Skip to Content

AOL Tech

hacking posts

Computers, Advice, Windows Software, Mac Software

Just How Risky Are Public Wi-Fi Hotspots?

Ever wonder how safe all your personal information is when it's beamed through the air over Wi-Fi ? If you haven't, then chances are, you haven't taken the right precautions to keep that information safe, either. In clear, easy-to-understand language, the 'Today Show' recently examined the security of Wi-Fi networks. While the video above is a little on the fear-mongering side, it does make some good points about the vulnerability of wireless traffic, in particular, those public hot-spots at your local coffee shop, park, or airport.

Here's what you need to know: Public hot-spots -- most of which are open and don't require a password -- are, by nature, insecure. Sure, they may be easy and convenient to hop on from your computer, but that very openness is also what allows anyone, including hackers, to just walk in and sign on. In other words, when you're signed on to a public Wi-Fi hotspot (or at an unsecured network at your or someone's private home), it's entirely possible for someone to come along and snatch your data, literally out of the air.

Luckily, there are some essential precautions you can take to protect yourself when you're in a public hotspot. First and foremost, get a good firewall program -- not the one built into Windows or Macs, though. Most security suites from Norton, McAfee, and others come with one, and you can download free ones from the likes of Zone Alarm and Comodo. These apps are designed to prevent hackers from gaining access to the data on your PC, and will block and alert you to any attempts to wirelessly access your computer.

Read more →

Cell Phones, Celebrities

Hacking Voicemails Lands Jealous PR Guru in Court

Whether they were stalking us on MySpace from a secret account, drunkenly crashing our birthday parties, or just texting and calling 200 times a day for three months straight, we've all got our share of crazy exes. But those stories would pale in comparison to the tales that the exes of Ali Wise would tell.

A former Dolce & Gabbana PR Director, Wise has been met with allegations that she hacked into the voicemail systems of the subsequent lovers of her ex-boyfriends. The story broke back in July when Page Six of the New York Post reported she'd been arrested on suspicion of breaking into the voicemail of Nina Freudenberger. An interior designer, Freudenberger shared an ex with Wise in Downtown Records founder and CEO, Josh Deutsch. Wise reportedly used an application called 'SpoofCard' to gain access to Freudenberger's voice mail 337 times, listening to and erasing messages at will. (We assume Wise used 'SpoofCard' to make her calls appear to come from Freudenberger's own phone, bypassing any security measures the voicemail system may have had.)

Read more →

Cameras, Computers

Principal's Intercepted 'Sext' Scandal Rocks UK High School

A scandal involving sexting, the risque practice of sending illicit texts or photos, predominantly attributed to teens, is currently rocking a high school in England. The students in question weren't circulating photos of themselves or their classmates, though. The photos were of their principal.

According to The Telegraph, the headmistress, Sue Brearley, told colleagues that she uploaded the photos of herself posing in her underwear (which were intended for her fiance) from her mobile phone to her laptop. Brearley's laptop was later connected to the school's computer system, which is how the students found the photos after allegedly hacking their way in. Police have spoken to two boys about stealing the uploaded photos and circulating them throughout the school, but no disciplinary measures have been levied against them or Brearley.

Even though punishment is not a certainty, one thing is for sure. Students who saw the pictures will never view Brearley in the same fashion again. [From: The Telegraph]

FBI, U.S. Marshals Hit By Mystery Computer Virus



The U.S. already spends a ton of money on cybersecurity, but it may need to dig a little deeper if something like this happens again: According to the Associated Press, The FBI and the U.S. Marshals offices were forced to shut down sections of their respective networks on Thursday after they were hit by a mystery virus.

The U.S. Marshals office even had to disconnect from the Justice Department's computers as a precautionary measure. While the mysterious nature of the virus, along with its origin is a concern to both organizations, Nikki Credic, a spokesperson for the Marshals Office, said "At no time was data compromised."

