SERVICE: Defending against the Epsilon Hack

Friday, April 8, 2011

http://www.schneier.com/blog/archives/2011/04/epsilon_hack.html

Schneier on Security
A blog covering security and security technology.

April 5, 2011
Epsilon Hack

*** begin quote ***

I have no idea why the Epsilon hack is getting so much press.

Yes, millions of names and e-mail addresses might have been stolen. Yes, other customer information might have been stolen, too. Yes, this personal information could be used to create more personalized and better targeted phishing attacks.

*** end quote ***

You should shift to your own domain. Sorry, but yahoo, gmail, and hotmail make you a sitting duck for this hack.Your own domain just moves you out of the target zone.

Alpha spammers just keep trying every id from AA@yahoo.com to ZZZZZZZZZ@hotmail.com and then they turn around and repeat.

So you get “MYDOMAIN.COM”. (You can even push all the email to GMAIL for free.)

Then you create a spreadsheet or use a tool like LASTPASS, ROBOFORM, or such.

Now you assign email addresses to your correspondents. And, add a magic random string to the name, like, k7sa yk2k3 ggfn a2zq

Best Buy ==> BestBuy_k7sa @ MYDOMAIN.COM
Target ===>  Target_yk2k3  @ MYDOMAIN.COM
Verizon ===> Verizon_ggfn  @ MYDOMAIN.COM
Walgreens ==> Walgreens_a2zq @ MYDOMAIN.COM

You can then write email filters that will quarantine emails that arrive without the proper address.

If Best Buy messages come without the “k7sa”, you know that it’s not the address that you gave them.

If non-Best Buy messages come in with the “k7sa”, you know that it’s a compromised email address.

Go change your address at Best Buy and write a filter to trash any “k7sa” email.

It’s just like having unique passwords for all accounts.

# # # # #

1 Comment | SERVICE | Permalink
Posted by reinkefj

SERVICE: Epsilon #1, #2, and #3

Wednesday, April 6, 2011

A good reason to use unique email addresses for each of your “special” correspondents. Just like passwords, unique. A little bit of trouble to administrate, but it certainly isolates the trouble. And, it’s trivial to do when you have your own domain. You can even subcontract the email to GMAIL if you want by repointing a few records. It also automagicaly detects financial spam, when a message purporting to be from “your bank” arrives on the “wrong email” account. Wish I could teach this technique to more people. We could have email “security” even if the ISPs don’t want to do IPv6 or email providers, like Yahoo, won’t authenticate when email arrives from outside labeled as if originated from Yahoo itself. (I even tried to sell them a consulting engagement but they said “it wasn’t their problem”. With an attitude like that, no wonder we have problems.)

# – # – #

Walgreens
Dear Valued Customer,

On March 30th, we were informed by Epsilon, a company we use to send emails to our customers, that files containing the email addresses of some Walgreens customers were accessed without authorization.

We have been assured by Epsilon that the only information that was obtained was your email address. No other personally identifiable information was at risk because such data is not contained in Epsilon’s email system.

For your security, we encourage you to be aware of common email scams that ask for personal or sensitive information. Walgreens will not send you emails asking for your credit card number, social security number or other personally identifiable information. If ever asked for this information, you can be confident it is not from Walgreens.

We regret this has taken place and any inconvenience this may have caused you. If you have any questions regarding this issue, please contact us at 1-855-814-0010. We take your privacy very seriously, and we will continue to work diligently to protect your personal information.

Sincerely,

Walgreens Customer Service Team
PLEASE DO NOT REPLY TO THIS MESSAGE.
This is a system-generated Walgreens email. Replies will not be read or forwarded for handling.

This message was sent to

Contact Us | Unsubscribe | Update Email Address | Privacy Policy

Copyright 2010 Walgreen Co., 200 Wilmot Road, Deerfield, IL 60015-4620. All rights reserved.

# – # – #

Scottrade®
For our Chinese-speaking
customers:
As a valued Scottrade customer or someone who previously provided us with your email address, we want to make you aware of a situation that affects your email security. We have been notified by Epsilon, a company we use to send emails, that an unauthorized person outside of their company accessed records that contained your name and email address.

