The Reg Security: The Pirate Bay's new censorship-dodging browser ' not secure' [Mon Aug 19 2013]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 19th August 2013


RSA Conference Europe

Over 70 information security track sessions plus debates and keynotes.
Build your knowledge and further your career.
Reg readers claim 100 Euros discount with code 56E3REGD

http://reg.cx/26Xk





*** Security News ***

Fooling the AppStore one code-chunk at a time
Jekyll on iOS suggests tests inadequate
http://www.theregister.co.uk/2013/08/19/fooling_the_appstore_one_codechunk_at_a_time/

Bug-finder chucked for posting to Zuck
Facebook vuln demoed by pic-post to Mark's account
http://www.theregister.co.uk/2013/08/18/bugfinder_chucked_for_posting_to_zuck/

Card-cloning crooks use 3D printers to make ever-better skimmers
Aussie ATMs vulnerable to precisely tailored devices, warn cops Down
Under
http://www.theregister.co.uk/2013/08/16/3d_printed_atm_skimmers/

NSA coughs to 1000s of unlawful acts of snooping on US soil since 2008
Oversight judge admits: 'I've no idea what the true figure is'
http://www.theregister.co.uk/2013/08/16/nsa_internal_audit_privacy_violations/

China mulls probe into IBM, Oracle, EMC after NSA hack claims - report
Spooks allowed in through the backdoor? Where's the rubber gloves...
http://www.theregister.co.uk/2013/08/16/ibm_emc_oracle_prism_probe/

Fiendish fake Flash plugin squirts grumble-flick ads into kiddies'
websites
Browser nasty turns entire internet into no-go zone for children, the
easily offended
http://www.theregister.co.uk/2013/08/16/fake_flash_browser_plugin_feeds_smut_ads/

Oh, those crazy Syrian hackers: Now Wash Post, CNN, Time vandalised
Gawd darn it, can't anyone secure their websites?
http://www.theregister.co.uk/2013/08/16/sea_outbrain_hack/

NORKS build TROLL ARMY to tear down S Korean surfers
No we're not too hungry to concentrate on posting propaganda...
http://www.theregister.co.uk/2013/08/16/north_korea_recruits_troll_army/

Java devs warned of pushbutton exploit for buggy Struts framework
When they said you should upgrade, they meant it
http://www.theregister.co.uk/2013/08/15/java_struts_automated_exploit_tool/

GitHub code repository rocked by 'very large DDoS' attack
Second attack this month sees hackers git GitHub
http://www.theregister.co.uk/2013/08/15/github_ddos/

Twee...THUD: Boffins build 'The Classifier' to seek out, kill millions
of Twitter fakes
Actually paid for 100k of them in spam-canner blitz
http://www.theregister.co.uk/2013/08/15/undercover_spam_scientists_build_army_of_fake_twitter_accounts/

Microsoft pulls faulty Exchange 2013 patch HOURS after release
Patch Tuesday's fudged fix: Sysadmins, quick – turn Outside In inside
out
http://www.theregister.co.uk/2013/08/15/faulty_exchange_2013_update_pulled/

Oz bank closes Bitcoin business' bank accounts
CoinJar cruelled by Commonwealth Bank
http://www.theregister.co.uk/2013/08/15/oz_bank_closes_bitcoin_business_bank_accounts/

Hackers not responsible for New York Times website wipeout
Hours-long outage attributed to internal systems fault
http://www.theregister.co.uk/2013/08/15/new_york_times_outage/

Possessed baby monitor shouts obscenities at Texas tot
'Somewhat of a blessing' the child is deaf, say parents
http://www.theregister.co.uk/2013/08/14/eurohacker_shouts_obscenities_at_texas_tot_via_hijacked_baby_monitor/

Your encrypted files are 'exponentially easier' to crack, warn MIT
boffins
Maths gurus tug rug from under modern crypto: 'You'd be surprised how
quickly it takes'
http://www.theregister.co.uk/2013/08/14/research_shakes_crypto_foundations/

