Monday, May 18, 2020

What I'm Reading 5/18/2020 - The Government Appears to Crack Apple Devices at Will and Maybe Some Good News on the Coronavirus Vaccine Front

Krebs on Security - This Service Helps Malware Authors Fix Flaws in their Code -

RedBear’s service is marketed not only to malware creators, but to people who rent or buy malicious software and services from other cybercriminals. A chief selling point of this service is that, crooks being crooks, you simply can’t trust them to be completely honest.

“We can examine your (or not exactly your) PHP code for vulnerabilities and backdoors,” reads his offering on several prominent Russian cybercrime forums. “Possible options include, for example, bot admin panels, code injection panels, shell control panels, payment card sniffers, traffic direction services, exchange services, spamming software, doorway generators, and scam pages, etc.”

As proof of his service’s effectiveness, RedBear points to almost a dozen articles on Krober[.]biz which explain in intricate detail flaws found in high-profile malware tools whose authors have used his service in the past, including; the Black Energy DDoS bot administration panel; malware loading panels tied to the Smoke and Andromeda bot loaders; the RMS and Spyadmin trojans; and a popular loan scan script.

A COVID-19 vaccine candidate has shown it can prompt an immune response in the human body, and was also found to be safe and well-tolerated in a small group of patients.

Moderna, a Cambridge, Massachusetts-based company that manufactured the vaccine, announced the encouraging early results from its phase 1 clinical trial Monday morning. The drug is now being tested in larger studies.

The results of the study, which was led by the National Institutes Health, have not been peer reviewed or published in a medical journal.
Moderna, based in Cambridge, Massachusetts, is one of eight developers worldwide doing human clinical trials with a vaccine against the novel coronavirus, according to the World Health Organization. Two others, Pfizer and Inovio, are also in the United States, one is at the University of Oxford in Britain, and four are in China.   
Federal authorities said Monday that the Saudi Air Force officer who shot his fellow students at Pensacola Air Station in Florida in December was pushed by the al Qaeda terror group to carry out the attack, a discovery authorities made after examining a cellphone he tried to destroy.
The FBI was apparently able to unencrpt the shooters iPhone even after Apple refused to help. 

With Covid-19 infecting millions across the world, China is facing an unprecedented global backlash that could destabilise its reign as the world's factory of choice.
...
China's weakened global position is a "blessing in disguise" for India to attract more investment, transport minister Nitin Gadkari said in a recent interview. The northern state of Uttar Pradesh, which has a population the size of Brazil, is already forming an economic task force to attract firms keen to ditch China. 
Lawyers in an insurance dispute in Collin County District Court on Monday picked a jury to hear the case by videoconference, in what officials believe is the first virtual jury trial to be held nationally amid the COVID-19 crisis.
...
The one-day trial is a so-called summary jury trial, in which jurors hear a condensed version of a case and deliver a non-binding verdict. 
Were my security measures excessive? I knew the spy agencies of multiple governments—most notably the United States’—were eager to glean anything they could from Edward Snowden. After all, he had stolen massive amounts of classified material from NSA servers and shared it with Poitras, Greenwald, and me, and we had collectively published only a fraction of it. The U.S. government wanted Snowden extradited for prosecution. But I’m not a thief or a spy myself. I’m a journalist. Was I just being paranoid?
...

Six months earlier, in June 2013, when the Snowden story was less than two weeks old, I went on Face the Nation to talk about it. Afterward, I wiped off the television makeup, unclipped my lapel microphone, and emerged into a pleasant pre-summer Sunday outside the CBS News studio in the Georgetown neighborhood of Washington, D.C. In the back of a cab I pulled out my iPad. The display powered on, then dissolved into static and guttered out. Huh? A few seconds passed and the screen lit up again. White text began to scroll across an all-black background. The text moved too fast for me to take it all in, but I caught a few fragments.

# root:xnu …

# dumping kernel …

# patching file system …

Wait, what? It looked like a Unix terminal window. The word root and the hashtag symbol meant that somehow the device had been placed in super-user mode. Someone had taken control of my iPad, blasting through Apple’s security restrictions and acquiring the power to rewrite anything that the operating system could touch. 

 ...

This was the first significant intrusion into my digital life—that I knew of. It was far from the last.

To understand how these theories spread, picture a Venn diagram. On one side are teenage internet natives and on the other side are high-achieving high-schoolers. The overlap is a group of incredibly digitally literate students who are nervous about their transcripts and college futures, many of whom feel the College Board — the nonprofit organization that also oversees the SAT — is a greedy and monopolistic gatekeeper of higher education. (The base cost for one AP exam taken in the United States this year was $94, but some schools charge additional administration fees. Prices are higher for students in other countries.)

Frustrations with the College Board were only furthered by a growing number of students who faced problems with their online exams, finding themselves believing that  the organization put more energy into smoking out cheaters than helping students trying to do things above board. 

 

No comments: