1. NSA moves from bugging German Chancellor to bugging German ministers
"On Sunday it was revealed that the NSA, forbidden by President Obama from tapping German Chancellor Angela Merkel's phone directly, has ramped up its spying on her senior government officials, according to the German Sunday paper Bild am Sonntag. The paper said that the information's source is an anonymous, high-ranking NSA official stationed in Germany."
Link: Ars Technica - NSA moves...
2. Apple's SSL/TLS bug
Um erro tosco no código do SSL/TLS do iOS levanta suspeita se a Apple coopera com a NSA.
Código: sslKeyExchange.c
Especulações entre a falha de segurança e a espionagem da NSA
3. Prez Obama cyber-guru: Think your data is safe in an EU cloud? The NSA will raid your servers
Evitar a hospedagem nos Estados Unidos não impedirá que seu servidor seja invadido pela NSA.
Link: The register
4. Criptomoeda: Mt.Gox faliu e levou o seu dinheiro embora
Nota oficial Dear MtGox Customers,
In the event of recent news reports and the potential repercussions on MtGox's operations and the market, a decision was taken to close all transactions for the time being in order to protect the site and our users. We will be closely monitoring the situation and will react accordingly.
Best regards,
MtGox Team
E apareceu um suposto documento interno sobre o gerenciamento de crise do Mt.Gox
"At this point 744,408 BTC are missing due to malleability-related theft which went unnoticed for several years. The cold storage has been wiped out due to a leak in the hot wallet."
Por causa de um bug na carteira do Mt.Gox, durante anos eles sofreram um ataque de maleabilidade de transações, o que permitia o roubo de bitcoins. Após detectar o ataque no início de fevereiro, eles congelaram as transações e impediram que as pessoas tirassem os bitcoins de lá. E o Mt.Gox não possui bitcoin para cobrir o rombo deixado (744,408 BTC).
E ao que parece, segurança nunca foi a preocupação #1 da empresa:
A incompetência do MtGox: o início
"quick'n'dirty bitcoin signing lib because too lazy to reimplement ECDSA in pure PHP" - github do Mark Karpeles
Link: The Guardian - Bitcoin will survive despite MtGox offline: Despite the Japanese exchange going offline and rumours of millions in theft, the digital currency will continue to evolve