KeriBlog

Cars, Security & a Peek into my Life

A Homemade Drone Looks Like This

Drone or UAV – Unmanned Ariel Vehicle

Recognize the blank CD cases top and bottom?  No camera on board, yet.

What I really want is a Parrot AR Drone 2.0.  An on-board camera recording in 720p, 30fps, and I fly it using my iPhone, come ON.  Look at photos it takes here.

Watch professionals Team Blacksheep fly their drone through New York City, and even buzz the Statue of LIberty.  And the video’s ending is awesome.

Drones will be commonplace, in our lifetime.

I’ll leave you with a video from 2 years ago, when I saw a drone off my balcony.

 

 

 

I Invented Someone, Meet SmashCan Jimmy

He works for Smarten Up, Internet.

He’s ready for action, has all the major accounts:

I even got him into the newspaper last week, click here, right column, first paragraph:

“… until the eye comes to rest on “SmashCan Jimmy’s Dealership of Amazingness” stamped in now-faded gold lettering…”

Now he owns a car dealership.  I should update his bio.

We chuckled when Google couldn’t find his face. Like how I keep anthropomorphizing him?

The purpose of SmashCan Jimmy: I send him out

to click on scams, visit sketchy streaming sites hosted overseas,

enter contests with his work email,

his password will be password, he’s the worst.

He’ll be wide open and vulnerable to attack, get attacked, then we’ll see what happens.


(note: all the above will happen only on my old white laptop, never my work computer, never would I do this with my personal accounts and name. Be careful where you click out there).

 

1 Million Apple UDIDs Leaked Online Last Night

Last night, the hacking group AntiSec posted 1 million UDIDs online, claiming they have 11 million more, and that they had stolen them from an FBI laptop in March, when they exploited a Java vulnerability.

UDID – Unique Device ID

Think of it like a serial number for your iOS device, the fingerprint of your phone or iPad.  It is a unique, 40-character alpha-numeric number, and is used by Apple, ad networks, and app developers to identity devices.

It has long been touted as insecure (it’s sent back to app developers un-encrypted), and Apple started to phase it out in April.

Your UDID doesn’t mean much on its own, it’s like your driver’s licence number but without information like your name, address, etc.  However, according the AntiSec, they found more information attached to the numbers, but stripped it out before posting them online, which I think is kind of them.

From Forbes.com:

If the UDIDs are determined to be real, just what that means about law enforcement and Apple users’ privacy isn’t entirely clear. Much more than passwords or even email addresses, UDIDs are already spread around the Internet by app developers and advertisers–a study by one privacy researcher in 2011 found that 74% of the apps he tested sent a user’s UDID to a remote server. But the same researcher also found that five out of seven social gaming networks he tested allowed users to log in with only their UDID, making a stolen UDID equivalent to a stolen password.

How to find your UDID number

You have to do this on your computer, it’s not displayed on your iPhone.

Connect your phone to your computer.  Open iTunes, click on your device in the left column, this screen will look familiar.

Click “Serial Number’, and the number to the right will change to your UUID.  You won’t be able to copy & paste this, you’ll have to record it manually.

Next step is to check if yours was one of the million posted online.

The Next Web has created a tool to see your number was on the leaked list.

TWO THINGS  TO KNOW BEFORE YOU DO THIS.

YES, I’M YELLING HERE

1 – I can’t guarantee you this is safe.  I don’t know Next Web. What I do know though, is I found this link posted on Twitter by Mikko Hypponen, whom I met and interviewed last year at DefCon 19, who is one of the world’s leading experts in information security.    I felt confident enough to enter mine.  Best I can do, guys.

2 – Don’t paste your entire UUID into the box.  Next Web says they’re not storing the UDIDs, but continues that they’re also not being encrypted during this process.  The best thing to do is not enter your entire number; I entered only the first half of mine, good enough.

Click here to check yours.  Mine came back not leaked, and looked like this:

What do do if your UDID has been leaked?  

Call Apple.

Further Reading

Forbes

Lifehacker – definition of a UDID

Corte.si

TechCrunch

 

UPDATE: 6:40pm

The FBI has replied to the claim, made by AntiSec, that it is “totally false”. Privacy-advocacy groups are freaking out. AntiSec then said it won’t say another word, until journalist Adrian Chen poses in a tutu, on the Gawker homepage for 24 hours.

And so he did.

The hashtag #FBI has been trending on Twitter all day, that’s rare.  If you’re following the story out there, be careful what you click.

Gizmodo posted a good article, “Why You Shouldn’t Freak Out if Hackers Leaked Your Apple Device ID”

True or not, you probably thought about your online security more today than in a long time, so good.  Your online life is very valuable, treat and protect it accordingly.  

And I learned about being a part of the news cycle.