Stolen RAF files are blackmailer’s dream

It turns out that the UK government is absolutely fantastic at keeping your data secure! Not only were the 2 harddrives that went missing last year September with all the RAF’s personell information on it unencrypted; it turns out they contained details of extramarital affairs, drug problems, financial problems all with names and details. The records were used to track personell with potential problems in gaining security clearances!

Sniffing keyboard keystrokes

The Ecole Polytechnique team did its work over the air. Using an oscilloscope and an inexpensive wireless antenna, the team was able to pick up keystrokes from virtually any keyboard, including laptops. “We discovered four different ways to recover the keystroke of a keyboard,” said Matin Vuagnoux, a Ph.D. student at the university. With the keyboard’s cabling and nearby power wires acting as antennas for these electromagnetic signals, the researchers were able to read keystrokes with 95 percent accuracy over a distance of up to 20 meters (22 yards), in ideal conditions.

If pulling keystrokes out of thin air isn’t bad enough, another team has found a way to get the same kind of information out of a power socket. Using similar techniques, Inverse Path researchers Andrea Barisani and Daniele Bianco say they get accurate results, picking out keyboard signals from keyboard ground cables.

Chinese hackers crack iTunes Store gift codes, sell certificates | iLounge News

A group of Chinese hackers has succeeded in cracking Apple%u2019s algorithm for encoding iTunes Store Gift Certificates92, and are creating discounted certificates using a key generator. Outdustry reports that a number of the codes are available on the site Taobao, with $200 cards selling for as little as $2.60. The owner of the Taobao shop offering the cards admitted that the codes are created using key generators, and that he paid to use the hackers%u2019 service. He also said that while the price of the codes has dropped steadily, store owners make more money as the number of customers grows.

Chinese hackers crack iTunes Store gift codes, sell certificates | iLounge News

Get your car to agree to the EULA

This is so simple, it’s absolutely brilliant! If you don’t want to agree with something you’re not going to read, you can use the fravia method to hack the software to switch the buttons, so you press the ‘disagree’ button. But this takes time and effort.
Alternatively, you could use a bit of cardboard and get your pet to agree of it’s own free will 🙂

The Agreeable Cat by Anne Loucks

SSL totally in the shit!

Not only have they found a way to hack certain keys, and found a way to forge certificates, they’ve now found a way to use the registration process of one of the CA’s to issue a certificate for any site you like.
Researchers (whoever /they/ are) are now estimating around 14% of all certificates to be false.
Considering the emphasis on SSL as being secure, this is somewhat of a crisis of confidence in internet security.