Feb 26
The Wall Street Journal reports that Verizon Communications is investigating similar security breaches at two more as-yet-unnamed retailers that occurred around the same time as the massive Target credit card hack
     |
Jul 15
Remember the 2011 attack that crippled Sony’s PlayStation Network, leaked almost a quarter million users’ information and generally was a nuisance? It’s still cleaning up after that mess. Earlier this year, the UK’s Information Commissioner’s Office (ICO) slapped the company’s European wing with a £250,000 fine ($377,575), saying it should have been better prepared for the attack — now Sony’s agreed to pay up. The electronics giant still maintains that the charge is without merit, but ceded to the penalty to avoid disclosing details about its security procedures. Apparently, the two months of free PS+ wasn’t enough to make everybody forget.
Via: Joystiq
Source: V3 (UK), ICO (Twitter)
Oct 16
Foxconn has admitted that it employed underage interns in breach of China’s child labor laws. An internal investigation at its Yantai factory found some of the young trainees were aged 14- and 15-years old (16 being the legal minimum). In a statement received by CNET, the company advised that “this is not only a violation of China’s labor law, it is also a violation of Foxconn policy and immediate steps have been taken to return the interns in question to their educational institutions.” This comes as a further blow to the firm’s employment record, after recent riots breaking out and strikes over iPhone 5 quality standards. These interns were sent to the facility from schools, with Foxconn carrying out full investigations with the relevant educational bodies to try to work out how this was allowed to happen. The tech manufacturer has been keen to accept responsibility for its part in the situation, advising strong action will be taken against any full-time members of staff found to have played a part in the breach.
Filed under: Cellphones, Tablets, Mobile, Apple
Foxconn admits child labor laws breached by use of underage interns originally appeared on Engadget on Tue, 16 Oct 2012 08:49:00 EDT. Please see our terms for use of feeds.
Permalink | 
CNET | Email this | Comments
Sep 27
European Commission set to fine Microsoft over 2009 browser compliance breach
Posted in: Today's Chili 
The European Commission is planning to fine Microsoft for its failure to adhere to a 2009 ruling that required the software giant to offer customers a choice of default web browser. The EU Competition Commissioner, Joaquin Almuni, advised the press that a formal proceeding into the breach — which Microsoft itself acknowledges — has begun. Reuters reports that should Microsoft be found on the wrong side of the law, that the resulting fine could be as much as 10 percent of its global turnover. Whether the end sum would be as high as this remains to be seen, but given recent events, you can expected some hurried shuffling of paper in Redmond’s accounts department.
Filed under: Internet, Software
European Commission set to fine Microsoft over 2009 browser compliance breach originally appeared on Engadget on Thu, 27 Sep 2012 06:45:00 EDT. Please see our terms for use of feeds.
Jul 27
Back in 2010, Google caught a bit of flak when a “rogue engineer” used Street View cars to harvest personal Wi-Fi data. Now it’s poised to catch some more; Authorities in the UK found Google’s been holding onto some of it for the past two years. More »
Jul 12
Online account security breaches are seemingly commonplace these days — just ask LinkedIn or Sony — and now we can add Yahoo’s name to the list of hacking victims. The company’s confirmed that it had the usernames and passwords of over 400,000 accounts stolen from its servers earlier this week and the data was briefly posted online. The credentials have since been pulled from the web, but it turns out they weren’t just for Yahoo accounts, as Gmail, AOL, Hotmail, Comcast, MSN, SBC Global, Verizon, BellSouth and Live.com login info was also pilfered and placed on display. The good news? Those responsible for the breach said that the deed was done to simply show Yahoo the weaknesses in its software security. To wit:
We hope that the parties responsible for managing the security of this subdomain will take this as a wake-up call, and not as a threat. There have been many security holes exploited in Web servers belonging to Yahoo Inc. that have caused far greater damage than our disclosure. Please do not take them lightly. The subdomain and vulnerable parameters have not been posted to avoid further damage.
In response, Yahoo’s saying that a fix for the vulnerability is in the works, but the investigation is ongoing and its system has yet to be fully secured. In the meantime, the company apologized for the breach and is advising users to change their passwords accordingly. You can read the official party line below.
At Yahoo! we take security very seriously and invest heavily in protective measures to ensure the security of our users and their data across all our products. We confirm that an older file from Yahoo! Contributor Network (previously Associated Content) containing approximately 400,000 Yahoo! and other company users names and passwords was stolen yesterday, July 11. Of these, less than 5% of the Yahoo! accounts had valid passwords. We are fixing the vulnerability that led to the disclosure of this data, changing the passwords of the affected Yahoo! users and notifying the companies whose users accounts may have been compromised. We apologize to affected users. We encourage users to change their passwords on a regular basis and also familiarize themselves with our online safety tips at security.yahoo.com.
Filed under: Internet
Yahoo confirms server breach, over 400k accounts compromised originally appeared on Engadget on Thu, 12 Jul 2012 14:41:00 EDT. Please see our terms for use of feeds.
Permalink | TechCrunch, New York Times | Email this | Comments
Who's in charge here?
This is site is run by Sascha Endlicher, M.A., during ungodly late night hours. Wanna know more about him? Connect via Social Media by jumping to about.me/sascha.endlicher.