Category Archive

Hackers claim to have stolen all T-Mobile US’s corporate data, customer accounts and network infrastructure. More information from the Register can be found below:

http://www.theregister.co.uk/2009/06/08/tmobile_us_loss/

The research team, which included Edith Cowan University of Australia and BT, revealed some early results yesterday in news reports by the BBC and British television affiliates.

To read more about the research go here:
http://news.bbc.co.uk/2/hi/uk_news/wales/8036324.stm
and here:
http://www.darkreading.com/security/storage/showArticle.jhtml?articleID=217400054&cid=nl_DR_DAILY_H

The video talks about a couple of people who’s lives are ruled by harrasing calls and threats. They claim that their phones are tapped with special software.

Rick Mislan talks about the software and how easy it is to be placed on mobile phones.

Software such as:

• http://www.mobile-spy.com/
• http://www.world-tracker.com/
• http://www.flexispy.com/
• http://www.e-stealth.com/
• http://www.fonefunshop.co.uk/spyphone/
• http://www.thespyphone.com/allinone.html

Link to Video on YouTube:
http://www.youtube.com/watch?v=uCyKcoDaofg

It looks and functions like a Blackberry 8830 but it sure is NOT a regular Blackberry. It is locked down by NSA. I am not really sure if it is a good idea at all. NSA is installing the SecurVoice software on it for both voice and messaging as one of the ways to secure the phone. I am sure that there is a whole infrastructure that is required to run his handset services. Even considering all that, I Still believe that a mobile-phone-carrying president opens so many doors for hackers.

Can NSA and Obama get away with using a (persumably) secure mobile phone service and handset? That is the question of the day!

Read more here:
http://blog.wired.com/gadgets/2009/04/obama-to-get-ba.html

Attached with and armband, it is a portable and multi-purpose tool:

http://www.gizmodo.com.au/2008/12/the_us_armys_secret_weapon_the_ipod_touch-2.html

Cellphone Gun:

Pen Gun:

The LayerOne 2008 talk by David Hulton titled: Intercepting Mobile Phone/GSM

Visit the GSM Hakcing WIKI at:
http://wiki.thc.org/gsm
The USRP is available at: http://www.ettus.com
Learn more about the GNU RADIO project at: http://www.gnu.org/software/gnuradio

David is the Chairman of Toorcon

An interesting news article about the work of BT (formerly British Telecom), Glamorgan University, Australia’s Edith Cowan University and Sim Lifecycle Services where researchers recovered data from handsets from mobile phone recycling companies:

Mobile phones can never be totally wiped clean of data

To get more information on the research at Edith Cowan University and its upcoming conferences please visit SECAU Security Research Centre’s website:

http://www.secau.org/

Here are some published refereed journal and conference papers to give you an idea of what to expect for the Edith Cowan University conferences in December:

- Valli, C. and A. Jones (2008). A study of 2nd Hand Blackberry for sale - World class security foiled by humans. Proceedings of the 2008 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM 2008 - The 2008 International Conference on Security & Management., Las Vegas, USA.

- Al-Zarouni, M. (2007, 3rd December, 2007). Introduction to Mobile Phone Flasher Devices and Considerations for their Use in Mobile Phone Forensics. Paper presented at the The 5th Australian Digital Forensics Conference, Edith Cowan University, Mount Lawley Campus, Western Australia.

- Yap, L. F., & Jones, A. (2007, 3rd December, 2007). Profiling Through a Digital Mobile Device. Paper presented at the The 5th Australian Digital Forensics Conference, Edith Cowan University, Mount Lawley Campus, Western Australia.

- Yap, L. F., & Jones, A. (2007). Deleted Mobile Device’s Evidence Recovery:. Paper presented at the Media and Information-War Conference 2007, Kaula Lumpur, Malaysia.

You can register to attend Edith Cowan University’s conferences here:

http://conferences.scis.ecu.edu.au/

Hope to see you there

I know that you’ll love this as a research tool. I love the visulization part and not so much the cover-flow type interface. It is still in beta, so I am expecting more GUI improvements

Get it here:
http://www.yourergo.com/

This is a stand-alone hard disk wiper! No computer needed. Wiebetech’s pocket-sized eRazer erases at a rate of 35MB/s, effectively wiping a 250GB hard drive in under two hours. The eRazer meets the DoD erasing standerds and sells in two versions one for $99 and the Pro which supports SATA and Multi-pass sells for $150… Cheap!

http://www.gizmodo.com.au

A simple idea that resulted in big fireworks! Just take the IP address information from wiki posts and cross it with DNS information from IP range owners and walla!

Still don’t know what this means? It means you can now find out if someone is editing their own wiki information (like deleting the bad stuff!… For shame!).

Good on you Virgil Griffith. I hope that you don’t edit your own wiki entry either

Here are the links:

• An MP3 interview with Virgil: http://www.abc.net.au/melbourne/stories/s2017196.htm?backyard
• http://virgil.gr/ his website
• WikiScanner http://wikiscanner.virgil.gr/

This tool answers the question: who really edits wikis? Now you know!