We have written on the potential for cyber-terrorism before, and though the source of this virus is unknown, it will surely serve as potent reminder of the potential threats that abound in cyberspace.[Via: Fox News]

Read more →

Computers, Web

Hacker Wants $10M Ransom for Stolen Virginia Private Patient Data


On April 30th, an unidentified individual, or group, hacked into the Virginia Prescription Monitoring Program's Web site, WikiLeaks first reported Sunday. A full week after the hack occurred, the perpetrator is still holding hostage the private data of over 8 million Virginia patients.

The party responsible for this security breach didn't hack into the prescription-drug-abuse-tracking site for fun, either. The hacker, or hackers, posted a ransom note on the Web site that, according to WikiLeaks, read:
I have your [expletive]! In *my* possession, right now, are 8,257,378 patient records and a total of 35,548,087 prescriptions. Also, I made an encrypted backup and deleted the original. Unfortunately for Virginia, their backups seem to have gone missing, too. Uhoh :(For $10 million, I will gladly send along the password.
For days, Virginia state police and FBI investigators have been trying to get to the bottom of the theft, which could ultimately result in the misuse of those 8 million packets of personal information. The government has not yet publicly identified the 8 million victims, nor has it notified them privately.

Read more →

Computers

70,000 Hackers Probe the NYPD's Computers Daily


If the New York Police Department had a dollar for every attempted hack on its computer system, New York cops would be driving around in Ferraris instead of those horrid Crown Victorias (or Impalas).

In a speech to the Council on Foreign Relations, New York Police Commissioner Raymond Kelly said that hackers try to breach the NYPD's computer system at least 70,000 times a day, according to the Associated Press. The NYPD has traced the illegal scans back to computers in myriad countries, including China and the Netherlands.

Thankfully, due to strong system-protection programs, there have been no successful breaches of the vast NYPD computer network. This is just another front in the war on cyber-terrorism, a very real threat in a hyper-modern age. [From: FOX News]

Computers

$300 Billion Pentagon Project Hacked (Data Compromised, Again)

$300 Billion Pentagon Project Hacked

According to a front page Wall Street Journal article this morning, it looks like piles of data related to the $300 billion F-35 Joint Strike Fighter military plane have found their way in to the hands of hackers. According to government officials the newspaper spoke with, the Defense Department was the subject of a concerted cyber attack over the past few months in which terabytes (yes plural) of data related to the project were intercepted and fed to IP addresses that have been tracked to China.

Of course, the Chinese embassy issued a statement denying any involvement and said it "opposes and forbids all forms of cyber crimes," but we know it means that in the same way Ted Haggard meant that he opposed homosexuality.

"We aggressively monitor our networks for intrusions...," Air Force Lt. Col. Eric Butterbaugh told the WSJ. Now, anyone who has ever tried to download an HD movie via BitTorrent knows how long it takes to download a few gigabytes of data, which leads us to believe the monitoring couldn't be too aggressive if spies were able to siphon off several thousand gigabytes before setting off alarms.

Read more →

Cell Phones, Computers, BlackBerry, iPhone

Simple Text Messages Can Be Used to Steal Data


Some phones today can have pretty dramatic security functions; case in point, the iPhone will erase itself if you screw up entering your password 10 times in a row. Unfortunately, all a hacker really needs to bypass your password and take over your phone is a simple text message.

In a series of proof-of-concept videos posted on YouTube, Dan Dearing (Vice President of marketing at Trust Digital) demonstrates how, using a text message, he can hijack a phone and steal data off of it. Using an SMS text message, Dearing can force a smart phone to launch Mobile Internet Explorer, download and install a malicious software package, and send data back to his own phone. This attack is referred to as a "midnight raid attack," since it would ideally be done while the victim is sleeping so they don't notice the cellular activity.

Read more →

Computers

Teen Author of Twitter Worm Gets Hired for Hacking Skills

Oh, the pains of being popular. Now that micro-blogging service Twitter has officially saturated the mainstream, it was only a matter of time before it became the target of hackers. Case in point: Last week, a non-malicious attack infected users' profiles, sending tweets without permission. After fessing up to the attack, 17-year-old Mikeyy Mooney claimed he created the worm for three basic reasons: boredom, to alert the developers behind Twitter of the vulnerability, and to get his name out in the public.

