Security

New Siemens SCADA Vulnerabilities Kept Secret, Says Schneier 119

From the article: SCADA systems -- computer systems that control industrial processes -- are one of the ways a computer hack can directly affect the real world. Here, the fears multiply. It's not bad guys deleting your files, or getting your personal information and taking out credit cards in your name; it's bad guys spewing chemicals into the atmosphere and dumping raw sewage into waterways. It's Stuxnet: centrifuges spinning out of control and destroying themselves. Never mind how realistic the threat is, it's scarier." What worries Bruce Schneier most is that industry leader Siemens is keeping its SCADA vulnerabilities secret, at least in part due to pressure from the Department of Homeland Security .
Security

US-CERT Warns of Serious Hole In ActiveX Control From Iconics 87

Trailrunner7 writes "The US's Computer Emergency Response Team (CERT) issued a warning (PDF) to critical infrastructure firms on Wednesday about a serious security hole in products from Massachusetts firm Iconics that could leave critical systems vulnerable to remote attacks. US companies in the electricity, oil and gas, manufacturing and water treatment sectors have been warned about a flaw in an ActiveX control used in two products by Iconics. The software, Genesis32 and BizViz, are Human-Machine Interface (HMI) products that provide a graphical user interface to various types of industrial control systems. The software can control industrial systems used for a variety of purposes including manufacturing, building automation, oil and gas, water and waste water treatment, among other applications."
Hardware

The Awesome Button 80

An anonymous reader writes "An awesome hardware hack which demonstrates how easily USB-based human interface devices (eg, Keyboards and Mice) can be created using the Arduino software environment." A very nice little project based on the Teensy USB Development Board. Reminds me of the breadboard electronics projects my Dad used to work on with me many years ago. "Great fun for young and old," you might say.
Cellphones

Salt Lake City To Launch Mobile Payment System 60

jitendraharlalka writes "According to The Register: 'Operator consortium Isis has selected Salt Lake City as its flagship deployment to show the rest of the USA what NFC can do for them. The plan will see Salt Lake City's public transport system accepting pay-by-wave from a mobile phone by the middle of next year. Retailers have also been encouraged to adopt Near Field Communications technology at the point of sale, as Salt Lake City strives to become The Place You Can Leave Your Wallet At Home. The Utah Transit Authority already uses proximity payment cards, deployed in 2009, so adding NFC functionality to public transport is a matter of software not hardware.'"
Cellphones

No Contactless Payment System In Next iPhone 239

RedEaredSlider writes "Citing fears over a lack of an industry standard, Apple has ditched plans to include near field communication technology in its next iPhone, The Independent reports. The technology, which allows users to make payments simply by waving their devices over special readers, is widely believed to be the next major step in both cell phone and payment technologies. Apple's decision to avoid it is a significant blow to its adoption."
Australia

Australia Creates Cyberwarfare Unit 60

An anonymous reader writes "Australia's Federal Government computer emergency response team and other spy agencies are teaming up to create a cyberspooks unit to counter threats from other countries, the nation's chief lawmaker said last night. In a speech referencing Stuxnet and GhostNet, Attorney-General Robert McClelland said the unit would protect sensitive Australian Government and business information from espionage by the nation's foes. Recently new powers were handed to spymasters to deal with the enhanced security threat that the Greens party said were 'excessive.'"
Google

Google Ready To Rule NFC-Based Mobile Payments? 87

itwbennett writes "Google may seem like an odd pioneer for mobile payments, says blogger Ryan Faas, but according to recent reports, the company is developing its own NFC payment solution. Here's why Faas thinks Google has a leg up in this emerging market: 'Google does have a lot of clout when it comes to NFC because the recent launch of the Nexus S and Gingerbread (the most recent Android release) offer the first truly widespread smartphone/NFC integration. That could give Google significant bargaining power. It also makes a certain sense to expect Google to try to lead in this area when you consider that the company is hyping mobile search and recommendation features.'"
Security

Evaluating Or Testing Utility SCADA Security? 227

EncryptedBit writes "I am a local elected official involved in bringing new water and waste water treatment plants online in a small town. The new plants will incorporate SCADA, which can be used to change operational aspects at the plants, up to forcing a shutdown or changing operational parameters. Can any Slashdotters recommend ways to make sure it is secure? Any testing recommendations? The operational engineers are oblivious to security and SCADA is a new factor, so this concerns me. Any pointers would be appreciated."
Security

