Forum on Risks to the Public in Computers and Related Systems

ACM Committee on Computers and Public Policy, Peter G. Neumann, moderator

Index to Volume 27

Forum on Risks to the Public in Computers and Related Systems

ACM Committee on Computers and Public Policy, Peter G. Neumann, moderator

Volume 27 Issue 01 (Thursday 30 August 2012)

• United Airlines Network Outage (Jonathan B Spira)
• Observation Deck: What Happens When Cars Start Talking to Each Other? (Gabe Goldberg)
• The Cadillac Your Livery Driver Has Been Dreaming Of (John Pearley Huffman via Monty Solomon)
• Study says drivers, not cellphones, pose the accident risk (Hiawatha Bray via Monty Solomon)
• New malware infects VMware VMs (Bob DeSilets)
• Shared private key can apparently compromise RuggedComSCADA gear (Digital Bond via NNSquad)
• "How to Secure Data by Addressing the Human Element" (Thor Olavsrud via Gene Wirchenko)
• "Your car, tracked: the rapid rise of license plate readers" (Cyrus Farivar via Monty Solomon)
• Data so secure even you can't read it (Ben Moore)
• I've Got That Syncing Feeling (Craig Forman via Monty Solomon)
• How to Hack your own Hotmail account (Jeremy Ardley)
• Don't download that app: US presidential candidates will STALK you with it (John Leyden via Monty Solomon)
• "Buying Their Way to Twitter Fame" (Austin Considine via Lauren Weinstein)
• "Twitter's fake followers: Influence for sale" (Bill Snyder via Gene Wirchenko)
• 5 Design Tricks Facebook Uses To Affect Your Privacy Decisions (Techcrunch)
• Doug Jones: guest editorial on voter registration (PGN)
• Re: "How to avoid an Elections-Ontario-style data-breach fiasco" (Gene Wirchenko)
• Spyware Matching FinFisher Can Take Over IPhone and BlackBerry (Dave Farber, John Fricker)
• Re: Knight Capital software upgrade costs $440m (Amos Shapir)
• Re: NYPD unveils new $40 million super computer system (Raj Mathur)
• Re: Announcement of civil timekeeping meeting (mathew)

Volume 27 Issue 02 (Thursday 6 September 2012)

• Hantavirus warning e-mails and letters (Monty Solomon)
• Lockheed Air-Traffic Upgrade Now on Track, FAA Chief Says (Dave Farber)
• United Airlines Investigates Network Failure Delaying 580 Flights (Gabe Goldberg)
• Hack on Saudi Aramco hit 30,000 workstations, oil firm admits (John Leyden via Monty Solomon)
• Thousands fall victim to utility payment scam (Scott Bauer via Monty Solomon)
• Can YOU crack the Gauss uber-virus encryption? (John Leyden via Monty Solomon)
• Harvard Students in Cheating Scandal Say Collaboration Was Accepted (PGN)
• "Automated DRM keeps spoiling the show, from the DNC to Mars" (Phipps-Samson via Gene Wirchenko)
• Ustream continues to attempt explaining Hugo Awards stream blackout (Lauren Weinstein)
• Did YouTube Really Block Michelle Obama's DNC Speech for Copyright Infringement? (Lauren Weinstein)
• 1 million iOS device IDs leaked after alleged FBI laptop hack (ars technica via Lauren Weinstein)
• FBI Says Laptop Wasn't Hacked; never possessed Apple device ID file (WiReD via Lauren Weinstein)
• "When virtualization becomes your worst enemy" (Gene Wirchenko)
• When GPS Confuses, You May Be to Blame (Randall Stross via Matthew Kruk)
• 'first ever' Linux, Mac OS X-only password sniffing Trojan spotted (John Leyden via Monty Solomon)
• Apple patent would disable phone based on location (NBC via Lauren Weinstein)
• Smartphone apps track users even when shut down (Richard M. Smith)
• Honeytrap reveals mass monitoring of downloaders (Paul Marks via Dewayne Hendricks)
• Firefox, Opera allow crooks to hide an entire phish site in a link (John Leyden via Monty Solomon)
• Test Mercenaries: Quality at Google, 2006-2011 (Mike Bland via jidanni)
• Re: The Cadillac Your Livery Driver Has Been Dreaming Of (Joel Garry)
• Re: ... civil timekeeping meeting (Steve Allen)

Volume 27 Issue 03 (Saturday 29 September 2012)

