The attached file can cause an out-of-bounds read of an image. While the bits of the image are null, the width, height and other values can make it a valid pointer.
Monthly Archives: February 2016
Adobe Flash BitmapData.drawWithQuality Heap Overflow
The included fuzzing test case causes a crash due to a heap overflow in BitmapData.drawWithQuality.
Red Hat Security Advisory 2016-0241-01
Red Hat Security Advisory 2016-0241-01 – Chromium is an open-source web browser, powered by WebKit. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. All Chromium users should upgrade to these updated packages, which contain Chromium version 48.0.2564.109, which corrects these issues. After installing the update, Chromium must be restarted for the changes to take effect.
Tim Cook Says Apple Will Fight US Government Over Court-Ordered iPhone Backdoor
Instagram Is Adding Two-Factor Authentication
Documentary Claims GCHQ Intel Used To Create Stuxnet
Glibc Vuln Puts All Linux Machines At Risk
Kaspersky Lab Outperforms the Competition in Overall Independent Testing for 2015
Anonymous leaks 18GB worth of data belonging to Turkey’s national police force
The hacktivist group Anonymous has released close to 18GB worth of sensitive data from Turkey’s national police database, according to reports.
The post Anonymous leaks 18GB worth of data belonging to Turkey’s national police force appeared first on We Live Security.
NSA’s Top-Secret SKYNET May Be Killing Thousands of Innocent Civilians
So what do you expect from an Artificially intelligent program run by the government intelligence agency?
Possibly killing innocent people.
The real-life SKYNET, the fictional malevolent artificial intelligence in the Terminator movies, run by the US National Security Agency (NSA) is a surveillance program that uses cell phone metadata to track the GPS location and call activities of suspected terrorists, who may be shot by a Hellfire missile.
Now, a new analysis of previously published NSA documents leaked by former NSA staffer Edward Snowden suggests that many of those people killed based on metadata may have been innocent.
Last year, the leaked documents detailing the NSA’s SKYNET programme published by The Intercept showed that NSA had used a machine learning algorithm on the cellular network metadata of 55 Million people in Pakistan to rate each citizen’s likelihood of being a terrorist.
You need to know that the US drone bombing campaigns in Pakistan have been raging for years.
Elementary Errors in SKYNET
However, the spy agency has made elementary errors in their machine-learning algorithm, which lead to the generation of thousands of false leads, potentially exposing innocent people to remote assassination by drone.
One of the leaked slides claimed that SKYNET has a false-positive rate of 0.008%, in some cases, and the NSA was using about 55 million people’s phone records for SKYNET.
But, Ars Technica points out that, even at this minute rate, many innocent people are possibly mislabeled. Some of the NSA’s tests even saw higher error rates of 0.18%, which means mislabeling nearly 99,000 people out of the 55 Million.
“There are very few ‘known terrorists’ to use to train and test the model,” Patrick Ball, the executive director of Human Rights Data Analysis Group, told the site. “If they are using the same records to train the model as they are using to test the model, their assessment of the fit is completely bullshit.”
The purpose SKYNET serves is not clear yet. Although SKYNET could be part of non-violent surveillance programs, like tracking and monitoring suspected terrorists, Ars suggests this technology could potentially be used to target drone strikes.
US Drone Strike Killed Almost 4,000 People
Since 2004, the United States government has carried out hundreds of drone strikes against alleged terrorists in Pakistan and killed somewhere between 2,500 and 4,000 people, the Bureau of Investigative Journalism reported.
The NSA has not yet commented on how the agency used SKYNET, and how the technology was trained.
But Does Killing people “Based on Metadata” actually make sense?
Maybe it is easy to say YES, it makes sense as it happened or is happening far away in a foreign land. But imagine if SKYNET gets turned on us.