UK.gov intros shiny CREST badge for cyber crime-scene cleanup squad
Been cyber-screwed? Call one of GCHQ's trusted helpers
http://www.theregister.co.uk/2013/08/14/uk_cyber_incident_response_schemes/

Breaking news, literally: Syrians joyride New York Post tweets,
Facebook
Another day, another successful phishing attack
http://www.theregister.co.uk/2013/08/14/syrian_electronic_army_new_york_post_hack/

Zombie PCs are for crimelord chumps: Fear clusters, says infosec ace
Big Data tech can be used for 'carpet bombing' the internet
http://www.theregister.co.uk/2013/08/14/big_data_hack_tool_peril/

NYT crackers get busy again, claims vendor
'APT 12' back in action
http://www.theregister.co.uk/2013/08/14/nyt_crackers_get_busy_again_claims_vendor/

Philips' smart lights left in the dark by dumb security
Send your neighbours to the dark ages with an app
http://www.theregister.co.uk/2013/08/14/switch_off_your_neighbours_lights_with_an_app/

DARPA calls Big Data boffins: Help us lock up everyone's privates
US gov reckons public datasets are threat to the State
http://www.theregister.co.uk/2013/08/13/big_data_is_a_big_threat_to_national_security/

Bacon 'n' egg on his face: Hollywood heartthrob pwned by Twitter
phishers
'I changed my password to EggsN' and now I think I'm ok,' jokes
Footloose star
http://www.theregister.co.uk/2013/08/13/kevin_bacon_twitter_hack/

Beware the ad-punting crapware-laden Firefox, warn infosec bods
Bid to win US Green Card may leave you stuck with ancient riddled
browser instead
http://www.theregister.co.uk/2013/08/13/fake_firefox_update_adware_scam/

NSA-proof email encryption? Cobblers, sniff German hackers
'Comical, shameless game' based on tech that won't stop determined
g-men
http://www.theregister.co.uk/2013/08/13/deutsche_mail_scorned_by_hackers/

REVEALED: Simple 'open sesame' to unlock your HOME by radiowave
Schoolboy security slip-ups in burglar sensors, electronic locks
discovered
http://www.theregister.co.uk/2013/08/13/wave_goodbye_to_security_with_zwave/

Violent Hamlet 'bard' by British Library Wi-Fi filters
'Conscience doth make cowards of us all'
http://www.theregister.co.uk/2013/08/13/hamlet_blocked_by_british_library_for_being_too_violent/

Android detective explains Bitcoin borkage breadcrumbs
A tale of twisted pseudo-random number generators
http://www.theregister.co.uk/2013/08/13/how_the_bitcoin_android_bug_was_tracked_down/

Google ups ante to $5,000 for Chrome browser bug bounties
Millions paid out so far – come and get it
http://www.theregister.co.uk/2013/08/12/chrome_bug_bounty_increase/

Mobe-slurping Wi-Fi SPY BINS banned from London's streets
Watchdog peers into robo-trash-cans that stalked half a MILLION City
slickers
http://www.theregister.co.uk/2013/08/12/spy_bins_scrapped_from_london_streets/

The Pirate Bay's new censorship-dodging browser 'not secure'
Iranians can now access 'ayatollahsucks.com'*. Oh S$%t, actually...
http://www.theregister.co.uk/2013/08/12/pirate_bay_releases_new_privacyminded_browser/

The secure mail dilemma: If it's useable, it's probably insecure
'The writing's on the wall' – PGP daddy's crypto firm
http://www.theregister.co.uk/2013/08/12/secure_webmail_analysis/


*** Whitepaper ***

Supercharge your infrastructure
Fusion­‐io has developed a shared storage solution that provides new performance management capabilities required to maximize flash utilization.
http://whitepapers.theregister.co.uk/d/b75/9e7f3/623/f96c6829?td=week_sec_e



RSA Conference Europe

Over 70 information security track sessions plus debates and keynotes.
Build your knowledge and further your career.

http://reg.cx/26Xk




------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2013 Situation Publishing.
All rights reserved.