This incident occurred at Epsilon. We want to assure you that Scottrade’s systems were not affected and your account information remains secure.

The security of your information is important to us and we apologize for any inconvenience this may have caused. You may receive an increase in spam email as a result of this incident. We encourage you to be cautious when opening emails, links or attachments from unknown sources. Scottrade will never ask you for personal or account information in an email.

Please visit Scottrade’s Security Center http://www.scottrade.com/security/ for more information on online security.

Sincerely,

Scottrade Customer Support

Email is not a secure communications channel. Please do not reply to this message with sensitive information, such as account number, social security number or password.

Privacy Statement  Scottrade Security Center

Brokerage Products and Services offered by Scottrade, Inc. –
Member FINRA/SIPC.

To ensure Scottrade emails do not get blocked from your inbox, please add scottrade@email.scottrade.com to your address book.

This email was sent by:
Scottrade, Inc.
P.O. Box 31759
Saint Louis, MO 63131-0759

# – # – #


<!– NOTE USE OF TD PADDING TO CONTROL LINE WRAP IN THE FOLLOWING TEXT… No
–>

Verizon To ensure our emails reach your inbox, please add
email@info.verizon.com to your address book.
Dear Verizon Customer,

We have been informed by Epsilon, a provider of Verizon’s email marketing services, that your email address was exposed due to unauthorized access to its systems. Verizon uses Epsilon to send marketing communications on our behalf.

Epsilon has assured us that the information exposed was limited to email addresses, and that no other information about you or your account was exposed.

As always, you should be cautious when opening email links or attachments from unknown or suspicious parties, or emails purporting to be from Verizon and asking for financial or account password information. It is our policy to never ask for this information in emails. If you receive such emails, do not reply to them. You can report suspect or unwanted emails to Verizon at abuse@verizon.net and can obtain more information on how to protect against spam and phishing attacks on Verizon’s Privacy Policy page by clicking on “Tips for Guarding Your Information” located at the top right hand corner of the page. Our privacy policy can be found at Verizon.com/privacy.

We regret any inconvenience this may cause you. Please be assured that we take the privacy of your information very seriously.

Sincerely,

Verizon
Having trouble with the links in this email? You can also copy and paste the following address into your browser to view your account:

Ensure Verizon emails reach your inbox by adding reply-isnot-monitored@verizon.com to your “safe” email list. Your email or Internet provider can provide instructions on how it works.

This email has been sent from an auto-notification system that cannot accept incoming email.
©2011 Verizon. All Rights Reserved. Privacy Policy
Verizon Online – PO Box 33056 / St Petersburg, FL 33733

# # # # #

Leave a Comment » | SERVICE | Permalink
Posted by reinkefj

TECHNOLOGY: China’s building nuke plants

Saturday, April 2, 2011

http://dumpdc.wordpress.com/2011/03/27/china-embraces-new-nuclear-technology/

China Embraces New Nuclear Technology
by Russell D. Longcore

*** begin quote ***

Did I say ALL the reactors are using old technology? Pardon me. China has build a 10 MW (megawatt) prototype “Pebble Bed” reactor at Tsinghua University in Beijing. It holds the promise of safe nuclear-generated power going forward into tomorrow.

The Pebble Bed reactor was actually invented in 1947 by Dr. Farrington Daniels at Oak Ridge National Laboratory here in the USA. Then, German scientists took the concept and have been perfecting it since. America…to its shame…has not embraced this technology.

*** end quote ***

We need nukes to wean ourselves off imported oil. Americans tamed the frontier. Are you telling me we can’t have safe nukes?

# # # # #

Leave a Comment » | Technology | Permalink
Posted by reinkefj

HARDWARE: POGOPLUG becomes much more valuable

Thursday, March 31, 2011

201103240619.jpg

http://www.pogoplug.com/home-en.html?

