* Posts by JCitizen

947 publicly visible posts • joined 16 Jul 2012

A stranger's TV went on spending spree with my Amazon account – and web giant did nothing about it for months

JCitizen
FAIL

Re: I got nailed by this

Forgive me if I'm not a browser expert, but I do know that usually zombie files and LSOs are not removable by most anything even after closing the browser; and that is why so many people use CCleaner to get rid of those objects. I know of no other cleaner that does. If you do, please enlighten me!

Billionaire Bezos unveils plans to land humans on Moon, with a little help from some old friends

JCitizen
Coffee/keyboard

Re: The Future’s Bright

When you look at how all the technology that went into the original moon shot; it is hard to say we didn't benefit greatly as a society, from all the technology that trickled down to the consumer side of the economy.

JCitizen
Go

Re: The Future’s Bright

Competition is good - NASA pays the way, but the entrepreneurs foot a good part of the development costs. It is going to be a lot cheaper to get to the moon the next time - in a comparative sense; especially for the tax payer. Modern dollars and inflation figured into the equation.

JCitizen
Stop

Their biggest problem..

Is always the vehicle and systems - the science of going to the moon was always clear, especially the mathematics. The biggest accident was the largest learning event - don't use pure oxygen.

Even Space X is having problems with the emergency ejection system of the main capsule - in a LOT of ways, they are all starting from scratch. Too bad the Russians never had a big enough tested rocket to go to the moon, or we'd be better off using at least half of the available equipment as being tested and true Russian rockets. No doubt the Soyuz spacecraft is golden as a command vehicle.

Trend Micro would like you to fall in line and become a victim of Cloud Conformity

JCitizen
FAIL

And after every cloud breach...

we find out that companies running cloud services are guilty of literally amateur configuration that caused the breach to be so easy. It seems like anybody with a lick of sense could examine their network enterprise configurations a solve that problem!

Avast lobs intruders into the 'Abiss': Miscreants tried to tamper with CCleaner after sneaking into network via VPN

JCitizen
Flame

Re: If you haven't already...

So can LSO's and other file objects be deleted by "Bleach bit" like no other file cleaner I've EVER used can do? Just wondering? This is something I've proved over and over again using various scanners after a Trojan or any other malware object has previously be detected. After detection, I've run CCleaner and repeated various scans with various products, and never found the original script or batch file that caused the attempted infection in the first place.

If Avast's software is so ineffective, you have to ask yourself, why is it under attack? Yes I know Avast has become non sequitur after many years of success, but that is only because Microsoft operational security has become good enough that only a file cleaner need delete downloaded attack packages with ease. Now you better not have the UAC disabled, and the operating system not fully updated along with ALL applications. or opertated all the time as administrator online; But I've noticed again and again in my honeypot lab that past versions of CCleaner have proved they can remove anything that has not been able to execute - which is almost any thing that cannot take advantage of a zero day vulnerably installed on the machine.

So how bout it?

What's the scoop with Mars InSight's mired mole? It's digging again, thanks to trowel trickery

JCitizen
FAIL

Data flip...

I just knew that cosmic ray was the one that knocked my PC out of commission; a reboot fixed everything of course!

Guess what's on the receiving end of more NASA dollars for SLS?

JCitizen
Go

Re: The gravy train rolls on.

NO WAY!! Elon's Space X will beat Boeing hands down, with their BFR; long before puny little Boeing can even launch their first SLS!

Remember the Democratic National Committee email leak? Same hackers now targeting EU countries, say malware boffins

JCitizen
Devil

Re: Except . . .

Now that there is hilarious! Yessiree Bob!

American intelligence follows British lead in warning of serious VPN vulnerabilities

JCitizen
Thumb Up

Re: Not all VPNs

Yeah, but CheckPoint RULES!!

DoH! Mozilla assures UK minister that DNS-over-HTTPS won't be default in Firefox for Britons

JCitizen
Devil

I thought it was a joke...

When I saw the acronym DoH in the article! - Doh!!

Those fake spying cell towers in Washington DC? Ex-intel staffers claim they're Israeli

JCitizen
Meh

Bah!!

I've read in military and defense news sources since I was a kid - I can't remember how many times I read that Israeli access to US secrets has been baked in. Especially since that U.S.S Liberty spy ship incident where they shot up one of our surveillance ships in the Mediterranean during the six day war. They said it was an accident, but I think it was deliberate because Israel knew we were ratting out information to the Egyptians; or at the very least communicating on open frequencies without being coded to keep Israel's enemies from determining sensitive reports on Israeli battle activities. It is not the only incident to happen in the various short wars Israel has been involved in. The US can be a rotten partner at times, and turn on our allies if we think we can prevent escalations from occurring. LBJ was noted as saying he didn't care if all the USS Liberty crew drowned, he was not going to embarrass an ally.

