Wired's Kim Zetter rounds up some of the highlights from Untangling the Web: A Guide to Internet Research [PDF], an NSA guide to finding unintentionally published confidential material on the Web produced by the NSA and released in response to a Muckrock Freedom of Information Act request. As Zetter notes, the tactics discussed as described as legal, but are the kind of thing that weev is doing 3.5 years in a Federal pen for:
Want to find spreadsheets full of passwords in Russia? Type "filetype:xls site:ru login." Even on websites written in non-English languages the terms "login," "userid," and "password" are generally written in English, the authors helpfully point out.
Misconfigured web servers "that list the contents of directories not intended to be on the web often offer a rich load of information to Google hackers," the authors write, then offer a command to exploit these vulnerabilities — intitle: "index of" site:kr password.
"Nothing I am going to describe to you is illegal, nor does it in any way involve accessing unauthorized data," the authors assert in their book. Instead it "involves using publicly available search engines to access publicly available information that almost certainly was not intended for public distribution." You know, sort of like the "hacking" for which Andrew "weev" Aurenheimer was recently sentenced to 3.5 years in prison for obtaining publicly accessible information from AT&T's website.
Use These Secret NSA Google Search Tips to Become Your Own Spy Agency
The FTC and the Justice Department are investigating claims that TikTok, the popular social media app with close ties to China, violated a 2019 agreement to protect children's privacy.
New data privacy law took effect in January, with a six-month grace period
The United States Internal Revenue Service says it purchased access to a marketing database that offers location data for millions of US cellphones, so the IRS can identify and track persons suspected of tax-related crimes.
One million Americans use American Sign Language as their primary means of communication. But as you'd expect, even though ASL is the sixth-most used language in the US, it isn't just any old language like English or Spanish or French. According to Communication Service for the Deaf, 98 percent of Deaf people don't receive education […]
After a successful round of funding on Kickstarter, Fluster: The Social Card Game is now ready to help turn a party or game night into the engaging, surprising, and enlightening social affair you always hoped it would be. A deck of 100 cards, Fluster is chock full of unusual, funny, and thought-provoking questions inspired to […]
Physics may have been that class you sleepwalked your way through in high school. But while it might have just slipped under your radar throughout your academic career, you probably shouldn't have given it such shallow attention. Sure, we could focus on the immediate pluses of a career as a physicist, like the more than […]