Security Archive

Google KNEW Street View cars were slurping Wi-Fi, did it anyway


Wheels fall off ‘one rogue engineer’ claim
Google knew its Street View cars were slurping personal data from private Wi-Fi routers for three years before the story broke in April 2010.…

Welsh NHS fined £70k for patient psych file leak blunder


Email address typo leads to ICO spank first
The UK’s Information Commissioner’s Office (ICO) has slapped its first fine on the NHS after a mental health patient’s file was leaked in an email gaffe.…

Google designed Street View Wi-Fi slurp FIVE YEARS AGO


Wheels fall off ‘one rogue engineer’ claim
Google knew its Street View cars were slurping personal data from private Wi-Fi routers for three years before the story broke in April 2010.…

Freed Facebook hack Brit vents fury at $200k cleanup claim


Mangham longs for security job after sentence halved on appeal
A UK man jailed for hacking into Facebook has vowed to rebuild his life – and his reputation – after winning an appeal against his sentence.…

Elgamal, Marlinspike join dream team tackling SSL screw-ups


Security superheroes turn e-commerce Avengers
Infosec 2012  A non-profit organisation has brought together a team of experts to tackle SSL governance and implementation issues and promote best practice.…

Ghost of HTML5 future: Web browser botnets


With great power comes great responsibility … to not pwn the interweb
B-Sides  HTML5 will allow web designers to pull off tricks that were previously only possible with Adobe Flash or convoluted JavaScript. But the technology, already widely supported by web browsers, creates plenty of opportunities for causing mischief.…

Doh! Sage Pay forgets to renew SSL certificate


Second screw-up in 2 days
Customers logging into “secure and efficient payment service” Sage Pay this morning were served up an error message saying that the site could not be trusted, and didn’t have a valid security certificate.…

Global cop squad busts 36 credit card data-selling sites


SOCA, Feds and others shut down fraud-in-a-trolley scammers
An international team of cops has taken down 36 websites that were being used to shift vast quantities of stolen credit card and bank account data.…

Infosec and B-Sides: Security biz exhibitions face off in London


Contrasting picture of infosecurity tech
Show diary  Infosec and B-Sides both came to London this week to display the contrasting faces of the information security industry.…

Star Trek role-players’ privates sniffed by alien invader


Cryptic Studios coughs to database hack
Gaming studio Cryptic, the company behind Star Trek Online, Champions Online and City of Heroes, has admitted that its players’ details were lifted in an unauthorised database access two years ago.…