Category Archives: Security

US Defense Department Warns of Dangerous Change

Yes, change is now officially under investigation. But seriously, maybe you will think twice now before leaving coins sitting innocently in your car, or jingling in your pocket.

Breaking news from the AP that Canadian money can not be trusted:

Canada’s physically largest coins include its $2 “Toonie,” which is more than 1-inch across and thick enough to hide a tiny transmitter. The CIA has acknowledged its own spies have used hollow, U.S. silver-dollar coins to hide messages and film.

The government’s 29-page report was filled with other espionage warnings. It described unrelated hacker attacks, eavesdropping with miniature pen recorders and the case of a female foreign spy who seduced her American boyfriend to steal his computer passwords.

Er, make that US and Canadian money. And then there’s the related story that the Irish have found traces of cocaine in 100% of their euros while Spain apparently found 94%…

Wonder how much a spy coin costs to make and how many you’d have to give someone to ensure that they didn’t dispose of them all at the first Coffee stop?

UPDATED TO ADD (15 Jan 2007): Many comments on Bruce’s blog, including his, suggest this story is overblown. Even the US Govt is downplaying the story. Fair enough, the details are murky, but as I commented on Bruce’s blog, in theory the coin itself is unlikely to need to do more than ID someone/something in range of a transmitter. Thus someone carrying the coin can be detected entering a room, getting in a car, etc.. and is unlikely to suspect that the coin is the thing giving them away, or triggering a nearby device…

Paul Revere’s Ride Revealed

Interesting bit of history is provided by the National Lancers on what Paul Revere was really up to on his ride:

Contrary to popular belief, Paul Revere did not set out on the night of April 18th, 1775 to alert the countryside to the impending British march. His specific goal was to ride to Lexington to warn two prominent Colonial leaders, Samuel Adams and John Hancock, that their lives might be in danger. Having departed Boston by boat across the Back Bay, and narrowly averting notice by the H.M.S Somerset anchored there; he procured a strong, quick Yankee horse and rode west toward Lexington.

They go on to describe his capture by soldiers and how he told them that people were taking up arms, which led a heavily armed group of British soldiers to search for munitions in Lexington and eventually fire their guns into “fleeing crowds”.

Quite a different tale than you’ll find in the words of Longfellow.

MI5 To E-Mail Terrorist Alerts

I confess I did not make this post’s title up. I actually copied it from InformationWeek because I found it so funny. Is MI5 really going to e-mail a terrorist some alerts? How convenient for him/her…”Dear terrorist, this is an automated email message from MI5 just to let you know that our alert level is now Lavender, soon to be Magenta if you do not turn yourself in. This is your last e-mail alert.”

The United Kingdom’s Security Service — better known as MI5 — announced Tuesday that it will soon warn citizens of changes in the nation’s terrorist threat ranking via e-mail.

Oh, oh, I see now. But how will citizens know that it’s really MI5 writing to them? And how does this play into the hands of phishers who will send out warning email telling users to click on a link for terror alert information?

WordPress wp-trackback.php flaw

I find it pretty annoying to read through system logs and see that people in Russia appear to be loudly searching for systems vulnerable to a wp-trackback.php flaw. Is this the one from 2005 or the one from 2006, or is this a result of the January 5th, 2007 security warning and 2.0.6 release?

It appears the Russians (or at least Russian speaking users, perhaps someone who is a fan of Belfegor, coming from cedsl.simtel.ru:3128 (Oops 1.5.24 proxy) using 89.19.160.21) are trying the following Google query to find targets:

http://www.google.ru/search?q=inurl:wp-trackback.php&hl=ru&lr=&newwindow=1&start=10&sa=N

Patch, patch, patch