Archive for June, 2008
A Kidnapped AdWords Account

This is the story of Russell, whose AdWords campaigns fell prey to a phishing scam.
Seemingly out of the blue, Russell one day noticed how a lot of odd, likely spammy campaigns had been set up in his account though.

“While the email may look official at first glance to those who don’t know about the concept of phishing – Russell didn’t – those who do know about it will have a symphony of alarm bells ringing by now. In this email, it is not important what the mail claims to be; it claims that it’s an “official notification from Google AdWords that the service(s) listed below will be deactivated” unless the person renews them “immediately.” The email also claims to be sent from the address customersolutions–ysm@google.com. But these things can be faked; what is more important is the URL that shows when you hover over the link in question that will take you to the login form. In this case, Russell tells me the URL reads:

yms-words.com/adwords/select/Login.htm”

read more | digg story

Podcast: DIY Career in Ethical Hacking

Remodeling your career for little to no money down with the Editor of The Ethical Hacker Network, a free online magazine for security pros. Podcast and slide deck available with practical exercises, links to free stuff and real-world actions to take right now to advance your career in this new and exciting field.

read more | digg story

Neuromancer

Physicists, mathematicians, futurists and sci-fi writers are the ne0-prophets of our time. Einstein, Max Plank, William Gibson, Georg Cantor are the new world prophets determining the probable future transfinite realities among absolute infinity.

Neuromancer is an example of probable futures. It is THE work of fiction by William Gibson that popularized the cyberpunk genre. In the book, Gibson actually coined the phrase cyberspace and the matrix, a multi-diminsional virtual reality that allows users to jack their brain directly into the cyberspace.

Case is a hacker is hired to do the biggest hack ever. The book is brilliant. Some of my favorite characters are Molly, the assassin, who looks like this:
Molly, neuromancer
William Gibson himself

and Wintermute, the corporation/Artificial intelligence and Maelcum A member of Zion, a Rastafarian space station community.
Neuromancer the book

A year here and he still dreamed of cyberspace, hope fading nightly.
All the speed he took, all the turns he’d taken and the corners
he’d cut in Night City, and still he’d see the matrix in his
sleep, bright lattices of logic unfolding across that colorless void. . .

Its such a brilliant piece of work that I am surprised it hasn’t been made into a movie yet.

Vista or XP

I like Windows XP, but I don’t much like Vista. I tried it for a few months and found it gorgeous to look at and fairly easy to navigate. I didn’t much care for the search feature. I actually use search for just about everything on Windows XP, but Vista would find everything. For example, if applications weren’t made for Vista, it would find them or show them in the Add/Remove Programs. Which brings me to that subject. Its so new that it still lacks the drivers to support even my fairly recently purchased printer. I also had trouble running VMWare and other applications. VMWare 6.0 must be purchased to work fully with Vista. I got VMWare 5.x to work partially, but it would do strange things like shut down the computer for seemingly no reason or not run certain operating systems (Ubuntu) from a disc. Ubuntu did work as an ISO image on my local computer, though.

Vista has potential to be a great Desktop OS in about a year when more vender’s support it and it becomes the new standard, but until then I will stick with XP and use Vista for practice. I really enjoyed the Media Center (which is also in some version of XP). I would NOT use it as any kind of operational system running critical resources. I’ve heard Windows 2003 Server is good stuff and I wouldn’t doubt it.

When XP first came out I was all about 2000 and not fully convinced about the new kid on the block. I now feel the same about Vista. One thing I am definitely sick of is that Microsoft releases Vista and then promises to completely stop supporting Windows XP some time in the summer of 2008. This forces everyone to move to Vista. That is pretty aggressive and I am personally not going to take it any more. I’m going to start moving to Ubuntu slowly but surely. I’d like to stay on top my MS OS skills but I don’t want to be completely at their mercy anymore.

Internet fraud has taken a sinister new turn

Organised crime has identified the web as a goldmine – providing opportunities to launch cyber attacks that will earn large amounts of money at a relatively low risk. Learn more.

A “compromised” computer – one that has been attacked – via the internet has become a commodity on the underground economy, an online equivalent of the black market.

Once a computer is compromised, it can be used for a variety of purposes designed to make money, including stealing users’ personal identity information, like internet banking logins. It’s relatively easy and it’s the websites we visit every day that make it money for jam for criminals.

read more | digg story

Cisco Predicts Big Growth for the Internet to Continue

Traffic on the world’s networks will increase 46 percent from 2007 to 2012, nearly doubling every two years. As a result, there will be an annual bandwidth demand of approximately 522 exabytes2, or more than half a zettabyte.
Gigom’s commenter Pavin of http://www.3ginternet.blogspot.com/ also mentioned this:
3G is the third generation of mobile phone standards and technology, superseding 2G. It is based on the International Telecommunication Union (ITU) family of standards under the International Mobile Telecommunications programme, IMT-2000. 3G technologies enable network operators to offer users a wider range of more advanced services while achieving greater network capacity through improved spectral efficiency.

