[iwar] Historical posting
From: Fred Cohen
From: fc@all.net
To: iwar@onelist.com
Mon, Jan 1, 1999
fc Mon Jan 1, 1999
Received: (from fc@localhost) by all.net (8.9.3/8.7.3) id FAA15269 for iwar@onelist.com; Tue, 18 Apr 2000 05:21:43 -0700
To: iwar@onelist.com
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe:
Date: Mon, Jan 1, 1999
From: Fred Cohen
Reply-To: iwar@egroups.com
Subject: [iwar] Historical posting
[I include some of these items because they seem to me to be relevant to
information warfare in the form of perception management which is
finally turning toward better information protection. I guess when Y2K
ended the focus had to go somewhere else... my comments are included... FC]
How to steal 2,500 credit cards
Remarkable discovery by MSNBC investigation, uncovers
e-commerce sites' shoddy security. Just how easy is it
to steal credit card numbers on the Internet?
Last week, MSNBC was able to view nearly 2,500 credit
card numbers stored by seven small e-commerce Web sites
within a few minutes, using elementary instructions
provided by a source. In all cases, a list of customers
and all their personal information was connected to the
Internet and either was not password-protected or the
password was viewable directly from the Web site.
How to steal 2,500 credit cards, Part 1
http://www.zdnet.co.uk/news/2000/2/ns-12672.html
How to steal 2,500 credit cards, Part 2
http://www.zdnet.co.uk/news/2000/2/ns-12674.html
[This issue was published all over the Internet at least a year ago. In
a short study I did (fifteen minutes) I was also able to collect
thousands of credit card numbers. I reported the results to the risks
forum (risks@c...) at the time.]
Student Hacks H.S. Computer
Hauppauge senior installed game on mainframe, police say.
OFFICIALS AT Hauppauge High School were scrambling to assess
the damage to their computer system Friday after a student was
arrested on charges of hacking his way onto the school district's
mainframe computer, Suffolk police said. Keith Billig, 17, of
5 Harmon Pl. in Hauppauge was arrested Thursday afternoon and
charged with unauthorized use of a computer and fourth-degree
computer tampering, both misdemeanors. He faces up to 1 year
in jail if found guilty.
http://newsday.com/news/nthisat.htm
[ A high school kid installs a game on a mainframe and faces a year in
jail? This seems a bit excessive to me - but then - I guess people are
beginning to believe that computers are like houses.]
Computer experts hot on trail of JSE hacker
A COMPUTER whizz kid has become South Africa's most wanted
"cybervillian" after breaking into nearly a dozen "safe"
Internet web sites. The 19-year-old, who calls himself Akt0r,
has evaded capture but the Johannesburg Stock Exchange computer
experts are on his trail after he hacked their web site last
weekend. Akt0r claims to have "cracked" in just four months
sites owned by Eskom, the police, Rand Afrikaans University,
Southern Life, Stormers Rugby Club, Incredible Connection,
Computicket and Durban Metropolitan Council.
http://www.suntimes.co.za:80/2000/01/16/news/news27.htm
[A COMPUTER whizz kid: Really? If they haven't caught this person yet,
how do they know he is really a 19 year old?]
Cyber squad set up to tackle computer crime
Jack Straw is to set up a national computer crime squad to
combat the growing problem of hackers, Internet fraudsters
and pornography. The Home Secretary has given the National
Criminal Intelligence Service and chief constables #337,000
to draw up a detailed plan for the squad. The team will be
used to counter "cyber criminals" who are using computers
to commit fraud, launder money, spread pornography and share
information about paedophilia, counterfeiting, and hacking.
http://www.independent.co.uk/news/Digital/Update/cybersquad170100.shtml
Decryption centre mooted
The Home Office has outlined plans to the IT industry for a
Government Technical Assistance Centre (GTAC) to help law
enforcement bodies decrypt voice, text or data. GTAC is the
brainchild of the Cabinet Office and is part of the
government's plan to make the UK a safer place for e-trade
by providing a legal framework for the encryption of online
communication. At the same time it wants to make it more
difficult for criminals to hide behind online encryption by
giving the security forces powers to decrypt communications.
http://www.zdnet.co.uk/news/2000/2/ns-12699.html