HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert [Mon Jul 28 2014]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 28th July 2014





*** Security News ***

AusCERT chief Ingram steps down
Replacement promises better relationships, late nights sleeping at the
office
http://www.theregister.co.uk/2014/07/28/auscert_chief_ingram_steps_down/

DAYS from end of life as we know it: Boffins tell of solar storm
near-miss
'We'd still be picking up the pieces now'
http://www.theregister.co.uk/2014/07/26/two_years_ago_earth_missed_solar_doom_by_just_one_week/

How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
http://www.theregister.co.uk/2014/07/25/how_long_is_too_long_to_wait_for_a_security_update/

Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like
Yahoo!'s
http://www.theregister.co.uk/2014/07/25/you_need_a_bug_bounty_heres_how_to_do_it/

Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
http://www.theregister.co.uk/2014/07/25/four_fake_google_haxbots_hit_your_website_every_day/

Putin: Crack Tor for me and I'll make you a MILLIONAIRE
Russian Interior Ministry offers big pile o' roubles for busting
pro-privacy browser
http://www.theregister.co.uk/2014/07/25/putin_crack_tor_for_me_and_ill_make_you_a_millionaire/

Google devs: Tearing Chrome away from OpenSSL not that easy
Custom BoringSSL fork not quite a drop-in replacement yet
http://www.theregister.co.uk/2014/07/25/chrome_boringssl_switch/

Sony tries to make PlayStation Network hack row go away with $15m in
cash and games
Values customers' stolen identities at $2,500 each
http://www.theregister.co.uk/2014/07/24/sony_tries_to_settles_playstation_network_hack_for_15m_in_cash_and_games/

Who has your credit card data? 1 million HOLIDAY-MAKERS' RECORDS
exposed
Travel agent fined £150K – Sloppy coding fingered
http://www.theregister.co.uk/2014/07/24/travel_agent_data_breach/

Six charged over StubHub e-ticket heist for Elton John gigs
Compromised passwords re-used, say prosecutors
http://www.theregister.co.uk/2014/07/24/stubhub_e_ticket_heist_charges/

BMW's ConnectedDrive falls over, bosses blame upgrade snafu
Traffic flows up 20% as motorway middle lanes miraculously unclog
http://www.theregister.co.uk/2014/07/24/bmw_connected_drive/

'Unsolicited texts' outrage: Man fined £4k for DPA breach
But it WASN'T about any SMSes
http://www.theregister.co.uk/2014/07/24/man_fined_for_dpa_breach/

Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a
Javascript vuln
http://www.theregister.co.uk/2014/07/24/mozilla_patches_security_bugs_in_firefox/

Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
http://www.theregister.co.uk/2014/07/24/vupens_critical_ie_bugs_were_dropped_after_three_years/

50,000 sites backdoored through shoddy WordPress plugin
Not running WordPress? Better hope your neighbour isn't
http://www.theregister.co.uk/2014/07/24/50000_sites_backdoored_through_shoddy_wordpress_plugin/

Copyright kingpins charged for sailing pirate Android app ships
Six charged, two arrested, in wake of coordinated raids.
http://www.theregister.co.uk/2014/07/24/fbi_scuttles_three_big_android_app_pirate_ships/

iOS slurpware brouhaha: It's for diagnostics, honest, says Apple
Hidden packet sniffer claims hit Cupertino
http://www.theregister.co.uk/2014/07/24/ios_secret_slurpware_documents_added_apple_support_site/

Stop begging, startup-land, and start YELLING at Catch of the Day
Consumer trust boost from data breach laws would do more for online biz
than any subsidy or share scheme
http://www.theregister.co.uk/2014/07/23/oz_startups_want_to_get_angry_yell_at_cotd/

Tails-hacking Exodus: Here's video proof of our code-injection attack
It's not a Tor exploit, but it will hit fully patched systems with
default settings, we're told
http://www.theregister.co.uk/2014/07/23/exodus_intelligence_tails_video/

Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads
plod
http://www.theregister.co.uk/2014/07/23/plods_in_fon_faux_pas/

StubHub hit by trans-Atlantic fraudsters, says New York DA
US, Canadian and UK authorities expected to reveal details today
http://www.theregister.co.uk/2014/07/23/stubhub_ticked_off_by_fraudsters_says_new_york_da/

