Wednesday, March 4, 2015

US Secretary of State exclusively uses private Email, pleads ignorance

Coming to the attention of the public when one of her closest advisors gets hacked by a Romanian hacker "Guccifer",  Hillary Clinton did not use public email during her whole term as secretary of state

http://www.thesmokinggun.com/documents/investigation/hillary-clinton-private-e-mail-account-897531

While the contents of only some of the emails have been made public, the list of subjects that is published shows some that clearly might contain classified information.

I guess Hillary doesn't really get the "protect information from enemies of the state" thing.  Hillary, when using private internet services, there's really no way to know who's reading the information.

I'm really surprised this didn't come out earlier.  Is there something (special) about the providers that she and her circle of friends are using?

Funny how they forced an ambassador who did the same thing to resign
http://thefederalist.com/2015/03/05/hillarys-state-dept-forced-the-resignation-of-an-ambassador-for-using-private-e-mail/


In other news, thanks to Popehat, Gen David Petraeus won't be getting jail time for leaking more-secret-than TS information to his biographer/mistress/girlfriend


Tuesday, March 3, 2015

Uber is worth a gazillion dollars, and is putting the Taxi industry out of business - how can they be such idiots? Again!




By Dan Goodin
Ars Techica
March 2, 2015

Uber is trying to force GitHub to disclose the IP address of every person that accessed a webpage connected to a database intrusion that exposed sensitive personal data for 50,000 drivers. The court action revealed that a security key unlocking the database was stored on a publicly accessible place, the online equivalent of stashing a house key under a doormat.[ but more visible - pe]

Uber officials have yet to say precisely what information was contained in the two now-unavailable GitHub gists. But in a lawsuit filed Friday against the unknown John Doe intruders, Uber lawyers said the URLs contained a security key that allowed unauthorized access to the names and driver's license numbers of about 50,000 Uber drivers. The ride-sharing service disclosed the breach on Friday, more than two months after it was discovered.

more...