Friday, May 6, 2016

Stingray stings again

Imagine if this guy had robbed a doughnut shop...

From The Register:

Police in Maryland, US, used controversial cellphone-tracking technology intended only for the most serious crimes to track down a man who stole $50 of chicken wings.

Police in Annapolis – an hour's drive from the heart of government in Washington DC – used a StingRay cell tower simulator in an effort to find the location of a man who had earlier robbed a Pizza Boli employee of 15 chicken wings and three sandwiches. Total worth: $56.77.

Deep Skimmers

It was generally thought that captive card readers were more secure because they had a motorized reader (card grabber) and shutter that wouldn't allow a skimmer to be inserted. Now there are "deep insert" skimmers that can bypass that mechanical obstruction.

From Krebs on Security:
ATM maker NCR Corp. says it is seeing a rapid rise in reports of what it calls “deep insert skimmers,” wafer-thin fraud devices made to be hidden inside of the card acceptance slot on a cash machine.

The value of a hack PC

For people who say that their PC has no value to a hacker - It does and you're still a target. Ransom attacks are on the rise.

From Krebs on Security:

A few years back, when I was a reporter at The Washington Post, I put together a chart listing the various ways that miscreants can monetize hacked PCs. The project was designed to explain simply and visually to the sort of computer user who can’t begin to fathom why miscreants would want to hack into his PC. “I don’t bank online, I don’t store sensitive information on my machine! I only use it to check email. What could hackers possibly want with this hunk of junk?,” are all common refrains from this type of user.

Tuesday, May 3, 2016

Samsung Smart Home flaws

I guess I'll be hanging my trusty lock picks and going digital now.

From Arstechnia:

Computer scientists have discovered vulnerabilities in Samsung's Smart Home automation system that allowed them to carry out a host of remote attacks, including digitally picking connected door locks from anywhere in the world.

Image from Arstechnia article