Using Safari? I know who you are and where you live…

July 26, 2010

Jeremiah Grossman recently posted an article explaining how the Safari browser (versions 4 & 5) auto-populates a user’s first name, last name, work place, city, state, and email address by default. All an attacker would have to do to get this information from unsuspecting Safari users is to create simple web form (probably hidden from [...]

0 comments Read More…

Kraken cracks GSM encryption

July 24, 2010

I’m looking forward to see what will come out of the Black Hat conference this weekend as they scrutinize GSM technology. They plan on using the Kraken open-source GSM-cracking software to break the A5/1 encryption algorithm used by many GSM networks. This would make it fairly simple to eavesdrop on phone calls utilizing GSM technology. [...]

0 comments Read More…

What happens if pacemaker software has a bug?

July 23, 2010

That’s some bad juju, that’s what that is. The Software Freedom Law Center (SFLC) recently did some research that points out that most medical software responsible for saving people’s lives is never audited, nor is the source code available for security testing. The concept of hacking a pacemaker isn’t new; don’t you think patients have the [...]

0 comments Read More…

Migration to WordPress Complete

July 22, 2010

I’ve effectively migrated from Joomla to WordPress, and I’ve brought in all my past posts. I ended up simply reposting all of them the hard way because of all the differences in the mySQL table columns and the PHP code between the two CMS’s. This seemed to be the best route. Anyways, it’s all good [...]

0 comments Read More…

Secret Code in US Cyber Command’s Photo

July 22, 2010

As reported by Yahoo News: “The newly formed U.S. Cyber Command is supposed to centralize and focus the military’s ability to wage war over the Internet, but so far it’s basically famous for brainteasers. The command’s fancy logo contains a super-secret code in its inner gold ring: 9ec4c12949a4f31474f299058ce2b22a Though some people noticed the code late last [...]

0 comments Read More…

Anonymous search, porn mode browsing, and increasing privacy concerns

July 22, 2010

It seems more and more people desire greater online privacy. These same individuals usually have no problem broadcasting their location 24/7 on Twitter and posting photos of their house and vacation plans on Facebook. But never mind that, we want privacy and we want it now! Internet privacy is becoming a buzz term, but isn’t [...]

0 comments Read More…

LogiCube Forensic Dossier Review

July 22, 2010

A few months ago my agency purchased the LogiCube Forensic Dossier for faster hard drive imaging. I was going to buy the Talon, but the Dossier promised much faster speeds and the ability to image drives in the .E01 evidence file format. Here are some of my findings so far: The Dossier rarely images faster [...]

0 comments Read More…

McAfee uses bad signature in DAT file, kills XP SP3

July 22, 2010

SANS reports that the McAfee DAT 5958 Update misidentifies svchost.exe, a standard Windows file, as the W32/Wecorl.a virus. This causes Windows XP SP3 systems to go into a reboot loop, lose all network access, and display the following message: The file C:WINDOWS\system32\svchost.exe contains the W32/Wecorl.a Virus. Undetermined clean error, OAS denied access and continued. Detected [...]

0 comments Read More…

Primary Cyber Attack Target is Critical Infrastructures

July 22, 2010

A Reuters article was recently released discussing the fact that half of the critical infrastructure suppliers have been the target of cyber attacks, based on a survey of security software firms conducted by McAfee. The article gives the usual song and dance about how cyber attacks are under-reported due to companies concealing their vulnerabilities, especially financial [...]

0 comments Read More…

Using Encryption Gives Data Breach Notification Exemption?

July 22, 2010

Excerpt from the Register - http://www.theregister.co.uk/2009/09/17/healthcare _breach_disclosure: “New data breach rules for US healthcare providers have come under criticism from a security firm that specialises in encryption. As part of the Health Information Technology for Economic and Clinical Health (HITECH) Act, which comes into effect from 23 September, health organisations in the US that use encryption [...]