For a C Note and an external USB hard drive, you have your own “cloud”. This is an amazing solution. And, the fact, that it has no monthly charge, is stunning.

Put one in a friend’s house and you have off-site backup. And, it doesn’t preclude him putting his own along side it. I can see a lot of mutual back scenarios being created.

Hurry before they raise the price.

# # # # #

Leave a Comment » | HARDWARE | Tagged: , | Permalink
Posted by reinkefj

NOTRECOMMENDED: WD MYBOOKFORMAC

Wednesday, March 30, 2011

IMHO this has been a technology disaster.

Not so much the device. I had that working in minutes.

In the accompanying software. What good is a backup device without the snazzy software that will make the backups painless.

Otherwise it’s just a USB Hard DIsk. Which is nice, but there are many on the market and many much cheaper.

I have a WD Go Flex that I bought without the snazzy software and use IBACKUP with.

During the “panic attacks” I feared for my data. And despite CARBONITE and DROPBOX and GOFLEXDRIVE, the TIMEMACHINE failure scared me. So I wanted more protection.

(I’ve done bare metal restores on WINDOZE and MACBOOKAIR, they are NOT pretty. Stuff never comes back 100%.)

I bought the MYBOOKFORMAC based on the box’s promise of simple complete backup. And, I got something that was Adobe Flash dependent and browser dependent. That’s not what I bargained for.

CAVEAT EMPTOR

And, I may be wrong but in the “support email exchanges”, I think I was dealing with a softeware robot, not a real person, Even dial 1 800 a third world country is more honest. Did these guys watch WATSON on Jeopardy and think they can fool people?

# – # – #

Recently you requested personal assistance from our on-line support center. Below is a summary of your request and our response. We hope we have answered your question(s). If we do not receive an update from you within 4 business days, the incident will automatically close. However, if you still need further assistance from us, please do not hesitate to update your question(s) or contact us at 1-800-ASK-4WDC and we will be happy to assist you further.

To update this question by email, please reply to this message. Because your reply will be automatically processed, you MUST enter your reply in the space below. Text entered into any other part of this message will be discarded.

[===> Please enter your reply BELOW this line <===]

[===> Please enter your reply ABOVE this line <===]

To access your question from our support site, click here.

Subject
wd smartware doesn’t exec
Discussion Thread
Response Via Email (Carmen D) 03/29/2011 02:18 PM
Dear Ferdinand,

Thank you for your reply.

Once again I apologize for the inconvenience. If you decide to return the product to the store you do not need an RMA number to get a credit refund from retailer. An RMA number is used for replacement purpose with our company. If you wish to get your money back for the product from store, this is something that is handled by the retailer you purchased the product. Western Digital does not refund back money to customers, if the drive is defective or needs replacement for some other reason, we proceed with RMA options.

If you wish to replace the drive, we have two warranty replacement options available to you, Advance RMA and Standard RMA. Both options are available online from our we bsite. In an Advance RMA, we will ship you the replacement drive prior to receiving your defective drive. A credit/debit card is required to insure against the receipt your defective drive. If we do not receive your drive 30 days from the date the replacement drive was shipped, the fair market value of the replacement drive will be charged/debited to your credit/debit card. In a Standard RMA, we will ship you the replacement drive only after we have received your defective product. No credit/debit card is required in a Standard RMA.

The current turnaround time for an Advance RMA is 3 to 5 business days and 5 to 7 business days for a Standard RMA.

You may create your RMA online by visiting the links below. Please remember that an RMA number is required in order to replace your defective drive.

Title: How can I check the warranty of my drive?
URL: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/std_adp.php?p_faqid=915&p_created=1047361575

Title: How can I replace a product under warranty?
URL: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/std_adp.php?p_faqid=8&p_created=1003424317

Title: Where can I get packaging and shipping information for an RMA?
URL: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/std_adp.php?p_faqid=683&p_created=1036445537

Current RMA turnaround: http://support.wdc.com/warranty/rmapost.asp

If you have any further questions, please reply to this email and we will be happy to assist you further.

