Archive for June 7th, 2006
2.2 million active-duty personnel in VA data theft

In a new disclosure Tuesday, VA Secretary Jim Nicholson said the agency was mistaken when it said over the weekend that up to 50,000 Navy and National Guard personnel were among the 26.5 million veterans whose names, birthdates and Social Security numbers were stolen on May 3.

Read More here.

Apparently, their are Veteran coalition groups who are threatenting to sue but potential damage of this is worth way more than any can get from a lawsuit.

It demands that the VA fully disclose which military personnel are affected by the data theft and seeks $1,000 in damages to each person — up to $26.5 billion total.

What blows my mind is why these people would put a database with that kind of data on a laptop and take everywhere with them.

Data Theft Hit 80% Of Active Military: Concerns Raised Beyond Identity

“The department announced that personal data for as many as 1.1 million active-duty military personnel, 430,000 National Guard members and 645,000 reserve members may have been included on an electronic file stolen May 3 from a department employee's house in Aspen Hill.”

read more | digg story

IE And Firefox Sport New Zero-day Flaw

According to Symantec, which issued an alert late afternoon Tuesday, all versions of the Microsoft and Mozilla browsers could be used to harvest data through a JavaScript key-filtering vulnerability. “This issue is triggered by utilizing JavaScript 'OnKeyDown' events to capture and duplicate keystrokes from users,” went the Symantec warning

read more | digg story

Strategies To Protect Yourself Against Identity Theft

Identity theft is a serious crime that is growing each year. If you're
a victim of identity theft you may spend months, even years, trying to
repair a ruined credit history. A seriously damaged credit report can
compromise your chances of getting a new job, a bank loan, insurance or
even rental housing. It's even possible to be arrested for a crime you
didn't commit if someone else has used your identity to break the law.

Unfortunately, many of the methods that thieves use to steal
identities are beyond your control to guard against. Although it's
rare, even store clerks have been known to use their position to pass
along information to identity thieves. There are some measures you can
take, however, that will make it harder for a thief to steal your
identity.

Protect Your Credit Card Number When Making Purchases

After you make a purchase and your credit or debit card has been
swiped through a credit card terminal, check to make sure that the
printed receipt hides all but the last 4 digits of your credit card
account number (usually there will be Xs in place of the first 12
digits). Some terminals still print receipts that show all 16 digits of
an account number, and may even include the expiration date as well.
After your card is swiped, you're permitted by law to hide the first 12
digits of your account number on the copy of the receipt that the
vendor keeps. Use any marking pen that will do the job.

When you go to a restaurant, it's especially important to make sure
that the first 12 digits of your credit card number are hidden on your
receipt. You might be in the habit of signing it and then leaving the
restaurant's copy on the table after your meal. An identity thief can
easily steal the signed receipt before the waitperson comes back around
to pick it up from the table. Don't take any chances.

Do You Really Need To Give Your Social Security Number?

Another important way that you can guard against identity theft is
to avoid giving out your social security number unless it's absolutely
required. Although you need to share your social security number when
you apply for credit or for a bank account, sometimes a store or an
organization will want to use it as an ID number, simply to identify
you within their system. This is a common practice even though the law
says that social security numbers aren't to be used as ID numbers. In
these situations, use your judgment. There's usually an alternative if
you ask.

Destroy Documents That Contain Sensitive Personal Information

Buy a paper shredder and use it to destroy documents you're
throwing away which contain personal information such as credit card
numbers, social security numbers, phone numbers and dates of birth.
This is important to do both at home and at work. Identity thieves
aren't above going through someone's trash to find valuable personal
information that can help them obtain credit in your name.

If The Worst Happens

If you do become a victim of identity theft, take the following steps immediately:

  • Contact your credit card companies, close your accounts and ask to have new cards issued to you.
  • Place a fraud alert on your file with any one of the three major credit bureaus. The other two will be notified automatically.
  • File a police report. You may need it to show to creditors as proof of the crime.
  • File a complaint with the FTC, which maintains a database of
    identity theft cases used by law enforcement agencies for their
    investigations.
Security without firewalls: Sensible or silly?

For years, infosec experts have called the firewall a critical ingredient to security, whether it's in a large enterprise or on a home PC. But the San Diego Supercomputer Center (SDSC) has defied that logic with what some would consider surprising success.

read more | digg story

SQL Injection Attacks explained by example

Check out this article if you've ever wondered how SQL injection attacks can make your site vulnerable, or if you're just curious.

read more | digg story