• Fake sign causes real outage (John Carr)
• Healthwatch: RCN subscribers in greater NYC area (Danny Burstein)
• GAO recommendations on medical device security (Kevin Fu)
• The disappearing web: Information decay is eating away our history (Gigaom via NNSquad)
• Double Payments Bedevil Veterans' Pension System (James Dao via Monty Solomon)
• Joint Typhoon Warning Center blocked for non-US users (jidanni)
• New Jersey bans smiling in license photos (Mark Thorson)
• "Major banks hit with biggest cyberattacks in history" (David Goldman via Gene Wirchenko)
• Cyber Attacks on Banks Expose U.S. Infrastructure Vulnerability (Debra L Tekavec)
• Using a rental computer? There's a spy-app with that ... (Danny Burstein)
• Rented Computers Captured Customers Having Sex, F.T.C. Says (Matthew Kruk)
• The Anti-Cloud? (Mark Thorson)
• Remote wipe attack not limited to Samsung phones! (Bob Frankston)
• Hackers Breached Adobe Server in Order to Sign Their Malware (Kim Zetter via Monty Solomon)
• "Adobe confirms Windows 8 users vulnerable to active Flash exploits" (Gregg Keizer via Gene Wirchenko)
• Two men admit to $10 million hacking spree on Subway sandwich shops (Dan Goodin via Monty Solomon)
• Millions of Virgin Mobile accounts at risk of password attacks (Dan Goodin via Monty Solomon)
• Oracle Database suffers from "stealth password cracking vulnerability" (Lauren Weinstein)
• Hidden web code means hackers 'can wipe Samsung Galaxy S3' (Bob Frankston)
• Security experts not understanding security risks (Ars technica via Jeremy Epstein)
• "Do Not Call List doesn't apply for home business lines: CRTC" (Brian Jackson via Gene Wirchenko)
• Your Ballot is Now Available (Wendy M. Grossman)
• No Fundamental Right to a Secret Ballot (Jonathan S. Shapiro)
• "One poor security choice results in $250,000 Bitcoin heist" (Gene Wirchenko)
• SPAM with Calendar invites risks... (George Michaelson)
• Authentication monoculture (Dag-Erling Sm?rgrav)
• Data breach at IEEE.org: 100k plaintext passwords (Jeffrey Walton)
• Risks of linking information from Facebook leads to bigamy charges (Thomas Dzubin)
• Facebook wants you to snitch on your friends not using their real names (Paul Bernal via Lauren Weinstein)
• "Facebook reveals its evil plans" (Robert X. Cringely via Gene Wirchenko)
• A new nasty virus and an excellent tool to counter it and others (Paul Robinson)
• 20% of new PCs in China come with malware pre-installed (Wolfgang Gruener via Jim Reisert)
• Hidden web code means hackers 'can wipe Samsung Galaxy S3' (Lauren Weinstein)
• Leaked Apple IDs ... (Gene Wirchenko)
• Re: When GPS Confuses, You May Be to Blame (Henry Baker)

Volume 27 Issue 04 (Wednesday 24 October 2012)

• Alaska Airlines: Operations returning to normal (Doug Esser via Paul Saffo)
• Apps Alert the Doctor When Trouble Looms (John Karabaic)
• Error and Fraud at Issue as Absentee Voting Rises (Adam Liptak via PGN)
• Online schools face backlash as states question results (Stephanie Simon via Monty Solomon)
• A network scientist examines the lifespan of a fact (Slate via Lauren Weinstein)
• UK launching "virtual ID card" system / critics fear it's an instant target (Lauren Weinstein)
• Microsoft robo-DMCA takedown orders run amok (Torrent Freak via LW)
• Cyberattacks continue to affect U.S. banks (Nicole Perlroth via LW)
• DDoS attacks on major US banks are no Stuxnet: here's why (ars technica)
• Another bank software problem (Martyn Thomas)
• McAfee, Trust Guard certifications can make websites *less* safe (ars technica via LW)
• The Risks of Bad Mapping (Gene Wirchenko)
• Support your right to own a 3D printer! (Mark Thorson)
• Don't just throw your old hard drives into the trash (Jim Reisert)
• "Phony Facebook application security tests? Say it ain't so, Zuckerberg (Gene Wirchenko)
• "Windows 8 pirates: No noose is good noose" (Cringely via Gene Wirchenko)
• "Hackers exploit Skype API to infect Windows PCs" (Ted Samson via GW)
• Misconduct Widespread in Retracted Science Papers, Study Finds (Carl Zimmer via Monty Solomon)
• Penn—Hackers leak personal info of students, employees and alums (Dave Farber)
• Re: Risks of linking information from Facebook leads to bigamy charges (Amos Shapir)
• Re: The Anti-Cloud? (Scott Miller)
• Re: Security experts not understanding security risks (Neil McKellar)
• Re: "Fake sign causes real outage" (Gene Wirchenko)
• Re: Mac calendar spam invites (Ed Ravin)
• REVIEW: "Learning from the Octopus", Rafe Sagarin (Rob Slade)

Volume 27 Issue 05 (Monday 29 October 2012)

• NY Times article on changing voter registration addresses in WA and MD (Jeremy Epstein)
• Numerous voting machines... that count the wrong candidate (Danny Burstein)
• Paper prophets: Why e-voting is on the decline in the U.S. (Timothy B. Lee via Monty Solomon)
• "What's in a vote? Only your entire personal profile" (Cringely via Gene Wirchenko)
• Nissan steer-by-wire cars set for showrooms by 2013 (Martyn Thomas)
• Mercedes-Benz concerned that car safety laws will crimp in-car apps, Internet connectivity, etc. (Lauren Weinstein)
• Texas schools punish students refusing to be tracked with microchips (Monty Solomon)
• Textbook publisher Pearson takes down 1.5M teacher and student blogs With A Single DMCA Notice (Robert Schaefer)
• Cancel your service? Certainly, ma'am; 11.7 quadrillion euros, please. (Mark Brader)
• Computer Viruses Are "Rampant" on Medical Devices in Hospitals (David Talbot via Jim Reisert)
• The Internet isn't the only modern convenience that can get backhoed (Dave Crooke)
• Credit Card Data Breach at Barnes & Noble Stores (Schmidt/Perlroth via Monty Solomon)
• "Amazon's DRM drama: Whose Kindle is it anyway?" (R.X.Cringely via Gene Wirchenko)
• Android apps used by millions vulnerable to password, e-mail theft (Lauren Weinstein)
• "Legit Android apps rendered unsafe by poor programming, SSL misuse" (Ted Samson via Gene Wirchenko)
• "Google, Microsoft, and Yahoo fix serious e-mail weakness" (Jeremy Kirk via Gene Wirchenko)
• How a Google Headhunter's E-Mail Unraveled Massive Net Security Hole (Lauren Weinstein)
• "What can be learned from the government's cybersecurity bungling" (Christine Wong via Gene Wirchenko)
• Pakistan to monitor all phone calls, e-mail, other Internet traffic (Lauren Weinstein)
• Re: "Hackers exploit Skype API to infect Windows PCs" (David Damerell)
• Re: Hotmail Password Length (Dennis E. Hamilton)
• Re: ACSAC 2012 early registration deadline is 12 Nov (Robert H'obbes' Zakon)

