The far-right British National Party has demanded a police investigation after a full list of party members was posted on the internet.More here.
The party said in a statement posted on its website that the list with the names, addresses and contact details of more than 12,000 individuals was "essentially genuine".
The list, which includes details of the jobs and in some cases the hobbies and qualifications of the members, claims to include former police officers as well as members of the armed forces.
BNP leader Nick Griffin said: "We'll be asking the police to investigate. It's a list which is now just over a year old.
"Having spent a lot of money to secure our members' privacy we are disappointed that it's been breached."
The entire membership list of the British National party has been posted on the internet, identifying thousands of people as secret supporters of the far right and exposing many to the risk of dismissal from work, disciplinary action or vilification.
The BNP leader, Nick Griffin, claimed today that he knew the identity of the person who published the list, describing him as a "hardliner" senior employee who left the party last year.
"He didn't like the direction the party was going and broke away, taking the list with him," Griffin told BBC Radio 4's Today programme.
Around 13,500 names and home addresses were posted on a website on Monday evening.
As well as names and addresses, the list includes the home and mobile phone numbers and personal email addresses of BNP members. It is thought the list may include lapsed members of the party and the names and addresses of people who have expressed an interest in joining the party, but have not signed up. Many of the members' occupations are listed, revealing a small number of police, two solicitors, four ministers of religion, at least one doctor and a number of primary and secondary school teachers.
The list was removed from an internet blog today after complaints by the far right group.
A BNP spokesman, Simon Darby, said: "If we find out the name of the person who published this list it will turn out to be one of the most foolish things they have done in their life." Griffin insisted this did not represent a threat of violence but the reality that the person faced prison for breaching a high court injunction. The BNP leader admitted the party was relying on the Human Rights Act, based on EU legislation, which it opposes, to try to protect the privacy of its members.
He said he had no problem with publication of members' occupations but listing their names and addresses represented "a nasty piece of intimidation on behalf of the Labour regime".
However, Griffin welcomed the publicity the story had garnered for the party, saying the list showed the perception of the average BNP member as a "skinhead oik" was "simply not true".
Last night, Darby said the police had been called in to investigate the data security breach. Describing the posting as "malevolent and spiteful", he said: "This isn't a question of us mislaying the information, this is theft."
The BNP list includes the names and ages of children who have become members of the party after a parent has taken out a family membership, and several people who have joined the party at the age of 16.
Against the name of a woman said to be a serving police officer and living on the Wirral, Merseyside, is the note: "Discretion required re employment concerns - police officer", along with the names and ages of a number of her children.
Other notes against the names of individuals include: "Discretion requested (employment concerns), government employee, IT consultant" and "activist (discretion requested), teacher (secondary school)".
The BNP is known to go to considerable lengths to conceal the identities of members. Membership lists are held on computer spreadsheets, usually by an official based in York. He sends limited lists to local organisers as encrypted attachments to emails that can be accessed only by officials who have been given a password.
The BNP conceded that very few people would have had access to its full membership list. The party said the list was not up to date, featuring no members who had signed up since late 2007, and included the names of people who had never been members of the party. The party said it had obtained an injunction this year at the high court in Manchester to prevent the misuse of its membership list.
Griffin confirmed on the party's website that much of the list was genuine, and that it contained data stored at some point between November 30 and December 2 2007. "This latest attack is not really directed against our own people, who are already tough-minded and know that nothing ever comes of this sort of bluster, so much as against the thousands of [members of the UK Independence party] who are thinking of joining us.
"It probably will frighten some of them, but it's water off a duck's back to the stout hearts of the British National party."
Last night, internet chat rooms frequented by British supporters of the far right were buzzing with anger, indignation and considerable alarm. One typical posting said: "The most shocking thing is some of the comments by the names! God help anyone who is in the army, the prison service, health care, a police officer or a teacher."
It is thought the information commissioner, who enforces the Data Protection Act, may investigate the matter, looking not only at the posting of the list but at the amount of information the BNP has been storing about its members.
A spokesperson for the Information Commissioner's Office said: "Following media reports that the personal details of BNP members have been incorrectly disclosed, we will be contacting the party to establish the full facts. We will then decide what action, if any, is appropriate.
"We encourage all organisations to alert the Information Commissioner's Office if they discover a security breach has occurred."
The membership list reveals that the BNP has a handful of members in Australia, one in Oman and around 17 living in the United States. Some of the members' hobbies are listed. One gives her occupation as "holistic therapist" and her pastimes as "metaphysics, cartoon drawing". Another lists his hobbies as "fantail doves, koi carp, gardening".