PayPal post-checkout cash slurp a FEATURE not a BUG
Would you like a super-sized shipping charge with that?
http://www.theregister.co.uk/2014/07/23/paypal_postcheckout_rort_a_feature_not_a_bug/

Attackers raid SWISS BANKS with DNS and malware bombs
'Retefe' trojan uses clever spin on old attacks to grant total control
of bank accounts
http://www.theregister.co.uk/2014/07/23/ruskie_vxers_change_dns_nuke_malware_in_swiss_bank_raids/

EFF looses Privacy Badger to munch cookies and scripts
Furry and furious browser-protector aims to improve online privacy
http://www.theregister.co.uk/2014/07/23/eff_privacy_badger_goes_live/

Android ransomware demands 12x more cash, targets English-speakers
FBI child-abuse warning shake-down gets more sophisticated
http://www.theregister.co.uk/2014/07/23/android_ransomware_simplocker_revamp/

Goodwill's goodwill rocked as Feds probe bank card hacking scam
We think we're safe, insists non-profit
http://www.theregister.co.uk/2014/07/22/bad_day_for_goodwill_as_feds_investigate_card_hacking_scam/

Lads from Lagos turn from 419 scams to basic malware slinging
Smooth-tongued online lovers struggle to get to grips with slimy RAT
infestations
http://www.theregister.co.uk/2014/07/22/419_evolution_rat_slingers/

STILL no move by Brit data cops over Google's 2012 privacy slurp
Even the Italian databinieri have got their boots on now, but not the
ICO
http://www.theregister.co.uk/2014/07/22/uk_watchdog_is_still_probing_googles_2012_privacy_tweak/

Hacker claims breach of Wall Street Journal and Vice websites, punts
'user data' for sale
Also supposedly hit a gadgets site called 'CNET'
http://www.theregister.co.uk/2014/07/22/wsj_vice_hack_claims_w0rm_punts_stolen_data/

Lawyer reviewing terror laws and special powers: Definition of
'terrorism' is too broad
Can sweep up hate criminals, bloggers, journos
http://www.theregister.co.uk/2014/07/22/top_lawyer_calls_for_narrowing_of_terrorism_definition_in_uk_law/

NEW, SINISTER web tracking tech fingerprints your computer by making it
draw
Have you been on YouPorn lately, perhaps? White House website?
http://www.theregister.co.uk/2014/07/22/canvas_fingerprinting_is_privacy_pirates_new_web_weapon/

Cyber scum pump ransomware at victims from spambot-stuffed websites
Command and control of mal-spam barrage done via Tor
http://www.theregister.co.uk/2014/07/22/critroni_ransomware_communicates_via_tor/

Black Hat anti-Tor talk smashed by lawyers' wrecking ball
Unmasking hidden users is too hot for Carnegie-Mellon
http://www.theregister.co.uk/2014/07/22/legal_wrecking_balls_break_budget_tor_popping_talk/

Don't look, Snowden: Security biz chases Tails with zero-day flaws
alert
Exodus vows not to sell secrets of whistleblower's favorite OS
http://www.theregister.co.uk/2014/07/21/security_researchers_chase_tails_with_zeroday_flaw_disclosure/

HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru
tells us
http://www.theregister.co.uk/2014/07/21/ios_firmware_contains_packet_sniffer_and_host_of_secret_spying_tools/

New BOMB detect-o-tech 'could give sniffer dogs competition': TRUE
But so could a magic eight-ball
http://www.theregister.co.uk/2014/07/21/new_bomb_detectotech_could_give_sniffer_dogs_competition_true/

Secondhand Point-o-Sale terminal was horrific security midden
Not so much backdoors as frontdoors, basically without doors in them
http://www.theregister.co.uk/2014/07/21/ebayed_point_of_sale_terminal_leak_peril/

Snowden wants YOU – yes, YOU – to build spy-busting tech
Says it's your civic duty to turn our KIDS into SYSADMINS
http://www.theregister.co.uk/2014/07/21/snowden_wants_you_yes_you_to_build_spybusting_tech/


*** Whitepaper ***

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
http://whitepapers.theregister.co.uk/d/d2c/9e7f3/77a/9e97f56d?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.