Minor-League hacking in the MLB

So, about a year ago, the Houston Astros announced their internal player database had been breached. This week, more details emerged, pointing right at the St. Louis Cardinals.

It wasn’t a terribly sophisticated attack. You knew I’d write about this, but I’ll explore it from an IT security perspective more than from a baseball perspective.

Read more

Identify bad guys through writing style

This month’s Social Engineer podcast discussed a tactic to identify bad guys through writing style, something the hosts expressed surprise was possible.

This won’t be news to anyone who minored in English or Communications or Journalism. A lot of factors go into style—where we grew up, where our parents are from, what we read growing up, our life experience, and it really is like a fingerprint. Fitzgerald’s Gatsby called everyone “Old Sport,” and we all have something like that, it’s just usually more subtle. I’ll say, “taste this,” when my wife or mother in law will say “taste of this.” That’s a regional thing. I pick up on that because I’m interested in language. A really good linguist can pick up on a lot more than that, and machine learning can potentially pick up on still more.

If you recall, it was the Unabomber’s long manifesto that brought down Ted Kaczynski.  Other forensics proved it, but the investigation began with his brother’s observation that the manifesto “sounded like Ted.”

Read more

The Ferguson race riots: An outsider’s perspective from not far outside

A Ferguson police officer shot and killed Michael Brown, an unarmed 18-year-old African-American man, on August 9, 2014. The night after, riots broke out.

Ferguson is an inner-ring suburb in north St. Louis County. As such, Ferguson is now approximately 67% African-American, although the power structure remains mostly white.

I am a native of Kansas City who has lived in suburban St. Louis for a little more than 20 years. As a quasi-outsider, St. Louis has some quirks that I recognize and understand. It helps to understand that St. Louis is very divided, both along the lines of race but also along the lines of class. One of the first questions many St. Louisans will ask you is what high school you went to. This conveniently tells people how much money you grew up with. If you went to a private school, you’re good. If you went to a public school in an affluent area, you’re good. If you went to a public school in a poor area, I hope you’re living in a more affluent area now because there are people who will look down on you.

Sometimes the lines are fuzzy but sometimes they’re very stark. In north St. Louis, there’s an east-west street called Delmar. On the south side of the street are expensive houses. I won’t say they’re all millionaires on that side of the street, but many undoubtedly are. On the north side of the street, the houses that aren’t vacant are occupied by people who have minimum-wage jobs. The haves and have-nots can stare at each other from their windows, separated by five lanes of traffic. This oddity has even caught the attention of the BBC.

Ferguson is a step up from the wrong side of Delmar, but many St. Louisans would have jumped to conclusions about Michael Brown and his Normandy High School diploma for the rest of his life, regardless of how long that might have been. Read more

Some tips for trolling fake technical support calls

I did a little more digging after getting yet another fake technical support phone call last week, and I’ve done some thinking on my own. If you want to troll these criminals when they call you, here are some ideas. Read more

Mr. Genius Man from “Windows Technical Support” gets nasty

I got another “Windows Technical Support” call on Friday evening. My caller ID said Minneapolis, and since I have coworkers in Minneapolis, I answered. But the guy on the other end was a long way from Minneapolis and probably doesn’t know diddly about ice hockey.

I’m pretty sure it was the same criminal as last time, but over a better VOIP connection. I remember the voice pretty well, because his parting lines from last time, “Enjoy your broken computer, Mr. Genius Man!” struck me as funny. And he started the conversation with, “I’m calling you again about your Windows 7 computer.”

My conversation with him revealed a few things about why this scam is likely to be profitable.

Read more

This “Computer Maintenance Department” sure doesn’t know much about computer maintenance

“Peggy” from “Computer Maintenance Department” (1-645-781-2458 on my caller ID) called again. Lots of people are aware of these phone calls. They call, make vague claims about receiving a report that your computer is running slow and giving you errors, and are very careful not to say who they are or who they work for. Usually I just do whatever I can to get them off the phone.

But after having lunch with some other computer security professionals last week, a couple of them talked me into finding out how these guys operate. So I fired up a PC that turned out to have a real, legitimate issue. After resolving that issue myself, I turned the caller loose on my semi-functional PC so I could see what these scammers actually do. He had me connect to Teamviewer.com and run their remote access software. I followed his instructions, watched him connect, then slyly unplugged my network cable.

When my network connection dropped, “Peggy” quickly transferred me to a “senior technician” who used the name “Roy.” Read more

No, the government isn’t going to come take your trains

Friday’s news that the Department of Health and Human Services have added formaldehyde to the list of known carcinogens and styrene to the list of potential human carcinogens caused a rumble in some of the circles I run in.

Let’s calm down, everyone. This doesn’t mean the government is going to send FBI agents to your door, guns in hand, confiscating your plastic trains and toys. The bottom line is that there is some danger for industrial workers who are exposed to the raw chemicals, but comparatively little danger to the consumers who posses plastic products made from those chemicals.
Read more

WordPress Appliance - Powered by TurnKey Linux