#brian krebs

[monetizeme]

We knew this was coming, but now the clock is running. From Privacy International: "Yesterday the Trump Administration announced a propose

We knew this was coming, but now the clock is running. From Privacy International:

"Yesterday the Trump Administration announced a proposed change in policy for travellers to the U.S. It applies to the powers of data collection by the Customs and Border Police (CBP)."

"If the proposed changes are adopted after the 60-day consultation, then millions of travellers to the U.S. will be forced to use a U.S. government mobile phone app, submit their social media from the last five years and email addresses used in the last ten years, including of family members. They’re also proposing the collection of DNA."

PI linked to and summarized a Federal Register entry describing the proposed requirements:

-All visitors must submit ‘their social media from the last 5 years’

-ESTA (Electronic System for Travel Authorization) applications will include ‘high value data fields’, ‘when feasible’ ‘telephone numbers used in the last five years’ -‘email addresses used in the last ten years’ -‘family number telephone numbers (sic) used in the last five years’ -biometrics – face, fingerprint, DNA, and iris -business telephone numbers used in the last five years -business email addresses used in the last ten years.

Yesterday the Trump Administration announced a proposed change in policy for travellers to the U.S. It applies to the powers of data collect

The Federal Register entry says comments are encouraged and must be submitted (no later than February 9, 2026) to be assured of consideration.

Federal Register entry: https://www.govinfo.gov/content/pkg/FR-202

[einfachmalvic]

Gestern am 28.07.2022 ist sie von uns gegangen, der Kampf wegen Krebs verloren.

Ich vermisse sie so sehr ich weiß das sie nie wieder kommen wird

[fishstickmonkey]

He lays out in easy terms how VPNs work, the pros & cons of using them, and what to look for in choosing one.

If you have an interest in computer security, especially how cyber criminals operate, Krebs is great. 

[monetizeme]

BrianKrebs (@[email protected])

Attached: 1 image Drop what you are doing and read this incredible story from Wired, if you can. After that, come back here. https://www.w

"Drop what you are doing and read this incredible story from Wired, if you can. After that, come back here.

DOGE Teen Owns ‘Tesla.Sexy LLC’ and Worked at Startup That Has Hired Convicted Hackers

Experts question whether Edward Coristine, a DOGE staffer who has gone by “Big Balls” online, would pass the background check typically requ

[without paywall]

It mentions that a 19 y/o man who's assisting Musk's team and who has access to sensitive government systems is Edward Coristine. Wired said Coristine, who apparently goes by the nickname "Big Balls," runs a number of companies, including one called Tesla.Sexy LLC

"Tesla.Sexy controls dozens of web domains, including at least two Russian-registered domains. One of those domains, which is still active, offers a service called Helfie, which is an AI bot for Discord servers targeting the Russian market.While the operation of a Russian website would not violate US sanctions preventing Americans doing business with Russian companies, it could potentially be a factor in a security clearance review."

The really interesting part for me is Coristine's work history at a company called Path Networks, which Wired describes generously as a company "known for hiring reformed black-hat hackers."

"At Path Network, Coristine worked as a systems engineer from April to June of 2022, according to his now-deleted LinkedIn resume. Path has at times listed as employees Eric Taylor, also known as Cosmo the God, a well-known former cybercriminal and member of the hacker group UGNazis, as well as Matthew Flannery, an Australian convicted hacker whom police allege was a member of the hacker group LulzSec. It’s unclear whether Coristine worked at Path concurrently with those hackers, and WIRED found no evidence that either Coristine or other Path employees engaged in illegal activity while at the company."

The founder of Path is a young man named Marshal Webb. I wrote about Webb back in 2016, in a story about a DDoS defense company he co-founded called BackConnect LLC. Working with Doug Madory, we determined that BackConnect had a long history of hijacking Internet address space that it didn't own.

Incidentally, less than 24 hours after that story ran, my site KrebsOnSecurity.com was hit with the biggest DDoS attack the Internet had ever seen at the time. That sustained attack kept my site offline for nearly 4 days.

Here's the real story behind why Coristine only worked at Path for a few months. He was fired after Webb accused him of making it known that one of Path's employees was Curtis Gervais, a serial swatter from Canada who was convicted of perpetrating dozens of swattings and bomb threats -- including at least two attempts on our home in 2014. [BTW the aforementioned Eric Taylor was convicted of a separate (successful) swatting against our home in 2013.

In the screenshot here, we can see Webb replying to a message from Gervais stating that "Edward has been terminated for leaking internal information to the competitors."

Wired cited experts saying it's unlikely Coristine could have passed a security clearance needed to view the sensitive government information he now has access to.

Want to learn more about Path? Check out the website https://pathtruths.com/"

Read More

[robpegoraro]

Weekly output: inflight WiFi (x2), cheaper broadband, Google I/O, Texas social-media law, DEA data-portal hack, Twitter mourns Shireen Abu Akleh, SpaceX recap

Weekly output: inflight WiFi (x2), cheaper broadband, Google I/O, Texas social-media law, DEA data-portal hack, Twitter mourns Shireen Abu Akleh, SpaceX recap

BOISE–For the second year in a row, I’m on the road for PCMag’s Fastest Mobile Networks project. And this time the work has taken me much farther from home: After completing the network drive testing I started here after arriving Sunday afternoon, I’m heading to Seattle, Portland and then the Bay Area before flying home. 5/9/2022: Wi-Fi on the plane: Here’s how in-flight connectivity is changing…

View On WordPress

[alaina-in-wond3rland-blog]

Sadis! Hacker Tiongkok Incar 30 Ribu Entitas AS, Ada Apa?

Sadis! Hacker Tiongkok Incar 30 Ribu Entitas AS, Ada Apa?

123berita.com – Sedikitnya 30 ribu organisasi AS, termasuk pemerintah lokal telah diretas dalam beberapa hari terakhir oleh kampanye spionase dunia maya Tiongkok yang sangat agresif. Hal itu diungkapkan seorang spesialis keamanan komputer, Brian Krebs dalam sebuah postingan di situsnya. Menurutnya, mereka menemukan kelemahan dalam perangkat lunak Microsoft Exchange, mencuri email, dan…

View On WordPress

[123berita]

Sadis! Hacker Tiongkok Incar 30 Ribu Entitas AS, Ada Apa?

Sadis! Hacker Tiongkok Incar 30 Ribu Entitas AS, Ada Apa?

123berita.com – Sedikitnya 30 ribu organisasi AS, termasuk pemerintah lokal telah diretas dalam beberapa hari terakhir oleh kampanye spionase dunia maya Tiongkok yang sangat agresif. Hal itu diungkapkan seorang spesialis keamanan komputer, Brian Krebs dalam sebuah postingan di situsnya. Menurutnya, mereka menemukan kelemahan dalam perangkat lunak Microsoft Exchange, mencuri email, dan…

View On WordPress

[omriraiter]

Great article on 'Phishing & Vishing' by Brian Krebs

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees.

click here to access the full article @ KerbsonSecurity by Brian Krebs