T-Mobile compromised – data for sale ?

Apparently someone claims to have pinched all of T-Mobile’s data..

The U.S. T-Mobile network predominately uses the GSM/GPRS/EDGE 1900 MHz frequency-band, making it the largest 1900 MHz network in the United States. Service is available in 98 of the 100 largest markets and 268 million potential customers. Like Checkpoint Tmobile has been owned for some time. We have everything, their databases, confidental documents, scripts and programs from their servers, financial documents up to 2009.

They claim to have hawked it around their competitors (who seem to know better than to buy it) and now are offering it on the open market.. ๐Ÿ™

(Via ISC)

North Korea Tests Another Nuclear Bomb (11 kiloton?)

It’s being reported that North Korea has detonated another test nuclear device, and the USGS is showing a magnitude 4.7 quake in North Korea (the previous device test registered as a mag 4.2 one).

Using the code I mentioned when writing about the first test it appears that it was likely to be around an 11 kiloton device, significantly larger than the 2 kt device tested previously.

Mag.   Energy      Energy      TNT         TNT         TNT         Hiroshima
       Joules      ft-lbs      tons        megatons   equiv. tons  bombs
4.2   0.126E+12   0.929E+11   0.301E+02   0.301E-04   0.201E+04   0.134E+00
4.7   0.708E+12   0.522E+12   0.169E+03   0.169E-03   0.113E+05   0.753E+00
USGS image of DPRK nuclear test 2009/05/25

USGS image of DPRK nuclear test 2009/05/25

Mandatory Detetion Powers for Australian Government over H1N1 Outbreak

An interesting titbit from the ABC:

The Federal Government has enacted powers to allow for mandatory detention of people in Australia suspected of having swine flu, if the situation was to worsen.

Whilst these are scary powers I suspect it will be necessary in the case of the current outbreak becoming a lethal pandemic, given many peoples inability to to complete a course of drugs for an illness, and thus vastly increasing its risk of becoming resistant. It’s just evolution in action..

Oracle buys Sun ? (Updated)

Thanks to Chris Dagdigian on the Beowulf list for pointing out:

It’s official:
http://www.sun.com/third-party/global/oracle/index.jsp

That link says:

REDWOOD SHORES, Calif., April 20, 2009 — Oracle Corporation (NASDAQ: ORCL) and Sun Microsystems (NASDAQ: JAVA) announced today they have entered into a definitive agreement under which Oracle will acquire Sun common stock for $9.50 per share in cash. The transaction is valued at approximately $7.4 billion, or $5.6 billion net of Sun’s cash and debt.

First thought – what on earth does that mean for MySQL ?

Update: this appears to be answered (well, as much as you can in a paragraph) in this FAQ document on the Oracle website (PDF):

MySQL will be an addition to Oracleรขโ‚ฌโ„ขs existing suite of database products, which already includes Oracle Database 11g, TimesTen, Berkeley DB open source database, and the open source transactional storage engine, InnoDB.

Second thought – what on earth does it mean for the Sun NCI/BoM HPC deal in Australia ? HPC is hardly Oracle’s market..

Update – it appears the Oracle website can’t cope, currently it’s saying:

No Response from Application Web Server
 There was no response from the application web server for the page you requested. 
Please notify the site's webmaster and try your request again later.

I wonder if they need a LAMP stack to help them out ? ๐Ÿ˜‰

Update 2Joe points out in his take on the deal that Sun employ(ed) a bunch of core PostgreSQL developers too, which could make life even more interesting..

Final thought for the night – what does this mean for btrfs, ZFS and Solaris licensing ? Oracle have said they are still committed to Linux, so perhaps we’ll see them trying to resolve the NetApp/Sun WAFL/ZFS patent lawsuits in a GPL compliant manner and then relicensing Solaris under the GPL – that would be sensible I think from their point of view as they could then use the good points of Solaris (dtrace and ZFS) to help improve the Linux kernel and benefit from a much larger developer community than they could otherwise get their hands on (OpenSolaris being a niche OS). Of course I won’t hold my breath, but it wouldn’t surprise me either..

DNA evidence not always what it seems to be

Bruce Schneier has posted a link to a story about the German Police having an interesting time with DNA analysis of a series of murders due to a consistent false positive result; Bruce writes:

The German police spent years and millions of dollars tracking a mysterious killer whose DNA had been found at the scenes of six murders. Finally they realized they were tracking a worker at the factory that assembled the prepackaged swabs used for DNA testing.

I hope this gives pause for thought to those who think that programs like CSI reflect reality and that DNA profiling is always right..

The snooping dragon: social-malware surveillance of the Tibetan movement

Shishir Nagaraja of the University of Illinois at Urbana-Champaign and Ross Anderson of Cambridge University have published a very interesting paper called “The snooping dragon: social-malware surveillance of the Tibetan movement” (abstract, full report) on how agents of the Chinese government managed to infiltrate the computer network of the Dalai Lama’s organisation through ingenious social engineering and gain access to intelligence information that could lead to peoples arrest and possible execution.

It’s a very interesting report and points out that the techniques used are within the reach of motivated individuals as well as government intelligence agencies and ponders how much less well known organisations can cope with such attacks; it also lends weight to the sage advice offered in Ross Andersons “Security Engineering” book. Both are well worth a read, even for those of us whose network security is not a literal matter of life or death.

This is completely nuts

Excuse me – but can someone unbreak Australia ? (…and no, that’s not an invitation to the Liberal/National party, you introduced this in the first place and would just screw it up even more).

On 16 March 2009, the Australian Communications and Media Authority added Wikileaks to their blacklist, and threatened anyone linking to the site with $AU11,000-a-day fines. The site will be blocked for all Australians if the mandatory internet filtering censorship scheme is implemented as planned.

Yada yada yada..

You’ve got to wonder what sort of blacklist has the website of a Queensland dentist on it – I know people are afraid of dentists but this is taking it a bit far..

Apparently you can get fined $11,000 a day for linking to a page that you’re not allowed to know is banned, it makes the EU’s secret ban on tennis racquets (ok, blunt instruments) on planes seem almost tame..

For useful insights see Brendan Scott’s blog on the topic, and this one on the leaking