Volume 27 Issue 06 (Sunday 4 November 2012)

• Roles of governments in election oversight and accountability (PGN)
• NJ e-mail voting article on Freedom-to-Tinker (Andrew W. Appel)
• Comments on Andrew Appel's blog item (Penny Venetis via PGN)
• Fiddling voting machines in Ohio (Doug McIlroy)
• A Huffington Post blog on Recount Roulette (Barbara Simons)
• Charlie Rose show on elections (Barbara Simons)
• Excerpt from 0ct 2012 CACM article by Simons and Jones (PGN)
• Romney and Obama campaign websites leak PII (Jeremy Epstein)
• Sandy wreaks havoc on Internet infrastructure (Lauren Weinstein)
• Hurricane Sandy knocked out a phone line 3000+ miles away (John Pettitt)
• Restoring wired service after Sandy may take 2 weeks, Verizon says (Stephen Lawson via Monty Solomon)
• Hurricane Sandy also disrupts cellular networks and wired Internet (Jon Brodkin via Monty Solomon)
• In Sandy's Wake, Cellphone Users Steaming at Hit-or-Miss Service (Lauren Weinstein)

Volume 27 Issue 07 (Monday 5 November 2012)

• Ohio—ES&S's "experimental" patches (Bello/Fitrakis)
• South Carolina didn't encrypt hacked social security numbers ... (Jeffrey Collins via Lauren Weinstein)
• FCC Describes 911 and Cellphone Problems (Edward Wyatt and Brian X Chen via NNSquad)
• Russia launches massive Internet censorship list (Iain Thomson via NNSquad)
• "What to look for onsite when choosing a colo facility" (Matt Prigge via NNSquad)
• After Sandy, wired New Yorkers get reconnected with pay phones (Ben Cohen)
• After Hurricane Sandy: Lessons for the data center" (Paul Venezia via Gene Wirchenko)
• When your fuel pumps are below sea level... (Danny Burstein)
• NYU Hospital's Backup System Undone by Key Part in Flooded Basement (Monty Solomon)
• Why Do Hospital Generators Keep Failing? (Monty Solomon)
• Re: In Sandy's Wake... (Dimitri Maziuk)
• Re: Internet Voting in the U.S. (Monty Solomon)
• Re: Risks in Internet Voting (Joly MacFie)
• WEIS 2013 Washington DC June 11-12 - Call for Papers (Allan Friedman)

Volume 27 Issue 08 (Sunday 11 November 2012)

• Elections and Hurricanes: After the Aftermath of the Math (PGN)
• Summary of my experiences on the election (Douglas W Jones)
• My election day reports (Jeremy Epstein)
• Virginia city's ballot listing Obama as republican, Romney as democrat (Jeremy Epstein)
• Unusual risk for US voting machines: a spider (Valdis Kletnieks)
• Covington anomaly: mistaken attribution (PGN)
• Another misguided call for online voting (Lauren Weinstein)
• "Estonia gets to vote online. Why can't America?" (Lauren Weinstein)
• Security Researchers Warn New Jersey's Emergency E-mail Voting Could Be An Insecure, Illegal Nightmare (Matt Blaze via LW)
• Another article on evoting (Ezra Klein via LW)
• Government Services in Clouds (Chris Drewe)
• BGP error in Indonesia blocks Google in other areas (Lauren Weinstein)
• Did Skype Give a Private Company Data on Teen WikiLeaks Supporter Without a Warrant? (Ryan Gallagher via Monty Solomon)
• Creative Disruption: Sandy Tells Us, *Let's Start Over* (John F. McMullen)
• Sandy: NYU hospital power outage... may have been from safety sensors (Danny Burstein)
• Re: Verizon FIOS phone service (Bill Hopkins)
• Re: When your fuel pumps are below sea level... (Simson Garfinkel)

Volume 27 Issue 09 (Wednesday 21 November 2012 Volume 27 : Issue 09)

• Future of Federal Cybersecurity R&D Strategies Webcast (Jeremy Epstein)
• Largest identity theft ever? (Mark Thorson)
• Largest U.S. identity theft ever? (Mark Thorson)
• Two items of potential interest on the 2012 election (Thom Hartmann and Sam Sacks)
• ORCA, Mitt Romney's high-tech get-out-the-vote program, crashed on Election Day (Michael Kranish via Monty Solomon)
• "Unleashed! Project Orca, the campaign killer whale" (Robert X. Cringely via Gene Wirchenko)
• Security issues threaten to derail tablet voting (Rebecca Mercuri)
• Estonia: WNYC's On the Media (E. John Sebes)
• Scientists Find Cheaper Way to Ensure Internet Security (John Markoff)
• Consequences of Facebook photo misidentification (Ken Olthoff via PGN)
• Android flaw blocks December dates (Mark J Bennison)
• Big Data and Europe's "Right to be Forgotten" (Lauren Weinstein)
• Bloomberg news: Why Cell Phones Went Dead After Hurricane Sandy (Susan Crawford via Dave Farber)
• Less privacy protection for IMAP users (Steven J Klein)
• Privacy and surveillance (Steve Summit)
• "Unlocking the brilliance in high tech" (Gene Wirchenko)
• Re: Summary of my experiences on the election (Richard S. Russell)
• 2012 Layered Assurance Workshop (LAW) Final Program (Rance DeLong)

Volume 27 Issue 10 (Thursday 29 November 2012 Volume 27 : Issue 10)

