Non muoverti e il malware per Android non farà danni

Due app, (ora non più) presenti nel Google Play Store, che dovrebbero essere di pubblica utilità, più precisamente una per convertire valuta (Currency Converter) e l’altra per prolungare la durata della batteria dello smartphone (BatterySaverMobi); in realtà integrano un malware attivato dal movimento: se i sensori presenti sui dispositivi delle vittime rilevano movimento, non sono… Read more »

Quiz ruba-dati infettano gli utenti Facebook

Dopo lo scandalo di Cambridge Analytica altri quiz sono accusati di aver rubato dati agli utenti Facebook. Qualcosa, però, è cambiato stavolta: Facebook accusa gli utenti di aver installato alcuni plugin (che infettavano gli utenti mascherandosi da quiz) e, di conseguenza, aver compromesso la propria sicurezza volontariamente. Gleb Sluchevsky e Andrey Gorbachov, accusati di aver… Read more »

(Italiano) Il malware Digmine estrae crittovaluta via Facebook

Sorry, this entry is only available in Italian.

Tracking People Without GPS

Interesting research: The trick in accurately tracking a person with this method is finding out what kind of activity they’re performing. Whether they’re walking, driving a car, or riding in a train or airplane, it’s pretty easy to figure out when you know what you’re looking for. The sensors can determine how fast a person… Read more »

(Italiano) Loapi: il trojan che brucia la batteria dello smartphone

Sorry, this entry is only available in Italian.

On Deniability and Duress

Imagine you’re at a border crossing, and the guard asks you to hand over all of your electronics for screening. The guard then asks that you unlock your device, provide passwords and decryption keys. Right now, he’s asking nicely, but he happens to be carrying an unpleasant-looking rubber hose, (Yes, cryptographers actually do call this… Read more »

  • Bruce Schneier, English-Italian Translations

    How Not to Carry Around Secret Documents

    Posted on by

    Here’s a tip: when walking around in public with secret government documents, put them in an envelope. A huge MI5 and police counterterrorist operation against al-Qaeda suspects had to be brought forward at short notice last night after Scotland Yard’s counter-terrorism chief accidentally revealed a briefing document. […] The operation was nearly blown when Assistant… Read more »

  • Bruce Schneier, English-Italian Translations

    The Techniques for Distributing Child Porn

    Posted on by

    Fascinating history of an illegal industry: Today’s schemes are technologically very demanding and extremely complex. It starts with the renting of computer servers in several countries. First the Carders are active to obtain the credit cards and client identities wrongfully. These data are then passed to the falsifiers who manufacture wonderful official documents so that… Read more »

  • Bruce Schneier, English-Italian Translations

    New eBay Fraud

    Posted on by

    Here’s a clever attack, exploiting relative delays in eBay, PayPal, and UPS shipping: The buyer reported the item as “destroyed” and demanded and got a refund from Paypal. When the buyer shipped it back to Chad and he opened it, he found there was nothing wrong with it — except that the scammer had removed… Read more »

  • English-Italian Translations

    Gmail users hit viddyho phishing chat attack

    Posted on by

    Here follows the source text of another translation from Graham Cluley’s blog : It’s not been a good 24 hours for Gmail users. Having survived a blackout yesterday morning, fans of Google’s email system have been the target of phishing campaign spreading via the Google Talk chat system. The unsolicited instant messages urge Gmail users… Read more »

  • English-Italian Translations

    A sting in the tail of the “Error Check System” Facebook scare

    Posted on by

    Here follows the source text of another translation from Graham Cluley’s blog : Earlier today I warned you about a third-party Facebook application called “Error Check System” that has been moving in mysterious ways on the social network. Naturally, a lot of people will have been searching for information about “Error Check System” and if… Read more »

  • English-Italian Translations

    Beware “Error Check System” Facebook application

    Posted on by

    Here follows my first translation of Graham Cluley’s blog. Graham Cluley is a british programmer and ‘Senior Technology Consultant’ at Sophos, a world known developer and vendor of security software and hardware, including anti-virus, anti-spyware, anti-spam and Network Access Control for desktops, servers, email systems and other network gateways. Many thanks to Graham for his… Read more »

  • Bruce Schneier, English-Italian Translations

    Another Password Analysis

    Posted on by

    Here is the original post by Bruce Schneier (the source text of my translation): Here’s an analysis of 30,000 passwords from phpbb.com, similar to my analysis of 34,000 MySpace passwords: The striking different between the two incidents is that the phpbb passwords are simpler. MySpace requires that passwords “must be between 6 and 10 characters,… Read more »

  • Bruce Schneier, English-Italian Translations

    Giving Out Replacement Hotel Keys

    Posted on by

    Here is the original post by Bruce Schneier (the source text of my translation): It’s a tough security trade-off. Guests lose their hotel room keys, and the hotel staff needs to be accommodating. But at the same time, they can’t be giving out hotel room keys to anyone claiming to have lost one. Generally, hotels… Read more »

  • Bruce Schneier, English-Italian Translations

    Clickjacking

    Posted on by

    Here is the original post (the source text of my translation): Good Q&A on clickjacking: In plain English, clickjacking lets hackers and scammers hide malicious stuff under the cover of the content on a legitimate site. You know what happens when a carjacker takes a car? Well, clickjacking is like that, except that the click… Read more »

  • Bruce Schneier, English-Italian Translations

    News from the Rock Phish Gang

    Posted on by

    Here is the original post (the source text of my translation): Definitely interesting: Based in Europe, the Rock Phish group is a criminal collective that has been targeting banks and other financial institutions since 2004. According to RSA, they are responsible for half of the worldwide phishing attacks and have siphoned tens of millions of… Read more »