Twitter Updates for 2010-03-26
- the free @digg app is here for iphone! to celebrate they're giving out a custom colorware ipad each day for 2 weeks! http://bit.ly/diggapp #
Powered by Twitter Tools
Powered by Twitter Tools
Powered by Twitter Tools
Posted on Dec 29, 2009 9:11 pm by Robert McMillan, IDG News Service
Computer security researchers say that the GSM phones used by the majority of the world’s mobile-phone users can be listened in on with just a few thousand dollars worth of hardware and some free open-source tools.
In a presentation given Sunday at the Chaos Communication Conference in Berlin, researcher Karsten Nohl said that he had compiled 2 terabytes worth of data—cracking tables that can be used as a kind of reverse phone-book to determine the encryption key used to secure a GSM (Global System for Mobile communications) telephone conversation or text message.
While Nohl stopped short of releasing a GSM-cracking device—that would be illegal in many countries, including the U.S.—he said he divulged information that has been common knowledge in academic circles and made it “practically useable.”
Intercepting mobile phone calls is illegal in many countries, including the U.S., but GSM-cracking tools are alreadyavailable to law enforcement. Knoll believes that criminals are probably using them too. “We have just basically copied what you can already buy in a commercial product,” he said.
The flaw lies in the 20-year-old encryption algorithm used by most carriers. It’s a 64-bit cipher called A5/1 and it is simply too weak, according to Nohl. Using his tables, antennas, specialized software, and $30,000 worth of computing hardware to break the cipher, someone can crack the GSM encryption in real time and listen in on calls, he said. If the attacker was willing to wait a few minutes to record and crack the call, the total cost would be just a few thousand dollars, he said.
There are about 3.5 billion GSM phones worldwide, making up about 80 percent of the mobile market, according to data from the GSM Alliance, a communications industry association representing operators and phone-makers.
Because even discussing wiretapping tools can be illegal in the U.S., researchers have steered clear of this type of work. But after consulting lawyers with the Electronic Frontier Foundation, Nohl and his collaborators set upon a way of conclusively disclosing the flaws in the GSM system without —they believe — breaking the law.
Get Satisfaction, a third-party customer service app/community, allows customers to offer feedback, make suggestions, get their questions answered, and generally get help with a product or service.
Building support/community infrastructure is a pain point for a lot of companies. The help section, forums, FAQs, and whatever else you have to build to offer comprehensive customer support is a big undertaking. It’s often the last thing you want to do after you’ve just worked for months on a product or service.
So for those companies that would prefer to outsource this infrastructure to a third party, or use an alternative sanctioned support outlet in addition to their own, Get Satisfaction is a handy service.
But if you prefer to provide great support on your own site with your own forums and your own help section and your own feedback mechanisms and your own FAQs, well, Get Satisfaction doesn’t play fair.
If you fail to subscribe to Get Satisfaction’s way of doing things, Get Satisfaction suggests to your customers that you’re “not yet committed to an open conversation.” That’s unfair and unreasonable. Just because we don’t team up with Get Satisfaction it doesn’t mean we’re not committed to an open conversation.
Continue with the article from 37Signals.
Great read as I was thinking of using them ourselves.
Original article at techcrunch.com
Hi Tim
Thanks a lot ,I have tried it and it works fine.
I can let small business phone any cell and now international for as low as 65c /min.If you know anyone who wants to phone so cheap let them drop me a mail!
I am spreading the word about you service. Let me know if you have any other services.
Greetings
Alex
A network of Russian malware writers and spammers paid hackers 43 cents for each Mac machine they infected with bogus video software, a sign that Macs have become attack targets, a security researcher said yesterday.
In a presentation Thursday at the Virus Bulletin 2009 security conference in Geneva, Switzerland, Sophos researcher Dmitry Samosseiko discussed his investigation of the Russian “Partnerka,” a tangled collection of Web affiliates who rake in hundreds of thousands of dollars from spam and malware, most of the former related to phony drug sites, and much of the latter targeting Windows users with fake security software, or “scareware.”
But Samosseiko also said he had uncovered affiliates, which he dubbed “codec-partnerka,” that aim for Macs. “Mac users are not immune to the scareware threat,” said Samosseiko in the research paper he released at the conference to accompany his presentation. “In fact, there are ‘codec-partnerka’ dedicated to the sale and promotion of fake Mac software.”
One example, which has since gone offline, was Mac-codec.com, said Samosseiko. “Just a few months ago it was offering [43 cents] for each install and offered various promo materials in the form of Mac OS ‘video players,’” he said.
Another Sophos researcher argued that Samosseiko’s evidence shows Mac users, who often dismiss security as a problem only for people running Microsoft’s Windows, are increasingly at risk on the Web. Find out more…