Paul Roberts

UK: Google Street View Data Snarfing Broke the Law

Search giant Google violated the United Kingdom’s Data Protection Act by gobbling up personal data, in addition to images and GPS data, with its roving Street View autos. 

According to a report by the BBC, the UK’s Information Commissioner ruled there was a “significant breach” of the country’s data privacy laws by Google, which will not face monetary penalties or punishment, but will have to allow its data protection practices to be audited by the Information Commissioner’s Office. 

Creator Defends FireSheep: App Does More Good Than Harm

One of a pair of developers who created FireSheep, a Firefox browser plug-in that makes it easy to snoop on others’ social networking sessions, has written a blog post defending his creation, saying it has helped elevate discussion about security on the Web. 

Search Engine Finds Vulnerable SCADA Systems

UPDATED: ICS-CERT, the emergency response team for industrial control systems, has warned companies that run SCADA (Supervisory Control and Data Acquisition) software that the systems running it may be easily discovered using a free Web based search engine dubbed Shodan.


Following an embarrassing expose in the Wall Street Journal, Facebook has tightened its controls over the ways in which applications that use the social networking platform can share unique user identity information (or UIDs). The company also banned several applications accused of improperly disclosing user data. 

A new family of Trojan Horse programs is being used to stifle political opposition to the Communist Party in Vietnam, according to an analysis by researchers at SecureWorks. The Trojan, dubbed Vecebot, is a new family of malware  and has been linked to distributed denial of service (DDoS) attacks against bloggers who have written critically of the ruling Communist Party and Chinese mining operations in the country, SecureWorks said. 

Days after researchers at the ToorCon Security Conference in San Diego released a tool to hijack insecure Web sessions on Facebook, iGoogle and Flickr, a developer has released a similar tool, dubbed “Idiocy” that does the same for insecure Twitter sessions.