NSA asks Congress to permanently reauthorize spying program that was so shambolic, the snoops had shut it down

JCitizen
FAIL

Re: The constitution is not supposed to be optional

There are 45 million gun owners in America; you could send an army the size of all the standing armies in World War 2 - both sides, and it would still be puny in comparison - and also not as well supplied.

Chrome add-on warns netizens when they use a leaked password. Sometimes, they even bother to change it

JCitizen
Megaphone

Re: 11 "boffins"

Did it occur to them that it was the Chrome browser that compromised the passwords? You never let a browser remember your passwords, they are not secure in a browser storage "vault". I doubt the majority of web users know that.

US military swoops into DEF CON seeking a few good hackers for debut aviation pwning village

JCitizen
Facepalm

Re: Money, Power, Respect

"You know where to find me, I dont hide." ---- Sez the guy behind the AC mask!

What's the last piece of software you'd expect to spy on you? Maybe your enterprise security suite? Bad news

JCitizen
Megaphone

CCleaner

Used to delete Avast's cookies so they couldn't spy, but of course they keep being re-applied. The information is already down wind even when deleting cookies. However even that is suspect now, because Avast's corporation bought out Piriform, the makers of CCleaner. Now I have to put up with popup advertising again, and probably now CCleaner spies on me.

Avast was supposedly good about ending that phone home feature as long as you bought the software - not sure about that, but it did end the pop up ads. I don't plan on buying CCleaner anytime soon, so you have to put up with that when using free software - I suppose it is only fair. Once Malwarebytes became an anti-virus, I had to ditch Avast - MBAM was the only AV/AM worth buying in my estimation, so now that is my only AV solution. The line between viruses and malware is so thin, it isn't worth the distinction anyway.

Marketing biz bares folks' data in the act of asking for their GDPR comms preferences

JCitizen
Pirate

Sprint sucks

They've always been an incompetent company!

Equifax to world+dog: If we give you this $700m, can you pleeeeease stop suing us about that mega-hack thing?

JCitizen
Flame

Re: Still a security fail

Totally agree!!

Guess who reserved their seat on the first Moon flight? My mum, that's who

JCitizen
Happy

Great story!!

Reminds me of when my Mum joined the Planetary Society, and because of her donations, got her name inscribed on a space craft that went on a mission - I don't remember which. I will also always get that warm fuzzy feeling each time I find my Major Astro club card. We kids were enamored with all things space and science back then - too bad folks still don't do that; there would be more science graduates in this old world if there were!!

Bloke fined £460 after his drone screwed up police chopper search for missing woman

JCitizen
Headmaster

Re: Teacher Icon (was Hunting season)

Interesting tidbit!! Thanks! Looks like they have full episodes on YouTube.

JCitizen
Headmaster

Re: Hunting season

to heck with the grammar Nazis; go ahead and use it!

Excluding Huawei from UK's 5G will harm security, MPs warn

JCitizen
Stop

So no worries eh?

So we are supposed to let a suspect company build an entire hardware network, and believe they are not going to seed the chips with built in malicious intent? It is bad enough we have to install workarounds for Intel's hardware vulnerabilities, but letting obvious bad actors just come in and devil may care??

It was a few years ago, but my girl friend was visiting an Asian Pacific country to look at their chip design labs. She couldn't believe what she was seeing! She looked at one of the circuits that had piggy back chips acting as back doors to the CPU, and when she asked what she was seeing on the magnifier, they couldn't wait to escort her out of the lab!! This was more than a decade ago and they were so brash then, that they even put developer logos on each "modification", like they were bragging about their criminal expertise. Anybody who does business with these bad actors deserves to have their skivvies put over their face and go out in public to show just how clueless they are!!

It was totally Samsung's fault that crims stole your personal info from a Samsung site, says Samsung-blaming Sprint

JCitizen
Facepalm

Re: Which one is it

Long ago I received a letter from a relative of a deceased person who was perplexed at phone calls he was sure his late mother could not have made on Sprint's land line service to a small town I used to live in. I called him and asked what Sprint said about the calls in question, and he said they bragged that "Sprint's computers never make a mistake - it is totally impossible"; So I told the man they were indeed my calls, and they were - I got extreme satisfaction telling Sprint their computers or some J-I-J-O mistake did make errors and that the calls were mine. They insisted on saying it was impossible. So I said, "Why would I claim these were my calls if it were not true? Don't you think I'd normally enjoy the fact that someone else paid for my 45 dollars worth of calls?" Sprint canceled the debt to the estate and didn't even bother billing me for their mistake even though I said I'd pay for it. They didn't care if they lost money as long as they didn't have to admit they made a mistake somewhere in the system. Needless to say I've never wanted to use Sprint from then on, and thank God we now have cell phones with competition so folks aren't forced to use despicable services just because a small town only has one phone company!!!

