background preloader

HTTB Direct Distribution (V1)

Facebook Twitter

DFI – Use your own “Flame” spyware for investigations. Digital forensics software, remote access tools, and other tools to aid corporate investigations (Digital forensics software, remote access tools, and other tools to aid investigations See on www.csoonline.com. You're not in control of your own security. Whenever I hear a case of a high profile subject being hacked, I start to look for which common security recommendation was overlooked or ignored. Was it a poor password that was shared among several sites? Or was it something a little more exciting, like Bluetooth being left on and data stolen that way?. Everyone, myself included, stress the importance of strong passwords, putting PINs on devices, never letting your smartphone out of sight and turning off unnecessary sharing services, so usually when someone is breached, it's because they failed to implement one or more of those similar measures.

However, none of them would have helped former Gizmodo journalist Mat Honan, who had his digital life wiped. If you haven't read my colleague Emil Protalinski's write up on how the hack went down , I urge you to go read it. Sure, he had a seven character weak-by-today's-standards alpha-numeric password on his iCloud account and no PIN on his iPhone, but that didn't really matter. Privacy Commissioner to investigate AAPT, Melbourne IT.

The Privacy Commissioner has said in a statement that he will look into whether the practices of AAPT and Melbourne IT were consistent with the Privacy Act at the time of Anonymous' attack. Anonymous stole AAPT's data last month via a vulnerability on Melbourne IT's systems. The group later began releasing data from a 40GB cache, which AAPT has said only contains historical, not current information. At the time that the attack was announced, Melbourne IT told ZDNet that it had chosen not to involve the Privacy Commissioner, as it did not know if the data contained any personal information. It said that since the data did not belong to it, it was not permitted to view its contents. The Privacy Commissioner also told ZDNet that, at the time, AAPT had not informed it of the theft of data and would contact the telco for a response. Rc3.org - Strong opinions weakly held.