“The spyware that penetrated his laptop appears to be a Western-made surveillance tool sold to police and intelligence agencies that’s so powerful it can turn on webcams and microphones and grab documents off hard drives…”

“Six days later, another assailant cornered Mansoor on campus and without saying a word dragged him to the ground and punched him in his head until a crowd gathered, he says. Doctors X-rayed his skull, dressed his wounds and gave him a tetanus injection, according to hospital records that describe him as the victim of an assault. “

http://www.businessweek.com/news/2012-10-10/spyware-leaves-trail-to-beaten-activist-through-microsoft-flaw

This was posted 5 months ago. It has 2 notes.

Big Dog learns to sit, roll over and heel. Our tax dollars at work designing the unstoppable beast that will track us through the forest in our final days.

This was posted 5 months ago. It has 3 notes.

The first weapon made entirely out of code

An infographic dissecting the nature and ramifications of Stuxnet, the first weapon made entirely out of code. This was produced for Australian TV program HungryBeast on Australia’s ABC1.

It was a winner at this year’s Information Is Beautiful Awards.

This was posted 7 months ago. It has 3 notes.
Malware designed to build 3-D models of users’ apartments for burglars and assassins
“Newly released malware PlaceRaider sounds like science fiction: It’s Android malware designed to build 3-D models of users’ apartments for burglars and assassins. But PlaceRaider—developed by a team at Indiana University—is very real. The new malware was built as an academic exercise, and it exposes security flaws that government agencies would love to use. More importantly, it also exposes unintended mobile functionality that large companies like Google could easily monetize.”
From Fast Company.

Malware designed to build 3-D models of users’ apartments for burglars and assassins

“Newly released malware PlaceRaider sounds like science fiction: It’s Android malware designed to build 3-D models of users’ apartments for burglars and assassins. But PlaceRaider—developed by a team at Indiana University—is very real. The new malware was built as an academic exercise, and it exposes security flaws that government agencies would love to use. More importantly, it also exposes unintended mobile functionality that large companies like Google could easily monetize.”

From Fast Company.

This was posted 7 months ago. It has 2 notes. .
Storing Millions Of People’s Voices In A Voice-Recognition Database

goldenratioent:

Via Slate

Intercepting thousands of phone calls is easy for government agencies. But quickly analyzing the calls and identifying the callers can prove a difficult task. Now one company believes it has solved the problem—with a countrywide biometric database designed to store millions of people’s “voice-prints.”

This was posted 7 months ago. It has 2 notes.
“Researchers have identified five of the genes that shape a person’s face, work that could help scientists better understand facial abnormalities like cleft palate and someday might even help forensic investigators determine what a criminal suspect looks like from crime-scene DNA.”Read more: http://www.foxnews.com/science/2012/09/16/5-face-shaping-genes-identified
The study was published on September 13th in PLoS Genetics.
“Using DNA samples to recognize a suspect is currently a far-fetched, ‘CSI’-like scenario….
It’s a little less far-fetched in the case of eye and hair color. Kayser and colleagues in August released HIrisPlex, a system that allows researchers to predict eye and hair color from DNA samples, although only from people of European descent. The forensic test is nearly 70 percent accurate in identifying blonds and up to 87.5 percent accurate for dark-haired individuals.”

“Researchers have identified five of the genes that shape a person’s face, work that could help scientists better understand facial abnormalities like cleft palate and someday might even help forensic investigators determine what a criminal suspect looks like from crime-scene DNA.”

Read more: http://www.foxnews.com/science/2012/09/16/5-face-shaping-genes-identified

The study was published on September 13th in PLoS Genetics.

“Using DNA samples to recognize a suspect is currently a far-fetched, ‘CSI’-like scenario….

It’s a little less far-fetched in the case of eye and hair color. Kayser and colleagues in August released HIrisPlex, a system that allows researchers to predict eye and hair color from DNA samples, although only from people of European descent. The forensic test is nearly 70 percent accurate in identifying blonds and up to 87.5 percent accurate for dark-haired individuals.”


This was posted 8 months ago. It has 2 notes. .

Autonomous Multi-Floor Indoor Navigation with a Computationally Constrained MAV

This video is simply amazing. This flying robot maps a building internally, going up stairs and returning to its starting point. It is autonomous. What a powerful reconnaissance device.

“This video shows our results on autonomous multi-floor indoor navigation with a quadrotor. We designed a system that is capable of autonomous navigation with real-time performance on a mobile processor using only onboard sensors. Specifically, we address multi-floor mapping with loop closure, localization, planning, and autonomous control, including adaptation to aerodynamic effects during traversal through spaces with low vertical clearance or strong external disturbances. All of the computation is done onboard the 1.6Ghz Intel Atom processor and uses ROS for interprocess communication. Human interaction is limited to provide high-level goals to the robot.”

