The Reg Security: INSIDE GCHQ: Welcome to Cheltenham's cottage industry [ Mon May 27 2013]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 27th May 2013


*** Security News ***

Iran fingered for attacks on US power firms
This one's for Stuxnet, you accursed imperialists!
http://www.theregister.co.uk/2013/05/27/iran_payback_stuxnet_ics_attacks/

Clearwire to pull Huawei from network
Chinese vendor caught in takeover crossfire
http://www.theregister.co.uk/2013/05/27/clearwire_to_pull_huawei_from_network/

Forget the word "cyberwar" says Marcus Ranum
If nobody can win, it's not a war
http://www.theregister.co.uk/2013/05/27/marcus_ranum_at_auscert/

Sky News Google Play page defaced
Security? They've heard of it
http://www.theregister.co.uk/2013/05/26/sky_news_google_play_hack/

Experts: Network security deteriorating, privacy a lost cause
One suggestion: 'Don't armor the sheep, hunt the wolves'
http://www.theregister.co.uk/2013/05/24/network_security_is_bad_and_its_going_to_get_worse/

Wikileaks leaks documentary script about Wikileaks
Simply no teddies left in this pram
http://www.theregister.co.uk/2013/05/24/wikileaks_leaks_documentary_transcript/

Security Twitteratti: Twitter's 2FA does sweet FA for biz
Shared accounts? #FacebookIsBetter
http://www.theregister.co.uk/2013/05/24/twitter_2fa_analysis/

Feds slam hacker-friendly backdoors in jalopy, grub factories
Kit easily violated by miscreants with 'minimal skill'
http://www.theregister.co.uk/2013/05/24/turck_industrial_control_backdoor/

Microsoft exposes green users' privates in web quiz snafu
Web design 101 guys, this is basic stuff
http://www.theregister.co.uk/2013/05/24/ms_greener_it_test_spam_snafu/

Did Kim Dotcom invent 2-factor authentication? Er, not exactly...
Pull out your pagers and your Hammer pants, we're going back to the
'90s
http://www.theregister.co.uk/2013/05/24/kim_dotcom_2fa_no/

INSIDE GCHQ: Welcome to Cheltenham's cottage industry
'If this nerve centre didn't exist, neither would I' says Reg man
http://www.theregister.co.uk/2013/05/24/geeks_guide_gchq/

Google to double encryption key lengths for SSL certs by year's end
2048-bit keys will be the norm
http://www.theregister.co.uk/2013/05/23/google_upgrade_ssl_certificates_schedule/

Tipsters exposed after South Africa's national police force hacked
Whistleblowers, crime victims laid bare by 'Anon splinter group'
http://www.theregister.co.uk/2013/05/23/saps_anon_hack/

New York cop in alleged love-polyhedron email hack spree
Veteran plod 'blew $4k on romanta-rival logins'
http://www.theregister.co.uk/2013/05/23/nypd_black_hat/

Brit spooks bugged Edward VIII's phones, records reveal
Plus Churchill and Stalin had a massive drinkathon in Moscow
http://www.theregister.co.uk/2013/05/23/british_government_spied_on_own_king_cabinet_office_papers/

China's exposed crack cyberspy crew dumps 'most' of its kit
APT1 team 'retooling' as they lick their wounds - report
http://www.theregister.co.uk/2013/05/23/mandiant_apt1_update/

Aha, I see you switched on your mobile Wi-Fi. YOU FOOL!
PNL bug still leaving door open to hackers - security bod
http://www.theregister.co.uk/2013/05/23/wifi_pnl_bug_unpatched/

Spam and the Byzantine Empire: How Bitcoin tech REALLY works
Everything you wanted to know but were afraid to ask
http://www.theregister.co.uk/2013/05/23/bitcoin_spam_byzantine_generals/

Footy lovers hit in Wembley playoff card snatch scam
Man on - in the middle, claims club
http://www.theregister.co.uk/2013/05/23/play_off_final_credit_card_fraud_probe/

SCADA security is better and worse than we think
'Kill chains' are long and attack-stopping weak links are many
http://www.theregister.co.uk/2013/05/23/scada_security/

Report: China IP theft now equal in value to US exports to Asia
Stricter security testing, sanctions and legal counterhacking needed
http://www.theregister.co.uk/2013/05/23/us_government_report_chinese_ip_theft/

US power grid the target of 'numerous and daily' cyber-attacks
Report finds utilities vulnerable, threatened
http://www.theregister.co.uk/2013/05/23/us_power_grid_cyber_attack_report/

Twitter locks down logins by adding two-factor authentication
Now please lock out the Syrians!
http://www.theregister.co.uk/2013/05/22/twitter_adds_two_factor_authentication/

Press exposure of Federal data security hole leads to legal threats
Hacks accused of hacking, are researchers next?
http://www.theregister.co.uk/2013/05/22/lifeline_hole_terracom_hacking_threats_scripps/

Big Brother security tech gets $20m
Skyhigh Networks takes VC cash to patrol corporate networks
http://www.theregister.co.uk/2013/05/22/skyhigh_networks_funding/

Blue Coat gobbles CCTV-for-network-traffic maker Solera
Packet inspector to aisle two, please
http://www.theregister.co.uk/2013/05/22/blue_coat_buys_solera/

Camby cash crypto-coders Cronto chomped on pronto by Vasco
Anti-banking-malware Brit biz gobbled in £15m deal
http://www.theregister.co.uk/2013/05/22/vasco_crontosign_buy/

Facebook teens' kimonos - basically never closed
Adolescents overshare, astonishing survey finds
http://www.theregister.co.uk/2013/05/22/facebook_privacy_pew_foundation/

Aurora attack tried to pinch secret list of Chinese spies
Oops...looks like another US intelligence FAIL
http://www.theregister.co.uk/2013/05/22/google_aurora_hack_spy_data_nabbed/

Embedded systems vendors careless says Metasploit author
'Own five percent of the Internet without even blinking'
http://www.theregister.co.uk/2013/05/22/unpatched_embedded_system_threats/

Anonymous threat shutters Gitmo WiFi
Legal black hole becomes internet black hole
http://www.theregister.co.uk/2013/05/22/gitmo_wifi_shutdown/

Syrian hacktivists hijack Telegraph's Facebook, Twitter accounts
Why social media needs 2-factor authentication... part VIII
http://www.theregister.co.uk/2013/05/21/sea_hijacks_telegraph_twitter_feeds/

A backdoor into Skype for the Feds? You're joking...
Gov-enhanced hacking capability is bad, says PGP dude
http://www.theregister.co.uk/2013/05/21/crypto_boffins_oppose_fed_backdoors/

'Lab-smashing' Stuxnet HELPED Iran's nuke effort, says brainiac
'No, it didn't' says former Foreign Secretary
http://www.theregister.co.uk/2013/05/21/stuxnet_helped_iran_says_boffin/

Indian 'attacks' Norwegian telco to get at Pakistan, China
A tale of twisted IP tracks
http://www.theregister.co.uk/2013/05/21/hangover_india_apt_discovered/

Securo-boffins uncover new GLOBAL cyber-espionage operation
Two-pronged attack hits victims in 100 countries
http://www.theregister.co.uk/2013/05/20/safe_cyber_espionage/

Marks & Sparks accused of silently bonking punters over the tills
Bank cards bought stuff ALL BY THEMSELVES, say shoppers
http://www.theregister.co.uk/2013/05/20/marks_and_spencer_nfc/



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2013 Situation Publishing.
All rights reserved.