Well, it looks as if the stunt paid off, because Mooney has already been offered (and accepted) a job at exqSoft Solutions, a web applications developer. The gig was one of several job offers that came to Mooney after the Twitter fiasco. Travis Rowland, exqSoft CEO and the man who hired Mooney, suggested to ABC News that the hack was more of a service than anything else, alerting Twitter to a vulnerability in its system.



Read more →

Computers

Many Data Breaches Perpetrated by Organized Crime

The notion of hackers as lonely, overweight tech-geeks who reside in their parents' basement is now an antiquated, and false, stereotype, according to a recent story on cybercrime from The Washington Post. Bryan Sartin of Verizon Business, a firm that investigates data breaches, told the Post that his group investigated 100 incidents involving 285 million compromised consumer records in 2008. Fifty-percent of those incidents shared the same perpetrators, many of whom Sartin claimed are actively involved in Russian and Eastern European organized crime syndicates.

Instead of targeting a company's known security flaws and weaknesses, the new breed of Eastern European hackers will first identify their targets, 95-percent of which are banks and financial institutions, and will then develop a method of infiltration. In one of 2008's largest US cyberattacks, hackers targeted RBS WorldPay, an Atlanta company that focuses on payroll cards and payment processing. The Euro-hackers artificially increased the spending limits on ATM and credit cards, and then distributed the cards to "money mules" who eventually withdrew millions of dollars during a single 24-hour period. According to Sartin, the same hacking crew was responsible for a similar incident at a ski resort in Vermont, and a breach of the Texas-based OmniAmerican Bank. Another organization, based out of Russia, successfully hacked over 300 companies in the U.S. and abroad, according to the report.

Well aware of the problem, the FBI and the Secret Service released a cybercrime warning in February, providing banks and retailers with a list of popular techniques used by hackers. The government agencies also taught the institutions how to identify an already perpetrated, but theretofore unrecognized, breach. Shawn Henry of the FBI's cybercrime division told the Post that, even as attacks grow bolder and more sophisticated, progress is being made in the war against hackers. He said that the FBI is seeking help from victims and foreign law enforcement, and that the bureau's "commitment is steadfast." Everyone with a bank account certainly hopes so. [From: The Washington Post]

Related Links:

Computers

Disgruntled Worker Hacks and Shuts Down Oil Leak System


Seriously, people. We've said it before but hacking your current or former employer because you're not happy with your job, desk, or termination is not a constructive way to deal with the problem.

The latest idiot to clearly overstep his legal boundaries is Mario Azar, a 28-year-old former IT worker for Pacific Energy Resources (PER). According to Wired, the Los Angeles resident has been indicted by a grand jury for allegedly disabling computer systems at PER that monitored oil pipelines for leaks, potentially allowing for an environmental catastrophe.

According to the indictment, Azar sought a permanent job from PER after his temporary contract expired. His request was rebuffed, so they allege Azar hacked into the company's servers and shut down the leak monitoring systems from his home.

Looks like that warning about IT guys turning to crime was spot on. [From: Wired]

Related Links:

Computers

Passwords Compromised for Thousands of Comcast Subscribers


Kevin Andreyo, an education technology specialist in Reading, PA, came across a startling discovery Monday after vetting himself on the search engine Pipl. Inspired by the PCWorld article "People Search Engines: They know Your Dark Secrets . . . And Tell Anyone," Andreyo searched his e-mail address and found a list that included his Comcast username and password, as well as those for 8,000 other Comcast subscribers. The list, which appeared on the document-sharing Web site Scribd, had been up for two months, garnering 345 views and 27 downloads.

Mr. Andreyo alerted Comcast and the F.B.I. about the presence of the document, and it was removed Monday afternoon. Similar to the rest of us, Mr. Andreyo expressed concern in an interview with the New York Times that it "isn't just my password for Comcast, it's my password for everything that's not tied to my credit card."

