Newsflash donderdag 7 januari 2016
SP ziet macht Facebook en Google als dreiging
(security.nl)

Als het aan SP-leider Emile Roemer ligt komt er een ethische commissie die de regering adviseert over de macht van internetbedrijven zoals Facebook en Google, aangezien deze bedrijven steeds meer invloed krijgen, wat gevolgen voor de privacy heeft. Roemer deed zijn uitspraken tegenover Nieuwsuur.

Het televisieprogramma liet aan Roemer, CDA-leider Sybrand Buma en D66-leider Alexander Pechtold een oproep van wetenschapper Andrew Keen zien, die wil dat de macht van internetbedrijven aan banden wordt gelegd.

Dit zou namelijk een bedreiging voor de privacy van mensen zijn. Volgens Keen, tevens oprichter van audiocafe.com en tegenwoordig actief als ondernemer en schrijver, weten Facebook en Google veel meer over ons dan de Nederlandse overheid.

Malvertising campaign used a free certificate from Let's Encrypt
(cio.com)

Cybercriminals are taking advantage of an organization that issues free digital certificates, sparking a disagreement over how to deal with such abuse.

On Wednesday, Trend Micro wrote that it discovered a cyberattack on Dec. 21 that was designed to install banking malware on computers.

The cybercriminals had compromised a legitimate website and set up a subdomain that led to a server under their control, wrote Joseph Chen, a fraud researcher with Trend.

Time Warner Cable says up to 320,000 customers' data may have been stolen
(reuters.com)

Time Warner Cable Inc said on Wednesday up to 320,000 customers may have had their email passwords stolen.

The company said email and password details were likely gathered either through malware downloaded during phishing attacks or indirectly through data breaches of other companies that stored Time Warner Cable's customer information, including email addresses.

The company said it has not yet determined how the information was obtained, but there were no indications that Time Warner Cable's systems were breached.

7 Tips For Mitigating Phishing And Business Email Hacks
(darkreading.com)

You can't stop someone from launching a phishing attack, but there are things you can do to mitigate the threat.

Despite being a well-understood problem, phishing continues to be a major threat to individuals and businesses worldwide. For all the concern about sophisticated new malware and advanced persistent threats, phishing offers attackers a low tech and extremely effective way to breach networks, steal money, credentials and data.

The Anti Phishing Working Group (APWG) estimated there were at least 123,972 sites worldwide being used to launch phishing attacks targeting banks and other entities in the second half of 2014, the latest period for which numbers are available.

Cyber security guidelines for the shipping industry
(net-security.org)

A group consisting of several leading shipping organizations and companies has published a set of guidelines to help the global shipping industry develop good solutions for preventing cyber incidents onboard their ships.

"As technology continues to develop, information technology (IT) and operational technology (OT) onboard ships are increasingly being networked together – and more frequently connected to the worldwide web," the document says.

"This brings the greater risk of unauthorised access or malicious attacks to ships’ systems and networks. Risks may also occur from personnel having access to the systems onboard, for example by introducing malware via removable media."

'Wipe everything clean ... Join us ...' Creepy poem turns up in logs of 30 million-ish servers
(theregister.co.uk)

Sysadmins have woken up to an odd message in their server logs that told them to "delete their installations" and "join us."

The poem, injected into web server log files, is like something out of the hacker telly series Mr Robot. It is seemingly the handiwork of wags at the Chaos Communication Congress in Hamburg, Germany, last month, who appear to have scanned the IPv4 address space for systems to poke.

The IP address used to connect to the servers belongs to the Chaos Computer Club, which organizes the annual congress.

Scammers target citizens filing tax returns online
(net-security.org)

As ten million people prepare to complete their tax returns online in January, British citizens are being bombarded with scams. Forty per cent have received phishing emails which appeared to be from HMRC, and identity fraud is rife – with many people still unaware of the potential risks involved, according to Miracl.

The research, which surveyed the attitudes of 1,000 UK consumers about their personal security online, revealed that a fifth of UK consumers, or their close friends or family, have been the victim of data theft or identity fraud.

But despite these clear risks, there is still a lack of awareness among many in the UK who seem to have no idea how dangerous this kind of data theft can be. Of those who have filled in a tax return online, almost half (48%) are not at all worried about the potential risks of losing their personal and financial information.

GCHQ mass spying will 'cost lives in Britain,' warns ex-NSA tech chief
(theregister.co.uk)

Plans by the UK's Conservative government to legitimize the mass surveillance of Brits won't work, and will cause lives to be lost to terrorism.

That's the view of a former senior US National Security Agency (NSA) staffer, who will sound off on blanket snooping at a parliamentary hearing this afternoon (Wednesday).

William Binney, the former technical director of the NSA's Analytic Services Office, will give evidence before the Investigatory Powers Bill committee, which is scrutinizing proposals to grant fresh spying powers to British agencies.

ISPs: UK.gov should pay full costs of Snooper's Charter hardware
(theregister.co.uk)

The Internet Services Providers' Association (ISPA) today told a Parliamentary committee that the government should bear the full cost of extra infrastructure needed to support the snooping databases authorised by the Investigatory Powers Bill.

The lobby group's 12-page response (PDF) to the joint committee's call for evidence also claimed that the Home Secretary had mischaracterised communications data when she claimed it was "simply the modern equivalent of an itemised phone bill".

Such criticisms echo those of IT lawyer Graham Smith, who previously criticised this description of communications data to The Register by saying: "We didn't read books over the telephone, but as an entirely accidental by-product of communications technology, our reading habits are now trackable."

The Father of Online Anonymity Has a Plan to End the Crypto War
(wired.com)

It's been more than 30 years since David Chaum launched the ideas that would serve as much of the groundwork for anonymity online. In doing so, he also helped spark the debate that’s endured ever since, over the anarchic freedoms that digital secrecy enables—the conflict between privacy advocates and governments known today as the “crypto wars.”

Now Chaum has returned with his first online privacy invention in more than a decade. And with it, he wants to bring those crypto wars to an end.

At the Real World Crypto conference at Stanford University today, Chaum plans to present for the first time a new encryption scheme he calls PrivaTegrity. Like other tools Chaum has spent his long career developing, PrivaTegrity is designed to allow fully secret, anonymous communications that no eavesdropper can crack, whether a hacker or an intelligence agency.

IBM Shows Off "Empathic" Robot, Offers Watson To Diabetics
(forbes.com)

IBM doesn’t do Consumer Electronics, but IBM Chief Executive Ginni Rometty is making a big speech tonight at CES (The Consumer Electronics Show, a Superbowl of gadgets and widgets) about the moves that the company’s artificial intelligence platform, Watson, is making into the kitchen, the bank, the gym, and the doctor’s office.

It’s all neat stuff – big dreams. But a lot of it is still hazy. IBM is announcing collaborations with Under Armour, to develop a Watson fitness app, and Whirlpool, to develop intelligent appliances like a stove that suggests recipes.

More concrete and cooler: Roometty is going to provide a demo, with the CEO of Softbank, of an “empathic” robot named Pepper, a humanoid robot designed to live with and interact with humans. Pepper could be the bank teller of the future, taking over human customer service jobs.