The article is rather sparse on details, but what interests me is that Ardolf didn't succeed in his "this'll get the dude in trouble" plan; what led the police to believe that the access point had been 'hacked'? What security was used, for that matter? Were there logs?
Chances are it was wide open, no security. The guy does not sound bright enough to have even hacked WEP, let alone anything stronger.
With that fact in hand, and finding no evidence that the neighbor had any knowledge or ill intent, your circle of suspects is limited to what you can measure with a standard hard ware store carpenters tape measure.
Except that the pictures do not show any connection at all.
The meter readings are the in Mega-ohms, and he is measuring his own body. That is a typical reading on the 200Meg setting on any multimeter, measuring from one hand thru the body to the other hand.
Resistance that high still represents an OPEN circuit (not a short) as seen from the kindle's 3+ volt battery.
The guy proved nothing more than his incompetence with a basic meter.
Nope. Doesn't say a thing about working when the phone is off.
Furthermore, back in 2003, (the date this Ardito bugging went down) we would be talking about a Razr most likely. When Razrs (like all phones) are off they have no radio's running. (That's the law).
So Ardito never turned his phone off. Its a lot easier when the subject of surveillance dutifully charges your bug's battery every night.
The key bits is this (should have been in the summary):
Under construction since 2004, IceCube encloses a cubic kilometer of clear ice, beginning one and a half kilometers beneath the surface and extending downward another kilometer. The telescope has to be this big because neutrino collisions with matter are exceedingly rare: out of uncounted trillions of neutrinos constantly passing through the ice, IceCube will observe just a few hundred a day.
Seeing them at all is only possible because when neutrinos collide with the nuclei of oxygen atoms in the ice, they turn into energetic charged particles called muons, moving in the same direction. Because these muons (and other debris from the collision) are moving faster than light can travel through ice, they radiate a shock wave of blue Cherenkov radiation visible to IceCube’s photodetectors.
Your definition of deployment is not the one presumed here.
It doesn't mean when on a combat mission in a war zone.
It merely means when stationed somewhere other than the US where your phone is running on networks not owned/controlled by friendly companies, and where there are elements in the general population what would love to put a bullet in your ear.
Even wandering around in supposedly friendly countries (with a certain level of enemy sympathizers) with your phone reporting your position to facebook or some of the "check-in" applications that desperate young people tend to use puts you at risk.
If all an attacker has to do is buy a phone and join some social meat-up (spelling intentional) site, it becomes fairly easy to find a target.
GPS is not that much of a battery drain. Its a very low power receiver. It only is switched on when something asks for your location.
Turning GPS off often drops the phone into a mode where it has to fire up radios (hint: very high battery drain) to find where you are by triangulation with the towers. Usually this is when you are using the radio anyway, but it lengthens the transmissions with additional traffic.
If the APP says it uses your location, and you install it anyway, you pay the price.
So you are being pound foolish and penny wise by powering down the LEAST battery drain receiver only to force the use of the worst battery drain transceivers.
Install programs that don't ask for that, and you won't be tracked? Seems simple enough for me.
Exactly.
If deployed to an overseas location, simply remove any such tracking apps from your phone.
The military could force app developers to reveal any data collected and shared, and those apps have to be removed before deployment, or have controls that turn it off.
Of course it would make more sense if Google/Apple started controlling the markets a little tighter and make app developers justify collecting and revealing location data.
Currently it just indicates it can access the data, not what it does with that data.
Building a digital world to replicate a flawed physical world was the first mistake.
Had DARPA envisioned the basic protocol to be running in anything other than a cooperative environment i image much would have been different.
Neither of your examples of analogous systems is convincing. The inability to visualize beyond your physical world is the first indication you are probably not the best person for the task at hand.
Destroying evidence while being investigated by the FCC/FTC is usually frowned upon.
It wasn't evidence till they admitted having it and everybody started demanding it. The GP was right, they should have destroyed it first, then fessed up that they had un-permitted data (which still has not been proven in a court of law) and that they did the right thing by destroying it.