Comcast diverted blame and said the list may have appeared as a result of a phishing scheme, although Mr. Andreyo doubts that he fell victim to such a scam. Jennifer Khoury, a spokeswoman for Comcast, said, "We have no reason to believe this came from Comcast. It looks like a phishing or related type of scheme." Ms. Khoury assured subscribers that the compromised e-mail addresses would be frozen, and that the company would offer advice about safe passwords and the use of McAfee Security Suite, anti-virus software that is available for free to all Comcast subscribers. [From: The New York Times]

Update: Brad Stone updated his New York Times bit blog today after a follow-up e-mail from Jennifer Khoury. According to Ms. Khoury, information for only 700 Comcast subscribers, not 8,000, was included in the document posted on Scribd. The remaining data on the list consisted of duplicate names, inactive accounts, or people who weren't actually customers.

Read more →

Computers

Your Computer Keystrokes Can Now Be Read Over the Air


In an era of ever-present phishing scams, debilitating viruses, and dwindling privacy, computer users have a new threat to confront. Two separate research firms have discovered inexpensive and relatively easy methods of intercepting and interpreting keyboard strokes.

Using only an oscillator, an electronic circuit that emits a repetitive signal, and a regular wireless antenna, researchers from Lausanne, Switzerland's Ecole Polytechnique were able to identify key strokes from over 50 feet away with 95-percent accuracy. Using this inexpensive technique, the researchers were able to "capture and decode" the electromagnetic radiation produced as keys are pressed.

Andrea Barisani and Daniele Bianco, researchers for Inverse Path, used a similar method to achieve the same results. Using their computers, an oscillator, and $500 worth of equipment, the researchers accessed keyboard information from keyboard ground wires. Barisani told IDG News, "The data cable is so close to the ground cable, the emanations from the data cable leak onto the ground cable, which acts as an antenna," broadcasting the data to the researchers.

Read more →

Audio/Video

Taco Bell Drive-Through Hacked to Scream Obscenities


Well, a couple of hacker, pranksters have gotten themselves in some legal trouble... that is, if law enforcement in Missouri can find them.

Someone managed to hack into the radio frequency for a Taco Bell drive-through and started shouting obscenities at the customers. Officials believe that the culprits must have been nearby to interfere with radio, and Taco Bell plans to press charges if the hackers are caught.

Seems like an awful lot of work just to curse out a bunch of people you don't know. Just goes to show that just cause you're smart doesn't mean you have a sophisticated sense of humor. [From: ABC15.com Image from compujeramey]

Related Links:

Computers

'Clickjacking' Threat Hits Firefox and Chrome

Firefox, Chrome Found Susceptible to ClickjackingAnother day, another security risk, and while it pains us to bring you all this dire news so frequently, we figure someone has to keep you in the loop. Today's warning has to do with a new type of subversive Internet attack called clickjacking, in which you're tricked into clicking on links or buttons you can't see, possibly granting others access to your personal information. Two of the web's most popular browsers, Firefox and Chrome, have been found to be vulnerable.

Clickjacking is tricking a Web user into clicking on something they didn't want to, possibly on something they can't even see. It's possible to create a hidden overlay over a Web page and, within that hidden page, load up something like the login screen to MySpace. To the user the Web page might appear to be showing a game or the like that requires you to click on various objects, but in reality the user might be clicking on options in MySpace to make his or her information public or, disconcertingly, to change their password. Firefox and Chrome currently have no mechanism for preventing this kind of attack, but, surprisingly, Internet Explorer, a browser many consider to be less secure than the competition, is not susceptible to the attack.

Google has pledged to release a fix in short order, and we presume Firefox will be patched quickly as well. But, the best news is that nobody is actually aware of this sort of exploit being used in the wilds of the Internets so, for now at least, we wouldn't lose any sleep over this one. [From: CNET News]

Related Links:

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.6 out of 10

    Turbo Charge Tc2 portable cell phone charger
    The Turbo Charge Tc2 portable cell phone charger successfully delivers emergency power to your cell phone. It's easy to use and comes with a couple of surprising features. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

    8.4 out of 10

    Apple iMac (27-inch, 3.06Hz Intel Core 2 Duo, ATI Radeon HD 4670, Fall 2009)
    Largest display among all-in-ones; fast dual-core CPU makes up for lack of quad-core (mostly); finally has an SD card slot; wireless mouse and keyboard; Mini DisplayPort input ripe with possibility. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling