Below I’ve copied a very small fraction of the headlines just from the past few days. Careful! If you start reading the newsletter, and clicking the most interesting links, it may become a full-time job!
Stock traders are accused of siphoning $60 billion from state coffers, in a scheme that one called “the devil’s machine.” Germany is the first country to try to get its money back.
Sixty Billion Dollars. That’s with an ‘S’ and a 'B."
The world’s 2,153 billionaires are richer than 4.6 billion people combined, Oxfam says
Georgia election systems could have been hacked before 2016 vote (Politico)
This was suspected years ago, but there was resistance (including erasure of main server data). Finally, after court order, we know: Yes, a key Georgia election server had suffered the “Shellshock” malware exploit.
Russians Hacked Ukrainian Gas Company at Center of Impeachment
Scientists Deliver, Once Again, a Horrifying Report About How Hot Earth Is Getting
A lazy fix 20 years ago means the Y2K bug is taking down computers now (New Scientist)
Hackers Cripple Airport Currency Exchanges, Seeking $6 Million Ransom (NYTimes)
Boeing 737s can’t land facing west (FAA)
Inside the Billion-Dollar Battle Over .Org (Steve Lohr)
Anatomy of a Lie: How Iran Covered Up the Downing of an Airliner
(This is just a tiny sampling, from the last two issues.)
That’s a very interesting story. Cute tricks that North Korea (yes, it was them) used included:
(1) timing the exploit so holidays gave maximum delay: Bangladesh was closed for Islam’s Friday Sabbath when it started; they got the Saturday-Sunday shutdown in New York, and on Monday the Philippines (where money was picked up) was celebrating Chinese New Year!
(2) hacking printer software not to print. Otherwise the Bangladeshis would have seen suspicious printouts as soon as they came back to work.
A piece of bad luck for the hackers kept them from getting much more than “only” $100 million. An account name they used resembled, by chance, some other fraudster, so software at the Fed-Res of N.Y. automatically put a hold on those transactions.
Meanwhile I read some more back issues. Lots of interesting — and scary — stories.
(I read Risks Digest decades ago, but had forgotten about it. I was reminded a few hours ago when I logged into an old Yahoo mail I almost never use — that account subscribes to Risks Digest.)
The RISKS Digest has been around, in one format or another, for a long long time, all the way back into the Usenet days. I saw excerpts and discussions of it as far back as the mid-1980’s.