[iwar] News
From: Fred Cohen
From: fc@all.net
To: iwar@egroups.com
Thu, 31 Aug 2000 07:34:04 -0700 (PDT)
fc Thu Aug 31 07:35:14 2000
Received: from 207.222.214.225
by localhost with POP3 (fetchmail-5.1.0)
for fc@localhost (single-drop); Thu, 31 Aug 2000 07:35:14 -0700 (PDT)
Received: by multi33.netcomi.com for fc
(with Netcom Interactive pop3d (v1.21.1 1998/05/07) Thu Aug 31 14:35:07 2000)
X-From_: sentto-279987-516-967732447-fc=all.net@returns.onelist.com Thu Aug 31 09:34:33 2000
Received: from ml.egroups.com (ml.egroups.com [208.50.144.77]) by multi33.netcomi.com (8.8.5/8.7.4) with SMTP id JAA16755 for ; Thu, 31 Aug 2000 09:34:33 -0500
X-eGroups-Return: sentto-279987-516-967732447-fc=all.net@returns.onelist.com
Received: from [10.1.10.35] by ml.egroups.com with NNFMP; 31 Aug 2000 14:34:09 -0000
Received: (qmail 30333 invoked from network); 31 Aug 2000 14:34:06 -0000
Received: from unknown (10.1.10.142) by m1.onelist.org with QMQP; 31 Aug 2000 14:34:06 -0000
Received: from unknown (HELO all.net) (24.1.84.100) by mta3 with SMTP; 31 Aug 2000 14:34:05 -0000
Received: (from fc@localhost) by all.net (8.9.3/8.7.3) id HAA09241 for iwar@onelist.com; Thu, 31 Aug 2000 07:34:04 -0700
Message-Id: <200008311434.HAA09241@all.net>
To: iwar@egroups.com
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe:
Date: Thu, 31 Aug 2000 07:34:04 -0700 (PDT)
Reply-To: iwar@egroups.com
Subject: [iwar] News
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
-------------------------- eGroups Sponsor -------------------------~-~>
GET A NEXTCARD VISA, in 30 seconds! Get rates
of 2.9% Intro or 9.9% Ongoing APR* and no annual fee!
Apply NOW!
http://click.egroups.com/1/7872/14/_/595019/_/967732447/
---------------------------------------------------------------------_->
Trojan horse rears its head on Palms
A software programmer has created the first known Trojan horse
for a Palm, raising questions about a possible downside to the
company's legions of loyal software developers. A malicious
program masquerading as an illegal, but free, version of the
popular gaming application Liberty has been making the rounds
of Palm newsgroups and chat rooms since late last week. The
arrival of the software, which has the potential to wipe out
all the programs stored on the device, is believed to be the
first Trojan horse for the Palm.
http://news.cnet.com/news/0-1006-200-2635223.html
SEC targets alleged Web pyramid scheme
Federal regulators today filed suit to stop an allegedly
fraudulent pyramid scheme they said was masquerading as an
investment club and had bilked some 2,000 investors of $5.6
million. For a $1,495 membership fee plus $149 a month,
Le Club Prive offered investors a chance to earn commissions
by recruiting new members to the club, the Securities and
Exchange Commission said in its civil suit filed in federal
court in Dallas. Investors were to receive $500 for each new
member they recruited. Members were promised access to the
club's Internet "backroom," containing investment
recommendations, the SEC said. The club also offered shares
of domestic and offshore mutual funds promising huge returns.
http://news.cnet.com/news/0-1005-200-2645890.html
Online auctions top list of Internet fraud 1,000 complaints a week lodged
In the first nationwide overview of crime on the Internet,
online auctions emerged as the No. 1 source of fraud, according
to the FBI, which is tallying thousands of consumer complaints
and referring cases to law-enforcement agencies across the USA.
The Internet Fraud Complaint Center, a project of the FBI and
the Department of Justice, has received 1,000 consumer complaints
a week since it opened in May. The center expects at least 1,000
complaints a day starting in November when it is fully automated
and linked to such major Web portals as America Online and Yahoo.
FBI agents have referred about 4,000 cases to law-enforcement
agencies. Almost half concerned online auctions, confirming
suspicions fueled by tales of fraudulent paintings and kidneys
sold for transplants.
http://www.usatoday.com/usatonline/20000829/2591878s.htm
Dow Jones bests cybersquatter
Dow Jones and Co. Inc., the publisher of The Wall Street Journal,
won control of an Internet address under a procedure aimed at
preventing ''cybersquatting,'' a U.N. agency said Monday. The
World Intellectual Property Organization said arbitrator
Richard W. Page ruled in favor of Dow Jones and Co. in its
dispute with Down Jones Update of Baltimore over rights to the
Internet address ''dowjonesonline.com.'' Page said in his ruling
that the Internet address ''is identical with and confusingly
similar to the trademark Dow Jones and its variations.'' He said
that Down Jones Update had ''registered and used the domain name
in bad faith.'' The Baltimore company failed to respond to notices
giving it the chance to defend itself, according to Page.
http://www.usatoday.com/life/cyber/tech/cti459.htm
Federal agencies face grading on security readiness
The congressional committee that released A, B, C, D and F
grades on the year 2000 compliance of federal agencies during
the last two years now intends to issue similar grades evaluating
the information security readiness of 54 federal agencies and
departments. The U.S. House Subcommittee on Government Management,
Information and Technology, which is chaired by Rep. Stephen Horn
(R-Calif.), plans to release its security report cards at a
Sept. 11 hearing. The U.S. General Accounting Office (GAO), which
has largely been critical of the security efforts of federal
agencies, also is due to issue a report at the hearing.
http://www.computerworld.com/cwi/story/0,1199,NAV47_STO49211,00.html
Government-Assisted Cryptography
Given that cryptography is a useful technique to protect the
security of financial and other transactions, government
restrictions on cryptography have received a great deal of
attention in today's wired climate. However, there are ways
in which the government is beneficial to cryptography that
are being overlooked, or taken for granted, during this debate.
http://www.securityportal.com/topnews/goascr20000829.html
Have You Hugged a Hacker Today?
