Security Blog 


1.21.2005

Harvard hacked...
Link. I'm not positive, but I think this is a HIPAA violation...
The confidential drug purchase histories of many Harvard students and employees have been available for months to any internet user, as have the e-mail addresses of high-profile undergraduates whose contact information the University legally must conceal, a Crimson investigation has found.

Administrators shut down a Harvard website contributing to the breach minutes after The Crimson demonstrated the problem yesterday afternoon. But at press time, sensitive data—including the drug histories of those insured by the University—remained vulnerable to anyone who obtains a student or professor’s non-confidential Harvard ID number.

The now-disabled Harvard website, iCommons Poll Tool, required nothing more than a free, anonymous Hotmail account and five minutes to look up the eight-digit ID of any student, faculty or staff member.




1.20.2005

Urban security vehicle?
Ford is putting out some strange concept cars.



Short and slim for easy city maneuvering, it looks bank-vault tough on the outside - with intimidating and outrageous styling that even features a vault-style spinner handle in back with deadbolt door latching. When parked and placed in secure mode, SYNUS deploys protective shutters over the windshield and side glass. Small windows on the flanks and roof are non-opening and bullet-resistant.



1.17.2005

The online marketplace
Link:


Members of the community even traded in tangible items like ATM skimmers, prescription drugs, and cocaine, and services like DDoS for hire and malware customization. One well-reviewed vendor offered a test-taking service that promised to get customers technical certifications within days. He was permitted to vend after earning the reviewer a Microsoft MCP certification under an alias.




Old news
But an interesting read from last week - T-Mobile database hacked.