0 comments Read More…

iPad Available… With Wings

July 22, 2010

Apple just released their iPad today. Besides the fact that the name iPad sounds like some sort of digital feminine product (search Twitter for “iTampon”), the device itself appears to be no more than a large iPod Touch. According to Yahoo News: “The iPad has a 9.7-inch touch screen, is a half-inch thick, weighs 1.5 pounds and [...]

0 comments Read More…

Air Force Builds Super-PlayStation!

July 22, 2010

I heard awhile back that the U.S. Air Force had ordered 2,200 PlayStation 3′s (PS3′s). Now they are building an off-the-shelf supercomputer by clustering those PS3 consoles. By supporting the Folding@home distributed computing project, PlayStation’s gaming console may be some of the cheapest computing power you can buy, and the Air Force caught on to that fact. For [...]

0 comments Read More…

House Passes Cybersecurity Bill

July 22, 2010

Today the House passed H.R. 4061, the Cybersecurity Enhancement Act of 2009 with a vote of 422-5. According to The Caucus: [The bill] requires the Obama administration to conduct an agency-by-agency assessment of cybersecurity workforce skills and establishes a scholarship program for undergraduate and graduate students who agree to work as cybersecurity specialists for the government after graduation. . [...]

0 comments Read More…

Comparing Windows Artifacts to Macintosh Forensic Artifacts

July 22, 2010

I wrote a short article comparing Mac forensic artifacts to their Windows counterparts over at the iSCERS forum. I give a lot of instructional information in the article, particularly how to find a lot of good information and how to parse property lists (plists) on the Mac. Check it out by clicking here!

0 comments Read More…

Kylin, a Secure Chinese OS

July 22, 2010

I have been reading a paper entitled US-China Economic and Security Review Commission Report on the Capability of the People’s Republic of China to Conduct Cyber Warfare and Computer Network Exploitation for a class I am taking on CIT security issues. I just learned about a Chinese secure OS called Kylin, so naturally I pulled up [...]

0 comments Read More…

Chinese New Years Celebration a Cause for Hactivism?

July 22, 2010

Jeffrey Carr, whose blog is IntelFusion, is predicting a cyber attack from Chinese hactivists on February 18th because of President Obama’s scheduled visit to the Dalai Lama on the 5th day of Chinese New Year celebrations. The Chinese Foreign Ministry has already urged President Obama to cancel the meeting, which he has refused to do. Carr [...]

0 comments Read More…

U.S. Army Website Hacked

July 22, 2010

I just saw that the U.S. Army’s housing website/database has been attacked successfully with some good ol’ SQL injections. A Romanian hacker who goes by the moniker “TinKode” posted details of the attack on his blog including the specific database tables he was able to access. This same hacker has found similar holes in NASA’s site in the [...]

0 comments Read More…

EyeOS

July 22, 2010

EyeOS is an open source browser-based cloud computing operating system (http://eyeos.org/). I’ve had the chance to experiment with it some and it’s pretty interesting. I really haven’t figured out what (if any) artifacts it leaves behind on the server, and if they can even be reasonably retrieved. Just throwing it out there. Anyone have any [...]

0 comments Read More…

9th Circuit Court of Appeals – Plain View on Digital Evidence

July 22, 2010

Seen at the SANS Blog at https://blogs.sans.org/computer-forensics/2009/08/27/sweeping-9th-circuit-decision-regarding-law-enforcement-officer-computer-forensics/: Reposted from Greg Haverkamp < greg@haverkamp.com > from the GIAC Certified Forensic Analysts [GCFA] Mailing list The 9th Circuit released its en banc decision today in U.S. v Comprehensive Drug Testing. The case itself has ties to seizures made in relation to the Balco investigations. The most significant aspect [...]

0 comments Read More…

Welcome to the DigiToll Blog!

July 22, 2010

The DigiToll Blog is a weblog devoted to a variety of technology-related thoughts, news, and issues. Posts include topics such as information assurance, cyber security, digital forensics, emerging technologies, programming and software development, cyber warfare, intelligence concerns, and the affect of technology on society (hence the DigiToll – “digital toll”). In addition to working in [...]

0 comments Read More…