I am excerpting on this blog roughly 10% of my next book, The New Technology Elite due out in February (and available for pre-order on Amazon – see badge on left) . Chapters 6 through 17 cover 12 attributes of what I call the elite. Here are excerpts from Chapter 13 which focuses on being Paranoid. Note: the text is going through the publisher’s edits and subject to change.
The concept of jailbreak on the iPhone has evolved into what’s called rooting on Android devices. “Rooting is the process by which you regain administrative access to your phone. Even though Android is an open source operating system, you still don’t have full ‘root access’ to do what you please. Back when the iPhone launched in 2007 the hardcore techies quickly realized the true potential of the device, and the cruel software limitations that Apple had sealed it with. What became ‘Jailbreaking’ on the iPhone was quickly translated to other platforms as well, and when the world saw the first Android back in 2008, the term ‘Rooting’ was born,” says the Android Authority blog.4
The teardowns and the rootings pale in comparison to the much more malicious hacking that targets digital products and websites.
**************************
The repeated and public humiliation of Sony by hackers over a matter of months shocked the technology world. Its PS3 game console was once considered invulnerable. “But in December 2010 at the Chaos Communication Conference in Berlin a group of European programmers calling themselves fail0verflow revealed they had finally broken specific lower levels of the PS3’s encryption system that let them run their own programs on the console
**************************
Actually, the infosec world is very well aware of what are called Common Weaknesses. “MITRE maintains the CWE (Common Weakness Enumeration)” website, with the support of the U.S. Department of Homeland Security’s National Cyber Security Division, presenting detailed descriptions of the top 25 programming errors, along with authoritative guidance for mitigating and avoiding them.”10
The errors make for exotic language such as “Improper Neutralization of Special Elements used in an SQL Command” (“SQL Injection”) and “Buffer Copy without Checking Size of Input” (“Classic Buffer Overflow”).
The big problem, of course, is that the CWE site catalogs more than 800 programming, design, and architecture errors that can lead to exploitable vulnerabilities. Hackers, the white-hat and the malicious kinds, continue to add to that already long list of 800.
*************************
Richard Perkins and Mike Tassey were told that an in-flight hacking platform was impossible. In response, the pair showed off their wi-fi hacking, phone-snooping, homemade UAV at the Black Hat conference in Las Vegas in August 2011. They call their creation the Wireless Aerial Surveillance Platform; it is described in detail in our case study later in this chapter.
Researchers have demonstrated that certain pacemakers that use a wireless signal for easy tweaking are vulnerable to anyone with the correct reprogramming hardware. Doctors use these wireless programming devices to make subtle adjustments to the heart helpers without the need for further surgeries. Unfortunately, the signal they use is unencrypted, meaning that anyone who finds a way to obtain such a device could literally manipulate the heart of a patient, causing cardiac arrest or even death. 11
At the same Black Hat conference, Don Bailey and Mathew Solnik presented how they had “found a way to unlock cars that use remote control and telemetry systems like BMW Assist, GM OnStar, Ford Sync, and Hyundai Blue Link. These systems communicate with the automaker’s remote servers via standard mobile networks like GSM and CDMA—and with a clever bit of reverse engineering, the hackers were able to pose as these servers and communicate directly with a car’s on-board computer via “war texting”—a riff on “war driving,” the act of finding open wireless networks.”12
********************************************
After Apple had its well-publicized antenna issues with the iPhone 4, it took a handful of journalists on a tour of its wireless testing lab.
“Apple’s wireless lab has 16 different anechoic chambers—think of them as bank vaults, padded with foam shaped into pointy cones to stop all reflections, designed to create completely radio-neutral environments. Each of these chambers is estimated to have cost $1.2 million. The existence of this lab used to be secret,” an Apple PR representative pointed out. “Now it’s not.”14
********************************************
In 2008, as he was getting ready to unveil his 400,000-square-foot “SuperNAP’ in Las Vegas, Switch CEO Rob Roy remarked he expected it to be filled by the world’s most prominent companies. He was promising 100 percent, not 99.99 percent, uptime—the Holy Grail in enterprise computing.18
That, of course, demands extreme security measures.
The Wall Street Journal described some of the security at the facility:
The guards . . . are not your typical rent-a-cops. These are Switch employees recruited from the Marines and other military services—buff, dark-uniformed hunks who sport sidearms inside the building and automatic weapons outside. They never smile.19
Switch could be guarding against threats from hostile countries, but even more against industrial espionage.
******************************************
Actually, Apple and other technology companies have the tight security to protect against many different ways trade secrets are compromised. A paper by Mark L. Krotoski of the U.S. Justice Department21 highlights some of the scenarios based on prior cases and investigations
Technology and Gasparilla
This is my town’s annual day of debauchery. For decades we have had a pirate invasion from sea, then they parade our corniche in floats and shower beads and other gifts. A good time is had by all – many of them tourists to our fair city.
Last year, I helped my son’s sailing team run a charitable beer stand and I got to see the parade from a whole new set of eyes. Plenty of technology – refrigeration for the drinks (the charity netted $ 16,000 from a days worth of beer cans. Do the math how many gallons we sold, and we were one of 10-12 such stands), technology in the massive security, technology in the fancy floats, even LED in the beads.
Hey, forget the tech. Let’s join Johnny Depp and go
January 28, 2012 in Industry Commentary | Permalink | Comments (0) | TrackBack (0)