Turning it off and on again IN SPAAACE! ISS animal-tracker kit needs oldest trick in the book

JCitizen
Trollface

Re: Not just for space

Why don't they give every animal a cell phone and Facebook account - It would probably be cheaper too - even if you had to put up cell towers on the savannas - then they'd know every thing about them you could possibly know - probably even where they took a dump! HA!

.

WikiLeaks boss Assange acted as a foreign spy, Uncle Sam exclaims in fresh rap sheet

JCitizen
Paris Hilton

How is it going to be any worse???

Than the jail sentence Chelsea Manning received? The next Democratic president will just give him a pardon anyway.

Cocaine, psychedelics, DMT? They sure knew how to party 1,000 years ago: Archaeologists make startling discovery

JCitizen
Devil

NO! NO! NOoo!! You've got it all wrong..l

The small tube was for blowing darts infused with drugs into the arms, and the long cloth for restricting the blood flow to the arm, like addicts today perform. HA!

The Large Hadron Collider is small beer. Give us billions more for bigger kit, say boffins

JCitizen
Black Helicopters

Re: One ring to rule them all?

Why don't they save money and take over the old abandoned Super Collider (SSC) that was canceled in Texas? Maybe the huge left over magnets might even help. They already spent a Billion dollars starting the tunnel - I have no idea what was finished. It was supposed to be the largest collider in the world - even larger than the LHC.

Typical! You wait ages for a fast radio burst from outer space, and suddenly 13 show up

JCitizen
Coffee/keyboard

Ach!

Ye beat me to it!

Reddit locks out users with poor password hygiene after spotting 'unusual activity'

JCitizen
WTF?

Hmmmm!

Just how do they know users were reusing passwords from other sites? Hmmm? Is it their craptastic tracking spyware? If they were running a security app it would be different, but I'm not aware that they fit that definition!

Stormy times ahead for IBM-owned Weather Channel app: LA sues over location data slurp

JCitizen
FAIL

It looks like TWC...

Is trying to copy the success of "The Weather Bug", which has successfully slurped user data for years and got away with it despite being classified as malware by many AV and AM utilities. Who wouldn't be tempted after watching WeatherBug stomp all over people for years, and still the victims go "MORE MORE"!! Every since AWS Convergence Technologies, Inc , the root company has changed its name and been bought out, and acted like a changeling. No wonder TWC was so tempted!

A few reasons why cops didn't immediately shoot down London Gatwick airport drone menace

JCitizen
Megaphone

You mean this?

https://youtu.be/jvdKNBSWPyU

JCitizen
Megaphone

Re: How about a high power laser burst ?

The best defense is another drone. I've seen the demonstration already on video - the defending drone fires a net at the offending drone and it attaches a parachute which forces it to fall to the ground. Needless to say the airport operator would have to be skilled to pull it off; but I saw in happen on this video, so it is very possible.

https://youtu.be/jvdKNBSWPyU

Your two-minute infosec roundup: Drone arrests, Alexa bot hack, Windows zero-day, and more

JCitizen
FAIL

Re: When we're told to use a password manager

I'm not convinced that any browser actually keeps the password safe from prying malware. If they would at least encrypt it, that would help, but I've never read that has been improved upon. Better to use a free password manager with a good reputation.

Three become six as new 'nauts arrive for a visit to the ISS

JCitizen
Meh

Re: Commercial crew...

NASA never has liked the fact that a commercial upstart proved they could do it faster, better, and cheaper. They see a time when their budgets will go to the enterprise and not the stodgy money pit that is government programs.

Pulses quicken at NASA as SpaceX gets closer to crewed launches and Russia readies the next Soyuz

JCitizen
Meh

Re: Elon & Drugs

I seem to remember reading Federal statutes a long time ago, where by as long as "a tax stamp" is affixed to such "controlled substances" then you are okay. In fact every time a sentence was handed down from a court to a violator, the end of the sentence always mentioned "without a tax (proof of which)"

Even machine guns are legal with a tax stamp ( proof of payment). Now getting that tax stamp is very difficult of course, and without a state where it is legal, almost impossible to acquire.

Sorry, but NASA says Mars signal wasn't Opportunity knocking

JCitizen
Alien

it was aliens!!

