InformationWeek: The Business Value of Technology

InformationWeek: The Business Value of Technology
e2 Conference & Expo - Boston 2013

Informationweek Influencer

attrition.org

attrition.org (@attritionorg)

Twitter Bio:
http://attrition.org staff share this account. if we follow you, we really like you... or we really dislike you.
Location:
US
Website:
http://attrition.org/

attrition.org's
Network
attrition.org Virus Bulletin DataLossDB novainfosec Rob Lewis Dave Piscitello Micah Sifry Bev Robb Rich Mogull Andrew Jaquith Gal Shpantzer Brian Pennington Dave Marcus Ben Tomhave Stephen Foskett Anita Campbell grecs Caleb Sima Joel Libava Panda Security David Chartier Ben Jackson securityninja SecurityBuzz Dave Whitelegg CiscoEDU Iftach Ian Amit Patrik Runald Tom Eston adam shostack jcran Let's Talk Security David Andrew Waite SafeNet CRN Buzz Chris Boyd The Verge SophosLabs Matt Simmons cedricpernet Andrew Storms Mariano M. del Río Martin McKeay Ars Technica Kyle Maxwell Nick Selby PHYSECTECH securitypro2009 Matt Johansen RSnake Jeremiah Grossman MC Petermann inuk-x James Lyne 0x410x410 SilverSky wintr Security4all Mark Headd Web Security News UBM Tech Electronics Chae Jong Bin Andre M. DiMino Theresa Payton SecurityWeek Sam Bowne ChrisJohnRiley ♻ Jack Daniel Raf Christophe Veltsos GarWarner Schneier Blog briankrebs Webroot Kaspersky Lab Tenable Security McAfee ToolsWatch Cisco Collaboration

attrition.org's Selections From the Web

Disclosing a flaw in a widely used system without making someone at least a little angry requires a delicate touch. But Andrew Auernheimer, a.k.a. “Weev,” a 26-year-old finder of security vulnerabilities, is anything but delicate.Two years ago, Auernheimer and a friend made a surprising discovery about the way AT&T was protecting its web database of iPad cellular data accounts: That is, AT&T wasn’t protecting it at all. Any customer could access his or her account data by going to an AT&T URL containing their iPad’s unique numerical identifier. No password, cookie, or login procedure was required to bring up a user’s private information. Auernheimer

Editor’s note: Andrew Auernheimer, also known by his pseudonym weev, is an American grey hat hacker and self-described Internet troll. Follow him on Twitter @rabite.In June of 2010 there was an AT&T webserver on the open Internet. There was an API on this server, a URL with a number at the end. If you incremented this number, you saw the next iPad 3G user email address. I thought it was egregiously negligent for AT&T to be publishing a complete target list of iPad 3G owners, and I took a sample of the API output to a journalist at Gawker.I did this because I despised people I think are unjustly wealthy and wanted to embarass them. I thought this

A couple of days ago, I received an e-mail from Iran. It was sent by an analyst from the Iranian Computer Emergency Response Team, and it was informing me about a piece of malware their team had found infecting a variety of Iranian computers. This turned out to be Flame: the malware that has now been front-page news worldwide.

When we went digging through our archive for related samples of malware, we were surprised to find that we already had samples of Flame, dating back to 2010 and 2011, that we were unaware we possessed. They had come through automated reporting mechanisms,

Get InformationWeek Daily

Don't miss each day's hottest technology news, sent directly to your inbox, including occasional breaking news alerts.

Sign up for the InformationWeek Daily email newsletter

*Required field

Privacy Statement



Upcoming Events

This Week's Issue

Special Issue

Current Government Issue

In this issue:
  • The Government CIO 25: These influential and accomplished government IT leaders are finding ways to be cost efficient and still innovate.
  • Rethink Video Surveillance: It's not just about networked cameras anymore. New technology provides analytics, automation, facial recognition, real-time alerts and situational-awareness capabilities.
  • Read the Current Issue

Related Whitepapers

Related Reports






Video