• Commentary on L'Aquila earthquake verdict (Rob Seaman)
• Drivers adapt to red-light cameras (Jim Reisert)
• Close margin in Alaska senate race prompts recount (PGN)
• Skunk knocks Colorado TV station off air (Monty Solomon)
• Cambridge to Study Technology's Risk to Humans (Sylvia Hui via ACM TechNews)
• U.S. Congress considers mandating smart cards for Medicare beneficiaries and providers (Kevin Fu)
• How least-cost routing slams rural telephone service, getting worse (Lauren Weinstein)
• "Skype vulnerability may have exposed your messages" (Woody Leonhard via Gene Wirchenko)
• SEC Employees Brought Sensitive Data to Black Hat... (PGN)
• NASA Suffers Large Data Breach Affecting Employees, Contractors, ... (Bob Charette via Ed Levinson)
• "Public clouds; risky business for MSPs" (Gene Wirchenko)
• Hotel room door locks vulnerable to hacking (Mark Thorson)
• RFID used to track school students (Nick Brown)
• More on suspended student refusing to wear tracking device (Tim Cushing via Monty Solomon)
• Barnes & Noble Ebooks expire with your credit card! (Tim Cushing via Monty Solomon)
• Syria blacks out the Internet (Paul Saffo)
• Excellent article on Chinese censorhip (Philipp Winter/Jedidiah Crandall via PGN)
• When It Comes to Security, We're Back to Feudalism (WiReD via Dave Farber)
• "Malware uses Google Docs as proxy to command and control server" (Lucian Constantin via Gene Wirchenko)
• Trojan sent blackmails from PCs. Japanese Police arrested PC owners (Chiaki Ishikawa)
• Cyber Security and Information Intelligence Research Workshop (Frederick T. Sheldon)

Volume 27 Issue 11 (Tuesday 11 December 2012)

• How the US Air Force flushed a $1B software project down the drain (Randall Stross via Lauren Weinstein)
• Iran shipping signals conceal Syria ship movements (Danny Burstein)
• Syria outage sheds light on U.S. Kill Switch concerns (Robert Lemos via ACM TechNews)
• 25-GPU cluster cracks every standard Windows password in <6 hours (ars technica via Lauren Weinstein)
• Inaccurate Apple Maps directions causes 'life threatening issue' for travelers in Australia (Monty Solomon)
• In Pursuit of McAfee, Media Are Part of Story (Jeff Wise via Monty Solomon)
• The Illusion Of Online Security (The Diane Rehm Show via Monty Solomon)
• High-Speed Traders Profit at Expense of Ordinary Investors (Nathaniel Popper and Christopher Leonard)
• UN Internet regulation talks in Dubai threaten Web freedom (Dan Gillmor via Dave Farber)
• Lord Leveson calls for curbs on Internet 'mob rule' (Chris Drewe)
• National Network for First Responders Won't Happen for Years ... (Edward Wyatt via Lauren Weinstein)
• How Smartphones Are Making Wallets Obsolete (Gabe Goldberg)
• "A Step Toward E-Mail Privacy" (NYTimes editorial via PGN)
• Lock Firm Onity Starts To Shell Out For Security Fixes To Hotels' Hackable Locks (Andy Greenberg via Jim Reisert)
• Mobile Browsers Fail Georgia Tech Safety Test (Michael Terrazas via ACM TechNews)
• A letter to the President about e-voting (Barbara Simons)
• 10th International Conference on integrated Formal Methods iFM 2013 (Diego Latella)

Volume 27 Issue 12 (Monday 24 December 2012)

• "Kempsey flood defence failure due to waterlogged sensor" (David J Taylor)
• Zeno proven correct, after all: motionless car speeding! (Henry Baker)
• Wells Fargo's website buckles under flood of traffic (Monty Solomon)
• Facebook and Gmail Have Outages (Jonathan B Spira)
• What Instagram's New Terms of Service Mean for You (Wortham/Bilton via Monty Solomon)
• Instagram Does an About-Face (Perlroth/Wortham via Monty Solomon)
• Instagram: 'Wait, Wait! That's Not What We Meant!' (Mike Masnick via Monty Solomon)
• Stabuniq malware found on servers at U.S. financial institutions (Monty Solomon)
• "Burdens of Proof: Cryptographic Culture and Evidence Law in the Age of Electronic Documents" (J-F Blanchette via Lauren Weinstein)
• NSA document on iOS security (Gabe Goldberg)
• NSA targeting domestic computer systems in secret test (Declan McCullagh)
• How To Pirate Windows 8 Metro Apps, Bypass In-app Purchases (Slashdot via Lauren Weinstein)
• "You're not anonymous. I know your name, email, and company." (Darren Nix via Lauren Weinstein)
• 3D-Printing Firm Makerbot Cracks Down On Printable Guns (Henry Baker)
• Morgan Freeman Viral Newtown Quote Was Fake (Lauren Weinstein)
• Customer Service Social Engineering Scam on Amazon (Chris Cardinal via Lauren Weinstein)
• Iranian data-wiper (PGN)
• Feudal Security (Bruce Schneier)
• Book Review: Harvey Molotch, "Against Security" (Bruce Schneier)

Volume 27 Issue 13 (Saturday 12 January 2013)