This was posted 8 months ago. It has 1 note.

Real Swarm of Flying Nano Quadrotors Doing Flight Tricks HD 

The nerd in me loves these little machines and is impressed with the sophistication of the algos.

The futurist in me would not like to be tracked through a building by a coordinated swarm of flying nano-bots.

These seem best suited for indoor use where there is no danger of gusts of winds, thereby suggesting some simple counter-measures (like a fan).

These bots are well suited for mapping internal spaces as well (video to follow in next post).

This was posted 8 months ago. It has 1 note.
We’d like to avoid a war with superhuman machines, because humans would lose — and we’d lose more quickly than is depicted in, say, The Terminator.
Luke Muehlhauser, CEO of the Singularity Institute (via reddit)

(via twicr)

This was posted 8 months ago. It has 40 notes.
How the NSA uses GPS Spoofing: from a Washington Post article on ‘Top Secret America’:
“Most people don’t realize when they’re nearing the epicenter of Fort Meade’s, even when the GPS on their car dashboard suddenly begins giving incorrect directions, trapping the driver in a series of U-turns, because the government is jamming all nearby signals.”
 The bldgblog takes this a step further:
“It’s an experiential trap street—an infinite loop—a deliberate cartographic error introduced into the mapping of the world so as to sow detour and digression. A kind of digital baffling, or recursive geography as state defensive tactic.
 I’m also curious when we might see this privatized and domesticated—gated communities, for instance, blocking the GPS navigation of their streets in the misguided belief that this will help protect them from future burglary, effectively delisting themselves from public cartographic records. Perhaps the future of neighborhood security lies in the privatized repurposing of advanced signal-jamming technology, the misleading lamination of other, false maps onto the streets as they really exist.”

How the NSA uses GPS Spoofing: from a Washington Post article on ‘Top Secret America’:

“Most people don’t realize when they’re nearing the epicenter of Fort Meade’s, even when the GPS on their car dashboard suddenly begins giving incorrect directions, trapping the driver in a series of U-turns, because the government is jamming all nearby signals.”

 The bldgblog takes this a step further:

“It’s an experiential trap street—an infinite loop—a deliberate cartographic error introduced into the mapping of the world so as to sow detour and digression. A kind of digital baffling, or recursive geography as state defensive tactic.


I’m also curious when we might see this privatized and domesticated—gated communities, for instance, blocking the GPS navigation of their streets in the misguided belief that this will help protect them from future burglary, effectively delisting themselves from public cartographic records. Perhaps the future of neighborhood security lies in the privatized repurposing of advanced signal-jamming technology, the misleading lamination of other, false maps onto the streets as they really exist.”

This was posted 8 months ago. It has 0 notes. .
GPS Spoofing

From Wikipedia:

A GPS spoofing attack attempts to deceive a GPS receiver by broadcasting a slightly more powerful signal than that received from the GPS satellites, structured to resemble a set of normal GPS signals. These spoofed signals, however, are modified in such a way as to cause the receiver to determine its position to be somewhere other than where it actually is, specifically somewhere determined by the attacker. Because GPS systems work by measuring the time it takes for a signal to travel from the satellite to the receiver, a successful spoofing requires that the attacker know precisely where the target is so that the spoofed signal can be structured with the proper signal delays. A GPS spoofing attack begins by broadcasting a slightly more powerful signal that produces the correct position, and then slowly deviates away towards the position desired by the spoofer, because moving too quickly will cause the receiver to lose signal lock altogether, at which point the spoofer works only as a jammer. It has been suggested that the capture of a Lockheed RQ-170 drone aircraft in northeastern Iran in December, 2011, was the result of such an attack. GPS spoofing attacks had been predicted and discussed in the GPS community previously, but no known example of a malicious spoofing attack has yet been confirmed.

This was posted 8 months ago. It has 0 notes.
"This call may be recorded for quality or training purposes" often means that an algorithm has been invited in for a listen.

Great article in Sunday’s Wall St. Journal. This bit stood out however:

“Algorithms also have invaded areas of our lives that might seem too personal for mere automation. We are all familiar with the words “this call may be recorded for quality or training purposes.” Though that message may sometimes mean just what it says, it often means that an algorithm has been invited in for a listen.

Using only the words you say in a three-minute conversation, more than five million eavesdropping algorithms, created by a company called Mattersight, determine your personality type, what you want and how you might be most easily and quickly satisfied by the customer-service agent. ”

This calls for creative counter-measures. Not for this particular use-case, but in general you don’t want the system learning about your personality type. So your dialog needs to be scrambled to poison the algo.

This was posted 8 months ago. It has 0 notes.
Sixth Circuit: No Expectation of Privacy in Cell Phone GPS Data

The U.S. Court of Appeals for the Sixth Circuit ruled that the Drug Enforcement Administration committed no Fourth Amendment violation in using a drug runner’s cellphone data to track his whereabouts.