There are one or two insights into reasons that people have left the party. Against the name of one lapsed member from Gillingham, Kent, is the note: "Objects to being told he shouldn't wear a bomber jacket."
• Additional reporting Duncan Campbell and Paul Lewis
guardian.co.uk © Guardian News & Media Limited 2008 | Use of this content is subject to our Terms & Conditions | More FeedsIt is not just an American problem... the following exclusive translation from News.ru reports that the Ministry of Information has announced that all telephone and internet service providers must allow unrestricted wiretapping and monitoring access for the FSB, despite the constitutional requirement of a court order.Much more here.
We know from experience that this system has been in place for several years, but it is just now that the Ministry is making it publicly known.
A former Russian UN official, sentenced by a U.S. court to four years and three months in prison on money laundering charges, has left for Moscow after being handed over to Russian officials.More here.
Kuznetsov, 50, who worked for the United Nations Advisory Committee on Administrative and Budgetary Questions, was arrested in September 2005 after borrowing $300,000 from a Russian colleague. U.S. investigators said that he was aware the funds had been acquired by criminal means.
The Russian held diplomatic immunity as a UN employee, but the status was revoked by Kofi Annan, the then-secretary general, paving the way for the FBI to arrest him.
The ex-diplomat was sentenced in October of 2007 by a U.S. district court, and was also ordered to pay a total of $73,000 in fines.
The first ripples of a growing wave of cybercrime may be appearing.More here.
In the physical world, the connection between declining business and crime is simple enough: As the above-ground economy suffers, the underground economy swells. The connection between economic trouble and cybercrime is trickier to prove. But as the economy slows, some crime watchers see signs that a portion of newly unemployed skilled tech workers are turning to the theft and exploitation of sensitive data even as the existing cybercriminal economy is finding new ways to exploit consumer confusion around the banking meltdown.
Meanwhile data on industry spending for security suggests that companies are preparing for the worst. Fear about the downturn's consequences for data protection has kept the cybersecurity industry practically recession-proof, even as other IT spending slumps.
Meraki offers wall plug, solar unit, apartment package: Meraki has added two products to its line up. A wall plug ($179) can be screwed into an outlet's center screw hole for theft prevention and stability, perfect for hotels and public venues. The long-awaited solar product is nearly ready, with a 4-December ship date ($749 with no solar panel up to $1,499 with highest-end panel).
Meraki switched battery technology to lithium iron-phosphate during the year-long delay, partly due to an increase in cost and shortage in solar panels. Meraki's also got a new bundle: $5,000 for a set of nodes designed to cover an apartment building.
Over at Ars Technica, I wrote a long recap of the state of municipal Wi-Fi, noting that Meraki seems to be on the winning side of the equation with its start-small approach. A number of municipal wireless projects (not all Wi-Fi) are getting rave reviews. We may be over the hump: applications (purposes as it were) are now driving network building rather than networks seeking reasons to be.
Violet prepares to ship an RFID tag reader, Mir:ror: The new device plugs in via USB to a computer and can read standard RFID tags, as well as new ones offered by the company. Some of Violet's tags look like postage stamps and are adhesive; others, like tiny versions of their Nabaztag/tag bunny. It's weird, but interesting, like all their stuff.
Qualcomm brings in Skyhook's Wi-Fi positioning: Qualcomm becomes the latest GPS giant to add Skyhook Wireless's technology to their platform. The gpsOne system, found in 400 million cell phones, will be enhanced in future versions with an option for Skyhook data to assist and integrate with GPS lookups. Qualcomm's sold so many chipsets due to E911 requirements for location finding.
Copyright ©2008 Glenn Fleishman. All rights reserved. Please notify us if you find this content anywhere but at wifinetnews.com or wimaxnetnews.com. Reproduction of full articles from RSS feeds is prohibited without permission.
The Somali pirates who have been very active in recent months have been asking for dollars, not gold.
Moneychangers offer wads of new US dollar notes, the only currency that matters in a country that has been in chaos for almost two decades.
The world’s reserve currency indeed.
Online Age Verification for Children Brings Privacy Worries: Via StarNewsOnline.com | Star-News | Wilmington, NC
WHEN it comes to protecting children on the Internet and keeping them safe from predators, law enforcement officials have vocally advocated one approach in particular. They want popular sites, like the social network MySpace, to confirm the identities and ages of minors and then allow the young Web surfers to talk only with other children, or with adults approved by parents.
But performing so-called age verification for children is fraught with challenges. The kinds of publicly available data that Web companies use to confirm the identities of adults, like their credit card or Social Security numbers, are either not available for minors or are restricted by federal privacy laws.