Sincerely,
Carmen D
Western Digital Service and Support
http://support.wdc.com

Note: If you have not visited our community forums, please make sure to do so. You may also find answer(s) to your question(s) there.
Link to WD community forums: http://websupport.wdc.com/rn/cl.asp?i=110326-003152&e=reinkefj@gmail.com

This electronic message contains information from Western Digital and is intended only for the use of the addressee and may contain information that is confidential. The dissemination of this information is strictly prohibited. If you have received this electronic transmission in error, please respond back to this e-mail or contact us by phone (http://support.wdc.com/contact/index.asp?wdc_lang=en).
Customer By Email (Ferdinand Reinke) 03/29/2011 11:44 AM
>
> How about if you just give me an RMA and have Best Buy issue me a
> credit? This is far more than I wanted to do to get this to work.
> Nothing on the box disclosed this torture.
>
>
>
Response Via Email (Carmen D) 03/28/2011 10:23 AM
Dear Ferdinand,

Thank you for your reply.

I apologize for the inconvenience. Is the file downloading but once you click on the executable file is not running? Does the application get installed but is not performing the backup? Could you please send me a screen shot of where the issue is occurring and of any message that you get when your trying the installation of application.

If you have any further questions, please reply to this email and we will be happy to assist you further.

Sincerely,
Carmen D
Western Digital Service and Support
http://support.wdc.com

Note: If you have not visited our community forums, please make sure to do so. You may also find answer(s) to your question(s) there.
Link to WD community forums: http://websupport.wdc.com/rn/cl.asp?i=110326-003152&e=reinkefj@gmail.com

This electronic message contains information from Western Digital and is intended only for the use of the addressee and may contain information that is confidential. The dissemination of this information is strictly prohibited. If you have received this electronic transmission in error, please respond back to this e-mail or contact us by phone (http://support.wdc.com/contact/index.asp?wdc_lang=en).
Customer By Email (Ferdinand Reinke) 03/28/2011 04:42 AM
>
> Are you seriously telling me that I have to install another browser?
>

Where exactly on the box does it say that? I don’t see anything, even in the
small print, that Adobe Flash or a browser other than Chrome is required?

Now what exactly do you want me to place where to execute?

>
>
>
Customer By Email (Ferdinand Reinke) 03/28/2011 04:12 AM
>
So what you are saying, that is not on the box, that this software
doesn’t execute with Chrome?

Are you seriously saying you want me to install ANOTHER browser so that
your software can execute?

What do you want me to put where and execute?
>
>
>
>
Response Via Email (Carmen D) 03/27/2011 03:04 PM
Dear Ferdinand,

Thank you for your reply.

I truly apologize for the inconvenience. If it is not executing in Chrome try another browser. Also try to save the executable on your computer then try to install.

If you have any further questions, please reply to this email and we will be happy to assist you further.

Sincerely,
Carmen D
Western Digital Service and Support
http://support.wdc.com

Note: If you have not visited our community forums, please make sure to do so. You may also find answer(s) to your question(s) there.
Link to WD community forums: http://websupport.wdc.com/rn/cl.asp?i=110326-003152&e=reinkefj@gmail.com

This electronic message contains information from Western Digital and is intended only for the use of the addressee and may contain information that is confidential. The dissemination of this information is strictly prohibited. If you have received this electronic transmission in error, please respond back to this e-mail or contact us by phone (http://support.wdc.com/contact/index.asp?wdc_lang=en).
Customer By Email (Ferdinand Reinke) 03/27/2011 02:42 PM
>
> *** begin quote ***

Your Google Chrome browser already includes Adobe® Flash® Player
built-in. Google Chrome will automatically update when new versions of
Flash Player are available.

To learn more about the enhanced support for Flash Player in Chrome,
including information for developers, seethis TechNote
<http://www.adobe.com/go/flashplayerchrome>.

*** end quote ***

Still doesn’t work. I can copy files to and from the device. But none of
the promised utilities are available.
>
>
>
Response Via Email (Carmen D) 03/27/2011 09:31 AM
Dear Ferdinand,

Thank you for contacting Western Digital Customer Service and Support. My name is Carmen D.

