Friday, October 16, 2009

Sidekick falls through the Cloud

In what is being described as the largest failing of "cloud computing" to date, about 1 million US owners of the T-Mobile Sidekick lost data stored on their mobile phones due to a back-up failure. A Microsoft subsidiary, Danger, operates the Sidekick data service.

T-Mobile and Microsoft announced that customers whose data could not be recovered will receive a $100 gift card in addition to one month data service credit. T-Mobile also temporarily halted sales of the Sidekick.

Microsoft later announced that all data will be restored, beginning with personal contacts. According to the company, the utage was caused by a system failure that created data loss in the core database and the back up. Microsoft says it has installed a "more resilient back-up process" to safeguard against a repeat incident.

See, "Phone sales hit by Sidekick loss," BBC News, October 12, 2009, at http://news.bbc.co.uk/2/hi/technology/8303952.stm; "T-Mobile to Update Sidekick Users on Data Loss," San Francisco Chronicle, October 12, 2009, at http://www.sfgate.com/cgi-bin/article.cgi?f=/g/a/2009/10/12/urnidgns852573C4006938800025764D004CF9BC.DTL; "T-Mobile, Microsoft Promise $100 Gift Card For Lost Data," Information Week, October 13, 2009, at http://www.informationweek.com/news/personal_tech/smartphones/showArticle.jhtml?articleID=220600430; "Microsoft recovers Sidekick data ," BBC News, October 15, 2009, at http://news.bbc.co.uk/2/hi/technology/8309218.stm; "Danger Debacle Highlights Microsoft's Dilemma With Mobile ," Wall St. Journal, October 15, 2009, at http://online.wsj.com/article/BT-CO-20091015-713811.html.

Wednesday, August 26, 2009

Model Outs Blogger

In an online defamation case, a Manhattan supreme court judge allowed Vogue cover girl Liskula Cohen to compel Google to identify an anonymous blogger who called her a “psychotic, lying, whoring ... skank." The judge rejected the blogger’s claim that the blogs “serve as a modern-day forum for conveying personal opinions, including invective and ranting,” and should not be treated as factual assertions.

Rosemary Port, who was then outed, sued Google -- which operates the blog, "Skanks in NYC" -- for failing to protect her right to privacy.


“Vogue model Liskula Cohen wins right to unmask offensive blogger,” Times, August 19, 2009, at http://www.timesonline.co.uk/tol/news/world/us_and_americas/article6801213.ece;
“Google lawsuit dispels the Web’s oldest tradition: anonymity,” Christian Science Monitor, August 20, 2009, at http://features.csmonitor.com/innovation/2009/08/20/google-lawsuit-dispels-the-webs-oldest-tradition-anonymity/; “Unmasked Google blogger to sue over privacy breach,” Times, August 24, 2009, at http://timesonline.typepad.com/law/2009/08/unmasked-google-blogger-to-sue-over-privacy-breach.html; “Model Liksula Cohen still not getting apology from blogger Rosemary Port,” New York Daily News, August 26, 2009, at http://www.nydailynews.com/gossip/2009/08/26/2009-08-26_model_liksula_cohen_still_not_getting_apology_from_blogger_rosemary_port.html;
“Stung by the Perfect Sting, New York Times, August 25, 2009, at http://www.nytimes.com/2009/08/26/opinion/26dowd.html?ref=opinion.

Monday, August 17, 2009

Charges brought in largest hacking and identity theft case

Three men were indicted on federal charges in the largest computer hacking and identity theft case ever charged in the U.S. The defendants allegedly hacked into computer networks of major U.S. retail and financial organizations -- using a standard (and preventable) SQL injection attack that exploits a database when user input is not properly filtered -- and stole data related to more than 130 million credit and debit cards.

Albert Gonzalez, of Miami, along with two unnamed Russians, stands accused of hacking into Heartland Payment Systems, 7-Eleven, and Hannaford Bros. The stolen data was sent to computer servers that Gonzalez and his co-conspirators operated in California, Illinois, Latvia, the Netherlands, and Ukraine.

The hackers were also allegedly involved in the cracking of a Citibank-branded ATM network lcoated in 7-Eleven stores. The group penetrated a network linking 2,200 ATMs (by breaching a back-end system that had been outsourced by 7-Eleven) and stole card and PIN codes, using them to steal about $2 million in cash from Citibank ATMs. They also compromised prepaid iWire cards and withdrew about $5 million, which was sent to Russia.

Gonzalez is currently awaiting trial on charges that he and others allegedly also stole more than 40 million credit-card numbers from TJX and others, costing TJX $200 million.

According to the Justice Department, Gonzalez had been arrested in 2003, but not charged because he agreed to become an informant for the Secret Service.

See, "Three Indicted in Major Hacking Case," Wall St. Journal, August 17, 2009, at http://online.wsj.com/article/SB125053669921337753.html; "U.S. Indicts 3 in Theft of 130 Million Bank Cards," New York Times, August 17, 2009, at http://www.nytimes.com/2009/08/18/technology/18card.html; "Arrest in Epic Cyber Swindle," Wall St. Journal, August 18, 2009, at http://online.wsj.com/article/SB125053669921337753.html; "Hacker Indictments Highlight Application Security," InformationWeek, August 18, 2009, at http://www.informationweek.com/blog/main/archives/2009/08/hacker_indictme.html;jsessionid=2IV31GYNRMD3RQE1GHOSKHWATMY32JVN; "Cyber-thieves linked to Citibank ATM breach," Financial Times, August 24, 2009, at http://www.ft.com/cms/s/0/0e964e10-9046-11de-bc59-00144feabdc0.html.