WiMAX will also have a big push in the next two years. I’m not sure what kind of devices will take advantage of the increased wireless bandwidth but whatever it is it will compete with cable which will hopefully drive pricess waaaay down. Cisco’s stock is sure to benefit.

read more | digg story

ECHELON of human underachievement

Knowledge is power. In the information age this is more and more true every minute of every day. I believe it is inevitable that we would have the super secret parts of government would begin to collude to monitor all telephone, data and fax communications. It seems equally inevitable that very powerful individuals will challenge that same system.

Human nature being what it is, such a system is guaranteed to be abused for the power and positioning a dominate minority. My panic and indignation on such things is slowly supplemented by an acceptance and humor of human behavior that is self centered, greedy and in constant state of fear, loathing and self gratification. The funny part is that the behavior continues even though it proves to implode over time. Again and again Rome rises only to crash on the shores of reality. Caesar conquers, assimilates and raises taxes then fades out.

It frustrated me because I know that humanity has the capacity to do better. Better for the planet, better for itself and better for every species. We are capable of doing great, great things but we choose to live in a state of fear, self gratification an loathing.

http://www.whatreallyhappened.com/RANCHO/POLITICS/ECHELON/echelon.html

ECHELON

Main article: ECHELON

NSA/CSS, in combination with the equivalent agencies in the United Kingdom (Government Communications Headquarters), Canada (Communications Security Establishment), Australia (Defence Signals Directorate), and New Zealand (Government Communications Security Bureau), otherwise known as the UKUSA group[16], is widely reported to be in command of the operation of the so-called ECHELON system. Its capabilities are suspected to include the ability to monitor a large proportion of the world’s transmitted civilian telephone, fax and data traffic, according to a December 16, 2005 article in the New York Times.[17]

Technically, almost all modern telephone, internet, fax and satellite communications are exploitable due to recent advances in technology and the ‘open air’ nature of much of the radio communications around the world. The NSA’s presumed collection operations have generated much criticism, possibly stemming from the assumption that the NSA/CSS represents an infringement of Americans’ privacy. However, the NSA’s United States Signals Intelligence Directive 18 (USSID 18) strictly prohibits the interception or collection of information about “…US persons, entities, corporations or organizations…” without explicit written legal permission from the Attorney General of the United States [18] The U.S. Supreme Court has ruled that intelligence agencies cannot conduct surveillance against American citizens. There are a few extreme circumstances where collecting on a U.S. entity is allowed without a USSID 18 waiver, such as with civilian distress signals, or sudden emergencies such as the September 11, 2001 attacks; however, the USA PATRIOT Act has significantly changed privacy legality.

There have been alleged violations of USSID 18 that occurred in violation of the NSA’s strict charter prohibiting such acts.[citation needed] In addition, ECHELON is considered with indignation by citizens of countries outside the UKUSA alliance, with numerous allegations that the United States government uses it for motives other than its national security, including political and industrial espionage.[19][20] Examples include the gear-less wind turbine technology designed by the German firm Enercon[21][22] and the speech technology developed by the Belgian firm Lernout & Hauspie. An article in the Baltimore Sun reported in 1995 that aerospace company Airbus lost a $6 billion contract with Saudi Arabia in 1994 after the NSA reported that Airbus officials had been bribing Saudi officials to secure the contract.[23][24] The chartered purpose of the NSA/CSS is solely to acquire significant foreign intelligence information pertaining to National Security or ongoing military intelligence operations.

In his book Firewall, Andy McNab speculates that the UKUSA agreement is designed to enable the NSA, GCHQ, and other equivalent organizations to gather intelligence on each other’s citizens. For example, the NSA cannot legally conduct surveillance on American citizens, but GCHQ might do it for them.

— http://en.wikipedia.org/wiki/National_Security_Agency

Document 13: NAVSECGRU Instruction C5450.48A, Subj: Mission, Functions and Tasks of Naval Security Group Activity (NAVSECGRUACT) Sugar Grove, West Virginia, September 3, 1991

While NSA directs and manages U.S. SIGINT activities, almost all collection activity is actually carried out by the military service SIGINT units—including the Naval Security Group Command. The role of the unit at Sugar Grove in intercepting the international leased carrier (ILC) communications passing through INTELSAT satellites was first revealed in James Bamford’s The Puzzle Palace. (Note 12)

