Thursday, January 29, 2015

Oracle Java installs Malware Toolbar without "Ask"ing

Updates after Java 7 Update 71 don't appear to allow opting-out of Ask toolbar. 

It does let you choose whether to use Ask as the default search engine, and another thing, but the Ask toolbar looks like it's automatic

I'll just delete java then

 Do they really need the money?  Will Java stop being free?

It's really time to get completely off the Java platform.

Monday, January 26, 2015

Chris Christie shows abuse of ez-pass and metadata in a single speech

And what type of human being he is, effectively making it impossible for him to be president.

(I honestly don't know if I'd pick him or Obama, but Obama can't run again)

Techdirt, as usual has a great article

So here's the lead up, from Bill Baroni -
"Respectfully, Senator, you only started paying tolls recently," [Port Authority Deputy Chief Bill] Baroni said, according to a transcript of the exchange. "In fact, I have a copy of your free E-ZPass," he continued, holding up a physical copy of the toll pass Lautenberg had received as a benefit from his tenure as a Port Authority commissioner. "You took 284 trips for free in the last 2 years you had a pass."
Chris Christie abusing E-ZPass and quotes him, saying about a rival:
At a press conference, he alleged that the senator didn't "pay for parking at Port Authority facilities" and said Lautenberg went "through the tunnel to New York three or four times a week in 2005 and 2006."
I find it interesting, too, by the way, in 2005 and 2006, that he went over the Hudson River 284 times. Where was he going?... I think he needs to answer that. 'Cause he's supposed to be the senator from New Jersey. So what's he doing going over the bridge or through the tunnel to New York three or four times a week for 2005 and 2006?... Did he ever spend any time in New Jersey?
Did you think:
  1.  E-ZPass data was confidential?  Nope
  2. That the government reading E-ZPass  data needed a warrant?  Nope
  3. That Metadata was harmless?  Nope
  4. That Government thinks Metadata can't be abused? Nope
  5. That Chris Christie is above anything slimy or scummy? Data is still out
Oh they do have a link to the pdf of NJ committee meeting that includes testimony about bridgegate and some details about traffic readers in the Fort Lee area, and I think how many E-ZPass details they get. 

Tuesday, January 20, 2015

A Responsible Disclosure Success Story

My wine app (Vivino I do like it, but wish it read bar codes) was successfully compromised by a white hat hacker.  What did he do?   Told them nicely.  What did they do?  Worked with him to fix it, patched it, and comped him for a year.

How cool is that!?

http://www.hotforsecurity.com/blog/vivino-wine-lovers-app-leaked-personal-information-11222.html


Friday, January 16, 2015

DC Library has series on Internet Freedom in America

United States of SecretsTitled "Orwellian America, Government Transparency and Personal Privacy in the Digital Age", where they're sponsoring readings of books like "1984", showing of "The Internet's Own Boy", discuss government transparency, teach how to use Tor, and other things to help citizens of oppressive dictatorships be safe on the Internet.  The theme is understanding widespread surveillance and the growing governmental culture of Big Brother in American government.

Center for Responsive Politics
Sunlight Foundation LogoLittle BrotherTor_logo

Monday, January 12, 2015

USA Today Columnist Defends Paris Attacks

In the "Opposing view" just after the Paris terror attacks, radical cleric, living in London, Anjem Choudary matter-of-factly asserts that dishonoring Islam is expected to provoke fatal consequences, and the cartoonists, and publishers are, in effect, the villains, since:
Muslims consider the honor of the Prophet Muhammad to be dearer to them than that of their parents or even themselves. To defend it is considered to be an obligation upon them. The strict punishment if found guilty of this crime under sharia (Islamic law) is capital punishment implementable by an Islamic State. This is because the Messenger Muhammad said, "Whoever insults a Prophet kill him."

http://www.usatoday.com/story/opinion/2015/01/07/islam-allah-muslims-shariah-anjem-choudary-editorials-debates/21417461/


In his crazy? Middle-ages? view -  The insults were "incitement and hatred", and should have been expected, and I think, banned.

Which speech was more inciteful?  Charlie, or the USA Today column?




Sunday, January 11, 2015

Taylor Swift's Decent Security helps lock down Adobe reader

Actually a good how-to

http://www.decentsecurity.com/visual-guides/#/automatically-update-adobe-reader/

Keep on the lookout for her upcoming book