cryptogon.com

From the end of the Soviet Union – which spawned currencies such as the Estonian Kroon and the Kazakh Tenge – to the introduction of the euro, they have had plenty of practice in preparing their systems to cope with change.

Planning behind the scenes has been underway since Europe’s debt crisis erupted in Greece in 2009, said U.S.-based Hartmut Grossman of ICS Risk Advisors who works with Wall Street banks.

“A lot of the firms, particularly in Europe and also here, have been looking at that for a long time,” said Grossman, who added that the latest Greek political crisis had brought matters “to a little bit of a head”.

The backdoor, which cannot be disabled, is found in all versions of the Rugged Operating System made by RuggedCom, according to independent researcher Justin W. Clarke, who works in the energy sector. The login credentials for the backdoor include a static username, “factory,” that was assigned by the vendor and can’t be changed by customers, and a dynamically generated password that is based on the individual MAC address, or media access control address, for any specific device.

Attackers can uncover the password for a device simply by inserting the MAC address, if known, into a simple Perl script that Clarke wrote. MAC addresses for some devices can be learned by doing a search with SHODAN, a search tool that allows users to find internet-connected devices, such as industrial control systems and their components, using simple search terms.

Clarke, who is based in San Francisco, says he discovered the backdoor after purchasing two used RuggedCom devices – an RS900 switch and an RS400 serial server – on eBay for less than $100 and examining the firmware installed on them.

Clarke said the equipment had labels on them with French writing that made it appear they had been used for a substation at a utility in Canada.

RuggedCom switches and servers are used in “mission-critical” communication networks that operate power grids and railway and traffic control systems as well as manufacturing facilities. RuggedCom asserts on its website that its products are “the product of choice for high-reliability, high-availability, mission-critical communications networks deployed in harsh environments around the world.”

Clarke says he notified RuggedCom about his discovery in April 2011 and says the representative he spoke with acknowledged the existence of the backdoor.

Stop me if you’ve heard this one before: Microsoft muscles aside other browsers and cements the dominance of Internet Explorer. The browser market, deprived of competition, stagnates.

That, of course, is what happened during the first browser war of the 1990s and beyond, on personal computers. Today, Mozilla’s top lawyer warned that Microsoft’s behavior threatens a repeat of history, because it’s telling Mozilla that it’s barring Firefox from forthcoming Windows 8 machines that use ARM processors.

“They’re trying to make a new version of their operating system which denies their users choice, competition, and innovation,” said Harvey Anderson, Mozilla’s general counsel. “Making IE the only browser on that platform is a complete return to the digital dark ages when there was only one browser on the Windows platform.”

Anderson has been discussing the matter with his counterparts at Microsoft, but the company hasn’t budged.

But there was the thunderous whump whump of low-flying helicopters, and even the jarring blast of explosions at the abandoned Grand Bay Hotel in Coconut Grove early Tuesday during a military training exercise that jolted many unsuspecting residents from their beds.

…

The maneuvers were part of a “realistic urban training” exercise for about 100 military personnel, and organized by the U.S. Special Operations Command, said Maj. Michael Burns, a U.S. Army spokesman. The exercise also included three military helicopters, and the use of simulated explosions and gunfire to mimic real-life military scenarios.

“They have to train in a realistic environment,” Burns said. “We didn’t use any real bullets,” he added reassuringly.

Miami police assisted in overseeing the exercises — but they were instructed to keep quiet about the exercises until late Monday, for security reasons. The police also blocked off roads around the Grand Bay during the exercise, Muir said.

Just days after high-level US-China economic talks in Beijing, the Federal Reserve approved an application from Industrial and Commercial Bank of China to buy a majority stake in the US subsidiary of Bank of East Asia.

The transaction will make ICBC the first Chinese state-controlled bank to acquire retail bank branches in the United States.

ICBC has been the most aggressive of China’s “big four” banks in expanding overseas.

According to the Fed the bank has total assets of roughly $2.5 trillion.

The Air Force, like the rest of the military and the CIA, isn’t supposed to conduct “nonconsensual surveillance” on Americans domestically, according to an Apr. 23 instruction from the flying service. But should the drones taking off over American soil accidentally keep their cameras rolling and their sensors engaged, well … that’s a different story.

“Collected imagery may incidentally include US persons or private property without consent,” reads the instruction (.pdf), unearthed by the secrecy scholar Steven Aftergood of the Federation of American Scientists. That kind of “incidental” spying won’t be immediately purged, however. The Air Force has “a period not to exceed 90 days” to get rid of it — while it determines “whether that information may be collected under the provisions” of a Pentagon directive that authorizes limited domestic spying.