Biggest data breach ever at Heartland Payment Systems – 100 million transactions at risk

data-loss.jpg

Although we’ve seen some whoppers in the UK, you can always count on the Yanks to do things bigger and better. One payment processing company, the brilliantly-named “Heartland Payment Systems” processes transactions for a quarter of a million businesses in the USA and has found some monitoring software on its servers, sending data to an external machine.

“We found evidence of an intrusion last week and immediately notified federal law enforcement officials as well as the card brands. We understand that this incident may be the result of a widespread global cyber fraud operation, and we are cooperating closely with the United States Secret Service and Department of Justice.” said Heartland president Robert Baldwin

In the USA, unlike the UK, companies have to disclose when data breaches occur. It’ll be interesting to see if Europe implements a similar law, but the UK government is opposed to such a move.

(via Out-Law.com)

Related posts: WPA Wi-Fi security gets cracked | Security watchdog the ICO is currently looking at 277 “data breaches” in the UK

Graphics cards are much better than CPUs at cracking Wi-Fi passwords

wireless-security-advisor.jpg

There’s a lot of software out there for cracking wireless passwords, and most of it’s legal. Why? Because it’s sold as a way for network administrators to ‘test’ their network’s security. Of course, there’s nothing to stop you ‘testing’ a network that you don’t own, in a coffee shop or airport, for example.

Most cracking programs use your PC’s CPU to do the hardcore number-crunching, but it turns out that the graphics card is actually far better at doing the kinds of calculations necessary. How good? Well, an above average quad-core CPU, the Intel Q6600 can only accomplish 1,100 passwords per second, whereas a similarly above-average ATI HD4870 graphics card can smash through 15,750 passwords per seconds.

Who woulda thunk it? Luckily, we might be seeing some of this power hit regular programs too, with Nvidia’s CUDA, ATI’s Stream, and Apple’s OpenCL frameworks. The graphics card isn’t best at every type of calculation, but if a program can intelligently route calculations to their fastest solver, then we could see blazing program speed increases in the near future.

(via HotHardware)

Related posts: Lightbulbs to replace Wi-Fi? | Another wi-fi detecting thing – this time it’s a SHOE

Introducing the virus that farts at you, fool

laptop-fart.jpg

Programming computer viruses must be a fairly mundane job at times, which is why I’m not surprised that some have decided to inject a bit of humour into their work.

According to customer calls to Panda Security, there are some new bits of infectious code becoming installed on PCs that either hurl insults — repeatedly calling the owner a fool — or else make squelching or farting noises.

One customer, who clearly has an extensive knowledge of what it sounds like when body parts are removed from foodstuffs, said that the noise was similar to “taking a foot out of jelly”…

Which? magazine's solution to data privacy – a big hammer

sledgehammer-smash.JPG

Most people, when selling on a computer second-hand, wipe the data by just deleting it. That’s not quite enough. A simple delete just removes the references to the data on the disk – rather than wiping it clean. Software available free on the net can recover it relatively easily, as long as it hasn’t been overwritten.

Which? bought eight computers on eBay and recovered 22,000 ‘deleted’ files from them in this way. Some of those files contained personal data, which could be used by identity thieves to steal your… etc etc. Yawn. You know all this.

Of course, there’s programs that’ll hard-delete data, too, but Which? prefers another solution. A big hammer. They recommend pulling it out of the PC and whacking it very very hard, until the thing’s in pieces. While I don’t doubt the effectiveness of that method, it’s a lot easier to use a program like SuperShredder to accomplish the same thing. Plus you won’t get bits of disk platter in your eye. Bonus.

Which? (via BBC)

Related posts: Which? takes on Davenport-Lyons for “excessive bullying” | Which? Computing names high street shops selling violent games to 15 year-old girls

Quick! Encrypt your hard drives now: Euro police could be hacking your PC

hacker-and-cop.jpg

It’s very easy to become alarmed by some of the scaremongering stories which appear in certain sections of the UK press when it comes to technology and privacy, but this one – if abused – could be pretty serious indeed.

According to The Times, The Home Office has developed plans to give the UK police force the power to remotely hack into the personal computer of anyone it suspects might be involved with something dodgy — you know, terrorism, paedophilia, drug trafficking, that kind of thing — without a warrant, with the additional joyous notion that police forces from across the European Union can request information on any British Citizen.

Yes, it does all sound a bit Daily Mail, but unsurprisingly it’s raised the hackles of the human rights group Liberty, which has said that it will mount a legal challenge.

VIDEO: Lock and unlock your door with a Nintendo controller

Got an Arduino, a spare CD-ROM drive and an old NES lying around? How do you feel about making yourself a nifty security system out of it?

It’s not as ridiculous as it sounds, and Instructables has the ‘how-to’ guide. You’ll also need a webcam, small speaker, and a bunch of random wiring. Soon, you’ll be foiling would-be intruders with your geek skillz.

Nintendo Keyless Entry System (via CrunchGear)

Related posts: SentrySafe USB Fire-Safe – lock up your data | reNESED: an old Nintendo NES made new (but still old)

Shock! Macs can get viruses too. Apple advises antivirus

rotten-apple.jpg

Hands up all you Mac owners who don’t run any antivirus software on your computer?

Thought so.

The message that’s been drip-fed to Mac users, and is now self-perpetuating, is that Windows PCs get viruses while Mac users don’t.

Leaving aside the self-righteousness issue, it’s fair to say that there are currently a lot less viruses for the Mac, partly because it hasn’t been such a big target (Windows variants take around 90% of the operating system market) and also because it is built on a more solid, but not invincible, framework…

Microsoft to launch free antivirus product in the middle of next year

windows-antivirus-2008.jpg

Hoorah! Another sign that Microsoft still knows what it’s doing, and ‘gets’ it, despite evidence to the contrary. Microsoft will, as of the second half of next year, stop selling its ill-fated and unpopular OneCare security software, and instead offer a completely free security suite.

The package will support XP, Vista and Windows 7, and will be ‘suited to smaller and less powerful computers’. It’s unlikely that it’ll come installed by default on computers – Microsoft has learnt that lesson – but it should prove popular with technophobes worldwide, who normally struggle with security software and lapsed subscriptions.

Your entire identity's worth just £80

identity-theft.jpg

Your name, your address, your mother’s maiden name, your passport number, the name of your first pet (“fluffles”? seriously?), your credit card numbers, your top five albums, your national insurance number. All that – what security experts call your ‘identity’ in the context of ‘identity theft’ – is worth just £80.

That’s the price that entire packages of data are going for on message boards and websites populated by fraudsters and scammers. A single piece of data can go for as little as £5. The data’s so cheap because there’s so much of it available – nearly half of all UK computer users aren’t using a firewall or security software.

All you’ve gotta do is make sure that your virus scanner stays up-to-date, and that you’ve got the security features in your operating system fully enabled and up-to-date. In fact go run Windows Update now. I’ll wait. Back? Good. Odds-are that you’re now pretty much safe.

Get Safe Online (via BBC)

Related posts: Microsoft on viruses and malware: It’s not our fault, guv. | FEATURE: Modern Day Malware & Organised Crime