個人檔案Greyhat of the World Uni...部落格清單 工具 說明

部落格


3月3日

US and Canada to Investigate BlackBerry Security

Did it again.

http://www.globetechnology.com/servlet/story/RTGAM.20050228.gtberry0228/BNStory/Technology

Let's hope that CrackBerry security is good enough to hold important Congressional information since every Congressman and House Rep has one and is e-mail from it!

2月21日

Anatomy of a [T-Mobile] Hack

This was a very interesting article: http://www.infosecinstitute.com/blog/ethical_hacking_computer_forensics.html And very sad. T-Mobile should have fixed this problem already. SQL injection on their main Website customer login portal, simple exploit, and now you get to own a SideKick server and access to all of their SideKick csutomer records. Can someone please fix this?
2月20日

I am a fortune teller...next Congress BlackBerries compromised

I predicted someone would hack the BlackBerry Network and it's devices, here.

For his next trick, exposing the sick details of every US Congressmen.

The validity of the news was further solidified in a the recent Drudge Report.

This is an interesting article about our favorite, Paris Hilton, whose BlackBerry and T-Mobile SideKick was hacked and e-mail and private pictures were completely exposed.

Oh, and Paris Hilton's nudes, address book, notebook, and travel, hotel, and driving information from her hacked SideKick are available on the Net: http://pad.au.com/~ms/Somebody%20got%20hizacked.htm

These are a few interesting entries:

Aguilera, Christina   1-310-917-9191

Durst, Fred   1-310-948-0808  fd@attwireless.blackberry.net 

Eminem   1-917-776-7643 

Fred   Mobile 407-402-7845   onlyartist@tmail.com

Paris  godesparis@aol.com 

Let's say there is a lot of information.

Anyone on this list, should change all of their info (home phone, cellphone, e-mail address)...and bill T-Mobile for it. Anyone else, read what she wrote about you in her notebook.

Unbelievable.

When consumers use products and services from manufacturers and service providers like T-Mobile, SideKick, and RIMM (BlackBerry), they should feel safe and believe that the vendors have done their part to secure their personal information.

The real news should be that T-Mobile, SideKick, and RIMM should be sanctioned and their customers should leave them for not protecting their data.

Unfortunately, the Net is very much like the Wild West and the Net will remain this way. 

You cannot trust someone else for your security.

People don't save your private stuff where an ISP/Telco/Cell provider has access to it or can store it on their own systems...it's a public network, think encryption, locally saving instead of up at their server, not saving your personal information on a mobile device, ask how secure your device is, don't share anything that cannot be intercepted...

Protect yourself at all times.

I'm posting this for posterity...there are nudes of this...

2月14日

Security guard of the future...

Robotus has repurposed their would-be Mars bot into a potential high tech guard dog.

The device, developed at the University of Uppsala, acts as a high-tech security guard capable of detecting an intruder thanks to either radar or infra-red sensors. Once alerted, it can summon help, sound an alarm or pursue the intruders, taking pictures.

Now add some weapons to it and my in-laws will never visit.

1月14日

Duh, Protection from Google and other search engines

Hackers are using search engines like Google, Yahoo, MSN, etc. to sniff out network vulnerabilities, unsecured devices, and discover sensitive information and documents.

This can be stopped with a simple technique. Simply, he recommends hardening any device placed on the Internet, so it can't be hijacked or attacked. "Treat all Internet-facing devices, even apparently obscure ones such as cameras, as relevant to security." This advice is freakin' brilliant...NOT.

Come on folks, it's 2005.

If it's jacked in to the Net, SECURE it. Geez.

  • System hardening
  • Patching
  • AntiVirus Updates
  • AntiSpyware Updates
  • Firewalls and Intrusion Prevention Systems

Hello?