As you probably recall, hackers recently claimed to have swiped unique tracking information for iPhone and iPads via a laptop belonging to an FBI agent, leading many to wonder why the lawmen would have this information in the first place. The FBI quickly denied any ties to the information, and now a publishing company in Florida is saying that the hacked list actually belongs to it and not the feds. [More]
Several weeks ago, we told you how several Best Buy customers were complaining that someone out there was attempting to make bogus, phantom purchases through their BestBuy.com accounts. We wondered at the time if the retailer’s site had been a possible victim of someone cracking into its customer database, but Best Buy says these unfortunate incidents are the result of ramped-up efforts by scammers against BestBuy.com and other websites. [More]
It’s like something out of a movie starring Matthew Broderick. Researchers at Columbia University claim they’ve discovered a vulnerability that could let hackers remotely access your printer for nefarious hijinks, like making said printer go up in flames. [More]
The popular online video game distribution system Steam was hacked and a database containing user names, passwords, user credit card information was compromised. [More]
When you’re listening to your music collection, it’s easy to get annoyed with yourself for stuffing so many terrible songs that you once liked for some inexplicable reason. Apple knows you all too well, and has provided a feature that helps you shed the chaff. [More]
Details have emerged has to how hackers were able to steal over 200,000 Citi customer accounts, including names, credit card numbers, mailing addresses and email addresses. It turns out quite easily, in fact. All they had to do was log in as a customer and change around a few numbers into the browser’s URL bar, NYT reports. Facepalm. [More]
With hit after hit coming on a regular basis it can be hard to keep track of whether Sony has been hacked this week or not, and it’s easy to tune out. Thankfully, a simple new service has stepped in to make it a lot easier to find out if Sony has been hacked recently. It’s called HasSonyBeenHackedThisWeek.com. [More]
The iPod Touch can be more than the oft-ignored stepbrother of the iPhone – with the right hacking touch, it can be a replacement for its much loved sibling. [More]
If you’ve got a smart phone it doesn’t make much sense to pay $5, $10 or more a month for text messaging plans once you realize you can send free messages to friends’ phones via email. All you need to pull off the trick is your text-ees’ phone numbers and service providers. [More]
Whether it’s a steel door or an encrypted network, thieves are always finding ways to break down the barriers that protect money. And the new technologies are also enabling bank robbers to invent new ways to jack cash with flair and razzle dazzle. Exhibit A, a security researcher at the Black Hat conference in Las Vegas demonstrates on-stage how one can remotely hack an ATM to make it spew money while playing a lively tune. [More]
Amid the smartphone craze those left with dumb phones may be wondering what all the fuss is about, since it’s possible to do many things a smart phone can do with text messaging. [More]
By the time someone hacks into your Facebook account and sends all of your friends plaintive messages about being mugged in London, it’s too late to do anything about it. However, Facebook does have an early-warning system of sorts. Using a security setting, you can have the service alert you whenever your account is accessed from another location, giving you a chance to (hopefully) force the intruder out and change your password.
This guy has hacked his iPhone so it runs Android. In fact, he can choose to run either the iPhone OS or Android. It only works on the original 2G iPhone and it’s a little buggy, and not recommended that casual users try it, but the future could hold implementations on the 3G and 3Gs. Apple’s secret garden just got further pried open. [More]
Yesterday a reader sent us a pretty funny screen capture of a Sears product page with a suspicious category description (see above). By the time we got around to checking it out, Sears had corrected the error. It turns out, however, that the real problem was the Sears website was built in a way that lets anyone mess with the category descriptions.
Cole discovered that by simply incrementing a numerical string by one in a url Best Buy sent out, he could pull up screen after screen of random customer info. Fortunately, all he could see were customer names, their home addresses, and their order numbers. It’s still surprising that Best Buy—or more specifically, Postpublisher.net, the email company they outsourced this to—wasn’t more careful with customer security.
Two more instances of Sprint’s insecure online system: