Skip to main content

Thieves Busted After Stealing a Cellphone from a Security Expert's Wife

3 months 1 week ago
They stole a woman's phone in Barcelona. Unfortunately, her husband was security consultant/penetration tester Martin Vigo, reports Spain's newspaper El Pais. "His weeks-long investigation coincided with a massive two-year police operation between 2022 and 2024 in six countries where 17 people were arrested: Spain, Argentina, Colombia, Chile, Ecuador, and Peru...." In Vigo's case, the phone was locked and the "Find my iPhone" feature was activated... Once stolen, the phones are likely wrapped in aluminum foil to prevent the GPS from tracking their movements. "Then they go to a safe house where they are gathered together and shipped on pallets outside of Spain, to Morocco or China." This international step is vital to prevent the phone from being blocked if the thieves try to use it again. Carriers in several European countries share lists of the IMEIs (unique numbers for each device) of stolen devices so they can't be used. But Morocco, for example, doesn't share these lists. There, the phone can be reconnected... With hundreds or thousands of stored phones, another path begins: "They try to get the PIN," says Vigo. Why the PIN? Because with the PIN, you can change the Apple password and access the device's content. The gang had created a system to send thousands of text messages like the one Vigo received. To know who to target with the bait message, the police say, "the organization performed social profiling of the victims, since, in many cases, in addition to the phone, they also had the victim's personal belongings, such as their ID." This is how they obtained the phone numbers to send the malicious SMS... Each victim received a unique link, and the server knew which victim clicked it... With the first click, the attackers would redirect the user to a website they believed was credible, such as Apple's real iCloud site... [T]he next day you receive another text message, and you click on it, more confidently. However, that link no longer redirects you to the real Apple website, but to a flawless copy created by the criminals: that's where they ask for your PIN, and without thinking, full of hope, you enter it... "The PIN is more powerful than your fingerprint or face. With it, you can delete the victim's biometric information and add your own to access banking apps that are validated this way," says Vigo. Apple Wallet asks you to re-authenticate, and then everything is accessible... In the press release on the case, the police explained that the gang allegedly used a total of 5,300 fake websites and illegally unlocked around 1.3 million high-end devices, about 30,000 of them in Spain. Vigo tells El Pais that if the PIN doesn't unlock the device, the criminal gang then sends it to China to be "dismantled and then sent back to Europe for resale. The devices are increasingly valuable because they have more advanced chips, better cameras, and more expensive materials." To render the phone untraceable in China, "they change certain components and the IMEI. It requires a certain level of sophistication: opening the phone, changing the chip..."

Read more of this story at Slashdot.

EditorDavid

Oracle Cloud Can Be As Big As AWS This Decade

3 months 1 week ago

Wouldn’t it be funny if Larry Ellison, who has become the elder statesman of the datacenter, had the last laugh on the cloud builders and model builders by beating them at their own game? …

Oracle Cloud Can Be As Big As AWS This Decade was written by Timothy Prickett Morgan at The Next Platform.

Timothy Prickett Morgan

Is Perl the World's 10th Most Popular Programming Language?

3 months 1 week ago
TIOBE attempts to calculate programming language popularity using the number of skilled engineers, courses, and third-party vendors. And the eight most popular languages in September's rankings haven't changed since last month: 1. Python 2. C++ 3. C 4. Java 5. C# 6. JavaScript 7. Visual Basic 8. Go But by TIOBE's ranking, Perl is still the #10 most-popular programming in September (dropping from #9 in August). "One year ago Perl was at position 27 and now it suddenly pops up at position 10 again," marvels TIOBE CEO Paul Jansen. The technical reason why Perl is rated this high is because of its huge number of books on Amazon. It has 4 times more books listed than for instance PHP, or 7 times more books than Rust. The underlying "real" reason for Perl's increase of popularity is unknown to me. The only possibility I can think of is that Perl 5 is now gradually considered to become the real Perl... Perl 6/Raku is at position 129 of the TIOBE index, thus playing no role at all in the programming world. Perl 5 on the other hand is releasing more often recently, thus gaining attention. An article at the i-Programmer blog thinks Perl's resurgence could be from its text processing capabilities: Even in this era of AI, everything is still governed by text formats; text is still the King. XML, JSON calling APIs, YAML, Markdown, Log files..That means that there's still need to process it, transform it, clean it, extract from it. Perl with its first-class-citizen regular expressions, the wealth of text manipulation libraries up on CPAN and its full Unicode support of all the latest standards, was and is still the best. Simply there's no other that can match Perl's text processing capabilities. They also cite Perl's backing by the open source community, and its "getting a 'proper' OOP model in the last couple of years... People just don't know what Perl is capable of and instead prefer to be victims of FOMO ephemeral trends, chasing behind the new and shiny." Perl creator Larry Wall answered questions from Slashdot's readers in 2016. So I'd be curious from Slashdot's readers about Perl today. (Share your experiences in the comments if you're still using Perl -- or Raku...) Perl's drop to #9 means Delphi/Object Pascal rises up one rank, growing from 1.82% in August to 2.26% in September to claim September's #9 spot. "At number 11 and 1.86%, SQL is quite close to entering the top 10 again," notes TechRepublic. (SQL fell to #12 in June, which the site speculated was due to "the increased use of NoSQL databases for AI applications.") But TechRepublic adds that the #1 most popular programming language (according to TIOBE) is still Python: Perl sits at 2.03% in TIOBE's proprietary ranking system in September, up from 0.64% in January. Last year, Perl held the 27th position... Python's unstoppable rise dipped slightly from 26.14% in August to 25.98% in September. Python is still well ahead of every other language on the index.

Read more of this story at Slashdot.

EditorDavid

'Dragonfly' Mission to Saturn's Moon Titan: Behind Schedule, Overbudget, Says NASA Inspector General

3 months 1 week ago
After its six-year journey to Saturn's moon Titan, Dragonfly's rotorcraft lander "will fly like a large drone," explains its web page, spending three years sampling multiple landing sites to characterize Titan's habitability and look for "precursors of the origin of life." "However, the project has undergone multiple replans impacting cost and schedule, resulting in a life-cycle cost increase of nearly $1 billion and over 2 years of delays," according to an announcement from NASA's Inspector General. From the Inspector General's report: The cost increase and schedule delay were largely the result of NASA directing [Johns Hopkins University] Applied Physics Laboratory to conduct four replans between June 2019 and July 2023 early in Dragonfly's development. Justifications for these replans included the COVID-19 pandemic, supply chain issues, changes to accommodate a heavy-lift launch vehicle, projected funding challenges, and inflation." But its higher-than-expected life-cycle cost over $3 billion "will continue to absorb an increasing proportion of the Planetary Science Division's total budget," meaning Dragonfly's increased cost (and "additional budget constraints") have "contributed to a gap of at least 12 years in New Frontiers [planetary science] mission launches, and will jeopardize future priorities outlined in the National Academies of Sciences, Engineering, and Medicine's (National Academies) decadal surveys." Yet a NASA press release notes the mission "has cleared several key design, development and testing milestones and remains on track toward launch in July 2028." Its software-defined radio has been completed, and the part of the spectrometer which analyzes Titan's chemical components for "potentially biologically relevant" compounds (as well as structural and thermal testing of the lander's insulation). "The mission is scheduled to launch in July 2028 on a SpaceX Falcon Heavy launch vehicle from NASA's Kennedy Space Center in Florida." Thanks to long-time Slashdot reader schwit1 for spotting this news on the space/science blog "Behind the Black".

Read more of this story at Slashdot.

EditorDavid