Attack on computer memory reveals vulnerability of widely used security systems

Attack on computer memory reveals vulnerability of widely used security systems

   February 25, 2008       A bloke in Europe

---

 

Attack on computer memory reveals vulnerability of widely used security systems .

An interesting news about breaking into laptops, which are "secured" by encrypting disks. TrueCrypt is also vulnerable (due to generic design of the encryption suite).

"Disk encryption technologies rely on the use of secret keys -- essentially large random numbers -- to encode and protect information. Computers need these keys to access files stored on their own hard disks or other storage systems. Once an authorized user has typed in a password, computers typically store the keys in the temporary RAM so that protected information can be accessed regularly. The keys are meant to disappear as soon as the RAM chips lose power."

Read More

Attack on computer memory reveals vulnerability of widely used security systems

Attack on computer memory reveals vulnerability of widely used security systems

   February 25, 2008       A bloke in Europe

---

 

Attack on computer memory reveals vulnerability of widely used security systems .

An interesting news about breaking into laptops, which are "secured" by encrypting disks. TrueCrypt is also vulnerable (due to generic design of the encryption suite).

"Disk encryption technologies rely on the use of secret keys -- essentially large random numbers -- to encode and protect information. Computers need these keys to access files stored on their own hard disks or other storage systems. Once an authorized user has typed in a password, computers typically store the keys in the temporary RAM so that protected information can be accessed regularly. The keys are meant to disappear as soon as the RAM chips lose power."

Read More

Fighting cybercrimes in Saudi Arabia

Fighting cybercrimes in Saudi Arabia

   January 26, 2008       A bloke in Europe

---

Few bits of information about cybercrime laws in Saudi Arabia:

• Persons found guilty of running websites in support of terrorist organizations will be jailed for 10 years and fined SR5 million
• Persons who illegally take others’ money or obtain bank and credit data will be jailed for three years and fined SR2 million
• Persons who attack others’ private life using mobile phone cameras and the like and try to defame them will be sentenced to one year and SR500,000
• Those who use information technology to spread and market pornography face up to five years in jail and a SR3 million fine
• Those who produce and distribute IT material that violate public law, religious values and public etiquette will also receive the same punishment
• Those who eavesdrops to email messages or other messages sent through computer will be sentenced to a maximum of one year and fined up to SR500,000
• Those who threaten or blackmail a person as well as hackers who enter into others’ websites to change their designs and destroy or change data will also receive the same punishment
• The new law will also impose the same punishment for anyone caught tampering with computer systems or destroying computers to obstruct access to data within (DDOS)
• People who encourage others to commit IT crimes will get the same punishment received by those who committed them

More information about this in Arab News - New Law to Combat Information Technology Crimes

Read More

Fighting cybercrimes in Saudi Arabia

Fighting cybercrimes in Saudi Arabia

   January 26, 2008       A bloke in Europe

---

Few bits of information about cybercrime laws in Saudi Arabia:

• Persons found guilty of running websites in support of terrorist organizations will be jailed for 10 years and fined SR5 million
• Persons who illegally take others’ money or obtain bank and credit data will be jailed for three years and fined SR2 million
• Persons who attack others’ private life using mobile phone cameras and the like and try to defame them will be sentenced to one year and SR500,000
• Those who use information technology to spread and market pornography face up to five years in jail and a SR3 million fine
• Those who produce and distribute IT material that violate public law, religious values and public etiquette will also receive the same punishment
• Those who eavesdrops to email messages or other messages sent through computer will be sentenced to a maximum of one year and fined up to SR500,000
• Those who threaten or blackmail a person as well as hackers who enter into others’ websites to change their designs and destroy or change data will also receive the same punishment
• The new law will also impose the same punishment for anyone caught tampering with computer systems or destroying computers to obstruct access to data within (DDOS)
• People who encourage others to commit IT crimes will get the same punishment received by those who committed them

More information about this in Arab News - New Law to Combat Information Technology Crimes

Read More