• Oscar's E-Voting Problems Worse Than Feared (Hollywood Reporter)
• Abelson/Creswell: EHRs may add to, not reduce, the cost of health care (David Lesher, Lauren Weinstein)
• Cox cable e-mail storage failure (James Paul)
• Browser's break pedal changes into gas pedal once fully stopped (jidanni)
• Tech Problems Plague Exchanges (Nathan Popper via Dave Farber)
• IBM's Watson Gets a Swear Filter (Robert Schaefer)
• Newspaper on Cape Cod Apologizes for a Veteran Reporter's Fabrications (Katharine Q. Seelye via Monty Solomon)
• Hoax article detailing fake war stayed up on Wikipedia for five years (Lauren Weinstein)
• Why I never use a non-gas credit card at gas stations... (Paul Saffo)
• "Instagram debacle shows the user agreement process needs fixing" (Gene Wirchenko)
• A Chinese Web censor snaps, goes on public rant (Lauren Weinstein)
• You better brush up on airport security (Peter Houppermans)
• Online Banking Attacks Were Work of Iran, U.S. Officials Say (David J Farber)
• "U.S. bank cyber attacks reflect 'frightening' new era" (Antone Gonsalves via Gene Wirchenko)
• "Microsoft kicks off 2013 with clutch of critical Windows updates" (Gregg Keizer via Gene Wirchenko)
• "Ruby on Rails patches more critical vulnerabilities" (Jeremy Kirk via Gene Wirchenko)
• Hackable office phones (PGN)
• Disney to roll out RFID-enabled 'MagicBand' to guests (Jim Reisert)

Volume 27 Issue 14 (Tuesday 22 January 2013)

• Jim Horning, 24 Aug 1942—18 Jan 2013 (PGN)
• Luther Weeks: Voting Requires Vigilance. Popular Isn't Always Prudent (PGN)
• Internet resources allow identification of personal genomes via (Lauren Weinstein)
• France wants to tax Google/Facebook based on users/data collected (Lauren Weinstein)
• Under pressure, Journal News withdraws gun database, but the mirrors are everywhere ... (Lauren Weinstein)
• These People Are Now Sharing Horrible Things About Themselves Thanks to Facebook Search (Lauren Weinstein)
• "Distracted driver hits senior while using her iPod" (Gene Wirchenko)
• "Facebook Graph Search may be a social engineering nightmare" (Ted Samson
• via Gene Wirchenko)
• Risks of inaccurate cellphone tracking info (David Tarabar)
• Ahmed Al-Khabaz expelled from Dawson College after finding security flaw (David J. Farber, Suresh Ramasubramanian, Steve Crocker)
• "Red October relied on Java exploit to infect PCs" (Gene Wirchenko)
• Subject: "how Oracle installs deceptive software with Java updates" (Ed Bott via Gene Wirchenko)
• "Disabling Java in Internet Explorer: No easy task" (Woody Leonhard via Gene Wirchenko)
• Just How Dumb Is It For CBS To Block CNET From Giving Dish An Award? (Mike Masnick)
• The 2013 Best of CES Awards: CNET's story (Lindsey Turrentine via Monty Solomon)
• Re: EHRs may add to, not reduce, the cost of health care (Dave Parnas)
• Course announcement: SecAppDev 2013, 4-8 March, Leuven, Belgium (Lieven Desmet)

Volume 27 Issue 15 (Tuesday 29 January 2013)

• Digital Map Error May Have Led To Minesweeper Grounding (Paul Saffo)
• U-verse back up after outage hit thousands (Lauren Weinstein)
• $180M case management system for social workers may have to be abandoned
• (Jonathan Thornburg)
• How AT&T used to put service during emergencies at top priorities (Lauren Weinstein)
• "Skin cancer apps 'dangerous'" (Robyn Preston via Gene Wirchenko)
• Grammar badness makes cracking harder the long password (Dan Goodin via Monty Solomon)
• Student's Expulsion Exposes Computer Science Culture Gap (Robert Schaefer)
• School that expelled student hacker may have ignored old flaw (Ted Samson via Gene Wirchenko)
• Man outsources his own job to China (Robert Schaefer)
• MIT hacked again, URLs redirected (Joanna Kao via Monty Solomon)
• Mathematicians aim to take publishers out of publishing (Richard van Noorden via Dewayne Hendricks via Dave Farber)
• Cyber Security in 2013: How Vulnerable to Attack Is U.S. Now? (ACM TechNews)
• Red October (Peter G. Neumann)
• Major vulnerabilities in Cisco VoIP phones (Lauren Weinstein)
• "Twitter flaw gave third-party apps unauthorized access to private messages, researcher says" (Lucian Contstantin via Gene Wirchenko)
• "Tweeted photos not free to publish, judge rules" (Goyal/MacKenzie via Gene Wirchenko)
• "World's first 'tax' on Microsoft's Internet Explorer 7" (Gene Wirchenko)
• 12 Common Election Security Myths (R.G. Johnston via PGN)
• 12 survival tips from the spouse of a serial startup executive (Jeff Jedras via Gene Wirchenko)
• Exposure of files on unsecured wireless no excuse to search ... (Jaikumar Vijayan via Monty Solomon)
• Great blog posting in Scientific American re Comment Moderation (Lauren Weinstein)

Volume 27 Issue 16 (Thursday 14 February 2013)