The regulation reveals that Sugar Grove is associated with what has become a highly controversial program in Europe, North America, Australia, and New Zealand. The program, codenamed ECHELON, has been described as a global surveillance network that intercepts and processes the world’s communications and distributes it among the primary partners in the decades-old UKUSA alliance—the United States, Canada, the United Kingdom, Australia, and New Zealand. (Note 13)

In reality, ECHELON is a more limited program, allowing the UKUSA allies to specify intelligence requirements and automatically receive relevant intercepts obtained by the UKUSA facilities which intercept satellite communications (but not the U.S. facilities that receive data from SIGINT satellites). It is also limited by both technological barriers (the inability to develop word-spotting software so as to allow for the automatic processing of intercepted conversations) and the limitations imposed on collection activities by the UKUSA allies—at least as regards the citizens of those countries. (Note 14) Thus, the NAVSECGRU instruction also specifies that one of the responsibilities of the commander of the Sugar Grove site is to “ensure the privacy of U.S. citizens are properly safeguarded pursuant to the provisions of USSID 18.”

http://www.gwu.edu/~nsarchiv/NSAEBB/NSAEBB24/nsa13.pdf

The U.S. Governments Global Electronic Surveillance Network

The ECHELON system has intercept stations all over the world to capture all satellite, microwave, cellular and fiber-optic communications traffic, and then process this information through the massive computer capabilities of the NSA, including advanced voice recognition and look for code words or phrases (known as the ECHELON “Dictionary”)

read more | digg story

I want to go to the Black Hat

Trip to BlackHat 2008

I’m hope my corporate master will let me go to the Blackhat and Defcon training/convention this year. I doubt it since “Massa” Corporate isn’t in the business of giving out anything that the gubment hasn’t paid for. Then again… they did offer to pay my way through a Masters degree program provided I stay with them for the entire time. Over all, they are not a bad lot… I’ve dealt with much worse that is for certain.

If I go to BlackHat 2008, I’ll probably attend Security Horizons, NSA Information Assurance Management course.

WIMAX/3G Geek out

I must admit, I’m geeking out over WIMAX. WiMAX stands for the Worldwide Interoperability for Microwave Access. It will allow 70Mb/second upload and download which will allow for some pretty decent prawn video. So you’ll be able to go to youpawn and watch all kinds of prawn. There is an even better technology called 3GPP LTE (Long Term Evolution) on the way with is another improvement on the 3G stuff that is already out and marketed.

What is frustrating is that WiMAX will likely have the same level of control that 3G has. It will be tamed and completely corporate run. I plan on getting the new iPhone on 11 July 2008. After seeing the iPhone upclose I started to feel funny in my underpants. Iphone + 3G should shock my WiMAX arousal into erectile dysfunction.

It’s all about the killer app. If the big dogs pushing WiMAX (Nortel/Alvarion & Sprint/peon) can come up with a device that allows you to bypass XXX ass Comcast, AT&T and other broadband monopolies they will seriously shake up the market. WiMAX, 3G and others should be in the business of creating devices, drivers and software that allow you to network all of your systems from anywhere in the contiguous United States. That would be very cool. But they seems to have serious limitations (at least in the US).

Jun 11, 2008 (Hugin via COMTEX) —-Joint End-to-End WiMAX Solution Will Offer Operators Broader Coverage and More Capacity

TORONTO, ONTARIO and TEL AVIV, ISRAEL–(Marketwire – June 11, 2008) – Nortel(1) (TSX: NT: 9.13, +1.02, +12.57%)(NYSE: NT: 9.13, +1.02, +12.57%) and Alvarion(2)(R: 66.46, -1.77, -2.59%) Ltd. (NASDAQ: ALVR: 7.97, +0.46, +6.12%) entered into a joint strategic WiMAX agreement to create an end-to-end WiMAX solution to meet the needs of the evolving wireless broadband market. The Nortel and Alvarion mobile WiMAX solution is expected to combine industry-leading technologies from both companies to allow operators around the globe – including well-established service providers and new entrants to the wireless market – to simply and efficiently deliver high-speed wireless broadband for a variety of applications, mobile or nomadic, including VoIP, streaming music, and HD video.

The joint solution features the integration of Alvarion’s advanced radio access network technology, which has been proven in over 200 commercial WiMAX deployments, with Nortel’s core network solutions, backhaul solutions, applications such as Nortel’s number one carrier VoIP solution, and Nortel Global Services for WiMAX.. The Nortel and Alvarion WiMAX solution will allow operators to offer high speed wireless Internet access across large areas, including those currently underserved by broadband capabilities. The joint WiMAX solution will also provide the speed and capacity to help operators meet the exploding demand for true mobile broadband.

http://www.foxbusiness.com/story/markets/industries/telecom/nortel-alvarion-combine-strengths-strategic-wimaxtm-agreement/-883292264