Upwards with SBS – SBSisyphus’ Weblog

Entries categorized as ‘Security’

porn pop-ups police, felony charges dropped against Julie Amero, four years after her arrest

November 22, 2008 · Leave a Comment

This is an amazing story that drives home why malware isn’t trivial and why every person who works around a computer needs to have regular and ongoing rudimentary training on how to react to it.  Think ’stop drop and roll’ as the training for catching on fire.  In a crisis what rational thought will be there to serve as an instinctive guide when porn and nasty noises invade and violate your space?

So for malware porn pop-ups surprise scenario: “push and hold the button and turn it off“.

Kudos to Sunbelt Software executive Alex Eckelberry for stepping in to donate his and his company’s expertise to battle and eventually remove the legal felony charges that this substitute teacher purposely caused malware pop-up porn to be displayed to children.

I know users who “don’t know what the hell they are doing” and I am sure you might also.  We can help protect them and this story might just open their distracted eyes and ears up enough for that information to get through.

Connecticut drops felony charges against Julie Amero, four years after her arrest

By Rick Green on

November 21, 2008 5:16 PM |The unbelievable story of Julie Amero concluded quietly Friday afternoon at Superior Court in Norwich, with the state of Connecticut dropping four felony pornography charges.

Thumbnail image for julieamero.JPG

….

“Oh honey, it’s over. I feel wonderful,” Amero, 41, said a few minutes after accepting the deal where she also had to surrender her teaching license. “The Norwich police made a mistake. It was proven. That makes me feel like I’m on top of the world.”

…..

The case also caught the attention of computer security experts from California to Florida, who read about Amero’s conviction on Internet news sites. Recognizing the classic signs of a computer infected by malicious adware, volunteers examined computer records and the hard drive and determined that Amero was not responsible for the pornographic stream on her computer.

The state never conducted a forensic examination of the hard drive and instead relied on the expertise of a Norwich detective, with limited computer experience. Experts working for Amero ridiculed the state’s evidence, saying it was a classic case of spyware seizing control of the computer. Other experts also said that Amero’s response — she failed to turn off the computer — was not unusual in cases like this.

Among other things, the security experts found that the Norwich school system had failed to properly update software that would have blocked the pornography in the first place.

“She did not go out searching for porn. She was just stumbling around. She didn’t know what the hell she was doing,” said Alex Eckelberry, a computer software executive from Florida who helped to lead a large group of computer professionals who volunteered to assist Amero.

“All of our forensic investigators felt it was a complete miscarriage. It was clear she was absolutely innocent,” he said. “The mistakes and misinformation that occurred in that courtroom were astounding.”

Late Friday afternoon Amero — who has been hospitalized for stress and heart problems since the conviction — told me she planned to spend a quiet weekend in front of the fireplace with her husband

 

Connecticut drops felony charges against Julie Amero, four years after her arrest – Rick Green | CT Confidential

Categories: Human Engineering · Security · Web Links of Note
Tagged: , ,

Wow! a $1,132 credit charge – fraud alert easy safety net

March 26, 2008 · Leave a Comment

Albeit a non-SBS topic – I thought what I’ve learned this week to be a useful story that may help some of you. Yes, besides all the other recent issues effecting me like the flooded basement, I received an alert last Friday evening on my phone that a large purchase had been placed on my credit card. What I discovered was that a $1,132.92 item was added to my card from Dell Online.

Since I and the Mrs. have a joint account (and we’ve done well that way for 8 years) I wasn’t too aroused but still was curious. So first thing Saturday morning I saw the accompanying email alert I also arranged to be sent to me in the event anything over $200 gets charged. For the most part this has been relatively painless as I don’t generally spend that much at any given time and when I do I know what to expect. It’s my Chase safety net.

So by this time I knew this wasn’t from me or Mrs. DUIT but I thought maybe the database at Dell had merely strayed across accounts. Although that would be a bad thing, even worse is someone actually calling Dell, placing an order, and verifying it. The Dell rep told me that was what occurred and it was a projector sent to:

Amy Martin
218 Country View Rd
Monticello, Arkansas 71655
( 716) 716-7165

The zip code was legitimate to the address so this was turning interesting.

You notice anything funny about the phone number and the zip code? Me too but apparently Dell didn’t. In any case by Saturday morning Dell had already shipped the item and they claimed they had no recourse in stopping the shipment. I asked if they were going to contact the destination’s local law enforcement? The answer was “No”. I was disappointed at this point as I wanted some satisfaction in knowing this thief would be thwarted but it was not to be. Later I was passed to someone else in Dell who offered reassurance, polite “we are sorry for your inconvenience” apologies, and what else could they really say? A case was opened up to formalize the affair and then that was it. An email arrived with this information and that was that.

Fraud was happening and I needed to stop my ID theft ASAP; so I contacted Chase Bank and did just that. Additionally I discovered through trial and error that of the three credit reporting companies, Transunion had a very simple and effective telephone “fraud alert” issuance service. 1-800-680-7289 This took less than 5 minutes to complete and they would notify the other two agencies, Equifax & Experian. This did not require me giving any reason and anyone could do this at any time even right now. This lasts for 90 days and if I want I can call again to refresh it indefinitely. This is the exact same service that companies such as LifeLock charge to maintain.

The benefit to the fraud alert is that if someone actually has my ID they cannot open any lines of credit without a phone call being first made directly to me. The net effect is safe credit today and Chase is issuing me new credit cards that will arrive sometime this week in time to reconfiguring my online bill payment system for the end of month blood-letting.  It’s an inconvenience but it could have been far worse exponentially.

From the initial text alert setup through Chase’s online services, to the Transunion fraud alert, to using www.live.maps.com to check the address, to receiving verification from Dell via email, to regaining access to my credit online immediately by phone to Chase …without technology this would have been so much worse. Technology saved the day.

To summarize:

1-800-680-7289

five minutes of phone pad answers places a 90 day fraud alert at all three US credit reporting agencies – also if you want your annual free credit report (all three agencies) go to https://www.annualcreditreport.com

Categories: Disaster & Recovery · Security