Credit Cards: Fraud up slightly

The rate of payment fraud and credit card withdrawals increased slightly in France in 2012, said Tuesday the governor of the Bank of France Christian Noyer.In 2012, the fraud rate reached 0.080% of the amount of transactions, or € 450.7 million, against 0.077% in 2011. This rate is up for the fifth consecutive year, according to the Observatory for Payment Card Security, which released its report Tuesday.

This is mainly attributable to a significant increase in fraud at international level (11.2%) due to an increase in card theft and piracy data when traveling abroad but also to an increase in fraud on foreign websites (37%).

Noyer nevertheless welcomed the decline in the rate of payment fraud on the internet in France 'for the first time since 2008', to 0.290% against 0.341% of payments in 2011.

Rise of safety devicesThis is explained by the rise of safety devices for authentication of cardholders, which now represent 27.5% of the transactions in value against 23% in 2011.

These type devices '3 D Secure 'baptized' Verified by Visa 'and' MasterCard Secure Code 'in the two largest credit card, require an additional step when paying with the entry of a code received by SMS or Intelligence birth date.

However, the nominal amount of internet fraud has continued to grow last year and still represents 61% of total fraud.

'This is why I call on all stakeholders, including online merchants most vulnerable to fraud, to continue in 2013 actions to help secure online payments', urged the Governor of the Bank of France Christian Noyer, also president of the Observatory, at a press conference.

In addition, 'the shifting of fraud to international transactions clearly shows that the fight against fraud can not stop at the national level', said Mr Noyer.

A European forum 'Secure Pay', which brings together central bankers and supervisors, was created in this way, to coordinate prevention activities.

Read More

Java: 50 faults corrected but the software remains vulnerable

The Java environment is still in turmoil. Fifty faults have been corrected in the latest update to Oracle. But it remains vulnerable to attacks and new discoveries are still gaps. Many people advise to disable it as soon as possible.

 Java: 50 faults corrected but the software remains vulnerablePosted by Hinde Benabdelhanin on 5 February 2013.At the categories A, cybercrime, NewsKeywords: fault vulnerability, Java, update Oracle
The Java environment is still in turmoil. Fifty faults have been corrected in the latest update to Oracle. But it remains vulnerable to attacks and new discoveries are still gaps. Many people advise to disable it as soon as possible.
Java security java faillure: 50 faults corrected but the software remains vulnerableJava urgency given the magnitude of faults
Major flaws were detected in the Java Oracle Adam Gowdiak of Security Explorations. In our article "Java flaw threatens 1 billion computers in the world," we explain that these faults can "circumvent the barriers in place and run malicious code on a user's machine that would visit one trapped page, potentially allowing the hacker to take control of the computer and steal information. "
Mid-January, Homeland Security declared that "this vulnerability and earlier have been widely exploited by hackers, and new Java vulnerabilities are likely to be found."
Therefore, in an emergency, Oracle has developed an update of its system. Originally scheduled for February 19, it has overdrive and proposes two weeks in advance to update the software, the Critical Patch Update. The company explains on his blog that "Oracle has accelerated the release of this update, because the active exploitation of any of the vulnerabilities affecting the Java Runtime Environment (JRE) in browsers desktops was eliminated with this Critical Patch Update. ". Obviously Oracle recommend downloading the update as soon as possible.Java under the glare of critical
Under the spotlight, Oracle is under pressure and must meet the criticisms that have been made about the discovered vulnerabilities. Despite the 50 faults corrected, 49 were critical (!), The software is still not reliable. Given the magnitude of security breaches, Oracle stated that two years would be needed to fill them. The next update is scheduled for 18 June 2013. And what about the deficit in terms of image must also manage Oracle if it is only the crisis is far from being resolved.
In addition, U.S. authorities advise disable Java. Meanwhile, Mozilla has decided to prevent the automatic startup of the plugin. Apple had excluded from its sailors decided after this update to reactivate the default for OS X Lion, Mountain Lion and Snow Leopard.
So a tip: if you do not need Java, do not take risk, disable it.

Read More

private messages become public on facebook bug

Panic on Facebook. Metro magazine reports that due to a bug, former private messages are published in public to the Timeline.

 Everyone does not seem affected by the bug, which suggests that it is not systematic. Bug or flaw concerns private messages exchanged between 2007 and 2009. These are would display on Timeline of transmitters and receivers of these messages unbeknownst to their users.

It is not the first bug related to privacy on the network but rarely a technical problem the network has been so critical to its users.

 For now, it is very difficult to know how many people are affected by this problem, or even if there is a link (security settings) between them. About the causes of what appears to be a failure history, Facebook has not yet commented.

However, if you encounter this bug you too and your private messages back in your Timeline, here is a method to delete them.

Read More