Here is something to get your appetite going. WIRED Magazine’s list of salacious edits:

• http://wired.reddit.com/wikidgame/

I know many people will look at this and go “We’ve seen this before… Cellular phone spying is not new” but I have to say that the technology is now more readily available than before. To understand what I am talking about, please read the following from zone labs:

• http://blog.zonelabs.com/blog/2007/04/they_can_hear_y.html
• http://blog.zonelabs.com/blog/2007/03/warning_this_ce_1.html

Also, visit this site:

• http://www.global-security-solutions.com/CellularSpyPhone.htm

Beware of cellphones left in your office, on your table at a coffee shop and in meetings. The FBI has been doing cell phone spying apparently:
http://www.youtube.com/watch?v=O61YfvPZGJs

Matt’s Blog is not frequently updated but his site crypto.com is an excelent resource for all kinds of information. Make sure you check it out.

The Toronto Star, Canada’s largest daily newspaper, reports a spy-story where high security people has been tracked and tapped by using Canadians coins, able to capture and transmit voice data. This said, what next?
Read the full article at Spies put transmitters in Canadian coins

Are LNG facilities an issue? Here in Italy I am living in an area that should host two new LNG facilities. Opponents to these projects come from different layers of the society and all group around the www.offshorenograzie.it web site. They have also set an electronic sign in the city to advertise their concern. Well, I have done some research on the topic and prepared a wide dossier mainly focusing on two aspects of the problem: effects of spill in case of accidental or man-made disaster and effects of industrial process on fishery and environments. The report were based on some of the best available scientific sources. I proposed it to different people: local newspaper, political parties, and even to free observer. Nobody seems like it, to say more: nobody wants even read it. This wonder me…. Is it a case of information warfare where all playing from the same side?

Well if you like the topic I will be happy to share some documents, but the best one you should read is ”Beliefs and Emotionality in Risk Appraisals” an article from A. Thalmann and P. Wiedemann published on Journal of Risk Research. The paper focus on effects of  hot (emotional) words in risk analysis. It is a worthy reading.

The document is available from Ingenta Connect and if you will read it I would like your comments.

The 2006 RNSA conference will be held in Canberra and will showcase research fostered by the RNSA, with a focus on current issues in Australian CIP and comparisons with overseas experiences. The conference will feature the latest science, engineering and technology (SET) and social sciences developments designed to enhance national security. There conference will also include an Industry Exhibition.  The conference is part of the 5th Homeland Security Summit & Exposition which is held between 19-21 of September 2006.Link:
http://www.secureaustralia.org/Activities/AnnualConference.php

Program:
http://www.safeguardingaustraliasummit.org.au/Program.html#rnsaprogram

If you thought that “Snakes on a Plane” was scary, then read this:

Australia’s national carrier Qantas has announced that from 2007, passengers will be able to use their mobile phones to make voice calls send text messages and even email on some of its domestic flights. Users will need to have roaming enabled though and pricing was not announced yet. The trial is expected to last for three months.

The question is, what are the security issues that are involved here.  What about safety issues, like mobile phone signal interference with flight instruments.

Link:
http://networks.silicon.com/mobile/0,39024665,39161877,00.htm

Did I read this right?

Then there’s Idokorro, which means whereabouts in Japanese. That company found itself providing software to the U.S. Air Force, the National Guard and the FBI. The software — originally developed for the BlackBerry, but also compatible with other mobile devices — allows users to access computer servers remotely.

Link:
http://www.corpwatch.org/article.php?id=14038

According to the “TalkLeft” blog, the United Kingdom is considering Racial Profiling, while the United States Moves to Psychological Profiling!  Certain races have been subjected to so called “random security searches” at airports anyway.  Everyone knows that they are not so random.  It has even been joked about on video blogs: http://www.marwan.com/2006/07/nlcac-presentation-videos.php

Risk analysis and mitigation will continue to be used in Airports throughout the world as the risks change.  Clear plastic bags and no cabin luggage is another way of mitigating the risk as the chemistry involved in the alleged UK terrorist plot is uncovered.

Read more on TalkLeft:
http://talkleft.com/new_archives/015513.html
Bruce’s Blog:
http://www.schneier.com/blog/archives/2006/08/on_the_implausi.html
http://www.schneier.com/blog/archives/2006/08/behavioral_prof.html

If you missed out on any day, here is a link to Wikipedia’s version of the day-to-day events :
http://en.wikipedia.org/wiki/Timeline_of_the_2006_Israel-Lebanon_conflict
Keep in mind that: “The neutrality of this article is disputed.” as the site clearly states!

I saw the following footage on Google Videos and it has footage from eye witnesses that report hearing repeated explosions after the first airplane hit and afterwards.  This footage was put together to prove a point: Controlled demolitions they say:
http://video.google.com/videoplay?docid=3249714675910247150

Make your own mind about it. or don’t! Here are some links as always:
http://www.freepressinternational.com/911.html (videos)
http://www.rinf.com/conspiracies/9-11.html (videos)
http://www.911truth.org/
http://en.wikipedia.org/wiki/9/11_conspiracy_theories
http://www.popularmechanics.com/science/defense/1227842.html
http://www.thenewamerican.com/artman/publish/article_1253.shtml
and finally, the 911 Commission Report:
http://www.9-11commission.gov/report/911Report.pdf

I really don’t know what to think of current world events.  It seems though that people will always look at things as a reflection of themselves.  You have the optimist, the realist and of course the over dramatic!

Here are some links:
http://www.threeworldwars.com/world-war-3/ww3.htm
http://en.wikipedia.org/wiki/World_War_III
and some videos on WWIII:
http://www.cnn.com/video/player/player.html?url=/video/moos/2006/07/21/moos.world.war.three.cnn
http://www.youtube.com/watch?v=pLKFKbQCqa8

Musudan-ri satellite imagery shows increased activity at the site.