Yahoo! Hacked - How Can You Step Up Your Password Game? (Forbes) SANS ISC SecNewsFeed(cached at October 7, 2016, 11:30 pm)

Using the Bedtime Timer in iOS 10 TidBITS(cached at October 7, 2016, 11:05 pm)

Have trouble remembering to go to bed at a reasonable time? iOS 10 can help.

 

Read the full article at TidBITS, the oldest continuously published technology publication on the Internet. To get a full-text RSS feed, help support our work and become a TidBITS member! Members also enjoy an ad-free version of our Web site, email delivery of individual articles, the ability to make long comments with live links, and discounts on Take Control orders and other Apple-related products.

Facebook Wins 'Big Brother' Award in Belgium After Being Declared Worst Privacy Vill Slashdotby msmash on social at January 1, 1970, 1:00 am (cached at October 7, 2016, 11:04 pm)

Facebook won the "Big Brother" award in Belgium on Thursday, after people in the nation reached a conclusion that the social juggernaut is the ultimate privacy villain. "Facebook is a multi-billion dollar company that has one commodity - you!" said Joe McNamee, Executive Director of European Digital Rights. From a CNET report: Facebook, nominated by international digital advocacy group EDRi, won after being criticized for its default privacy settings in a unanimous decision. The social network didn't respond to requests for comment. "Facebook has access to a wide range of personal data, and it tracks your movements across the web, whether you are logged in or not," EDRi said. "And the devil is in the default: To opt out, you are expected to navigate Facebook's complex web of settings."

Read more of this story at Slashdot.

Death penalty in US: New Mexico defies nation's mood AL JAZEERA ENGLISH (AJE)(cached at October 7, 2016, 11:00 pm)

While New Mexico thinks about reinstatement, public support for capital punishment across the US is on the decline.
Death penalty in US: New Mexico defies nation's mood AL JAZEERA ENGLISH (AJE)(cached at October 7, 2016, 11:00 pm)

While New Mexico thinks about reinstatement, public support for capital punishment across the US is on the decline.
U.S. formally accuses Russian hackers with political cyber attacks (Yahoo Security) SANS ISC SecNewsFeed(cached at October 7, 2016, 11:00 pm)

Fed's Brainard sees blockchain as revolutionary, but still to prove itself (Yahoo Se SANS ISC SecNewsFeed(cached at October 7, 2016, 11:00 pm)

U.S. Officially Accuses Russia of Election Hacks (SecurityWeek) SANS ISC SecNewsFeed(cached at October 7, 2016, 11:00 pm)

Growing Hacker Breach Tally: What's to Blame? (InfoRiskToday) SANS ISC SecNewsFeed(cached at October 7, 2016, 11:00 pm)

Michigan Card Issuer Blocks Payments at Wendy's (InfoRiskToday) SANS ISC SecNewsFeed(cached at October 7, 2016, 11:00 pm)

US Intel Officially Blames the Russian Government For Hacking DNC Slashdotby BeauHD on democrats at January 1, 1970, 1:00 am (cached at October 7, 2016, 10:34 pm)

It's official, the Director of National Intelligence and Department of Homeland Security has blamed Russia for stealing and publishing archived emails from the Democratic National Committee in July. Wikileaks released over 19,000 emails and more than 8,000 attachments from the DNC in what was "part one of [their] new Hillary Leaks series." The Verge reports: "The recent disclosures of alleged hacked e-mails on sites like DCLeaks.com and WikiLeaks and by the Guccifer 2.0 online persona are consistent with the methods and motivations of Russian-directed efforts," the statement reads. "We believe, based on the scope and sensitivity of these efforts, that only Russia's senior-most officials could have authorized these activities." The release also mentions recent reports of attempted intrusions into voting systems in 20 different states, but says there is not yet enough evidence to attribute those attacks to the Russian government. Despite the acknowledged threat, the DNI says digital attacks are unlikely to directly alter election results. "It would be extremely difficult for someone, including a nation-state actor, to alter actual ballot counts or election results by cyber attack or intrusion," the statement reads. "This assessment is based on the decentralized nature of our election system in this country and the number of protections state and local election officials have in place." "Nevertheless," it continues, "DHS continues to urge state and local election officials to be vigilant."

