This week in InfoSec brings us one of the great hacker names Rant of the Week is a Presidential nod to Enron Billy Big Balls is a of a ranty persuasion Industry News brings us the latest and greatest security news stories from around the world And Tweet of the Week is MORE infosec career advice!
This week in InfoSec (10:25)
With content liberated from the “today in infosec” twitter account and further afield
17th July 1997: Major Disruption in Sending Most E-Mail Messages. A programming error temporarily threw the Internet into disarray in a preview of the difficulties that inevitably accompany a world dependent on e-mail, the World Wide Web, and other electronic communications.
At 2:30 a.m. Eastern Daylight Time, a computer operator in Virginia ignored alarms on the computer that updated Internet address information, leading to problems at several other computers with similar responsibilities. The corruption meant most Internet addresses could not be accessed, resulting in millions of unsent e-mail messages.
15th July 1999: DilDog of Cult of the Dead Cow confirmed official Back Orifice 2000 CD-ROMs distributed during DEF CON 4 days prior were infected with the destructive CIH virus. Initially, cDc blamed pirated copies as the source, later discovering a duplicating machine had been infected.
https://twitter.com/todayininfosec/status/1283523195371282434
19th July 1985: Chase Manhattan Bank discovered a message in one of its computer systems from Lord Flathead. The message said that unless he was given free use of the computer, he would destroy records in the system. Lord Flathead? He founded Myspace 18 years later!
https://www.nytimes.com/1985/10/19/business/chase-computer-raided-by-youths-officials.html
https://twitter.com/todayininfosec/status/1153507276629504006
Rant of the Week (16:28)
(CNN)The US Secret Service produced an "initial set of documents" to the House select committee investigating the January 6, 2021, insurrection on Tuesday, in response to a subpoena last week that was issued amid reports of potentially missing text messages from the day of the insurrection.
However, Tuesday's document production didn't include any of the potentially missing texts from January 5 and 6, 2021, a Secret Service official told CNN. That's because the agency still has not been able to recover any records that were lost during a phone migration around that time, the official said.
“The USSS didn’t just delete texts after knowing they were evidence in a federal probe; it didn’t just lie about why/how the texts were deleted; the texts were so *professionally* deleted they can’t be recovered.”
https://twitter.com/SethAbramson/status/1549488007614529538
Billy Big Balls of the Week (24:07)
Glassdoor ordered to reveal identity of negative reviewers to New Zealand toymaker
A California court has ordered employer-rating site Glassdoor to hand over the identities of users who claimed they had negative experiences working for New Zealand toy giant Zuru.
In a decision that could prompt unease for online platforms that rely on anonymity to attract candid reviews, Glassdoor was ordered to provide the information so Zuru could undertake defamation proceedings against the reviewers in New Zealand.
Industry News (33:26)
TikTok Engaging in Excessive Data Collection
CISA Set to Open London Office
New MacOS Backdoor Communicates Via Public Cloud
DOJ Recovers $500K Paid to North Korean Ransomware Actors
Legal Experts Concerned Over New UK Digital Reform Bill
Romanian Man Accused of Distributing Gozi Virus Extradited to US
Unpatched Flaws in Popular GPS Devices Allow Adversaries to Disrupt and Track Vehicles
UK Regulator Issues Record Fines as Financial Crime Surges
Magecart Supply Chain Attacks Hit Hundreds of Restaurants
Tweet of the Week (45:58)