Internet

Updated every Monday!   Subscribe to free weekly newsletter.

Is LinkedIn Telling it Straight?

Last week, LinkedIn, a site where professionals network with each other, sent some users this less-than-urgent email:

LinkedIn email

However, at the same time, LinkedIn’s chief technology officer posted this more dire warning on the company’s official blog:

*MOUSE PRINT:

In 2012, LinkedIn was the victim of an unauthorized access and disclosure of some members’ passwords. At the time, our immediate response included a mandatory password reset for all accounts we believed were compromised as a result of the unauthorized disclosure. Additionally, we advised all members of LinkedIn to change their passwords as a matter of best practice.

Yesterday, we became aware of an additional set of data that had just been released that claims to be email and hashed password combinations of more than 100 million LinkedIn members from that same theft in 2012. We are taking immediate steps to invalidate the passwords of the accounts impacted, and we will contact those members to reset their passwords. We have no indication that this is as a result of a new security breach.

…

UPDATE: May 18, 5:30 p.m. PT

We’re moving swiftly to address the release of additional data from a 2012 breach, specifically:

We have begun to invalidate passwords for all accounts created prior to the 2012 breach​ that haven’t update​d​ their password since that breach. We will be letting individual members know​ ​if they need to reset their password.

So he’s saying that maybe over 100 million emails addresses and passwords (actually 117 million according to news reports) were stolen previously and are now for sale, and not just the 6.5 million originally believed.

It seems that their casual email to members seriously underplays the seriousness of the situation. And as we’ve said before, the worst mouse print is the disclosure that is not made.

UPDATE MAY 25:

LinkedIn just sent a “Notice of Data Breach” to registrants outlining in more detail what happened. (They must have read Mouse Print* this week. )

Updated every Monday!   Subscribe to free weekly newsletter.

This University Educates Crooks

It seemed like a fine school. The University of Northern New Jersey had both undergraduate and graduate programs. It specialized in business administration, computer science, and health sciences. It was accredited by two organizations and maintained an elaborate website for students and prospective students.

Hertz

 

The school had its own Facebook page:

Facebook unnj

 

The university was recognized by the state of New Jersey’s Department of Higher Education:

Dept. of Higher Ed

 

There was just one problem.

*MOUSE PRINT:

The university was fake. It was set up as a sting operation in 2012 by Homeland Security to catch scamsters who forged documents and paid bribes to get foreign students admitted. That would then qualify the foreign student to gain entry into the U.S. via a fraudulently obtained student visa.

Here is the story from the New York Times (click top link on redirect page).

Updated every Monday!   Subscribe to free weekly newsletter.

“Use Only in the Case of an Apocalypse”

Just in time for April Fool’s Day…

Amazon recently released a software gaming platform for developers called Lumberyard. Buried in its terms and conditions is this unexpected little ditty:

*MOUSE PRINT:

57.10 Acceptable Use; Safety-Critical Systems. Your use of the Lumberyard Materials must comply with the AWS Acceptable Use Policy. The Lumberyard Materials are not intended for use with life-critical or safety-critical systems, such as use in operation of medical equipment, automated transportation systems, autonomous vehicles, aircraft or air traffic control, nuclear facilities, manned spacecraft, or military use in connection with live combat. However, this restriction will not apply in the event of the occurrence (certified by the United States Centers for Disease Control or successor body) of a widespread viral infection transmitted via bites or contact with bodily fluids that causes human corpses to reanimate and seek to consume living human flesh, blood, brain or nerve tissue and is likely to result in the fall of organized civilization. [emphasis added]

So only if science fiction zombies come to life, then and only then, can this software be used to save lives.

The world can rest easy now. Thanks, Amazon.