Well, like any other DDOS, you are screwed. Your ISP won't even help you if you are just a small fry, figuring anything you did to piss that many people off is your own damn fault.
If you are a big customer, and the traffic generated by the DDOS is easily distinguishable from normal traffic (does not look like legitimate web hits) they might help.
It really is amazing that after all these years, there is no DDOS defense.
I think OpenDNS allows you to do this if you don't run your own DNS system. If you do run your own DNS system, you would handle this in house redirecting the host to 127.0.0.1 or something.
Simply block doz.me (or all of.me if you wish). If your users can't get there, they can't get the iframe back.
Just what has Microsoft released over the years to win your loyal defense, other than the most security impaired OS ever invented by human kind?
Seriously, I have a hard time even contemplating removal of my existing anti virus choices in favor of anything released by Microsoft.
I'd like to test it, but its sort of like testing a parachute made by the a cheese-cloth manufacturer. It requires a leap of faith that the company simply hasn't earned yet.
Slashdot Mirror
Oh, come on. The fool sent threats via email.
Monitoring?
Next you are going to blame google for turning him in.
The article is rather sparse on details, but what interests me is that Ardolf didn't succeed in his "this'll get the dude in trouble" plan; what led the police to believe that the access point had been 'hacked'? What security was used, for that matter? Were there logs?
Chances are it was wide open, no security. The guy does not sound bright enough to have even hacked WEP, let alone anything stronger.
With that fact in hand, and finding no evidence that the neighbor had any knowledge or ill intent, your circle of suspects is limited to what you can measure with a standard hard ware store carpenters tape measure.
Certainly nothing more than you need to book a flight which does not include any financial data.
You are making this up. What was stolen was simply credit card numbers.
If what you say is true, those phones would never be allowed on airplanes.
So again I ask for a citation. Please be specific as to brand and model.
Ok, So that was the Attorney General of Visa that the story mentions?
Why should a sightseeing company have anything more than a credit card on file?
Except that the pictures do not show any connection at all.
The meter readings are the in Mega-ohms, and he is measuring his own body. That is a typical reading on the 200Meg setting on any multimeter, measuring from one hand thru the body to the other hand.
Resistance that high still represents an OPEN circuit (not a short) as seen from the kindle's 3+ volt battery.
The guy proved nothing more than his incompetence with a basic meter.
Yup. Measuring himself. Lol
How to make a fool of yourself on the internet and post photos of the process.
Two meg-ohms wouldn't constitute either a short or a battery drain to the kindle's whimpy 3.something volt battery.
They linked to a page which had a link to the actual story.
How many levels of indirection are you prepared to accept?
And Chevy used to.
Nope. Doesn't say a thing about working when the phone is off.
Furthermore, back in 2003, (the date this Ardito bugging went down) we would be talking about a Razr most likely. When Razrs (like all phones) are off they have no radio's running.
(That's the law).
So Ardito never turned his phone off. Its a lot easier when the subject of surveillance dutifully charges your bug's battery every night.
http://www.nysun.com/new-york/buster-ardito-hunts-for-bugs/34885/
The actual story is here
http://www.physorg.com/news/2010-12-icecube-world-largest-neutrino-observatory.html
The key bits is this (should have been in the summary):
Under construction since 2004, IceCube encloses a cubic kilometer of clear ice, beginning one and a half kilometers beneath the surface and extending downward another kilometer. The telescope has to be this big because neutrino collisions with matter are exceedingly rare: out of uncounted trillions of neutrinos constantly passing through the ice, IceCube will observe just a few hundred a day.
Seeing them at all is only possible because when neutrinos collide with the nuclei of oxygen atoms in the ice, they turn into energetic charged particles called muons, moving in the same direction. Because these muons (and other debris from the collision) are moving faster than light can travel through ice, they radiate a shock wave of blue Cherenkov radiation visible to IceCube’s photodetectors.
