Tag Archive for Security

Cameras in my TV, and not in a creepy way

So apparently all our tvs will have cameras and mics soon, and hopefully the mfrs will be a little smarter about privacy and usage rights than this abysmal first Samsung attempt.

I also note that Xfinity keeps sending me mail about their home security offering, they want to come in my house and install a bunch of sensors and extract even a higher monthly fee from me.

So the obvious thought — why do I need a bunch of distributed sensors in the house? If I can put several cameras and mics in the tv (they are basically free), with full directionality and distance sensing, then my tv could sense in-room movement, perimeter movement, glass breakage, basically all the things a security system senses. Heck, throw in heat, smoke, and CO sensing too for fun, and an accelerometer to detect theft. 

I’ve got a TV in our family room/kitchen, my office, our bedroom — if each of these provided full room monitoring for security, that would cover the bulk of the issues in the house. There is some great software that needs to be written to process the signals, identify perimeter movement, let me establish baselines to be ignored, set up different watch conditions for times when home versus times when away etc. But I don’t see why I should need to go thru the braindamage of putting sensors everywhere, solving wiring or battery issues for them, etc.

I might as well just publish my SSN and credit card numbers on my blog

Taking your computer or phone into china is a bad idea, and I assume you are at risk in other countries as well. And why do we think we are safe here, when someone can just litter around these sniffers, and squadrons of these things may be flying around, and not that far in the future — the FAA is letting these things in domestic airspace this year.

Probably time to radically rethink my approach to data security.

UPDATE: and of course today I got a call from my bank and my credit card has been compromised. Somebody trying to sneak in $1 charges repeatedly. I don’t need to even put my card numbers up here, I should just assume that they are compromised from the get-go. In some sense it makes life easier — I don’t worry about giving my credit card numbers out to anyone because I assume they are already in circulation. What is important is watching my account statements carefully.

Supercircuits

Recommended by Adrian for video cam equipment — Supercircuits

All over the place — Distilleries of Scotland, DC, Bullets, Games, Doghouses, Golf, Currency, and more

Network card exploits

NIC exploits via Hack the Planet“I’ve seen one example use this to establish a zero-footprint rootkit i.e. one which leaves no trace on disk.” — egad.

A mixed set of lists

Credit card fraud and reverse DNS

We had a credit card stolen a while back and I was just on the phone with the bank clearing up one last transaction. The vendor, Steam, was claiming that the charge was valid. It took me about 2 minutes to convince the card issuer that the charge was not valid by simple reverse DNS of the IP addresses captured by Steam. Account signup happened at a location served by Adelphia (I have never been an Adelphia customer), and subsequent accesses all took place via two different Russian ISPs.

What surprises me is that neither Steam nor the card issuer (a huge national card issuer) was able to figure this out. It seems very automatable. And seems like card issuers could easily cut down on online fraud by looking at IP addresses — for myself, 99.99% of my transactions come from my work or home machines with fairly stable IP address histories, at least at the subdomain level.  Not foolproof of course, and I do occasionally do transactions from other locations, but it seems like another good piece of info to consider when assessing the validity of a particular transaction.

Biopassword challenge to hackers

The Insider: BioPassword to hackers — crack this account — will be interesting to see how much traffic this generates.

Simson on hard drive contents

Good analysis on used hard drive content. Cross-drive analysis is fascinating. A good reminder — physically destroy your hard disks when you are done with them.

Related posts: Philips amBX, Rootkit safety

Rootkit safety

Advice for friends and family:

Performance Optimization WordPress Plugins by W3 EDGE