attendance to help make encryption tools easier to use. Another fierce advocate of online privacy is the EFF (Electronic Frontier Foundation), and today the group released a beta version of Privacy Badger, a beautifully named extension for Chrome and Firefox designed to stop a number of tracking techniques used online. The idea of tracking cookies is something that will be familiar to most, but tracking takes many forms, including advertising and social media. Privacy Badger aims to block this tracking.

Peter Eckersley, EFF Technology Projects Director, said: "Widgets that say 'Like this page on Facebook' or 'Tweet this' often allow those companies to see what webpages you are visiting, even if you never click the widget's button. The Privacy Badger alpha would detect that, and block those widgets outright. But now Privacy Badger's beta version has gotten smarter: it can block the tracking while still giving you the option to see and click on those buttons if you so choose".

Continue reading

Wilson's Weekend Whine: Snowden's call for online encryption is sad but necessary

Wilson's Weekend Whine: Snowden's call for online encryption is sad but necessary

It was quite a coup for HOPE (Hackers On Planet Earth). At the 2014 hacker event, Hope X, in New York City this weekend, Edward Snowden delivered a speech to those in attendance, advocating the use of encryption online. The former NSA analyst was not at the event himself -- he's still holed up in Moscow -- but he called on those present to help to protect privacy online. Speaking via a video link Snowden said: "You in this room, right now have both the means and the capability to improve the future by encoding our rights into programs and protocols by which we rely every day".

It was a great piece of work keeping the presentation a secret. There were, of course, fears that Snowden's appearance would somehow be thwarted: "We had to keep this bombshell quiet til the last minute since some of the most powerful people in the world would prefer that it never take place." There were certainly risks involved, but it was a risk worth taking. "[Snowden's] revelations of the massive NSA surveillance programs confirmed the suspicions of many and shocked those who haven’t been paying attention".

Continue reading

Load More Articles