I apologize for the inconvenience that you are experiencing. Please, follow the troubleshooting steps below.

1. Uninstall any versions of Smartware from your system and reboot after disconnecting the device.

Answer Title: How to uninstall WD SmartWare from Windows (7, Vista, or XP) and Mac OSX (10.4, 10.5, and 10.6)
Answer Link: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/std_adp.php?p_faqid=5373

2. Double-check that you have all high-priority AND optional updates for MAC

3. First uninstall from your add/remove programs adobe flash player, and then reinstall. Check for latest versions
of adobe flash player here: http://adobe.com and also for the Java runtime environment

4. Reconnect the device and Update the software here:

http://www.wdc.com/wdproducts/wdsmartwareupdate/Step1.asp?id=wdfMB_forMac&os=MAC

Download this updated version of the WD Smartware, and using this version, install the application, do not install the version bundled with your drive and then update to the latest version, install directly from the file downloaded from the link.

5. Try running the Smartware backup.

If you have any further questions, please reply to this email and we will be happy to assist you further.

Sincerely,
Carmen D
Western Digital Service and Support
http://support.wdc.com

Note: If you have not visited our community forums, please make sure to do so. You may also find answer(s) to your question(s) there. Link to WD community forums at: http://websupport.wdc.com/rn/cl.asp?i=110326-003152&e=reinkefj@gmail.com

This electronic message contains information from Western Digital and is intended only for the use of the addressee and may contain information that is confidential. The dissemination of this information is strictly prohibited. If you have received this electronic transmission in error, please respond back to this e-mail or contact us by phone (http://support.wdc.com/contact/index.asp?wdc_lang=en).
Auto-Response 03/26/2011 01:07 PM
Dear Ferdinand,

Thank you for your email. If you need to update your question, please click the link below to update your question. Our goal is to answer your email within one (1) business day. However, sometimes due to heavy volume, it may take us a little longer to respond (Hours of Operation: M-F 8AM-5PM PST). If you have not visited our community forums, please make sure to do so. You may find the answer(s) to your question(s) there.

Link to WD community forum: http://websupport.wdc.com/rn/cl.asp?i=110326-003152&e=reinkefj@gmail.com

Link to update my question: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/acct_login.php?p_userid=reinkefj@gmail.com

Link to contact us: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/std_adp.php?p_faqid=1048

Our knowledge base may have some suggested answers below which may resolve your question. If no answers are listed or the answers are not helpful, please allow us one (1) business day to reply to your email.
The following answers might help you immediately. (Answers open in a separate window.)

Title: How to remove (disable / hide) WD SmartWare Virtual CD (VCD) for Windows or Mac OSX on a WD My Book or WD My Passport
Link: http://wdc.custhelp.com/app/answers/detail/a_id/3835

Title: WD SmartWare for Mac OSX has an inaccurate file count in the backup and retrieve tab
Link: http://wdc.custhelp.com/app/answers/detail/a_id/6567

Title: Backing up a large file to a drive creates an endless backup loop in WD SmartWare for Mac OSX (ver. 1.2.x.x)
Link: http://wdc.custhelp.com/app/answers/detail/a_id/6557

Title: After updating WD SmartWare for Mac OSX, the backup and retrieve gauges no longer properly update
Link: http://wdc.custhelp.com/app/answers/detail/a_id/6556

Title: Switching Users on a Mac OS X 10.4 computer after installing and running SmartWare causes an error
Link: http://wdc.custhelp.com/app/answers/detail/a_id/5313

Sincerely,

# – # – #

It goes back to Best Buy today.

# – # – # – # – # 2011-Mar-30 @ 08:13

Leave a Comment » | HARDWARE, NOTRECOMMENDED | Tagged: , | Permalink
Posted by reinkefj

SERVICE: AMAZON CLOUDPLAYER just stopped

Wednesday, March 30, 2011

I knew it, I knew it. “Cloud Services” are subject to network and hosting issues.

