data leakage

(get it in RSS or Atom)

Snapchat images that have "disappeared forever" stay right on your phone...

sc-250

Snapchat claims to let you share even "ugly selfies" because once they're viewed they "disappear forever."

US-based computer forensics geek Richard Hickman thought he'd find out how true that claim was...

Scribd, "world's largest online library," admits to network intrusion, password breach

scribd-250

San Francisco-based document sharing site Scribd has admitted to a network intrusion.

Details are scant, but fortunately a notification published by the company suggests that no more than 1% of users are at risk...

"We apologise for the previous apology" - NZ gov dept in email CC: double-blunder

A government department in New Zealand has had to apologise twice after mixing up CC: and BCC: when apologising for mixing up CC: and BCC:.

It's a really easy mistake to make, so take a moment to remind yourself why it's a bad idea...

HP printers in 1980s-style firmware misconfiguration boo-boo

hp-prn-250

US CERT has issued an intriguing Vulnerability Note about a data and password leakage flaw in a number of HP printers.

It's a bit of a trip down memory lane, whisking us all the way back to one of the bugs exploited by Robert Morris's infamous Internet Worm back in 1988...

1 "terrific employee" + 1 thumb drive + 6,000 lost medical records = fired!

1 "terrific employee" + 1 thumb drive + 6,000 lost medical records = fired!

A woman called a "terrific employee" by her boss was fired after downloading 6,000 medical records onto a USB drive that she then lost. Whose fault is it, really? Perhaps if the company had technology in place to prevent the transmission of unencrypted records onto a USB device, the lamentable event wouldn't have happened in the first place.

Wall of Fame for the #sophospuzzle - see who solved it and how fast

leaderboard-250

By popular request, here is the leaderboard for the Skyfall #sophospuzzle.

The solvers are listed in speed order.

Hints on solving the Skyfall #sophospuzzle before it's too late!

Hints on solving the Skyfall #sophospuzzle before it's too late!

Some hints to help you solve the latest #sophospuzzle before the deadline.

If you haven't tried it yet, perhaps this will help convince you that it's solvable after all. Go on - get your virtual secret agent tuxedo on, and give it a go.

Fancy yourself as James Bond? Take on the #sophospuzzle and win a NERF gun...

Fancy yourself as James Bond? Take on the #sophospuzzle and win a NERF gun...

There's a new #sophospuzzle on the go!

This time, the theme is Skyfall and Bond, James Bond. You'll handle a field message from another agent, decode a data file stolen from M's computer, and unravel a secret location - all in a day's work for the world's best-dressed secret agent.

Beware dodgy computer repair work - your data is at risk along with your wallet

Beware dodgy computer repair work - your data is at risk along with your wallet

Passing off old as new is dishonest in any industry - but it's more dangerous in some than in others.

Hard disks may not wear out like chainsaw blades or cam belts - it's not what they may have lost in their life so far, but in what they have gained: other people's data.

Manchester police pay off £150,000 fine for unencrypted USB key

Manchester police pay off £150,000 fine for unencrypted USB key

The UK Information Commissioner's Office in the UK recently fined the Greater Manchester Police £150,000 for a data breach.

The problem boiled down to an unencrypted USB key stolen from an officers's home.

Public-access kiosk SNAFU gives public access to intimate personal information

New Zealand public-access kiosk SNAFU gives public access to intimate personal information

Kiwi journalist Keith Ng wrote over the weekend about his experiences with kiosk computers at a New Zealand government department.

Ng's experience was both dramatic and worrying. He was able to access far, far too much.

'Assange to be ARRESTED' - British police in document dissemination gaffe

'Assange to be ARRESTED' - British police in document dissemination gaffe

A uniformed police officer at a recent Assange-oriented press briefing fell under the lens of a Press Association snapper.

The officer was carrying a clipboard...can you guess what happened next?

Philips hacked, plaintext passwords revealed as R00tbeer gang strikes again

R00tbeer returns - Philips hacked, poor passwords revealed yet again

R00tbeer is back, we're sorry to say. This time the victim is Dutch technology giant Philips.

Paul Ducklin looks at some of the mistakes made by Philips, cracks some of the stolen hashes to remind you about password choice, and keeps us mindful of the real offenders here.

Hackers get into AMD and steal over 30,000 - wait for it - BYTES!

Hackers get into AMD and steal over 30,000 - wait for it - BYTES!

A hacker calling himself r00tbeer has announced on Twitter a hack of chip vendor and Intel rival AMD.

More of a hackette, really, but there's a lesson in there anyway...

Dropbox data breach proves the "One Site, One Password" rule

Dropbox data breach proves the "One Site, One Password" rule

A couple of weeks ago, Dropbox users started noticing an upturn in spam to email addresses they'd only ever used for Dropbox.

Understandably, they wanted to know, "Why?"

Anonymous hacktivists steal AAPT customer data in data retention protest

Anonymous hacktivists steal AAPT customer data in data retention protest

Internet security and privacy are enjoying a spirited public airing in Australia today.

The wires are abuzz with claims that hackers stole 40GB of data from an ISP in protest against proposed new data retention laws.

SSCC 95 - Oracle patches, lost USB sticks, App Store shenanigans and WiFi heists

Sophos Security Chet Chat

Chet and Duck take on the week's news once again in their inimitable and informative style.

You'll be glad to hear that there are several "good news" stories this week - data that didn't leak, malware that didn't infect, and cybercriminals who didn't get away with it!

Criminals in USB key espionage attempt against Dutch multinational. Or not.

Criminals in USB key espionage attempt against Dutch multinational. Or not.

A keen-eyed Naked Security reader alerted us to an interesting-sounding story about a USB-fuelled espionage attempt.

(For those who prefer us to write about security successes, not about failures, this one's for you!)

Anatomy of a bug: latest Firefox 'new tab' feature thumbnails HTTPS pages

Anatomy of a bug: Firefox 'new tab' feature thumbnails HTTPS pages

The latest release of Firefox has been called "unlucky version 13" because it creates web page thumbnails even of secure content, sparking privacy fears.

But is this really a bug? And if so, do any of the "fixes" circulating online actually work? Paul Ducklin finds out.

Data breaches aren't just about website insecurity and internet hacking...

Data breaches aren't just about website insecurity and internet hacking...

The Belfast Health and Social Care Trust in Northern Ireland, UK, has been stung with a £225,000 ($350,000) fine for a data breach.

In this case, though, the break-in was physical and the stolen data existed in printed form or on film...