Hacker News

Recently I did an article for a seniors newsletter about phishing. Specifically the perennial “limited time to add your cell phone to the national do not call list before bad stuff happens” scam. While this particular instance is more hoax than phishing since the number to call was, in fact, the real number for the [...] - Hacker News

Thanks, Nicko! - Hacker News

Thanks, Nicko! - Hacker News

From the Western Australian branch of the Australian Computer Society; they are launching two new “Centres of Excellence”. Information here. Information supplied by Philip Argy. Thank you to the ACS for passing this to us. We look forward to hearing more about this initiative. ———————————————————————————————- Securus Global: IT Security, Penetration Testing, Security Assessments, PCI Compliance, Product Assurance, [...] - Hacker News

I had a great conversation with Nick Selby this afternoon, and one of the many topics we discussed was triggered by a couple of his recent blog posts about critical infrastructure- one touching on the 60 Minutes piece hack-job and another on Fudsec about where the risk should be placed. At first, I was really wound up about Nick's post on the 60 Minutes piece because he seemed to be excusing sloppy "journalism" because the value of reaching a wider audience outweighed the problems of questionable reporting. [Part of my reaction was certainly due to my contempt for 60 Minutes, I feel that that they don't do investigative journalism, they are what is wrong with "investigative journalism" on television. The fact that 60 Minutes is generally less horrible than anything else in genre is not comforting]. In case you somehow missed it, there was quite a bit of furor over 60 Minutes' claim that a Brazilian blackout was caused by hackers. Robert Graham had a pretty terse post about this on the... - Hacker News

News of the Republic of India’ latest febrile attempts at intelligence gathering: This time the formerly contemplated and now soon-to-be-released initiative to surveil all civilian commercial voice and data traffic in the sweltering South Asian country… Based on previous attempts in one of the poorer nations on Earth, (witness the baseless claims of cracking of [...] - Hacker News

Gary McKinnon is in the news again after the Home Secretary, Alan Johnson refused to block the intended extradition to the United States. I was invited to comment on Radio Five Live on Friday morning, to raise points on the security and technical speci... - Hacker News

We have a whole bunch of holiday specials to share with you, including a way of registering for The Next HOPE extra early at the lowest price possible. Visit http://store.2600.com for all the details. - Hacker News

ISPreview: 30000 UK Broadband ISP Customers Face Illegal File Sharing Threat Letters - Hacker News

Two weeks ago the Economist ran an interesting article Calling All Cars, describing how systems such as OnStar (GM) and Sync (Ford) that were conceived for roadside assistance have expanded beyond their original service offerings to include remote trac... - Hacker News

More observations about the Fibonacci and Lucas sequences. As before, suppose that we have a second-order linear recursion given by xn+2 = A xn+1 + B xn and we write x2 – A x – B = (x – a)... - Hacker News

Another week, another wave of great blog posts from local security bloggers in the DC, MD, and NoVA area. If you can’t get enough of the local security scene, check out our NovaInfosec Twits list for even more great security blogs and people to follow on Twitter. Also be sure to follow us on Twitter [...] - Hacker News

PCI DSS (Payment Card Industry Data Security Standard) (https://www.pcisecuritystandards.org/securit...). The conversation ranges from practical advice on “how to get compliant” all the way to branding PCI as a devilish invention (Google for “PCI is the devil”). Fiery debates aside, PCI DSS guidance helped countless organizations to see the light of security where there was none before. It goes without saying that it didn’t magically make them “become secure” – no external document can. One of the frequent criticisms of PCI focuses on the misguided view that “PCI is all about passing an ‘audit’.” Many people would be surprised to find... - Hacker News

Good Friday morning! Hopefully today is a light work day, if you’re there at all. And if you are at your desk, maybe you can sneak in some shopping bargains at lunchtime. Have a great weekend folks. Signed, The Intern Click here to subscribe to Liquidmatrix Security Digest!. And now, the news… Incident Response Planning – Kees Leune [...] - Hacker News