E-Voting Firm Threatens Ed Felten

Found on Techdirt on Monday, 17 March 2008
Browse Various

It would appear that the folks at Sequoia, one of the big three e-voting firms out there, is somewhat unaware of this aspect of Felten's past. In the past few years, Felten has been one of a few top computer science experts who have been picking apart the problems with e-voting machines.

Felten has become one of the go-to guys when various governments are reviewing e-voting machines, so it should come as no surprise that election officials in New Jersey (where Felten lives and works) would be interested in having him run some tests on a Sequoia e-voting machine.

Sequoia has, instead, sent a threatening email to Felten, saying that election officials who sent a machine to Felten would be breaking the state's terms of service with Sequoia.

There's no reason to threaten a researcher who just wants to check if a system is secure; in fact, it should be highly welcomed and can be great PR. That is, if your product is secure. The more and more problems it has, the more likely it is that this check will turn into a nightmare; but then, if you create a piece of junk, you're asking for it.

Boys, 4, cuffed for refusing nap

Found on Ananova on Monday, 10 March 2008
Browse Various

Parents of two four-year-old boys in New York are suing officials after their sons were allegedly handcuffed for refusing to take a nap.

Then, a school safety officer allegedly entered the room, cuffed the boys' wrists - and told them they would never see their parents again.

Mr Agulnick said the families were seeking damages, adding: "Failure to comply with nap time is hardly an offence that warrants being handcuffed, or threatened, for that matter."

Gangsters sure start early these days. But luckily we have qualified security personal who takes care of those young and dangerous criminals. Who knows, their next coup might be refusing to eat their spinach.

Cellular carrier giving FBI unfettered access

Found on Ars Technica on Wednesday, 05 March 2008
Browse Various

Computer security analyst Babak Pasdar says that a major mobile telecommunications carrier has a built-in backdoor that provides an undisclosed third-party with unfettered access to its internal technical infrastructure, including the ability to eavesdrop on all calls through its network.

Pasdar was instructed not to migrate the traffic for one particular DS-3, which was referred to as the "Quantico Circuit" by consultants who worked closely with the carrier (the FBI Academy is based in Quantico, Virginia).

When Pasdar insisted that the Quantico Circuit should at least have the minimum level of security access logging if not access control, the consultants called the company's Director of Security, who threatened Pasdar, telling him that he would be replaced if he didn't forget about the circuit and continue with the migration.

Wired's Threat Level blog connected the pieces and points us to the 2006 wiretapping lawsuit against the telcos, which alleges that Verizon "has engaged and maintained and still does maintain a high speed data transmission line from its wireless call center to a remote location in Quantico, Virginia, the site of a U.S. government intelligence and military base."

This is particularly disturbing if the recipient of the Quantico Circuit is the FBI, because the agency has a long history of intelligence abuses and has been found to have a serious lack of meaningful internal oversight.

I bet all that will be justified with the fight against terrorism. If you want to fight for justice, you shouldn't violate the laws.

RIAA penalty charges don't make it to the artists

Found on The Inquirer on Thursday, 28 February 2008
Browse Various

P2P outfits Napster, Kazaa and Bolt.com all had to cough up millions to Universal Music, Warner Music and EMI to compensate artists for the illegal downloading of their music. But now managers claim that they've hardly seen a penny filter down to the artists, who are getting so frustrated that they have considered filing a few lawsuits themselves.

Record label sources responded to the accusations by saying that the big corporate bosses were still determining how best to divide the cash. In a process that could take a very long while to settle, the mathematically minded music industry boffins have decided to calculate how much every single specific artist is owed, with regard to the level of copyright infringement suffered by each.

I would volunteer to figure out how to divide those estimated $400 million. Just transfer it to my bank and I'll sit down and start thinking, even if that might take a really really really long time.

Spies Want to Find Terrorists in WoW

Found on Wired on Friday, 22 February 2008
Browse Various

Be careful who you frag. Having eliminated all terrorism in the real world, the U.S. intelligence community is working to develop software that will detect violent extremists infiltrating World of Warcraft and other massive multiplayer games, according to a data-mining report from the Director of National Intelligence.

