Donnerstag, 20. Februar 2003

Source of credit card security breach revealed Scott Jones, a company spokesman, refused to comment on when the hacker gained access and how many credit card account numbers may have been compromised. Credit card companies and the Secret Service have said that as many as eight million account numbers were accessed. The card companies said they were notified of the incident early this month. When the security breach was detected, Data Processors immediately notified credit card companies and law enforcement agencies, Mr. Jones said. He added that the company is sharing all its information with the Secret Service and the FBI. [SecurityFocus] 10:39:06 PM    comment []

Flexible software architectures on rise. A long-established concept called a "service-oriented architecture" will give businesses better return on their IT dollars and keep the software industry vibrant, analysts say. [CNET News.com] 9:52:43 PM    comment []

[SNS Advisory No.61] Symantec Norton AntiVirus 2002 Buffer Overflow Vulnerability [bugtraq mailing list] 9:12:09 PM    comment []

Banks attempt to cover up worst PIN vulnerability yet. As summarised on Cryptome, a new vulnerability (PDF) has been discovered in the crypto co-processors used by banks worldwide which allows insiders to trivially find out PINs of any or all of that bank's customers. The attack was discovered by Ross Anderson and Mike Bond in the course of their investigation into a "Phantom Withdrawal" court case where a bank customer had money debited from their account but denied that their card or PIN was used. In a new twist Citibank has applied for a court order (PDF) which could prevent public disclosure of this flaw. Ross Anderson has produced a response (PDF) opposing such an order. [kuro5hin.org] 9:10:57 PM    comment []

Symantec explains its 'we spotted Slammer' claim. Over-excited marketing people, it seems [The Register] Marketing people: talk first think never? 9:04:32 PM    comment []

© Copyright 2003 cipher.

Mac and the Mac logo are trademarks of Apple Computer, Inc., registered in the U.S. and other countries.
The Made on a Mac Badge is a trademark of Apple Computer, Inc., used with permission.