Paul Moreno, an Ecuadoran blogger, discovered a flaw in the country's national online identity database, which he demonstrated by hijacking the identity of President Rafael Correa. He was briefly arrested, but was released after a vociferous Twitter campaign that prompted action from the president, who personally ordered Moreno's release. Moreno triumphantly announced his victory on Twitter.
Citing a Wired story on password security, Moreno set out on Nov. 26 to demonstrate a security flaw in DatoSeguro with an attention-getting proof of concept scheme: accessing President Correa’s account. He began by doxing the president, and once equipped with Correa’s date of birth and a national identification number — obtained via online searches — he had two of the three pieces of information he needed. The third was a set of two numbers from an identity card, which he simply guessed. With that, he had access to Correa’s account.
“Out of curiosity, I noticed one time that the fingertip digits in the IDS are all very similar,” he wrote on his blog. “There’s a V or an E or an A followed by various numbers: V23444 – E5444 and so on…combinations that are very simplistic, apparently. The system asked me for the third and fourth numbers of the fingertip digits. With the first combination, I got the numbers right and my account was created. After verifying the email the system sends, I had access to all Rafael Vicente Correa Delgado’s so-called secure data. It took me about half an hour, maybe less.”
Blogger Jailed After Password-Hacking Ecuador’s President [Wired/Mat Honan]
Caroline Slotte is a sculptor in Finland who layers old, decorated china plates atop one another, then carefully removes material from successive layers with precision masking and sandblasting and carving, created 3D scenes with gorgeous depth.
More than 8,000,000 people have watched this video of a flashmob choir performing “I Can’t Keep Quiet,” a song by LA musician MILCK, who performed it at Saturday’s Women’s March.
Agent X and Agent Full Stop are a pair of graffiti activists who call themselves Acción Ortográfica Quito: they sneak around the streets of Quito, Ecuador with cans of red spray-paint, correcting the punctuation, grammar and spelling of the city’s prolific graffiti writers, bringing legibility to boasts, professions of love, and political messages.
Whether I’m trying to relieve some stress at work or entertain myself on the metro, Space Putty is there. You can bring this magical goo home and try it for yourself for just $9.99Like Silly Putty of yesteryear, this viscoelastic substance can be molded into different shapes and stretched around in your hands. Use it […]
You know as well as I that writing complex, long-long form text requires significant organization. You’re probably also well aware that Word just isn’t up to the task. That’s why I’m a huge fan of Scrivener, the software suite used by best-selling authors and technical writers alike.Scrivener is much more than another digital typewriter. With a […]
Looking to upgrade your weekend? Here are three randomly awesome products on my mind this week.#3 FRESHeBUDS Pro Magnetic Bluetooth EarbudsAs more and more phones and gadgets switch to Bluetooth-only compatibility, you’ll need to get Bluetooth headphones like the rest of us. I’ve been super impressed with these affordable magnetic headphones. Pull the magnetic earbuds apart to auto-connect […]