AMAZON CLOUDPLAYER just had a “brain fart”. For at least three minutes.

For me listening to music sadly, who cares. For folks betting their ranch on a cloud strategy, they better care.

It’s back now. Let the finger pointing begin.

# – # – # – # – # 2011-Mar-30 @ 10:59

Leave a Comment » | SERVICE | Permalink
Posted by reinkefj

SERVICE: AMAZON CLOUD_DRIVE and CLOUD_PLAYER scoops Google and Apple

Tuesday, March 29, 2011

Introducing Amazon Cloud Player for Web and Android

Seems like Amazon has scooped Google and Apple. It appears to work.

Just as you should buy your ebooks for Kindle, seems like you music should be from Amazon. (The buying process is clunky! imho)

# – # – # – # – # 2011-Mar-29 @ 19:31

Leave a Comment » | SERVICE | Permalink
Posted by reinkefj

SERVICE: The problem with “cloud” services; they “disappear”

Tuesday, March 29, 2011

Ahh, yes, a plaxo competitor, but not as obnoxious, is going down.

First they stopped performing the service in January. Then, they told folks at the end of March.

It was a useful service (i.e., update your email once and it told every one who had your card). It was originally tied to the business card scanner. No word if they are going to stop selling those. (Who uses business cards today?) I doubt it.

Sigh, an idea who’s time has past.

BTW, their product still had the same fatal flaw it’s always had: YOUR data was locked in their database with no way to extract it.

I blogged that they needed to be open. Interact with Google contacts. Instead of keeping their own database, use people’s GMAIL contacts as their database. Require some innovative business and technical thinking, sure.

Go to Google and offer to make GMAIL’s contacts “social”.

I think their problem was in their thinking — memes and paradigms again — they thought they were selling business card scanners. What they should have been thinking was “we enable communication”.

They could have been LinkedIn, ACT / Salesforce, or something else.

Their thinking did them in.

RIP CARDSCAN. “Ya coulda been a contender”

# – # – #

This message contains graphics. If you do not see the graphics, click here to view.

To ensure you receive e-mails from DYMO, please add email@dymo.messages4.com to your address book.
Wrong language? Please complete your profile to receive future emails in the language of your choice.
DYMO Logo DYMO.com    |  Support    |   Forward to a Friend
CardScan @ Your Service Discontinuance notice

Dear At Your Service user,

We are contacting you because, after careful consideration, DYMO CardScan has decided to discontinue our At Your Service program effective Dec 31, 2011. Due to the cost of the hardware and network bandwidth up keep, a business decision was made to discontinue the no cost CardScan At Your Service online database program.

The first step in this process was to stop sending out the update service email notifications which just happened at the end of January 2011. We apologize for the inconvenience but users of AYS can continue to use it to back up their contacts, as well as to access their contacts remotely over the web, until the service is completely shut down at the end of this year.

Just as a reminder, our End User License Agreement specifically states that services provided in addition to the CardScan software application can be modified or discontinued at any time.

Sincerely,

The DYMO team
DYMO, a member of the Newell Rubbermaid family of brands.

Please do not respond to this email address, this mailbox is not attended. Please click here to email us directly.

# # # # #

4 Comments | SERVICE | Permalink
Posted by reinkefj

MACBOOKAIR: AppleCare …

Tuesday, March 29, 2011

fcsk-ed the disk cmd-opt-r-p reset. Reboot.

Case #212-319-493

Cross your fingers!

There’s 17 minutes of my life I’ll never get back. What life?

# – # – # – # – # 2011-Mar-29 @ 11:21

Leave a Comment » | MACBOOKAIR | Permalink
Posted by reinkefj

MACBOOKAIR: another panic; lost a document I was writing

Tuesday, March 29, 2011

Argh!

Scheduled a call with support.

Dropping back to netbook. Can’t take the losses. And interruptions.

# – # – # – # – # 2011-Mar-29 @ 09:00

Leave a Comment » | MACBOOKAIR | Permalink
Posted by reinkefj

« Previous Entries
Next Entries »