• Super Bowl blackout was caused by electrical relay (Kevin McGill via Henry Baker)
• Safety investigators identify origin of Boeing 787 battery fire (Jim Reisert)
• Jared Diamond on risk assessment (Paul Edwards)
• Man allegedly follows GPS directions to wrong house; shot dead (Chris Matyszczyk via Monty Solomon)
• Hackers in China Attacked The New York Times for Last 4 Months (Nicole Perlroth)
• Infiltrate anybody, one-click easy (Steve Summit)
• "U.S. Said to Be Target of Massive Cyber-Espionage Campaign" (Ellen Nakashima via ACM TechNews)
• Visa suspicious activity (Leslie Maltz)
• Password Cracking AES-256 DMGs and Epic Self-Pwnage (Jeremiah Grossman via Monty Solomon)
• Subject: Security Firm Bit9 Hacked, Used to Spread Malware Security Firm Bit9 Hacked, Used to Spread Malware (Lauren Weinstein)
• "Researchers devise new attack techniques against SSL" (Lucian Constantin via Gene Wirchenko)
• Deloitte predicts that in 2013 more than 90 percent of user-generated passwords will be vulnerable to hacking (Jim Reisert)
• "Canadian business and technology associations oppose anti-spam regulations" (Gene Wirchenko)
• "Data breach exposes Energy Department's 'continuing story of negligence'" (Gene Wirchenko)
• "9 iPhone and iPad apps that invade your privacy, and 1 that doesn't" (Tom Kaneshige via Gene Wirchenko)
• Mandatory Black Boxes in Cars (Nate Cardozo EFF Press)
• Apparent issue with Facebook Connect is dragging people from around the Web to a moot error page (The Next Web via NNSquad)
• Did Facebook Just Break Half the Internet? (Gawker via NNSquad)
• "How Facebook Connect took down the Web" (Peter Wayner via Gene Wirchenko)
• Read this book by Ross Anderson. It's free. (Rob Slade)
• FOSE 2013 (Sarah Kneip)

Volume 27 Issue 17 (Sunday 24 February 2013)

• Rush Holt on the Oscar Voting (PGN)
• NASA loses, then restores contact with space station (Jim Reisert)
• London Underground blacked out in 2003 (Chris Drewe)
• English Closed Captions of a speech given in spanish (David Tarabar)
• The Long or Short of the TESLA Tale (Broder vs Musk via PGN)
• Electronic health records: teething problems? (DKross)
• Gaming the System (Catherine Rampell)
• Chinese Army Unit Is Seen as Tied to Hacking Against U.S. (NYTimes)
• “Malicious Mandiant Security Report in Circulation'' (Joji Hamada via Jim Reisert)
• VERY Cold boot attacks on Androids (Anthony Thorn)
• "Why Java APIs aren't the same as a Harry Potter novel" (Gene Wirchenko)
• YouTube restores video of crash blocked by NASCAR (Lauren Weinstein)
• ISP six-strikes starts tomorrow, and the expected results are ... (Lauren Weinstein)
• IEEE: Can You Trust an Amazon Review? (Lauren Weinstein)
• "Nowhere to hide: Video location tech has arrived" (Bill Snyder via Gene Wirchenko)
• Bad idea: Firefox Will Soon Block Third-Party Cookies (Lauren Weinstein)
• Re: Infiltrate anybody, one-click easy (Al Macintyre, Tom Van Vleck)
• Microsoft seeks patent for spy tech for Skype (Lauren Weinstein, Dossy Shiobara, David Pollak)
• 18th International Workshop on Formal Methods for Industrial Critical Systems: FMICS 2013, Call for papers (Diego Latella)

Volume 27 Issue 18 (Wednesday 6 March 2013)

• Hyundai controller failure? (PGN)
• How much does a botnet cost? and Internet voting? (E. John Sebes)
• Major crash at Yahoo Mail de-activates millions of accounts (Chris J Brady)
• Re: Yahoo Fails to Restore Millions of Deleted E-Mails (Chris J Brady, Tricia Cole)
• Yahoo Mail Hack Sending E-mails With Single Link To Rogue Websites (Chris J Brady)
• Adi Shamir says prepare for "post-crypto" world (Lauren Weinstein)
• "Are you leaking too much of your real life online?" (Roger A. Grimes via Gene Wirchenko)
• Users happy to allow strangers to read their e-mail (Paul Saffo)
• How SSD power faults scramble your data (Lauren Weinstein)
• "Test your SSDs or risk massive data loss, researchers warn" (Ted Samson)
• Suit: 185K Spyware Images Sent from Rental Computers (Joe Mandak via Jim Reisert)
• Evernote hacked: E-mails encrypted passwords stolen (Lauren Weinstein)
• "Oracle releases emergency fix for Java zero-day exploit" (Lucian Constantin via Gene Wirchenko)
• "Java zero-day holes appearing at the rate of one a day" (Woody Leonhard via Gene Wirchenko)
• "Researchers link latest Java zero-day exploit to Bit9 hack" (Lucian Constantin via Gene Wirchenko)
• First government-sanctioned Japanese hacking contest (Mark Thorson)
• "Facebook said to fix OAuth-based account hijacking flaw" (Lucian Constantin via Gene Wirchenko)
• Many companies likely affected by hack of iOS developer forum (Lucian Constantin via Gene Wirchenko)
• "DNA Gun Tags Rioters for Future Arrest" (Gene Wirchenko)
• "Researchers discover new global cyber-espionage campaign" (Lucian Constantin via Gene Wirchenko)
• "Researchers find loophole in Google's two-factor authentication" (Lucian Constantin via Gene Wirchenko)
• Re: Electronic health records: teething problems? (E. John Sebes, Gene Wirchenko)

Volume 27 Issue 19 (Monday 11 March 2013)

• Boeing 787s to create half a terabyte of data per flight (Dag-Erling Smorgrav)
• Shaw Internet customers up in arms over lost e-mails during 'interruption' (Lauren Weinstein)
• Radio controlled clocks misinterpret daylight saving time warning bit (Joe Loughry)
• Tor Exit Nodes Located and Mapped (Steve Schear via Dewayne Hendricks)
• 9th Circuit Appeals Court: 4th Amendment Applies At The Border; Also: Password Protected Files Shouldn't Arouse Suspicion (Lauren Weinstein)
• "Facebook does damage control after claims of rigged News Feed" (Zach Miners via Gene Wirchenko)
• Seattle bar bans Google Glass over privacy concerns (Mark Thorson)
• "When is your data not your data? When it's in the cloud" (Bill Snyder via Gene Wirchenko)
• "Maybe, just maybe, users can win the privacy war" (Galen Gruman via Gene Wirchenko)
• Skype's Been Hijacked in China, and Microsoft Is O.K. With It (Businessweek via David J. Farber)
• Harvard e-mail spying story (Lauren Weinstein)
• Harvard's e-mail intrusion explanation fails the smell test (Lauren Weinstein)
• Re: How SSD power faults scramble your data (Geoff Kuenning)
• Re: Electronic health records: teething problems? (Arnold Weissberg)
• Re: Yahoo Mail Hack Sending E-mails With Single Link To Rogue Websites (Chris Drewe, Martyn Thomas)
• Re: Major crash at Yahoo Mail de-activates millions of accounts (Jonathan Kamens, Chris J Brady, Jonathan Kamens)
• Re: Trojaned blackmails from PCs. Japanese Police arrested PC owners (Chiaki Ishikawa)

