When a WordPress Plugin Goes Bad

Found on Sucuri on Saturday, 05 March 2016
Browse Internet

Custom Content Type Manager (CCTM) is a relatively popular plugin with three years of development, 10,000+ active installs, and a satisfaction rating of 4.8. It helps create custom post types. Website owners find the classical “blog format” too restrictive, use the plugin to add custom elements to their posts.

All we know is that the plugin hadn’t been updated before that for ten months. Perhaps its developer lost interest in it and accepted an offer from wooranker. On the other hand, taking into account the malicious plugin update and the fact that fireproofsocks was inactive for nearly a year, we can suspect that wooranker could have hacked into the fireproofsocks account and added themselves as a new owner.

Wordpress is used by millions of people who do really understand how things work, and who tend to install every plugin another random blogpost suggests. In the end, dozens of plugins live in the shadows, and the webmaster in almost every case does not bother to keep an eye on them, even though it is 3rd party code. This mix makes Wordpress one of the worst choices for websites.

Study: Netflix is a major reason people don’t watch network TV

Found on Ars Technica on Friday, 04 March 2016
Browse Various

Nathanson is tracking shifts in TV viewership over time, and he estimates that 2015 saw a 3 percent drop in TV viewing. This is part of an overall trend that saw a precipitous decline in TV viewership in 2014, combined with a corresponding rise in subscriptions to streaming services.

A growing percentage of households only get their media via broadband, so streaming is the most obvious option for TV. Plus, Netflix offerings are designed to be consumed any time you like. No need to buy more devices to get time-shifted shows.

A bigger reason to stop watching traditional TV channels is the awful program, mixed with way too much commcerials. You can consider yourself lucky if you can watch for 20 without interruption; and lately, broadcasters have started to adopt in-movie ad banners which take up a third of the screen.

UK government launches initiative against online adblocking, compares it to piracy

Found on The tack on Thursday, 03 March 2016
Browse Internet

Today the UK’s culture secretary John Whittingdale has announced that the British government intends to ‘do something’ on the issue, describing the practice as a ‘modern day protection racket’, and comparing it to piracy.

Last month the president and CEO of the Interactive Advertising Bureau (IAB), Randall Rothenburg, described adblocking companies as a freedom-hating ‘Mafia’.

Now the companies complain and whine, but for years they tried to bury users under blinking gifs, pop-ups, pop-unders and animated flash ads with sound which all eat up resources such as bandwidth and CPU usage; and sometimes ads also delivered drive-by installs, exploits and other malware. Not to mention the increased tracking of visitors over different websites with (flash-)cookies. At some point users were fed up because all their complains were ignored and thus fixed the problem by rigorously blocking ads. You reap what you sow.

Zynga CEO resigns – again – after terrible results

Found on The Register on Wednesday, 02 March 2016
Browse Internet

Both Pincus and Gibeau in a separate email put the blame for Zynga's failure to continue its early successes with games such as Farmville on a reduction in the social aspect of mobile games.

In the fourth quarter, Zynga saw a 24 per cent decline in its users, and revenue also fell from $193m the previous year to $186m.

Shares have fallen 20 per cent since Pincus was brought back in April 2015, but that's nothing compared to the nearly 80 per cent fall in the company's share price since it went public in 2011.

The main question is why any investor would put money in this bubble at all. After seeing a single of their games, it should be obvious that it's not made to last.

FBI is asking courts to legalize crypto backdoors because Congress won’t

Found on Ars Technica on Tuesday, 01 March 2016
Browse Various

In the first ruling of its kind, a New York magistrate said Monday he won’t require Apple to assist the government in unlocking a drug dealer’s iPhone. US Magistrate Judge James Orenstein ruled that Congress has already forbidden what the government wants. Orenstein, taking Apple’s position, ruled that President Bill Clinton-era legislation requires telcos to ensure that their facilities have surveillance capabilities like wiretapping. But the Communications Assistance For Law Enforcement Act, the judge noted, generally barred companies from having to decrypt messages.

Nobody who wants to rely on security would use devices or algorithms which are backdoored flawed and broken.

Reinvented ransomware shifts from pwning PC to wrecking websites

Found on The Register on Monday, 29 February 2016
Browse Internet

The website variant of CTB Locker is encrypting all files on WordPress-powered sites and replacing the index.php with a file that displays instructions for paying the ransom.

Victims can decrypt two separately-encrypted files for free in a bid by attackers to demonstrate the legitimacy of the ransom demand.

That is why you do backups. Restore, update and move on.

Chinese ISPs Caught Injecting Ads and Malware into Web Pages

Found on Hacker News on Sunday, 28 February 2016
Browse Internet

Chinese ISPs had set up many proxy servers to pollute the client's network traffic not only with insignificant advertisements but also malware links, in some cases, inside the websites they visit.

In general, 14 different ISPs had been discovered with malicious background, and out of these 10 are from China, 2 from malaysia, and 1 each from India and United States.

Solution? HTTPS.

Mark Zuckerberg confronts 'hate speech' in Germany and at Facebook

Found on CS Monitor on Saturday, 27 February 2016
Browse Censorship

In response to the refugee crisis in Europe, and the resulting anti-migrant Facebook postings by neo-Nazi sympathizers, the social media platform hired 200 German employees to monitor the site.

In September, Facebook announced that it would work with the German Justice Ministry to crack down on anti-migrant posts. Under German law, social media users who incite hatred or violence against an ethnic or religious group can be punished by up to three years in jail.

A long time ago, there was the impression that a working and healthy democracy can handle a level of racism and intolerance just fine; after all, it is an opinion and not everybody thinks the same way. It's depressing to see that a nation which calls itself free and welcoming decides to resort to censorship, banning and suppressing those who are not in line with the offical way of thinking; and that won't make those opinions go away magically. Where is it supposed to end? Will Zucky turn over critics who insult the king in Malaysia? After all, that is illegal there.

Tor Project Accuses CloudFlare of Mass Surveillance, Sabotaging Tor Traffic

Found on Softpedia on Friday, 26 February 2016
Browse Internet

Tor Project maintainers are saying that CloudFlare's anti-DDOS technology often malfunctions and forces users to fill in CAPTCHAs multiple times over before reaching their desired website. This issue is also confirmed by your reporter who often times had to fill in CloudFlare CAPTCHAs for more than ten times before finally being redirected to a desired website.

Currently, Tor Project maintainers are thinking of adding a message that would read "Warning this site is under surveillance by Cloudflare," whenever Tor users would be accessing a CloudFlare-protected website.

As if Tor users are more of a problem than every other user. For most, the decision to block them is just based on negative journalism, bringing Tor in connection with illegal activities.

MasterCard Says It Will Use Selfies to Replace Passwords

Found on eWEEK on Thursday, 25 February 2016
Browse Various

The credit card company has announced that its customers will soon be able to replace their passwords with a selfie and a fingerprint to verify their identity to make payments online.

Biometric solutions currently in the market include facial recognition and scans of corneas or fingerprints. Checking a customer's heartbeat using wearable technology, such as smartwatches, is also being tested.

That raises the obvious question about what happens with biometric data. If MasterCard stores the facial and fingerprint data of millions of people on their servers, law enforcement will get very interested in it.