Blackhacker

This will be standard issue for the privacy minded, security conscious and the paranoid.

NASA - SuitSat
January 26, 2006: One of the strangest satellites in the history of the space age is about to go into orbit. Launch date: Feb. 3rd. That’s when astronauts onboard the International Space Station (ISS) will hurl an empty spacesuit overboard.

The spacesuit is the satellite — “SuitSat” for short.

“SuitSat is a Russian brainstorm,” explains Frank Bauer of NASA’s Goddard Space Flight Center. “Some of our Russian partners in the ISS program, mainly a group led by Sergey Samburov, had an idea: Maybe we can turn old spacesuits into useful satellites.” SuitSat is a first test of that idea.

Dap: /.

Researchers: Rootkits headed for BIOS

A collection of functions for power management, known as the Advanced Configuration and Power Interface (ACPI), has its own high-level interpreted language that could be used to code a rootkit and store key attack functions in the Basic Input/Output System (BIOS) in flash memory, according to John Heasman, principal security consultant for U.K.-based Next-Generation Security Software.

The researcher tested basic features, such as elevating privileges and reading physical memory, using malicious procedures that replaced legitimate functions stored in flash memory.

(link added is mine)

The protection for this is VERY simple. Manufacturers should turn of by default the ability to flash the BIOS. And trigger the ability to a jumper switch directly on the mother board. Flashing your BIOS is not a basic maintenance function is a serous thing. That should be done by some one who knows what they are doing. Only those who have the confidence to pull out a screw driver and open your PC should be attempt this.

by disabling this feature by default malware can’t sneak on a PC and flash the BIOS on the sly.

Dap: /.

Bob Cringly

Talked about the NSA wire tap program and gave a interesting revelation at the end.

“Here’s one more tidbit on wire-taps: They get you free phone service! The feds tapped the phone of the Sisters of Mercy in Washington D.C. because of some anti-war stance or something they took in the 1980s. The good sisters noticed some kind of clicking on the phone at times, and finally decided that someone must have tapped into their phone. Their solution: Don’t pay the bill so the phone company will have to shut off the phone. The phone never went dead, and they quit sending them bills! The Feds wouldn’t let Ma Bell shut them down, and probably began paying the bills. The sisters talked long and free with their friends across the country!”

Drug Dealers, Dissidents, Terrorist that dime is ours !!