I think I'll wait intil it's less buggy. This one has 1415 bug fixes, how many more bugs are there?
There are 1415 less than there are in the version you are running.
Several stories do not a citation make.
Your definition of deployment is not the one presumed here.
It doesn't mean when on a combat mission in a war zone.
It merely means when stationed somewhere other than the US where your phone is running on networks not owned/controlled by friendly companies, and where there are elements in the general population what would love to put a bullet in your ear.
Even wandering around in supposedly friendly countries (with a certain level of enemy sympathizers) with your phone reporting your position to facebook or some of the "check-in" applications that desperate young people tend to use puts you at risk.
If all an attacker has to do is buy a phone and join some social meat-up (spelling intentional) site, it becomes fairly easy to find a target.
GPS is not that much of a battery drain. Its a very low power receiver. It only is switched on when something asks for your location.
Turning GPS off often drops the phone into a mode where it has to fire up radios (hint: very high battery drain) to find where you are by triangulation with the towers. Usually this is when you are using the radio anyway, but it lengthens the transmissions with additional traffic.
If the APP says it uses your location, and you install it anyway, you pay the price.
So you are being pound foolish and penny wise by powering down the LEAST battery drain receiver only to force the use of the worst battery drain transceivers.
Install programs that don't ask for that, and you won't be tracked? Seems simple enough for me.
Exactly.
If deployed to an overseas location, simply remove any such tracking apps from your phone.
The military could force app developers to reveal any data collected and shared, and those apps have to be removed before deployment, or have controls that turn it off.
Of course it would make more sense if Google/Apple started controlling the markets a little tighter and make app developers justify collecting and revealing location data.
Currently it just indicates it can access the data, not what it does with that data.
Nonsense.
Name one such phone. [gauntlet]
Even if the mic were active, with no radios running there would be no risk of your position being revealed or your conversation being over heard.
Building a digital world to replicate a flawed physical world was the first mistake.
Had DARPA envisioned the basic protocol to be running in anything other than a cooperative environment i image much would have been different.
Neither of your examples of analogous systems is convincing. The inability to visualize beyond your physical world is the first indication you are probably not the best person for the task at hand.
Destroying evidence while being investigated by the FCC/FTC is usually frowned upon.
It wasn't evidence till they admitted having it and everybody started demanding it. The GP was right, they should have destroyed it first, then fessed up that they had un-permitted data (which still has not been proven in a court of law) and that they did the right thing by destroying it.
It'll probably end up on wikileaks once a government body gets it's paws on it; safer to chuck those discs in the microwave.
Exactly.
I'm rooting for Google to stand fast. What possible use would the government have for these account names and passwords.
When the government can prove that they can hold onto their own secret data then maybe they can be entrusted with this. (NAH, what was I thinking!?)
If it is released to the government, (AND Government) it will be leaked.
Well, like any other DDOS, you are screwed. Your ISP won't even help you if you are just a small fry, figuring anything you did to piss that many people off is your own damn fault.
If you are a big customer, and the traffic generated by the DDOS is easily distinguishable from normal traffic (does not look like legitimate web hits) they might help.
It really is amazing that after all these years, there is no DDOS defense.
You could easily block this at the DNS level.
I think OpenDNS allows you to do this if you don't run your own DNS system. If you do run your own DNS system, you would handle this in house redirecting the host to 127.0.0.1 or something.
Simply block doz.me (or all of .me if you wish).
If your users can't get there, they can't get the iframe back.
For Linux developers x86 is Linux and nothing else.
I'm sure you had a point in mind when you wrote your post, but you somehow failed to get it across.
That is a totally unfair assessment.
Just what has Microsoft released over the years to win your loyal defense, other than the most security impaired OS ever invented by human kind?
Seriously, I have a hard time even contemplating removal of my existing anti virus choices in favor of anything released by Microsoft.
I'd like to test it, but its sort of like testing a parachute made by the a cheese-cloth manufacturer. It requires a leap of faith that the company simply hasn't earned yet.