Donald Sears

Google Is ‘Paranoid’ on Security Following Aurora

Google learned some hard security lessons after it was attacked late last year by hackers, said CEO Eric Schmidt.”Google is now particularly paranoid about that,” Schmidt said during a question-and-answer session following Google’s Atmosphere 2010 conference before about 400 CIOs. Read the full article. [CNet]

Changes to Flash Good for Bank Fraud

When the final version of Adobe Flash Player 10.1 hits desktops later this year, it will bring with it new functionality designed to allow users to automatically clear Flash cookies after a Web session. But while the feature may be lauded in the name of privacy, it may also force online banks to change how they fight fraud. Read the full article. [eWEEK]


A new technique allows medical records to be used for research on the
genetics of disease while still protecting patients from prying eyes. The new method disguises parts of the medical history data that are not
relevant to a geneticist’s particular research question using an
algorithm that combs through health records and makes some aspects of
them more general. Read the full article. [ScienceNews]

An ongoing ransomware campaign is pretending to be the fake ICPP Foundation (icpp-online.com), where the ransomware locks down the user’s desktop issuing a “Copyright violation: copyrighted content detected” message which lists torrent files found on the infected PC and forces the user to pay $400 for the copyright holder’s fine and emphasizing “the maximum penalties can be five years in prison and up to $250,000 in fines.” Read the full article. [ZDNet]

The Black Hat security conference will kick off next week in Barcelona, with training sessions and briefings from some of the most talented security researchers in the industry. Facebook’s chief security officer, Max Kelly, is scheduled for a keynote presentation on Wednesday morning following two days of training sessions. Read the full article. [Computerworld]

A group of sophisticated identity thieves managed to steal more than $4
million by filing bogus tax returns using the names and Social Security
numbers of other people, many of them deceased, according to a 74-count
indictment unsealed in Arizona. Read the full article. [Wired]

Oracle has moved
Solaris onto its quarterly security patch schedule, meaning users of
the Sun Microsystems operating system will now know months in advance
when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update
will include 16 security fixes for Sun products, including Solaris, Sun
Cluster, Sun Convergence and the Sun Ray server software. Read the full article. [IDG News Service]