Web Security


LifeLock CEO A Frequent Victim of ID Theft

A CEO who publicly posted his Social Security number on billboards and
TV commercials as part of a campaign to promote his company’s credit
monitoring services was the victim of identity theft at least 13 times, a
news report says. Read the full article. [Wired]

Google Cloud Print: Thinking Through the Security, Privacy Implications

Google’s plans to introduce a Cloud Print service that’s already being hailed as “printer voodoo” because it lets users print to any printer anywhere in the world, even from mobile phones.However, there are some privacy and security implications that need to be fleshed out before end users rush to submit print jobs to Google’s cloud.

Feasting on Twitter User Desire for Followers

The cybercriminals behind the intensifying phishing scam that has
been plaguing Twitter since late last week are proving how easy it is to
pervert the trust social networks like Twitter and Facebook along with
search giant Google have made a cornerstone of their respective business
models. The idea is to get Web users accustomed to using their Twitter, or
Gmail or Facebook credentials as  a “single sign-on” to access the Web’s
coolest apps. Read the full article. [The Last Watchdog]


Data secretly collected from an international phishing
operation over  18 months suggests that criminals who pursue a career
in phishing can reap millions of dollars a year, even if they only
manage to snag just a few victims per scam. Read the full article. [KrebsonSecurity]

The pace of innovation on mobile phones and other smart wireless devices has accelerated greatly in the last few years, adding features, speed and computing power. But now the attackers are beginning to outstrip the good guys on mobile platforms, developing innovative new attacks and methods for stealing data that rival anything seen on the desktop, experts say.

PostgreSQL 7 and 8 users are advised to update their installations as the development team has released new versions which fix a vulnerability classed as moderately severe in PL/perl and PL/tcl. CVE-2010-1169, CVE-2010-1447 and CVE-2010-1170 reports detail the vulnerabilities involved. Read the full article. [The H Security]

A former security guard has pleaded guilty to charges that he broke into his employer’s computers while working the night shift at a Dallas hospital. Jesse William McGraw pleaded guilty to two counts of transmitting malicious code, said the U.S. Department of Justice (DoJ). Read the full article. [IDG News Service]