Malware Targets Shortcut Flaw In Windows, SCADA 214

tsu doh nimh writes "Anti-virus researchers have discovered a new strain of malicious software that spreads via USB drives and takes advantage of a previously unknown vulnerability in the way Microsoft Windows handles '.lnk' or shortcut files. Belarus-based VirusBlokAda discovered malware that includes rootkit functionality to hide the malware, and the rootkit drivers appear to be digitally signed by Realtek Semiconductor, a legitimate hi-tech company. In a further wrinkle, independent researcher Frank Boldewin found that the complexity and stealth of this malware may be due to the fact that it is targeting SCADA systems, or those designed for controlling large, complex and distributed control networks, such as those used at power and manufacturing plants. Meanwhile, Microsoft says it's investigating claims that this malware exploits a new vulnerability in Windows."
Microsoft

Microsoft To Add Yet Another Smartphone OS This Year 179

GMGruman writes "Someone at Microsoft either really loves mobile operating systems or can't make up his mind as to which to use, because Microsoft Thursday announced yet another mobile OS, its fifth. The new Windows Embedded Handheld OS will succeed Windows Mobile 6.5 and run on at least some existing Windows Mobile smartphones. It is not the same mobile OS, known as Windows Phone 7, that Microsoft earlier this year said would replace Windows Mobile and break with it in terms of compatibility so Microsoft could better compete with the iPhone and Google Android OS."
Networking

Wi-Fi Direct Overlaps Bluetooth Territory For Connecting Devices 152

Reber Is Reber writes "The Wi-Fi Alliance announced a new wireless networking specification which will enable devices to establish simple peer-to-peer wireless connections without the need for a wireless router or hotspot. Wi-Fi Direct has a wide array of potential uses, many of which encroach on Bluetooth territory and threaten to make the competing wireless protocol obsolete. 'Wi-Fi Direct represents a leap forward for our industry. Wi-Fi users worldwide will benefit from a single-technology solution to transfer content and share applications quickly and easily among devices, even when a Wi-Fi access point isn't available,' said Wi-Fi Alliance executive director Edgar Figueroa. 'The impact is that Wi-Fi will become even more pervasive and useful for consumers and across the enterprise.' Ad hoc wireless networking has always been more complex and cumbersome than it is worth, and it maxes out at 11 mbps. Wi-Fi Direct will connect at existing Wi-Fi speeds-- up to 250 mbps. Wi-Fi Direct devices will also be able to broadcast their availability and seek out other Wi-Fi Direct devices. Wi-Fi Direct overlaps into Bluetooth territory. Bluetooth is a virtually ubiquitous technology used for wireless connection of devices like headphones, mice, or the ever-popular Bluetooth earpiece sticking out of everyone's head. Bluetooth uses less power, but also has a much shorter range and slower transfer speeds. Wi-Fi Direct can enable the same device connectivity as Bluetooth, but at ranges and speeds equivalent to what users experience with existing Wi-Fi connections."
GUI

Decoding Adobe's Big Device Push 181

nerdyH writes "Adobe yesterday chummed the waters around Flash and AIR as cross-platform app dev environments for mobile devices. It promised runtimes for several popular mobile OSes, including WinMo, Symbian, Palm webOS, and Android, with future RIM/Blackberry support hinted as well. Moreover, it reiterated its commitment to the Open Screen Project, an Adobe-led industry group that, if you deconstruct its name and look at its membership roster, appears tactically focused on enabling hardware acceleration of Flash/AIR on devices, as part of a larger strategy of making the runtimes ubiquitous as UI development frameworks for essentially every computer-like device with a user interface."
Build

Is Insteon Better than X10 for Home Automation? 284

Paul Carver writes "Smarthome has been advertising Insteon for a while now, but I haven't bought any of it, yet. I've accumulated a fair amount of X10 products over the years, including Smarthome branded signal boosters, signal couplers, noise blockers, and troubleshooting tools. Even so, I'm pretty much fed up with X10. Nothing I've bought has succeeded in making my X10 system more than 'just barely acceptable' and 'better than nothing but not by much'. A Google search for Insteon doesn't turn up much other than their own advertisements and a couple of vaguely positive but not detailed reviews. Is this new technology going to take off? What's the community's consensus on home automation?"

Slashdot Top Deals