Donald Trump's mail-servers are running Windows 2003

Cory Doctorow 5:40 am Tue Oct 18, 2016

Security researcher Kevin Beaumont had a look at the mail servers operated by the Trump organization and found a veritable dumpster fire: systems running Windows 2003 (!), unpatched, badly configured.

Beaumont didn't attempt to penetrate these systems, but they sound ripe for the picking.

Trump and Clinton have traded barbs about their relative information security nous, with Trump describing information security's alpha and omega as his "10 year old son" and "400 pound guys."

According to Microsoft’s official website, “Microsoft will no longer issue security updates for any version of Windows Server 2003. If you are still running Windows Server 2003 in your datacenter, you need to take steps now to plan and execute a migration strategy to protect your infrastructure.” Microsoft ended support for that operating system in July 2015.

“It's rather worse than just using an out of date OS that can’t be kept up to date with security patches as vulnerabilities are discovered,” Professor Alan Woodward, visiting professor at the University of Surrey’s Department of Computer Science, told Motherboard in a Twitter message. “The configuration of the server appears to be somewhat less than ideal.”

Quick update on Trump corp email servers – all internet accessible, single factor auth, no MDM, Win2003, no security patching. pic.twitter.com/nIMTa9UmdL

— Kevin Beaumont (@GossiTheDog) October 17, 2016

Trump Is Running Some Really Insecure Email Servers
[Joseph Cox/Motherboard]

Finally revealed: identity of hacker blamed for stealing from 300+ companies and governments, in 44 countries

Unsealed court documents reveal the identity of Fxmsp, a hacker from Kazakhstan who is blamed for information theft from more than 300 companies and governments, in 44 different countries around… READ THE REST
IRS says it bought in to location database for millions of US cellphones to track tax crime suspects

The United States Internal Revenue Service says it purchased access to a marketing database that offers location data for millions of US cellphones, so the IRS can identify and track… READ THE REST
Google removes 106 malicious Chrome extensions with 32M downloads that collect browsing history and sensitive credentials

Following the discovery and prompting of a security researcher at Awake Security, Google says it has removed 106 malicious Chrome extensions that had 32 million downloads, and which were gathering… READ THE REST
Short Post, just one paragraph

Dessert cheesecake wafer bear claw fruitcake. Fruitcake chupa chups donut candy canes marzipan. Apple pie sweet roll tart chocolate cake macaroon marshmallow carrot cake gummi bears sweet. Pastry sugar plum… READ THE REST
Save 50% on a 1-year subscription to Dashlane's premium password manager

We all know vital information about ourselves and our private digital accounts can be compromised by cybercriminals. However, many would be frightened to know just how compromised they and their… READ THE REST
The Bite Helper removes the itch of a mosquito bite in seconds

While mosquitoes have certainly earned their title as the deadliest animal on earth, their impact on most of our lives is usually a lot less consequential. But even though they… READ THE REST