Berkeley CSUA MOTD:Entry 19337
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/07/08 [General] UID:1000 Activity:popular
7/8     

2000/9/27-28 [Computer/SW/Security, Finance/Investment] UID:19337 Activity:nil
9/26    E*Trade security problem:
        http://www.sfgate.com/cgi-bin/article.cgi?file=/chronicle/archive/2000/09/26/BU22755.DTL
ERROR, url_link recursive (eces.Colorado.EDU/secure/mindterm2) 2025/07/08 [General] UID:1000 Activity:popular
7/8     

You may also be interested in these entries...
2013/10/24-11/21 [Computer/Companies/Apple] UID:54747 Activity:nil
9/19    "No, A Severed Finger Will Not Be Able to Access a Stolen iPhone 5S"
        http://mashable.com/2013/09/15/severed-finger-iphone-5s
        I'm sure the Apple QA department has tested extensively that a severed
        finger will not be able to access a stolen iPhone 5S.
        \_ It doesn't matter whether or not a severed finger can be used.  It
           matters whether or not a robber thinks that a severed finger can be
	...
2013/6/6-7/31 [Politics/Foreign/Asia/China, Computer/SW/Security] UID:54690 Activity:nil
6/6     Wow, NSA rocks. Who would have thought they had access to major
        data exchangers? I have much more respect for government workers,
        crypto experts, mathematicans now than ever.
        \_ flea to Hong Kong --> best dim-sum in the world
           \_ "flee"
        \_ The dumb ones work for DMV, the smart ones for the NSA. If you
	...
2012/8/26-11/7 [Computer/SW/Security] UID:54465 Activity:nil
8/26    Poll: how many of you pub/priv key users: 1) use private keys that
        are not password protected 2) password protect your private keys
        but don't use ssh-agent 3) use ssh-agent:
        1) .
        2) ..
        3) ...
	...
2012/8/29-11/7 [Computer/SW/Security] UID:54467 Activity:nil
8/29    There was once a CSUA web page which runs an SSH client for logging
        on to soda.  Does that page still exist?  Can someone remind me of the
        URL please?  Thx.
        \_ what do you mean? instruction on how to ssh into soda?
           \_ No I think he means the ssh applet, which, iirc, was an applet
              that implemented an ssh v1 client.  I think this page went away
	...
2012/8/7-10/17 [Computer/SW/Security] UID:54455 Activity:nil
8/6     Amazon and Apple have lame security policies:
        http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/all
        "First you call Amazon and tell them you are the account holder, and
         want to add a credit card number to the account. All you need is the
         name on the account, an associated e-mail address, and the billing
         address. "
	...
2012/7/13-8/19 [Computer/SW/Security, Computer/Companies/Yahoo] UID:54436 Activity:nil
7/13    Why would Yahoo store passwords unencrypted?  I recall that even 20+
        years ago the passwords stored in /etc/passwd on instructional
        machines here at Cal were one-way encrypted.  (I think those were
        Ultrix machines.)
        \_ Doesn't this say anything already?
           http://finance.yahoo.com/echarts?s=YHOO+Interactive#symbol=yhoo;range=5y
	...
2012/7/18-8/19 [Health/Men, Computer/SW/Security] UID:54438 Activity:nil
7/18    "Largest penis record holder arouses security suspicions at airport"
        http://www.csua.org/u/x2f (in.news.yahoo.com)
        \_ I often have that same problem.
        \_ I think the headline writer had some fun with that one.
           \_ One time when I glanced over a Yahoo News headline "U.S. busts
              largest-ever identity theft ring" all I saw was "U.S. busts
	...
2011/10/24-11/8 [Finance/Investment] UID:54201 Activity:nil
10/24  If I trade my 401K stock on a quarterly basis (reshuffle/reallocate),
       are the gains considered capital gains?  How much is taxed on 401K gains?
       \_ You don't pay taxes on your 401k until you withdraw it.
          \_ Plus you can re-invest your gains again and again without being
             taxed first.  E.g. if you invest $1000 and gain $100, you can
             re-invest the whole $1100, without being taxed on the $100 first,
	...
2011/6/27-7/30 [Finance/Investment] UID:54131 Activity:nil
6/27    What are your favorite metal trading platform? Is Kitco any good?
        I heard that Kitco doesn't report to IRS whereas Etrade
        automatically sends info to IRS. I'm wondering what I should use.
        \_ I trade tapes on Ebay.
        \_ I buy the physical stuff from a dealer in Chinatown who does not
           even take my name, just my money.
	...
2010/4/20-5/10 [Finance/Investment] UID:53793 Activity:nil
4/19    I'm thinking of getting Roth IRA. Which company is good/pleasant to
        use? Etrade? Fidelity? Scottrade?
        \_ Buy Silver.  Gold is already overvalued.  We're going to hit
           hyperinflation the likes of which even God has never seen before.
        \_ Local credit union.
        \_ I recommend charlesSchwab
	...
2009/7/24-8/6 [Finance/Investment] UID:53197 Activity:nil
7/24    Stock trading question: If on Monday I sell FOO for $20000 and
        on Tue I buy BAR for $10000 with the "unsettled" money from
        the Monday FOO sale, the only complications are if I sell BAR
        before the FOO settlement on Wed/Thr, right? If I hold BAR
        until after the FOO settlement, then there is no issue on a cash
        account? Also, if I transfer in $10000 after the purchase on Tue,
	...
2009/5/22-29 [Finance/Investment] UID:53031 Activity:nil
5/22    Dollar is fucked. Should I buy or sell Silver? I'm not touching
        GLD, it's just unpredictable.
        \_ I bought British pounds. Wish me luck.
         \_ Don't buy money.  Buy stock in a safe company that is sold in
            the currency you want to buy.
            \_ The problem is that Obama might nationalize it next week and
	...
Cache (1316 bytes)
www.sfgate.com/cgi-bin/article.cgi?file=/chronicle/archive/2000/09/26/BU22755.DTL
In what Baker described as an elementary security mistake, customer data, including ultrasensitive passwords, were included in E-Trade cookies and protected only with the most-easily broken type of code. Unauthorized people could get their hands on the cookies using basic hacking techniques and gain full access to customers' accounts. That could have let hackers trade in customers' names and remove money. E-Trade has been the victim of attacks by hackers intent on disrupting its operations. But stealing account information from a major Web brokerage would be unprecedented and would raise fundamental questions about the safety of managing finances online. Baker said he informed E-Trade security personnel of the problem more than a month ago. The company didn't remove the account information from cookies until after Baker publicized his findings Friday and reports of the problem surfaced on several Internet sites. After E-Trade's repairs yesterday, hackers can still get some account information, but can't steal passwords or carry out brokerage operations, Baker said. It's been reduced from a security problem to a privacy problem,'' he noted. No customer information has been compromised,'' said spokeswoman Heather Fondo. Fondo said she had no information about other security issues raised by Baker.