Tuesday, February 24, 2015

Intuit is accused of deliberately allowing fraudulent returns for increased market share

Brian Krebs writes that Intuit is accused, apparently with proof  like audio, video, or email, that Intuit made the conscious decision to reduce fraud detection when criminals went to their competitors and caused them to lose market share.

http://krebsonsecurity.com/2015/02/turbotaxs-anti-fraud-efforts-under-scrutiny/

Question:  If a criminal files a fraudulent return from a web site , and pays with a percentage of the refund, then the refund can't be recovered, will the web site operator have to return the fee?  What's the penalty?  What if they're found to be doing it deliberately?  Losing their ability to file?

People:  Friends don't let friends overpay their taxes.

Monday, February 23, 2015

Think Superfish isn't a big deal?

Well, first off, remember that it compromises the whole IE/Firefox infrastructure
(and possibly code signing =8-0 ) of the whole machine  [perry]

Second, there are lots of Non-Lenovo (14) (+?) apps that use it and it's getting easier to break

Now it's breakable and exploitable over by a Raspberry PI (with instructions)

Oh there is a true virus that exploits it and Komodia, the company behind the MITM-by-local-internal-proxy is under DDOS attack.  Did we mention that the password is Komodia?  And that many commercial companies use products from Komodia?

And, while Lenovo has apologized, (they still have a business), and has updated auto and manual removal instructions

Of course Superfish says it's not so bad
 
Understandable, but no.

And a movie that shows how to remove Superfish.A from Chrome - from Jul 2014