The cultural and behavioral norms of virtual worlds and gaming are generally unstudied. Therefore, Reynard will seek to identify the emerging social, behavioral and cultural norms in virtual worlds and gaming environments. The project would then apply the lessons learned to determine the feasibility of automatically detecting suspicious behavior and actions in the virtual world.

Violence in Warcraft, Halo, CS or UT? That's unbelieveable and unheard of. I knew that you need to be a bad case of a paranoia nut to work for the intelligence, but this tops my expectations.

WikiLeaks Under Fire

Found on Slashdot on Sunday, 17 February 2008
Browse Various

The transparency group WikiLeaks.org currently seems to be under heavy fire. The main WikiLeaks.org DNS entry is unavailable, reportedly due to a restraining order relating to a series of articles and documents released by WikiLeaks about off-shore trust structures in the Cayman Islands.

WikiLeaks alternate names remained available until Saturday, when there seems to have been a heavy DDoS attack and a fire at the ISP. The documents in question are still available on other WikiLeaks sites, such as wikileaks.be, and are also mirrored on Cryptome.

Looks like some unpleasant revelations were made. A lawsuit, a dDoS attack and a fire at the ISP are rather unlikely to happen at the same time.

Gunman opens fire at US college

Found on BBC News on Wednesday, 13 February 2008
Browse Various

A gunman has opened fire on students at a university near Chicago in the United States, wounding at least 15 people.

The shooting took place at Northern Illinois University, in De Kalb, 65 miles (100 km) west of Chicago.

Several people have been taken to hospital with serious head wounds. University officials say police confirm that the gunman killed himself.

Last Friday, a woman shot dead two fellow students before killing herself e at Louisiana Technical College in Baton Rouge. In Memphis, Tennessee, a 17-year-old is accused of shooting and critically wounding a student on Monday, and a 15-year-old was shot at a junior high school in California on Tuesday.

No Happy Valentine for at least someone. Luckily, it looks like nobody is dead so far (except the gunman).

Second Life + Online Anonymity = Terrorism

Found on Techdirt on Wednesday, 06 February 2008
Browse Various

Just as our courts on continually pointing out that anonymity is protected free speech, it appears that the federal government is trying to do away with anonymity entirely.

Now, the government's Intelligence Advanced Research Projects Activity has come out with a fear mongering report trying to suggest that online anonymity in 3D worlds leads to terrorism. It highlights things like Second Life as a breeding ground for terrorism.

In fact, the report buries a quote from an anonymous (ha!) intelligence official admitting that there's no evidence whatsoever that any such activity is happening at all.

"Neither a man nor a crowd nor a nation can be trusted to act humanely or to think sanely under the influence of a great fear." - Bertrand Russell

Afghan Student Sentenced to Death

Found on Wired on Saturday, 02 February 2008
Browse Various

A 23-year-old student journalist in Afghanistan has been sentenced to death for downloading and distributing a report that is critical of the oppressive treatment of women in some Islamic societies.

Sayed Pervez Kambaksh, who is a journalism student at Balkh University and a writer for Jahan-e Naw, was sentenced last October after downloading a report from a Farsi website that criticized Islamic fundamentalists who misrepresent statements in the Koran to justify the oppression of women.

Other journalists have been warned that they would be arrested if they protested in support of Kambaksh.

Well, I'm not a journalist or living in an oppressive regime; neither do I belong do any "religion of peace". So I feel free to protest against this medieval trial and ruling. For those of you who want to read more, read up this article about Sayed Pervez Kambaksh.

FBI warns that "vishing" attacks are on the rise

Found on Ars Technica on Monday, 21 January 2008
Browse Various

According to the FBI's Internet Crime Complaint Center (IC3), the number of "vishing" complaints received by the center is increasing at what it calls "an alarming rate." Vishing and phishing are related, and both rely on e-mail as a means of delivering bait, but the two use different hooks in order to snag user data.

Vishing starts with an e-mail, like phishing, but requests that end-users contact a particular institution by phone in order to resolve an issue or re-secure personal data. People who call the provided number will be asked to provide the same types of data phishers attempt to procure.

As always, the best defense against phishing or vishing is a little common sense. If your bank or other financial institution with which you are affiliated contacts you requesting personal data, hang up (or call them) using only the number provided on the back of your card or official statement.

You should become suspicious when your bank suddenly is located in Nigeria.