KevLar's Space

my little space on the interwebs

Firefox 32 Arrives With New HTTP Cache, Public Key Pinning Support

An anonymous reader writes: Mozilla today officially launched Firefox 32 for Windows, Mac, Linux, and Android. Additions include a new HTTP cache for improved performance, public key pinning support, and easy language switching on Android. The Android version is trickling out slowly on Google Play. Changelogs are here: desktop and mobile.

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1CnZoYc

Banks Report Credit Card Breach At Home Depot

criticalmass24 sends news that multiple banks are indicating Home Depot stores are the source of a new batch of stolen credit cards and debit cards that hit the black market today. “There are signs that the perpetrators of this apparent breach may be the same group of Russian and Ukrainian hackers responsible for the data breaches at Target, Sally Beauty and P.F. Chang’s, among others. The banks contacted by this reporter all purchased their customers’ cards from the same underground store – rescator[dot]cc — which on Sept. 2 moved two massive new batches of stolen cards onto the market.” Home Depot is aware of the situation, and says they’re investigating. The banks say this breach may have begun as early as April or May of this year and may extend to all 2,200 of Home Depot’s U.S. stores.

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/Y9yqnQ

AMD Releases New Tonga GPU, Lowers 8-core CPU To $229

Vigile (99919) writes AMD looks to continue addressing the mainstream PC enthusiast and gamer with a set of releases into two different component categories. First, today marks the launch of the Radeon R9 285 graphics card, a $250 option based on a brand new piece of silicon dubbed Tonga. This GPU has nearly identical performance to the R9 280 that came before it, but includes support for XDMA PCIe CrossFire, TrueAudio DSP technology and is FreeSync capable (AMD’s response to NVIDIA G-Sync). On the CPU side AMD has refreshed its FX product line with three new models (FX-8370, FX-8370e and FX-8320e) with lower TDPs and supposedly better efficiency. The problem of course is that while Intel is already sampling 14nm parts these Vishera-based CPUs continue to be manufactured on GlobalFoundries’ 32nm process. The result is less than expected performance boosts and efficiency gains.

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1nugvxU

Hackers Behind Biggest-Ever Password Theft Begin Attacks

An anonymous reader writes “Back in August, groups of Russian hackers assembled the biggest list of compromised login credentials ever seen: 1.2 billion accounts. Now, domain registrar Namecheap reports the hackers have begun using the list to try and access accounts. “Overnight, our intrusion detection systems alerted us to a much higher than normal load against our login systems. … The group behind this is using the stored usernames and passwords to simulate a web browser login through fake browser software. This software simulates the actual login process a user would use if they are using Firefox/Safari/Chrome to access their Namecheap account. The hackers are going through their username/password list and trying each and every one to try and get into Namecheap user accounts.” They report that most login attempts are failing, but some are succeeding. Now is a good time to check that none of your important accounts share passwords.”

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1pBPaiH

Tox, a Skype Replacement Built On ‘Privacy First’

An anonymous reader writes: Rumors of back door access to Skype have plagued the communication software for the better part of a decade. Even if it’s not true, Skype is owned by Microsoft, which is beholden to data requests from law enforcement. Because of these issues, a group of developers started work on Tox, which aims to rebuild the functionality of Skype with an emphasis on privacy. “The main thing the Tox team is trying to do, besides provide encryption, is create a tool that requires no central servers whatsoever—not even ones that you would host yourself. It relies on the same technology that BitTorrent uses to provide direct connections between users, so there’s no central hub to snoop on or take down.”

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1nofwiP

New Nigerian ID Card Includes Prepay MasterCard Wallet

First time accepted submitter Adam Oxford writes Nigeria’s National Identity Management System — which aims to bring together citizen information databases as diverse as driving licenses and tax returns — was introduced last week and includes a prepay MasterCard wallet. Civil liberties groups are naturally wary about the project, but proponents see it as a way to get financial services to the masses. From the article: “The director general of the commission which will implement NIMS, Chris ‘E Onyemenam, said at the launch that the card will eventually be used for border control as well. ‘There are many use cases for the card, including the potential to use it as an international travel document,’ Onyemenam said. ‘NIMC is focused on inclusive citizenship, more effective governance, and the creation of a cashless economy, all of which will stimulate economic growth, investment and trade.'”

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1x226lS

Reported iCloud Hack Leaks Hundreds of Private Celebrity Photos

swinferno writes with news about the leak of hundreds of private celebrity photos over the weekend. Hundreds of revealing pictures of female celebrities were leaked overnight after being stolen from their private collections. Hunger Games actress Jennifer Lawrence, Kirsten Dunst, and pop star Ariana Grande were among the celebrities apparently shown in the pictures, which were posted on infamous web forum 4chan. It’s unclear how the images were obtained, but anonymous 4chan users said that they were taken from celebrities’ iCloud accounts. The accounts are designed to allow iPhone, iPad, and Mac users to synchronize images, settings, calendar information, and other data between devices, but the service has been criticized for being unreliable and confusing. Earlier this year, Jennifer Lawrence herself complained about the service in an interview with MTV.

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1qjkr97

Hacker Disrupts New Zealand Election Campaign

An anonymous reader writes New Zealand is facing its weirdest election ever with a hacker calling himself “Rawshark” progressively dumping emails hacked from a controversial blogger. This weekend, revelations forced the resignation of one Government minister and nobody knows what will drop next. Emails revealed that the blogger, called “Whale Oil”, was in contact with both a government minister in charge of New Zealand’s white collar crime investigations unit and with a PR man acting for a founder of a failed finance company then under investigation.

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1lsOM4Y

Wi-Fi Router Attack Only Requires a Single PIN Guess

An anonymous reader writes: New research shows that wireless routers are still quite vulnerable to attack if they don’t use a good implementation of Wi-Fi Protected Setup. Bad implementations do a poor job of randomizing the key used to authenticate hardware PINs. Because of this, the new attack only requires a single guess at the hardware PIN to collect data necessary to break it. After a few hours to process the data, an attacker can access the router’s WPS functionality. Two major router manufacturers are affected: Broadcom, and a manufacturer to be named once they get around to fixing it. “Because many router manufacturers use the reference software implementation as the basis for their customized router software, the problems affected the final products, Bongard said. Broadcom’s reference implementation had poor randomization, while the second vendor used a special seed, or nonce, of zero, essentially eliminating any randomness.”

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1qqZ2JY

Reformatting a Machine 125 Million Miles Away

An anonymous reader writes: NASA’s Opportunity rover has been rolling around the surface of Mars for over 10 years. It’s still performing scientific observations, but the mission team has been dealing with a problem: the rover keeps rebooting. It’s happened a dozen times this month, and the process is a bit more involved than rebooting a typical computer. It takes a day or two to get back into operation every time. To try and fix this, the Opportunity team is planning a tricky operation: reformatting the flash memory from 125 million miles away. “Preparations include downloading to Earth all useful data remaining in the flash memory and switching the rover to an operating mode that does not use flash memory. Also, the team is restructuring the rover’s communication sessions to use a slower data rate, which may add resilience in case of a reset during these preparations.” The team suspects some of the flash memory cells are simply wearing out. The reformat operation is scheduled for some time in September.

Read more of this story at Slashdot.



via Slashdot: IT http://ift.tt/1CdgUON

Follow

Get every new post delivered to your Inbox.