Nevertheless, over the last year, at least two dozen companies have sprung up with systems they claim will solve the problem. Surprisingly, their work is proving controversial and even downright unpopular among the very people who spend their days worrying about the well-being of children on the Web. read more »
We’re joined today by Glenn Fleishman to talk about our own recent past and the recent cracks in the WPA armor. Rich recently got to visit Russia to participate in a talk on Data Leak Prevention, while Martin got his own sit down with DHS Secretary Michael Chertoff. Glenn had a little excitement of his own, with a detailed article on the recently revealed vulnerabilities in WPA using TKIP. It’s a small vulnerabilty, but both Rich and Glenn suspect it’s just a precursor to bigger, badder things to come. And somewhere in there, a three year anniversary for the podcast slipped by.
Network Security Podcast, Episode 128, November 18, 2008
Show Notes:
No time for any music or fancy stuff like that.
Here’s a fun link. This site appears to have seeded their md5 hash list with all lower case character strings of 4 characters or fewer and many english words (probably from some large dictionaries), and they seem to be adding more as they go. This makes me want to put up an interface to the 7 character alpha-numeric-plus-many-special-chars rainbow table I’ve got. But searching the 500G table for a single hash takes… a while. I’d need to batch it up. Go-go-gadget web 2.0!
Listening to the speakers (yes, this time around I was a spectator only... sort of) and the audience from these past 2 days, and specifically at the Web 2.0 Security Summit here at CSI Annual 2008... I've come up with a few things that I think you (the readers who may or may not have attended) should come away with. These are important points, highlights from a very well organized conference geared towards actual solutions rather than the typical smoke, mirrors, and hand-waving [Trey Ford] you may expect from a security conferences. A nod to Robert Richardson for the guest pass, and an excellent conference.
From the experts
The bottom line from the experts? The web is more dangerous than the wild-west; and things are going south fast. There is hope.
From the audience
The bottom line from the audience? Make security simple, actionable, and consumable for my organization... and do more than just sell me tools or services - help me build a program.
There is good news, and bad news.
The good news is that I feel very strongly that we (HP Application Security Center) can help you accomplish your goals.
The bad news is ... it's still going to be your job to sell it to your upper management and execute...
How long has Windows Server 2008 been out? Since late February or early March if memory serves me correctly. Until today I haven’t had much reason to look at it much. Today that changed though. When somebody starts throwing around the need for Itanium servers in a SMB my ears perk up. Thinking this was just a tad excessive I figured I’d see what the different versions of Server 2008 would support hardware wise. I have to admit I was a bit shocked at what I found. Mainly the change from SMP to sockets for processors.
Server 2008 x64 Standard Edition supports four sockets with a max of 64 cores along with 32 GB of RAM. That’s quite a change from Server 2003 x64 Standard.
Server 2008 x64 Enterprise Edition supports eight sockets with a max of 64 cores along with 2 TB of RAM. Yikes…that’s something even Tim “The Toolman” Taylor would grunt about.
Anything above Enterprise Edition and you’re now in a statosphere I can’t even relate to computing wise. Or as David Wooderson would put it…
“Let me tell you what Melba Toast is packin’ right here, all right. We got 4:11 Positrac outback, 750 double pumper, Edelbrock intake, bored over 30, 11 to 1 pop-up pistons, turbo-jet 390 horsepower. We’re talkin’ some fuckin’ muscle.”
Chertoff: We're Closing that Boarding-Pass Loophole: Via Threat Level
There’s a hole in airline security big enough to get Osama bin Laden himself onto a domestic flight, Homeland Security chief Michael Chertoff acknowledges, but that’s no reason to ditch watch lists or ID checks at the airport, he says.
Chertoff told Threat Level in an interview last week that the government was aware of, and patching, the so-called boarding-pass loophole, which just came back into the public eye after a recent Atlantic magazine story where a reporter got though security using a fake boarding pass.
That loophole lets a known terrorist who is on a government watch list board a plane without needing a fake ID. All that’s needed is a home computer, a printer and a little skill at HTML.
“On the issue of switching boarding passes, that is a loophole we are aware of,” Chertoff said. read more »
Secure OS Gets Highest NSA Rating, Goes Commercial: Via Slashdot
ancientribe writes "A hardened operating system used in the B1B bomber and other military aircraft has now been released commercially, after receiving the highest security rating by a National Security Agency-run certification program. Green Hills Software's Integrity-178B operating system was certified as EAL6+, which means that it can defend against well-funded and sophisticated attackers." The company is not saying how much the OS would cost a potential customer: "The system and its associated integration and consulting services are custom solutions." Both Windows and Linux are EAL 4+ certified, which means they can defend against "inadvertent and casual" security breach attempts.
Read Original Article (Via Slashdot.) read more »