Submission + - Google Tests White Space Radio For Schools In South Africa (techweekeurope.co.uk)
Submission + - T-Mobile Security Flaw Allowed Eavesdropping of Wi-Fi Calls, Texts (securityweek.com)
According to Jethro Beekman and Christopher Thompson, both UC Berkeley graduate students, when an affected Android device connected to a server via T-Mobile's Wi-Fi Calling feature, it did not correctly validate the server's security certificate, exposing calls and text messages to a "man-in-the-middle" (MiTM) attack.
In short, by executing a MiTM attack, and using decrypted SIP (Session Initiation Protocol) dialog, an attacker could record all incoming and outgoing calls and text messages. “[An attacker] could record, block and reroute SIP traffic. The attacker could change it by faking a sender or changing the real-time voice data or message content. He could fake incoming traffic and he can impersonate the client with forged outgoing traffic,” the report, released Tuesday, said.
Beekman and Thompson said they notified T-Mobile of their discoveries in December 2012, and worked with the mobile operator to confirm and fix the problem. As of March 18, all affected T-Mobile customers have received the security update fixing the vulnerability, the researchers said.
This is not the first time TLS/SSL issues have come to the forefront of mobile world. Last October, researchers from two universities in Germany published a paper (PDF) that exposed the state of SSL within Android applications, which revealed that many applications failed to properly implement SSL, leaving millions of users exposed to basic Man-In-The-Middle attacks.
Comment Re:Neutral Gear (Score 3, Insightful) 1176
Automatics still have a neutral gear. Most people don't use it, so I can understand a driver in a panic situation not thinking of it, but I would expect he would try it when stuck in that situation for an hour.
Neutral nearly caused my engine to jump out of the hood when I had the same thing happen, dangerously high rpms at no load... Turning off the engine worked like a charm, and I found a little flak trapped under the cable. Perhaps there is some reason you can't turn off a Laguna?
Submission + - When Google got flu wrong (nature.com)
Submission + - Lawmakers Say CFAA Is Too Hard On Hackers (rollcall.com)
Comment Barometer (Score 1) 587
Comment Feynman. (Score 1) 434
Don't hesitate to stretch their reading level a bit, and look for material OUTSIDE of the middle school library - Some kids rightly view the available selection as 'Lame'. You'll get points for keeping a selection of cool books in your in-class library.
--Matt
Ohio Recount Rigging Case Goes to Court 224
The Akron Beacon Journal is reporting that the trial of the three election workers accused of rigging the 2004 presidential election recount in Cuyahoga County is finally underway. As you may recall, this was the case where poll workers 'randomly' selected the precincts to recount by first eliminating from consideration precincts where the number of ballots handed out on Election Day failed to match the number of ballots cast and, then opening the ballot boxes in private and pre-counting until they found cases which would match up. What is interesting here is that they have already admitted doing this and that it was clearly counter to the letter and the spirit of the law, but still insist it wasn't really 'wrong,' presumably since they only did it to avoid having to go to the bother of a full recount as required by law.