The Information Age is killing critical thinking. The steady
barrage of more facts and figures than any human mind can digest
results in absurdly swift processing with little or no reflection,
much less complex deliberation. The ever increasing pressure to
rush to judgment can lead to strangely counterproductive
conclusions -- as in the case of what to do with notorious
ex-hackers who are ready to go back to work.
http://www.ecommercetimes.com/news/viewpoint2000/view-000829-1.shtml
Palm devices suffer little damage in virus-like attack
A virus-like program has infected some Palm devices, marking
the first time the popular handheld computers have been hit
by malicious software and raising the specter of future
incidents. ''This is the beginning of the handheld virus era,''
says David Perry of computer security firm Trend Micro. The
program affected a tiny number of Palm users, did little damage
and has virtually been wiped out. Still, experts say, it shows
that personal digital assistants (PDAs) are vulnerable to viruses
and will likely encourage copycats. Technically, the destructive
software is not a virus but a Trojan horse -- a program that
masquerades as beneficial software and then wreaks havoc.
http://www.usatoday.com/usatonline/20000830/2595927s.htm
Glitch left Internet bank accounts open to snoopers
A security glitch left at least 800,000 Norwegian Internet
bank accounts open to snoopers for two months until a 17
year-old boy pointed out the flaw, a published report said
Wednesday. The Sparebanken Nor bank was told about the bug
on Tuesday and immediately shut down and modified the service.
``There was one window that was open to those who hacked long
enough. That window was closed yesterday, and we are happy
about that,'' bank spokeswoman Mona Stroem Arnoey said. The
bug made it possible for Internet bank customers to log onto
their own account, and from there move to other accounts on
the same database.
http://www.mercurycenter.com/svtech/news/breaking/merc/docs/024621.htm
Messages reportedly can freeze Nokia Phones
A Norwegian mobile Internet firm said Wednesday that some
Nokia mobile phones may freeze temporarily if certain text
messages are sent to them. The claim is the latest indication
that mobile devices may face some of the same virus threats
that have plagued personal computers in recent years. In May
millions of PC's globally were bit by the `Love Bug'' virus.
http://www.mercurycenter.com/svtech/news/breaking/reuters/docs/357727l.htm
Internet contributes to rise of identity theft, FTC says
Calls to the Federal Trade Commission's identify theft hotline
have tripled in the past six months, and the Internet is partly
to blame. The FTC said today that it received an average of 1,000
calls per week to its Identity Theft hotline during the month of
July. By comparison, the department received some 400 calls per
week in March, said FTC attorney Helen Foster. "We think that
perpetrators who would hesitate to show up to a bank or apply for
a credit card in person would find it much easier to do over the
Internet," Foster said. "Applying for credit over the Internet is
a faceless thing to do."
http://news.cnet.com/news/0-1005-200-2654832.html
Word documents susceptible to "Web bug" infestation
Microsoft is weathering complaints that documents created with
Microsoft Word and some of its other popular desktop applications
can be embedded with electronic surveillance tags allowing
document authors to track their use. The Privacy Foundation,
which supports an Internet privacy research institute at the
University of Denver, today published a report demonstrating
how Word documents can be planted with "Web bugs" that can pass
information about the use of the file back to the author. Web
bugs can also be embedded in Excel spreadsheets and PowerPoint
slide show files, according to the report, which was authored
by Privacy Foundation chief technology officer Richard Smith.
http://news.cnet.com/news/0-1005-200-2652562.html
Password glitch riles ICQ users
America Online's efforts to bolster security for its ICQ instant
messaging service are drawing complaints from some people who say
the measures have locked them out of their accounts. AOL earlier
this year revamped ICQ password verification procedures to stop
account hijackings, which have been a persistent problem for the
service. ICQ (short for "I seek you") accounts are numbered
sequentially, and early accounts with low numbers are valuable
targets for malicious hackers.
http://news.cnet.com/news/0-1005-200-2652485.html
Titan sues to block damaging anonymous Web postings
Technology services firm Titan Corp. said Wednesday it filed
a lawsuit in a California court in an effort to prevent short
sellers from using anonymous Internet messages to drive down
its stock price. The suit, which seeks damages and an
injunction against further securities manipulation, was filed
days after shares of Emulex Corp. plunged more than 50 percent
when a bogus press release was posted on the Web claiming that
the high-tech company's chief executive was resigning and that
it was being forced to revise 1998, 1999 and fourth quarter
earnings reports. The Emulex hoax has triggered fierce debate
by investors and regulators over the Internet's role in stock
trading and disseminating information.
http://www.mercurycenter.com/svtech/news/breaking/merc/docs/014606.htm
Napster banned at 34 percent of colleges
Thirty-four percent of 50 U.S. colleges and universities have
banned students from using Napster Inc.'s song-swap service
on their campuses, said a report released Wednesday by research
firm Gartner Group Inc. Among the 17 colleges that banned
Napster were New York University and Kent State, while Columbia
University, Harvard and Stanford University are allowing students
to access Napster. Gartner said Napster is raising several moral
and legal issues for the schools as they prepare for the fall
session, with administrators quickly making ban/no ban decisions
and writing up policies to address these concerns.
http://www.mercurycenter.com/svtech/news/breaking/merc/docs/073866.htm
------------------
http://all.net/