He might face state and federal charges. The attack crippled more than 50 schools, forcing some students to retake tests multiple times, among other miseries.
Naked Security – Sophos
Edward Snowden has been heard, and his words are having at least some effect. True, a minority have changed to better protect their privacy, but the more people know, the more likely they are to change.
Naked Security – Sophos
Google ignored Microsoft’s calls for flexible vulnerability disclosure deadlines and released details of another unpatched Windows flaw, leaving users exposed for at least the next 25 days.
The new vulnerability, which was confirmed on Windows 7 and 8.1, might constitute a security feature bypass for the way applications can encrypt their memory so that data can be exchanged between processes running under the same logon session.
“The issue is the implementation in CNG.sys doesn’t check the impersonation level of the token when capturing the logon session id (using SeQueryAuthenticationIdToken) so a normal user can impersonate at Identification level and decrypt or encrypt data for that logon session,” the Google Project Zero researchers said in a description of the flaw. “This might be an issue if there’s a service which is vulnerable to a named pipe planting attack or is storing encrypted data in a world readable shared memory section.”
To read this article in full or to leave a comment, please click here
There’s a “creepy line” when tech conveniences and capabilities seem to push too far into privacy rights; yet not everyone can be trusted to decide whether or not new technology used by the government crosses the “creepy line” and if Fourth Amendment protections should kick in. That includes SCOTUS, according to a former DHS official, who reduced the Supreme Court Justices to “nine Baby…
Ms. Smith’s blog