Teenagers today. Can't take them anywhere, eh? 18-year-old kid accused of $50m SIM-swap cryptocurrency heist

Here comes a summary of this week's computer security news beyond what we've already covered. Montreal youth blamed for massive phone-swapping scheme An 18-year-old man from Canada has been accused of stealing more than $50m in cryptocurrency using SIM-swapping attacks. SIM swapping typically involves crooks tricking cellular …

[chivo243]

Canada!

"He was charged, released on bail, and ordered to stay with his parents." These are penalties that we can live with!

[John Brown (no body)]

Re: Canada!

There's still a court case to come, and if found guilty, an actual sentence,

[amanfromMars 1]

Definitely not the Messiah then, and of Zero DARPA Type DeepMinded Interest.

He was charged, released on bail, and ordered to stay with his parents.

He's very naughty boy ..... according to the Gospel of the Life of Brian :-) .... where a Certain SMARTR Madness was Tamed and Presented .... and Introduced into Consciousness. And now, a Novel Total Information Awareness Space/Place for Boarding with AIMasterPilots Quantum Networking with Assets via Any Browser Available Exchanging Intelligence ....... for a SMARTR Reply Guarantees Unparalleled Progress and Awesome Success in Future Leading JOINT Operations.

Perfect for the likes of a Yandex or a Google or a Baidu or any other Search Engine Optimising Prime Time Content for Sharing/Discovering.

You might like to Think to Realise, such as can be All Future Content is Forever Scheduled to be Supplied for Delivery via Simple Enlightened Text Instructions for Creative Virtual Machinery/Government Operands. Or you could think to disagree and do constant battle to suffer defeat with oneself whilst media proves it so all around you.

:-) Think of it all as something of a Colossus and SMARTR NEUKlearer HyperRadioProACTive Bombe for the likes of a C to Caress. Although which one is the brightest and bravest of the three Cs of Cheltenham [GCHQ], C [MI6] and Cummings [Chief Special Adviser to Prime Minister Boris Johnson] and crazy enough to Succeed always Secretly in Stealthy Engagement, is something easily shared after today.

:-) It may be the case that a brace or all three or maybe even none rise to the challenge, and therefore fail spectacularly in the glare of a miserable demise. But lets just keep on looking on the bright side of things .... for a while. Give them a fair chance.

[Fruit and Nutcase]

Re: Definitely not the Messiah then, and of Zero DARPA Type DeepMinded Interest.

You lost ,me there after "He's very naughty boy ..... according to the Gospel of the Life of Brian :-) "

but +1 and a beer for the "three Cs"

[amanfromMars 1]

A Simple Recipe for CHAOS and Disasters. Too Many FCUKd Up Cooks and No Master Chef

but +1 and a beer for the "three Cs" ..... Fruit and Nutcase

Fruit and Nutcase, howdy doody.

Currently those three Cs are best realised as being akin to ugly sisters vying to be Top Gun Cinderella for a Prince Charming with each having their own personal agendas not entirely in the thrall or at the beck and call of others.

:-) Although it is impossible to not accept that such is easily considered the Norm in a Mad, Mad, Mad World with Crazy Executive Office Administrations.

[Version 1.0]

Network Security

Yea, we've heard of it, I'm writing an app that will update itself every 15 seconds to guarantee security. Oh wait, it's been hacked too but I'm getting paid for every advert it shows when it's downloaded so it's not a problem for me. Don't laugh, this is the world we live in.

[carl0s]

I have been on the gin, but I don't think it's me this time..

"a serious of vulnerability"

a series of vulnerabilities, perhaps?

[David 132]

Damn those poorly performing peach wreck-ignition cisterns.

[Yet Another Anonymous coward]

It's one of a new set of collective nouns.

A serious of security failures

An HP of business failures

A Boeing of software failures

[Pascal Monett]

"Soldiers are being told to make use of either Signal or Wickr"

You mean, apps that have true end-to-end encryption without any back door ? Really ?

So, when it comes to soldiers, the Government wants proper encryption, but for everyone else, there should be backdoors. Hypocrites.

[Roland6]

Re: "Soldiers are being told to make use of either Signal or Wickr"

>You mean, apps that have true end-to-end encryption without any back door ?

Well from what tech reports have been released, I do wonder just how much source code WhatsApp and Signal still have in common. Ie. I suspect that the vulnerability was originally found in the Signal source code, fixed (?) and found to still work with WhatsApp...

>So, when it comes to soldiers, the Government wants proper encryption

Not sure if "the Government" wants it or even cares, however I do believe "the Military" are just doing their job in demanding proper encryption and device security...

[Yet Another Anonymous coward]

Re: "Soldiers are being told to make use of either Signal or Wickr"

Presumably the local police in Iraq and Afghanistan will have access to all the messages.

[Daedalus]

Er, who do we talk to about that?

This time, the DHS is warning medical providers to immediately patch a serious of vulnerability in General Electric's Carescape, ApexPro, and Clinical Information Center devices.

"Do we have any of this stuff?"

"Talk to Joe."

"Joe? He got laid off. Budget cuts. We outsourced everything."

<dialing> Brrrrrp Brrrrrp "You are 1000th in the queue"

[Anonymous Coward]

Re: Er, who do we talk to about that?

I wonder if DHS talked to FDA before telling people to change a critical medical system withouta n agreed testing plan?

[A random security guy]

Re: Er, who do we talk to about that?

Turns out that security patches do not have to go through an agreed upon testing plan with the FDA. Security fixes are considered critical enough that the devices either have to get recalled or fixed right away.

[0laf]

I'm so glad my bank is ditching their physical security tolkens and going to sms code verification "for my safety".

[cb7]

So is there a free/cheap secure remote access alternative to RDP?

[Claptrap314]

https://www.openssh.com/