Read more of this story at Slashdot.

US Intel Officially Blames the Russian Government For Hacking DNC Slashdotby BeauHD on democrats at January 1, 1970, 1:00 am (cached at October 7, 2016, 10:34 pm)

It's official, the Director of National Intelligence and Department of Homeland Security has blamed Russia for stealing and publishing archived emails from the Democratic National Committee in July. Wikileaks released over 19,000 emails and more than 8,000 attachments from the DNC in what was "part one of [their] new Hillary Leaks series." The Verge reports: "The recent disclosures of alleged hacked e-mails on sites like DCLeaks.com and WikiLeaks and by the Guccifer 2.0 online persona are consistent with the methods and motivations of Russian-directed efforts," the statement reads. "We believe, based on the scope and sensitivity of these efforts, that only Russia's senior-most officials could have authorized these activities." The release also mentions recent reports of attempted intrusions into voting systems in 20 different states, but says there is not yet enough evidence to attribute those attacks to the Russian government. Despite the acknowledged threat, the DNI says digital attacks are unlikely to directly alter election results. "It would be extremely difficult for someone, including a nation-state actor, to alter actual ballot counts or election results by cyber attack or intrusion," the statement reads. "This assessment is based on the decentralized nature of our election system in this country and the number of protections state and local election officials have in place." "Nevertheless," it continues, "DHS continues to urge state and local election officials to be vigilant."

Read more of this story at Slashdot.

First Hurricane Matthew related Phish, (Fri, Oct 7th) SANS Internet Storm Center, InfoCON: green(cached at October 7, 2016, 10:30 pm)

Dr. J. put out an appeal earlier today for readers to send in any Scams related to Hurricane Matthew. Literally within minutesMatthias sent us a Hurricane Matthew Phish that hit his inboxtoday. It purports to be from online payment company"> Welcome to Stripe!Due To Hurricane Matthew, our servers have been affected and We be updated and all Users with 2-step verification should disable this function for the mean TimeBefore we can fully provision your account, we need a few moments to verify some of the information you have provided.We typically notify our customers of their provisioning status within an hour after severs are updated . However, in some cases we need to verify your information over the phone first. The call shouldnt take long, but due to many users on our system we cant be able to reach every one so we ask you update and confirm your details to be on a safe side ">hxxps://dashboard.stripe.com/Hurricane Matthew- verification/ to update detailsUsers with wrong information would be banned from Our serviceRegards, and the dashboard link points to hxxp://fund2pay.org/stripe/ST/.

lick through to the landing page. " />

After you verified your credentials it passes you through to the real Stripe login page. " />

Probably most interesting is that it requests Stripe users todisable their 2-factor authentication. So assuming you do enter your credentials 3-times and disable your 2FA, the Phishers would have unimpeded access to the account. Tricky!

In my mind this falls into the realm of low probability of success, but as P.T. Barnum said Theres a sucker born every minute.

-- Rick Wanner MSISE - rwanner at isc dot sans dot edu - http://namedeplume.blogspot.com/ - Twitter:namedeplume (Protected)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Bruce Schneier: We Need To Save the Internet From the Internet of Things Slashdotby msmash on internet at January 1, 1970, 1:00 am (cached at October 7, 2016, 10:04 pm)

Bruce Schneier, writing for Motherboard:What was new about the Krebs attack was both the massive scale and the particular devices the attackers recruited. Instead of using traditional computers for their botnet, they used CCTV cameras, digital video recorders, home routers, and other embedded computers attached to the internet as part of the Internet of Things. Much has been written about how the IoT is wildly insecure. In fact, the software used to attack Krebs was simple and amateurish. What this attack demonstrates is that the economics of the IoT mean that it will remain insecure unless government steps in to fix the problem. This is a market failure that can't get fixed on its own.

Read more of this story at Slashdot.

Sidef-2.32 search.cpan.orgby Daniel Șuteu at January 1, 1970, 1:00 am (cached at October 7, 2016, 10:03 pm)

The Sidef Programming Language