contributed by lseek99
After being hit with a fifteen count indictment last month Max Vision (Max Butler) returned to court to hear the judge set the timetable for the trail. Max vision has been charged with interception of communications, computer intrusion and possession of stolen passwords in connection with cyber intrusions of Department of Defense computer systems in the Spring of 1998. Max had created the open source catalog of IDS signatures known as arachNIDS as well as maintained whitehats.com.

Security Focus

contributed by Weld Pond
Kevin Mitnick is making the rounds of the corporate conference circuit. In Salt Lake City next week he will lead a three-person panel discussion on cyber security issues. He will join Rob Clyde, vice president of security management at AXENT Technologies, Inc., and Kelly White, senior consultant with Context Integration in a discussion of cyber security issues.

PR Newswire - via Excite

contributed by root66
A German court has ruled that AOL Germany is liable for pirate music held on its servers. The ruling stems from a case filed by Hit box in 1998. AOL says it will appeal and that there is no technical way that it can monitor all its content all the time.

USA Today

contributed by Chris
Look Communications (formerly Internet Direct) allowed a file containing personal information on over 1,000 people, including credit card numbers to be accessible to anyone via the web. The file was in place for over five days after the company was first notified before it was removed. Toronto Star
National Post

contributed by acopalyse
Micheal Vatis, director of the FBI's National Infrastructure Protection Center has said that spoofing makes it very difficult for the law enforcement to determine where an attack originates from. Vatis proposed two possible solutions, enable civilians not bound by the fourth amendment to conduct investigations or to somehow defeat spoofing with better technology.

Computer Currents

contributed by Silicosis
L0pht Labs at @Stake has released an advisory regarding the Palm Pilot implementation of CRYPTOCard, a software challenge/response user authentication system. L0pht has found that the users PIN can be determined form the .PDB file stored on the Pilot. CRYPTOCard Corporation has already provided a list of recommendations.

L0pht Labs at @Stake
Crypto Card Corporation

contributed by ts
Mobil phone companies Ericson, Nokia, and Motorola have announced a new initiative to secure online e-commerce via mobile phones by creating an open global industry framework for more secure transactions. The companies said that they would issue technical bulletins about the initiative by the end of May.

ZD Net

contributed by cruciphux
MPAA Under DDoS Attack?
www.mpaa.org seems to have been offline for over 24 hours. Rumor has it that they are under a massive distributed denial of service attack. It is also rumored that other sites affiliated with the MPAA such as Tristar will be hit by DDoS attacks in the coming days.