It was aliens I tells ya! ( goes the tired old cliche)

Douglas Adams was right, ish... Super-Earth world clocked orbiting 'nearby' Barnard's Star

JCitizen
Alien

Could a human even survive the gravity..

Of such a planet that size, it is hard to imagine what a (100 lb. on earth) man would weigh on the surface.

Super Micro chief bean counter: Bloomberg's 'unwarranted hardware hacking article' has slowed our server sales

JCitizen
Megaphone

Re: Never a plausible story in the first place

I'm not a fan of Bloomberg, so don't get me wrong there; but I have a friend who actually saw some early examples of these chips while visiting a lab in Indonesia! My friend said they were so arrogant back then, that they even printed a logo on the back of the chips placed on the circuit boards. They were a little crude at the time, more like a piggy back chip. So I totally believe the report, and in fact, they would have to prove this report was wrong in my not so humble opinion.

I can see why the OEMs are squawking, because the recovery of hardware like that would destroy the company; I doubt they will ever admit it - and it would take a government investigation to bring out the truth, which I doubt will happen, because our spooks would like to take advantage of these back doors as well.

Third Soyuz does not explode while auditors resume poking around NASA's big rocket SLS

JCitizen
Trollface

mini - BFR

Did Elon Musk hold his pinky finger near the corner of his mouth when he said "mini-BFR" Just wondering!

Has science gone too far? Now boffins dream of shining gigantic laser pointer into space to get aliens' attention

JCitizen
Trollface

Dr. Evil says;`

Its okay as long as we get sharks for that fricken lazer!

Stop us if you've heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP

JCitizen
FAIL

Yup..

The second I saw the word "struts" the Equifax breach came immediately to mind!

The 'roid in Spain drills mainly on the plain: Plucky Brit Mars robot laps up sun, sand and, er, simulated science

JCitizen
Trollface

Maybe..

Hey - maybe we could hook it up with the 'roids on Mars and have a robot war! The ratings would be HUGE!

Azure goes quiet, Huawei Canada ban urged, US Senators are after Google, and more

JCitizen
Coffee/keyboard

Re: Never forget Marconi

I've had clients that told me what was going on in Washington and other networks, and I was shocked to see they contracted our country away to the PRC wholesale! It took them more than 5 years before they finally started to admit their mistakes - but that is no excuse when you have whistle blowers making a huge noise and no one was listening back then! It is absolutely disgusting to me!!

Equifax exec's inside trade shame: Software boss sentenced for mega-hack stock profit

JCitizen
Unhappy

It wouldn't bother me..

It wouldn't bother me if they put the entire board of Equifax in jail after the way they handled the last breach. I'm not normally for regulation, but congress needs to put their thumb on the credit agencies. If not a fist!!

With sorry Soyuz stuffed, who's going to run NASA's space station taxi service now?

JCitizen
Devil

Re: Bah!

OKay, now just admit it - you are a Hollywood writer in your day job aren't you!

JCitizen
Angel

Re: No worries

Call the Thunderbirds - they'll get the job done! If not, Brains will figure it out!

The Obama-era cyber détente with China was nice, wasn't it? Yeah well it's obviously over now

JCitizen
Mushroom

Re: Block 'em

There was a time when I was tempted to block the entire range at APINIC, RIPE NCC, and Wasilla Alaska;; but a guy would probably spend all his time configuring exceptions to that now days.

JCitizen
Coffee/keyboard

True.. but...

At about 2003, when I first started logging this kind of thing; the PRC was so arrogant that they didn't bother doing fancy server bouncing like you describe. The sources of the attacks made sense too - usually military bases or industrial parks. After people woke up, they shifted the IP addresses to "Universities", then when that got public attention, they built a mysterious communication building that could only be described as a major "CIA" type communications center where the attacks were coming from. This didn't fool anybody, so they finally simply copied the same technique criminals use just as you describe. l have no doubt the PRC is still doing just what they've always been doing, and probably worse - but you are right, the original source is hard to determine ( but not impossible either). We are doing it to them and our friends too, so it is a bit disingenuous to cry loudly about it, but that doesn't mean we have to lie down and forget it either.

Uber to dole out $148m settlement among US states over breach it paid $100k to bury

JCitizen
Facepalm

Eye exam??

What difference would it make if Uber conducted an eye exam over the internet or not. If your driver has to have a state driver license, they already took an eye exam at the DMV. Seems stupid to even mention it! Perhaps they are referring to countries with lax laws?

Trump's axing of cyber czar role has left gaping holes in US defence

JCitizen
Coffee/keyboard

Re: It's just a figurehead

Yeah - I haven't heard of one thing this "Czar" did to improve the situation - not one. Seems like it was a totally ineffective left over from the Obama years.