Security expert says she helped a casino whose high-roller database was stolen through an Internet of Shit fish-tank thermometer

Darktrace CEO Nicole Eagan's presentation to last week's WSJ CEO Council Conference in London included an anaecdote about an unnamed casino for whom her firm had done work; they uncovered a data-breach in which an insecure Internet of Things thermometer in the casino's lobby was used to gain access to the internal network, from which vantage the attackers were able to extract and steal a database of high rollers. Read the rest

Stealing data from airgapped computers by using power fluctuations as a covert channel

Ben Gurion university's Mordechai Guri is a master exfiltrator, a computer scientist who's devised a bewildering array of innovative techniques for getting data off of "airgapped" computers that have been fully disconnected from any kind of network. Read the rest

Modechai Guri: the guy who gets data out of airgapped computers

Computers that are isolated from the internet and local networks are said to be "airgapped," and it's considered a best practice for securing extremely sensitive systems. Read the rest

Canadian man accused of smuggling $180k in gold in own arse

An employee of the Royal Canadian Mint stands accused of smuggling $180,000-worth of gold out of the institution in his rectum, reports Kelley Egan of the Ottawa Citizen, "evading multiple levels of detection with a time-honoured prison trick."

“Appalling,” was the conclusion of defence lawyer Gary Barnes, who described the Crown’s case as an underwhelming collection of circumstantial evidence.

“This is the Royal Canadian Mint, your Honour, and one would think they should have the highest security measures imaginable,” Barnes said in his closing submission.

“And here the gold is left sitting around in open buckets.”

Some crimes have a smoking gun. But this one had a coating gunge.

Investigators also found a container of vaseline in his locker and the trial was presented with the prospect that a puck could be concealed in an anal cavity and not be detected by the wand. In preparation for these proceedings, in fact, a security employee actually tested the idea, Barnes said. Lawrence did not take the stand — as is his legal right — and the Crown was not able to definitively establish how the gold pucks made their way out of the facility.

Read the rest