So: It is legal and feasible for the government to track your location via the GPS data that it transmits. 

This was posted 9 months ago. It has 0 notes.
joshbyard:

As Brain-Computer Interfaces Approach the Mainstream, Hackers Demonstrate Security Vulnerabilities, “Backdoor for the Brain”

To extract this information, the researchers rely on what’s known as the P300 response — a very specific brainwave pattern …that occurs when you recognize something that is meaningful (a person’s face), or when you recognize something that fits your current task (a hammer in the shed).
The researchers basically designed a program that flashes up pictures of maps, banks, and card PINs, and makes a note every time your brain experiences a P300.
Afterwards, it’s easy to pore through the data and work out — with fairly good accuracy — where a person banks, where they live, and so on.

In a real-world scenario, the researchers foresee a game that is specially tailored by hackers to extract sensitive information from your brain — or perhaps an attack vector that also uses social engineering to lull you into a false sense of security. It’s harder to extract data from someone who knows they’re being attacked — as interrogators and torturers well know.

(via Hackers backdoor the human brain, successfully extract sensitive data | ExtremeTech)

joshbyard:

As Brain-Computer Interfaces Approach the Mainstream, Hackers Demonstrate Security Vulnerabilities, “Backdoor for the Brain”

To extract this information, the researchers rely on what’s known as the P300 response — a very specific brainwave pattern …that occurs when you recognize something that is meaningful (a person’s face), or when you recognize something that fits your current task (a hammer in the shed).

The researchers basically designed a program that flashes up pictures of maps, banks, and card PINs, and makes a note every time your brain experiences a P300.

Afterwards, it’s easy to pore through the data and work out — with fairly good accuracy — where a person banks, where they live, and so on.

In a real-world scenario, the researchers foresee a game that is specially tailored by hackers to extract sensitive information from your brain — or perhaps an attack vector that also uses social engineering to lull you into a false sense of security. It’s harder to extract data from someone who knows they’re being attacked — as interrogators and torturers well know.

(via Hackers backdoor the human brain, successfully extract sensitive data | ExtremeTech)

This was posted 9 months ago. It has 11 notes. .
Poisoning Attacks against Support Vector Machines
Abstract: “We investigate a family of poisoning attacks against Support Vector Machines (SVM). Such attacks inject specially crafted training data that increases the SVM’s test error. Central to the motivation for these attacks is the fact that most learning algorithms assume that their training data comes from a natural or well-behaved distribution. However, this assumption does not generally hold in security-sensitive settings. As we demonstrate, an intelligent adversary can, to some extent, predict the change of the SVM’s decision function due to malicious input and use this ability to construct malicious data.”
What is an SVM? From Wikipedia we learn: “In machine learning, support vector machines are supervised learning models with associated learning algorithms that analyze data and recognize patterns, used for classification and regression analysis. The basic SVM takes a set of input data and predicts, for each given input, which of two possible classes forms the input, making it a non-probabilistic binary linear classifier. Given a set of training examples, each marked as belonging to one of two categories, an SVM training algorithm builds a model that assigns new examples into one category or the other. “

Or more simply (from i-programmer): “Support Vector Machines (SVMs) are fairly simple learning devices. They use examples to make classifications or decisions. Although still regarded as an experimental technique, SVMs are used in security settings to detect abnormal behavior such as fraud, credit card use anomalies and even to weed out spam.”

Poisoning Attacks against Support Vector Machines

Abstract: “We investigate a family of poisoning attacks against Support Vector Machines (SVM). Such attacks inject specially crafted training data that increases the SVM’s test error. Central to the motivation for these attacks is the fact that most learning algorithms assume that their training data comes from a natural or well-behaved distribution. However, this assumption does not generally hold in security-sensitive settings. As we demonstrate, an intelligent adversary can, to some extent, predict the change of the SVM’s decision function due to malicious input and use this ability to construct malicious data.”

What is an SVM? From Wikipedia we learn: “In machine learning, support vector machines are supervised learning models with associated learning algorithms that analyze data and recognize patterns, used for classification and regression analysis. The basic SVM takes a set of input data and predicts, for each given input, which of two possible classes forms the input, making it a non-probabilistic binary linear classifier. Given a set of training examples, each marked as belonging to one of two categories, an SVM training algorithm builds a model that assigns new examples into one category or the other. “
Or more simply (from i-programmer): “Support Vector Machines (SVMs) are fairly simple learning devices. They use examples to make classifications or decisions. Although still regarded as an experimental technique, SVMs are used in security settings to detect abnormal behavior such as fraud, credit card use anomalies and even to weed out spam.”

This was posted 9 months ago. It has 2 notes. .