Canada smashes botnet

Exciting news. The Mounties have arrested seventeen people in connection with botnets:

Although the hackers operated from about a dozen towns all over Quebec, their botnet network was international in scope, infecting 39,000 computers in Poland, 28,000 in Brazil, and 26,000 in Mexico– the top three countries affected by the group. In all, they hacked into more than 100,000 computers in 100 countries.

Suspiciously round numbers, but nonetheless a good read.

Testing and wind tunnels

When thinking about advanced in aviation, wind-tunnels are a necessary step. The cost of disaster is simply too high not to test extensively before deployment. It is a world far removed from the common software development lifecycle.

Oobject shows some fine examples, including one from the Wright brothers:

The interior and exterior of wind tunnels have unusual design requirements that often make them accidental architectural masterpieces.

Test environments as masterpieces? I like the sound of that. Perfect material for presentations to developers who scoff at the idea of testing.

Linux BlueProximity

This is nice:

BlueProximity is a clever program that sets up your computer to lock itself when your phone is out of bluetooth range, and unlock itself when it comes close enough again.

With so many enterprise users getting cell-phones issued by default, it makes for a clever two-factor solution.

Bluetooth isn’t the strongest model, but the concept is worthy of note and the fact that it can be tested today for free is a big bonus.

Gaps in US Breach Notification Laws

CSO magazine has posted an illustration to show US states that still do not have breach notification requirements:

  • South Dakota
  • Alaska
  • New Mexico
  • Iowa
  • Missouri
  • Kentucky
  • West Virginia
  • Virgina
  • South Carolina
  • Alabama
  • Mississippi

Any guesses why these sates chose not to pass notification laws? Economics? Politics? Washington D.C. has the footnote “Pending Federal Legislation”. Wouldn’t that be true for all states?

This reminds me of a VP I used to work for who swore up and down that breach notification laws were horrible things that would immediately turn into swarms of “ambulance-chasing lawyers” trying to pick on the weak and vulnerable companies who had to disclose a breach. I guess he was wrong.