dyatmika

blog informasi
Your Ads Here only $75/month

Archive for the ‘Security’


MSN Manager Indicted for Fraud

A court of law has found Carolyn M. Gudmundson, a former employee of industry giant Microsoft, guilty of embezzling approximately $1 million. Consequently, she was sentenced to 22 months incarceration time but, after she is done serving her time, she will continue to be closely supervised for a period of three years. Microsoft has been awarded monetary restitution to the amount of $923,000.

“Other employees who have similar opportunities to place their hands in the corporate till need to understand that society takes this sort of crime very seriously,” said Judge Ricardo
Martinez.

(more…)

Popularity: 22% [?]

E-Gold Founders Guilty of Money Laundering

goldAccording to the US DOJ (Department of Justice) three top brass executives from E-Gold, an online service that allows users to send and receive payments, and Gold & Silver Reserve Inc. have pleaded guilty to charges of conspiracy to engage in money laundering and conspiracy to operate a money transferring business without a license. The three men in question are Douglas Jackson, Director of E-Gold and CEO of Gold & Silver Reserve, Barry Downey and Reid Jackson.

Acting Assistant Attorney General Matthew Friedrich comments: “By failing to comply with money laundering laws and regulations, the E-Gold operation created an environment ripe for exploitation by criminals seeking anonymity in conducting online transactions. This case demonstrates that online payment systems must operate according to the applicable rules and regulations created to ensure lawful monetary transactions.”

(more…)

Popularity: 18% [?]

Sabre Security CEO Figures Out DNS Vulnerability

Source : News.SoftPedia.com

Recently, the DNS flaw discovered by Dan Kaminsky made all the headlines, first of all because of its gravity, and secondly because the Director of Penetration Testing for IOActive would not release specific, technical details about the flaw. Kaminsky stated on numerous occasions that he would disclose all the information on the 6th of August, at the BlackHat Security Conference in Las Vegas. But it seems that Thomas Dullien, CEO and head of research with Sabre Security has figured it all out, even though he admits he is not an expert in DNS.

This is the message posted on the Matasano Security blog in regard to Dullien’s discovery: “The cat is out of the bag. Yes, Halvar Flake figured out the flaw Dan Kaminsky will announce at Black Hat”. Halvar Flake is the hacker alias used by Thomas Dullien. It must be noted that the blog post presented above was posted for about five minutes and then it was taken down.

(more…)

Popularity: 15% [?]

Google Calendar Targeted by Phishing Attacks

It would seem that Google Calendar is plagued by all sorts of problems, the most recent of them being phishing attacks. Google representatives ask users to ignore suspicious messages and click the “Report Phishing” button instead of reading the message, opening links included in the message or downloading any attachments.

Phillip Lessen was one of the first to receive such a message. It was entitled “[Invitation] VERIFY YOUR ACCOUNT” and seemed to be sent by Google’s customer care. (more…)

Popularity: 22% [?]

The FBI Negotiates for European Private Data Access

The Federal Bureau of Investigation and the European Commission are close to coming to a conclusion in an agreement that would allow the American organization to access private EU citizen data such as credit card history and frequently visited web pages. Privacy organizations are strongly contesting this agreement and say they will sue the EU Commission.

Privacy International’s director, Simon Davies, had this to say: “It is very much on the cards for Privacy International, or one of the other civil rights organizations, to take legal action against Brussels. It would depend very much on how the framework has been established. We will have to see the text, consult the legal experts and see where we stand.”

The EU Commission and the FBI are adopting a very “cloak-and-dagger” approach and have yet to disclose any relevant information about the agreement. Simon Davies continues: “One of the key problems is the secrecy which has surrounded the terms. We have no knowledge about where our information will flow once it reaches the U.S. In all respects, this is a bad deal for Europeans. It plays into the hands of the U.S. in the worst possible way.”

(more…)

Popularity: 23% [?]

SQL Injection Exploits Wimbledon Tennis Tournament Site

In the past couple of weeks we have seen a serious increase in SQL injection attacks. Although Microsoft and HP have provided ample guidance and tools to solve the problem with, there are still sites out there that get infected. The latest web page to be attacked is the ATP site (short for Association for Tennis Professionals). With the Wimbledon tournament at full throttle, a growing amount of people is expected to visit the ATP web page and potentially get infected.

Fraser Howard, main virus researcher with Sophos (company that specializes in providing antispam and antivirus software solutions) comments: “With the Wimbledon tournament taking place at the moment, the ATP website will be receiving a spike in visitors - but any tennis fan visiting the infected pages on the site risks being served straight into a crook’s criminal racket.” (more…)

Popularity: 17% [?]

Google fixes several site security issues

Google has fixed security vulnerabilities related to its Grand Central telecom service and its Google.com Web site, the company said Monday.

Google fixed a cross-site scripting vulnerability on the log-in page for Grand Central, a service that allows people to have numerous phone numbers ring on one phone and have a unified voice mail.

A cross-site script is a vulnerability found increasingly in Web applications in which malicious code can be injected into Web pages that could be used to attack or compromise visitors to the site.
(more…)

Popularity: 38% [?]