Volume 27 Issue 20 (Monday 18 March 2013)

• Election screw-ups in Kenyan election (PGN)
• Hacking the Papal Election (Bruce Schneier)
• Replacing car keys with smartphone apps (Arthur T.)
• Hyundai car controller failure? (PGN)
• When being a "self starter" isn't a good thing (Jeremy Epstein)
• Hiding Secret Messages in E-mail Jokes (Lauren Weinstein)
• Fake silicone fingers strike again (Charles C. Mann)
• The Internet is a surveillance state (Bruce Schneier)
• More bad news for RC4 crypto (Lauren Weinstein)
• "Researchers resurrect and improve CRIME attack against SSL" (Gene Wirchenko)
• Warning About the Thrift Savings Plan iPhone App (Gabe Goldberg)
• "Attorney General's testimony on Aaron Swartz raises more questions than answers" (Ted Samson via Gene Wirchenko)
• Defense Companies Cash in on Gov't Hyped 'Cyber-Security' Threat (Lauren Weinstein)
• Microsoft: Botched firmware update set off Outlook.com outage (Tim Greene via Jim Reisert)
• Bloomberg: Hacker Attacks Top Latest U.S. List of Global Threats (Gabe Goldberg)
• "Mobile to the rescue when an airplane trip goes awry" (Galen Gruman via Gene Wirchenko)
• The end of Google Reader: Have I got news for you (G.F. via Dewayne Hendricks)
• Google offers help to attacked /"hacked"/ sites (Lauren Weinstein)
• Re: Boeing 787s to create half a terabyte of data per flight (Bob Frankston, Steve Loughran)
• Re: How SSD power faults scramble your data (Dimitri Maziuk)
• Harvard apologizes after secret e-mail search (Lauren Weinstein)

Volume 27 Issue 21 (Thursday 21 March 2013)

• Mars Rover is Repaired, NASA Says (Henry Fountain)
• Weapons Experts Raise Doubts About Israel's Antimissile System (William J. Broad)
• Computer Networks in South Korea are Paralyzed in Cyberattack (Choe Sang-Hun)
• Hospital computer outage does not compromise patent safety (Richard Irvin Cook)
• Outage at Alchemy Communications data center in Irvine, California (Steve Golson)
• Cyberattack on Florida election raises questions (Lauren Weinstein)
• Details on the denial of service attack that targeted Ars Technica (Dewayne Hendricks)
• The ephemeral Internet (Bob Frankston)
• TSA tested program that tracked Bluetooth devices (Henry Baker)
• Tom Coburn Amendment Limiting National Science Foundation Research Funding Passes Senate (Lauren Weinstein)
• Re: Hacking the Papal Election (Sam Steingold, Neil Maller)
• Re: Boeing 787s to create half a terabyte of data per flight (PK, Dag-Erling Smorgrav)
• Re: "Attorney General's testimony on Aaron Swartz raises more questions than answers" (Jonathan Kamens)
• Sorry Google; you can Keep it to yourself (Joe Touch)

Volume 27 Issue 22 (Saturday 23 March 2013)

• Small furry animals and slithering snakes vs Electric Utilities (Ishikawa)
• Panama Canal Railway upgrade problems (Robert Heuman)
• National Vulnerability Database is hacked! (Mark Thorson)
• Re: Weapons Experts Raise Doubts About Israel's Antimissile System (Amos Shapir)
• Feds announce massive scanning of private Internet communications (Lauren Weinstein)
• Google's trust problem (Ezra Klein via Dewayne Hendricks)
• "Smile, you're on Google Glass, whether you like it or not" (Caroline Craig via Gene Wirchenko)
• "Andrew Auernheimer joins growing list of so-called hackers facing harsh justice" (Ted Samson via Gene Wirchenko)
• Security hole lets Apple passwords be reset with e-mail addr, DoB (Chris Welch via Jim Reisert)
• Re: Electronic health records: teething problems?" (William Pociengel)
• Re: Mars Rover is Repaired, NASA Says (William Pociengel)
• Re: Fake silicone fingers strike again (Amos Shapir)
• Re: Attorney General's testimony on Aaron Swartz raises more ... (Wol)
• Microwave oven interference robustness mode (Jidanni)

Volume 27 Issue 23 (Saturday 30 March 2013)

