PDF Redaction Still Not Working

facebook

Facebook’s internal valuation was revealed this week thanks to shoddy PDF redaction. Court documents from a settlement between Facebook and ConnectU showed that Facebook values itself at $3.7 billion, much less than the $15 billion that was speculated during the Microsoft investment. The AP uncovered this by cutting and pasting from the redacted court document. It’s the same thing we showed in our PDF redaction screencast last summer… and it will never cease to be funny.

[photo: Bryan Veloso]

Curiosity Killed The Twit, Twitter Clickjacking

dontclick

Twitter was flooded this morning with users posting “Don’t Click: http://tinyurl.com/amgzs6”. TinyURL has since terminated the URL. The original page doesn’t seem to be live either. It displayed a button that said “Don’t Click”. If the user happened to be logged into Twitter, it would automatically update their status. The instigator partially describes the method on his blog (translated). The page would load the user’s Twitter page in an invisible iframe. The status would be pasted in and the “Don’t Click” button is placed on top of the update button. You can find the code snippets here and the original author credits this post for the inspiration. Twitter has since added a JavaScript fragment to each page to break out of iframes.

if (window.top !== window.self) { window.top.location.href = window.self.location.href; }

Defcon 17 Call For Papers

defcon

Notorious hacker conference Defcon has just published their Call for Papers. The 17th annual event will happen July 30th through August 2nd. Most of the announcement is the same boilerplate they’ve included for the past two years. Like last year, they’re not defining the specific speaking track themes and will come up with them based on submissions. New for this year is a half-day of workshops on the Thursday before Defcon for anyone that’s showing up early. This pre-con event is targeted at newbies. It certainly sounds like an interesting way to ease into Defcon instead of the usual delays and fire marshals. We’ve been attending every year since 2005 and love seeing new things. You should definitely consider presenting this year (we want to see more hardware!).

Radio Controlled Beetle

Scientists at the university of California have managed to implant a chip in a giant flower beetle that makes it respond to commands from the computer. They can tell it to fly, stop, turn left and turn right.  The controls are done through its optic nerves and wing muscles. Though the article states that flight signals are sent to the optic lobes and steering is done through stimulation of the wing muscles, the video shows steering being accomplished through optic lobe stimulation.

Though we’re sure there’s some grand scientific goal behind this, we can’t help but think (hope) that we’ll be seeing giant robot controlled beetle battles with lasers and rockets.

TinkerKit, Physical Computing Toolkit

tinkerkit

TinkerKit is a collection of 20 different sensors and 10 actuators. It’s meant to make prototyping of physical computing devices much quicker/easier. The devices plug into a Sensor Hub Arduino shield. There is also a similar hub board that can emulate a keyboard; it translates sensor input directly to key strokes. It looks like a very ambitious project and it’s still in development. We love the idea though and think the wide variety of components will foster better final designs. The TinkerKit site covers the current component lineup and there’s a demo video embedded below.

Continue reading “TinkerKit, Physical Computing Toolkit”

Parking Violation Leads To Malware Download

parking

It seems some enterprising individual in Grand Forks, North Dakota has been placing fake parking violations on cars. If the recipient visited the URL on the flyer, they would be told to install a toolbar to view pictures of their vehicle. That piece of malicious software would then attempt to install several more. The actual vehicle pictures were from Grand Forks, but we wouldn’t be surprised to see a similar attack happen in a much larger city.

SparkFun Releases RGB Button Controller

rgb_button

SparkFun has been selling button pad parts for some time and we used them in our RGB door lock project. A excellent part, but you needed to implement your own interface to use the boards. SparkFun has just released two additional versions to make it easier on builders. The first is their Button Pad Controller USB. It has a 4×4 grid of buttons lit by RGB LEDs and a USB interface. This board can be expanded using the Button Pad Controller SPI. The SPI bus means it should be easy to add the button pad to embedded projects. This newest release puts you much closer to building your own RGB monome clone or other custom controller than ever before. The unit pictured above is their own project and they have no plans on selling anything like it.