Saturday, August 1, 2009

Most damaging hacker to be extradited to the US

A UK court has approved the extradition to the US of Gary McKinnon, who admits hacking into 97 computers belonging to the US Defence Department, Navy, Army, Air Force and after September 11, 2001. McKinnon is claimed to be most prolific and damaging computer hacker in US military history. One message he allegedly left on a Pentagon computer stated, “U.S. foreign policy is akin to government-sponsored terrorism. I will continue to disrupt at the highest possible level.”

McKinnon and family say his actions were influenced by Asperger’s syndrome, a form of autism. McKinnon, admitting the charges, says that rather than harming the United States, his goal was to expose evidence that "secretive parts of the American government intelligence agencies did have access to crashed extra terrestrial technology which could… save us as a form of free, clean, pollution-free energy." But prosecutors seeking his extradition have said his actions were not benign and the diagnosis was made long after the computer hacking occurred and the case against him was under way.

See, "Hacker’s Extradition to U.S. More Likely," New York Times, July 31, 2009, at http://www.nytimes.com/2009/08/01/world/europe/01britain.html?ref=todayspaper; "Autistic Genius Hacked Military Computers in Search of Alien Eco Tech," CBS News, July 31, 2009, at http://www.cbsnews.com/blogs/2009/07/31/crimesider/entry5202308.shtml; "New legal blow for hacker fighting extradition to US," Independent, August 1, 2009, at http://www.independent.co.uk/news/uk/crime/new-legal-blow-for-hacker-fighting-extradition-to-us-1765884.html ;http://freegary.org.uk/.

Friday, July 17, 2009

Stolen Goldman Sachs code could be used to manipulate markets unfairly

A former Goldman Sachs computer programmer, Sergey Aleynikov, was arrested and charged with stealing computer code related to the firm's high-speed stock and commodities trading platform. Federal prosecutors allege Aleynikov downloaded the code and then uploaded it to a computer server in Germany. Aleynikov claims he "only intended to collect 'open source' files on which he had worked, but later realized that he had obtained more files than he intended."

Aleynikov was part of a team responsible for developing and improving Goldman Sachs's trading platform. He was required to sign a confidentiality agreement when first employed there. He resigned from the firm to work for a new company that also planned to engage in high-volume automated trading.

Assistant U.S. Attorney Joseph Facciponti told a federal magistrate judge at a bail hearing that, Goldman Sachs "has raised the possibility that there is a danger that somebody who knew how to use this program could use it to manipulate markets in unfair ways.”

See, "Ex-Goldman Employee Charged With Code Theft ," Wall St. Journal, July 6, 2009, at http://online.wsj.com/article/BT-CO-20090706-713684.html; "Goldman Sachs Loses Grip on Its Doomsday Machine," Bloomberg, July 9, 2009, at http://www.bloomberg.com/apps/news?pid=20601039&sid=aFeyqdzYcizc; "Steal this code," New York Times, July 16, 2009, at http://www.nytimes.com/2009/07/17/opinion/17osinski.html?em.

Quadrillion dollar glitches hit Visa debit card users

A New Hampshire man using his Visa debit card at a gas station to buy a pack of cigarettes found that his account was charged $23,148,855,308,184,500 for the transaction. Bank of America also added a $15 overdraft charge.

A North Texas man was charged the same when he charged a slice of pizza and a Coke to his Visa card.

Visa Debit Processing Services acknowledged that a programming error impacted about 13,000 transactions.

See, "US shopper charged $23 quadrillion for cigarettes," Guardian, July 16, 2009, at http://www.guardian.co.uk/world/2009/jul/16/man-buys-cigarettes-23-quadrillion; "The $23 Quadrillion Pack Of Cigarettes," DigitalTrends, July 16, 2009, at http://news.digitaltrends.com/news-article/20426/the-23-quadrillion-pack-of-cigarettes; "Pizza And Soda? That'll Be $23 Quadrillion, Please," NPR, July 15, 2009, http://www.npr.org/templates/story/story.php?storyId=106658657.


Thursday, July 16, 2009

Hacker rips through Twitter and its business plans

A hacker broke into the email account of a Twitter administrative employee and gained access to the employee’s Google Apps account, where the company shares spreadsheets and documents. The hacker then sent documents about company plans and finances, confidential contracts, and job applicants to two tech news blogs. The disclosed information included personal information about Twitter employees, including credit card numbers. The hacker also broke into the e-mail account of the wife of Twitter’s chief executive and from then accessed several of his personal Internet accounts, including those at Amazon and PayPal.

One of the blogs disclosed that the documents show that Twitter projects that it will reach a billion users and $1.54 billion in revenue by 2013. The documents also show information about potential business models, the competitive threat from Facebook, and when the company might be acquired.

The hacker managed to launch the attacks by correctly answering personal questions that Gmail asks users in order to reset their password. The hacker claims to want to teach people to be more careful.

While Twitter users were not affected, some became victims of a separate attack to have them pay $49.95 for a fake anti-virus software.

See, "Twitter Hack Raises Flags on Security," New York Times, July 15, 2009, at http://www.nytimes.com/2009/07/16/technology/internet/16twitter.html; "Twitter hacked; confidential documents stolen," San Jose Mercury News, July 15, 2009, at http://www.mercurynews.com/topstories/ci_12844562.