• IRS: Tax glitch affects about 660K returns (Heather Hollingsworth via Monty Solomon)
• Panama Canal Railway hit after upgrade (Bob Heuman)
• Online Dispute Becomes Internet-Snarling Attack (Markoff/Perlroth via Monty Solomon)
• More on Spamhaus et al. (sender anonymized by request)
• More cyberscares from our governments (Lauren Weinstein)
• SSL, RC4, and Site Administrators (Steve Bellovin)
• Microwave oven interference robustness mode (jidanni)
• Saudi Arabia 'threatens Skype ban' (Lauren Weinstein)
• FBI wants real-time access to ... well ... pretty much everything (LW)
• NYPD Facial Recog Unit Uses Facebook, Instagram To Track Down Suspects (LW)
• Big Data and a Renewed Debate Over Privacy (Steve Lohr via Monty Solomon)
• Database Is Shut Down by NASA for a Review (Mark Mazzetti via Monty Solomon)
• "12 hard truths about cloud computing" (Peter Wayner via Gene Wirchenko)
• "One in six Amazon S3 storage buckets are ripe for data-plundering" (Ted Samson via Gene Wirchenko)
• Some digital cameras easily turned into spying devices (Lauren Weinstein)
• Google offers *offline* language translation support for Android (LW)
• Risks of using other people's libraries (Phil Nasadowski)
• 25,000 could be affected by data breach at Salem State University (Monty Solomon)
• "Twitter-shaming can cost you your job" (Ted Samson via Gene Wirchenko)
• "Cisco inadvertently weakens password encryption in IOS (Lucian Constantin via Gene Wirchenko)
• Password must contain multiple character classes... (jidanni)
• "Microsoft Employee Info Being Hacked Through Xbox Live" (Chris Paoli via Gene Wirchenko)
• "Updated Windows 8 apps not in sync with Google Calendar" (Woody Leonhard via Gene Wirchenko)
• Re: Small furry animals ... (jericho)

Volume 27 Issue 24 (Sunday 7 April 2013)

• Chinese Government To Buy Dell (Steven J. Greenwald)
• Deeper Meaning in a Live YouTube April Fools' Gag (Lauren Weinstein)
• New Test for Computers - Grading Essays at College Level (Gabe Goldberg)
• "Fix your DNS servers or risk aiding DDoS attacks" (Ted Samson via Gene Wirchenko)
• "Cyber criminals tying up emergency phone lines through TDoS attacks" (Ted Samson via Gene Wirchenko)
• Prenda Law's Attorneys Take The Fifth Rather Than Answer Judge Wright's Questions (Lauren Weinstein)
• "Firefox 20 ups HTML5 support, adds dev tools and per-tab Private Browsing" (Gene Wirchenko on Ted Samson)
• MS apologizes for employee's Xbox Durango 'always-online' tweets (Lauren Weinstein)
• "Ransomware uses victims' browser histories for increased credibility" (Lucian Constantin via Gene Wirchenko)
• ZIP Codes Are Definitely "Personal Identification Information" (Monty Solomon)
• Everything We Know About What Data Brokers Know About You (Monty Solomon)
• Mozilla Firefox CPU hog ?? (Henry Baker)
• `Massive' Cyberattack Wasn't Really So Massive (David Talbot)
• Risks of ASCII-formatting mathematics (Bill Stewart)
• Sears Discloses User-Selected PIN (Richard Karash)
• Online tax returns, You're Doing It Wrong... (Valdis Kletnieks)
• Wow! Are we still in the 1990s? (Gene Spafford)

Volume 27 Issue 25 (Friday 19 April 2013)

• The Boston Marathon bomber: Caught on film? (Kate Dailey via Monty Solomon)
• How the Internet Accused a High School Student of Terrorism (PGN)
• Citizen Surveillance Helps Officials Put Pieces Together (Fowler/Schectman)
• The Shame of Boston's Wireless Woes (Dewayne Hendricks)
• American Airlines computer glitch grounds flights (ibm36044)
• Venezuela constitution bans recounting of votes ... (Bob Heuman)
• Reclaiming the American Republic from the corruption of election funding (KurzweilAI via Michael Cheponis via Dewayne Hendricks)
• Reinhart and Rogoff: 'Full Stop,' We Made A Microsoft Excel Blunder In Our Debt Study, And It Makes A Difference (Joe Weisenthal via Geoff Goodfellow)
• Economic policy decisions may be affected by spreadsheet errors (Jeremy Epstein)
• Buggy spreadsheets and the economy (Valdis Kletnieks)
• The risks of/when not releasing your code & data (Paul Nash)
• Vint Cerf Explains How to Make SDN as Successful as the Internet (Stacey Higginbotham via ACM TechNews)
• Video: "The Internet: A Warning From History" (Lauren Weinstein)
• DDoS Attack Bandwidth Jumps 718% (Geoff Goodfellow)
• Laptop goes up in flames (Jordan Graham via Monty Solomon)
• How do you code a secure system? (Earl Boebert)
• Fake Twitter accounts earn real money (Mark Thorson)
• French homeland intelligence threatens a volunteer sysop to delete Wikipedia Article (Lauren Weinstein)
• An English language version of the Wikipedia article (NNSquad)
• American Express Australia Mail Merge Stuff-up (Don Gingrich)

Volume 27 Issue 26 (Tuesday 23 April 2013)

• LAX terminal signs hacked (Paul Saffo)
• AP fooled by phishing attack (Lauren Weinstein)
• Taiwan issues duplicate license plate numbers (jidanni)
• EU Car Type-Approval Awkwardness (Chris Drewe)
• FAA Approves Boeing 787 Battery Fix Allowing Flight Resumptions (Bloomberg)
• New lithium ion battery design (PGN)
• Two items on Internet use, etc. vs. distracted driving (Lauren Weinstein)
• More in New York City Qualify as Gifted After Error Is Fixed (Al Baker via Jim Reisert)
• Neil Richards on the Dangers of Surveillance (Lauren Weinstein)
• Crowdsourcing a lynch mob (Mark Thorson)
• Re: The Shame of Boston's Wireless Woes (Bob Frankston)
• Re: Economic policy decisions may be affected by spreadsheet errors (John Levine, Amos Shapir)
• Re: American Express Australia Mail Merge Stuff-up (John Levine)
• Churnalism: Discover When News Copies from Other Sources (Lauren Weinstein)

Report problems with the web pages to the maintainer