Microsoft steps up Windows 10 nagging

Found on The Register on Wednesday, 16 December 2015
Browse Software

The large pop-up screen, which first appeared over the weekend, gives users the option of upgrading straight away or ... that evening.

When Microsoft announced in January that Windows 10 upgrades would be free for users of versions 7 and 8 in the first 12 months after release, many people were pleased. But as time has gone on it has become clear that Windows users aren't being offered the upgrade, so much as having it rammed down their throats.

This is partly behind predictions from analysts about how Windows 10 upgrades will bloom next year. That's something Microsoft will be praying for, especially since Windows 10 installations have been lagging of late.

That's exactly why you never should enable automatic updates and always manually go through the process, what includes looking up every KB number on your favorite search engine to figure out what it really does, because MS of course will not tell you clearly. All this has turned updates into a time consuming requirement. Updates are meant to deliver bugfixes and enhance stability. Nothing more, and especially not a new OS version.

Germany is putting an end to hate speech on the Internet

Found on CNet News on Wednesday, 16 December 2015
Browse Censorship

Under the agreement, it will be easier for anti-racism groups to flag hate speech on each of the services. The twin reports cited German laws, which ban speech that incites or instigates harmful action.

It's unclear exactly how this process will work, who will have final say and if there will be any appeal process. It's also unclear whether posts removed from view in Germany will still be accessible outside the country.

The agreement with Germany will help reduce hate speech on these sites, but it could also potentially hurt free speech on the Web.

What's next? Thailand or Saudi-Arabia can remove messages which favor democracy, or are anti-islamistic; or which support gender equality? Censorship does not work. Just because you stick your head into the sand (or someone else's head), the problem does not go away. Instead it moves deeper into the underground where it spreads. The only things that help are education and open discussions; even if that means the situation shifts into a direction you don't like, but the majority does. Those who are in control of the censorship are not by default right on every subject.

13 Million MacKeeper Users Exposed

Found on Krebs on Security on Tuesday, 15 December 2015
Browse Internet

The makers of MacKeeper — a much-maligned software utility many consider to be little more than scareware that targets Mac users — have acknowledged a breach that exposed the usernames, passwords and other information on more than 13 million customers and, er…users.

Vickery said he reached out the company, which responded quickly by shuttering public access to its user database, and publicly thanking him for reporting it.

Vickery said he was able to connect to the database that Shodan turned up for him just by cutting and pasting the information into a commercial tool built to browse Mongo databases.

Obviously they don't run a firewall, otherwise MongoDB's port would have not been accessible from outside. By default, any service should listen on localhost only so it requires extra steps to open it up to the Internet; not to mention that this includes configuring the firewall too.

Woodland rejects solar farm

Found on News Herald on Monday, 14 December 2015
Browse Various

She is a retired Northampton science teacher and is concerned that photosynthesis, which depends upon sunlight, would not happen and would keep the vegetation from growing.

She also questioned the high number of cancer deaths in the area, saying no one could tell her that solar panels didn’t cause cancer.

He said the solar farms would suck up all the energy from the sun and businesses would not come to Woodland.

There really is no limit to stupidity.

MIT Creates Untraceable Anonymous Messaging System Called Vuvuzela

Found on Softpedia on Sunday, 13 December 2015
Browse Software

Unlike Tor, which hides messages with several layers of encryption for sending them through random servers on the Internet, Vuvuzela takes a different approach, one that uses less encryption, but a lot of dummy traffic.

MIT researchers claim that attackers can even infiltrate more than half of its mailbox network, but if at least one mailbox server is left intact, users will be able to safely communicate because of all the fake traffic.

Vuvuzelas were so annoying; hopefully the dummy traffic here is equally annoying for the spooks.

UK citizens may soon need licenses to photograph some stuff they already own

Found on Ars Technica on Saturday, 12 December 2015
Browse Legal-Issues

Changes to UK copyright law will soon mean that you may need to take out a licence to photograph classic designer objects even if you own them. That's the result of the Enterprise and Regulatory Reform Act 2013, which extends the copyright of artistic objects like designer chairs from 25 years after they were first marketed to 70 years after the creator's death. In most cases, that will be well over a hundred years after the object was designed. During that period, taking a photo of the item will often require a licence from the copyright owner regardless of who owns the particular object in question.

Similar to the recent announcement that it is once again illegal to make private copies of music you own, it is unlikely the public will pay much attention to this latest example of copyright being completely out of touch with how people actually use digital technology.

All that is going out of control. It's okay to make sure that a creator gets the rights to the works, but this is getting so ridiculous. Copyright should end with the death of the creator, and copyright should not be transferable. Plus, you should own the full rights to anything you buy; no loopholes like "you only bought a license to listen to the music you just bought".

Gmail Now Offers Alerts if Sensitive Data Is Being Sent

Found on eWEEK on Friday, 11 December 2015
Browse Internet

Gmail DLP works by allowing organizations to set policies that flag messages which include sensitive information such as Social Security or credit card numbers, wrote Frey. Such a policy might say that sales department workers should not share customer credit card information with vendors, for example.

"These checks don't just apply to email text, but also to content inside common attachment types―such as documents, presentations, and spreadsheets," Frey wrote. "And admins can also create custom rules with keywords and regular expressions."

Another question is if you want to use the big data collector for your business email at all.

IoT Spending to Hit $1.3 Trillion in 2019: IDC

Found on eWEEK on Thursday, 10 December 2015
Browse Technology

Analyst firms and vendors have been predicting rapid growth for the IoT, with the number of connected devices, systems and sensors—from industrial machines and home appliances to cars, buildings and wearable devices—jumping over the next several years. Cisco Systems, for example, is predicting the number of connected "things" globally will grow from 25 billion last year to more than 50 billion in 2020.

"Smart commercial buildings will be the highest user of Internet of Things (IoT) until 2017, after which smart homes will take the lead with just over 1 billion connected things in 2018," Gartner Research Vice President Bettina Tratz-Ryan said in a statement.

You might wonder what you will get. Exploitable appliances like water kettles, child toys, your entire house and the wind turbine powering it. Just to name a few only, of course.

Kazakhstan Decides To Break The Internet, Wage All Out War On Encryption

Found on Techdirt on Wednesday, 09 December 2015
Browse Internet

A new law takes effect in the new year that will require all citizens of the country to install a national, government-mandated security certificate allowing the interception of all encrypted citizen communications. In short, the country has decided that it would be a downright nifty idea to break HTTPS and SSL, essentially launching a "man in the middle" attack on every resident of the country.

Last month, Human Rights Watch described Kazakhstan as an authoritarian dictatorship with "few tangible and meaningful human rights." Freedom House, meanwhile, ranks Kazakhstan poorly when it comes to Internet freedom.

Sounds bad? The UK and US are basically asking for the same when they demand backdoor access to all encryption.

NetHack 3.6.0 Released After a 12-Year Wait

Found on Slashdot on Tuesday, 08 December 2015
Browse Software

For the past 12 years, NetHack 3.4.3 has been the most recent version of the classic roguelike dungeon exploration game. On 7 December 2015, the official NetHack DevTeam announced the release of NetHack 3.6.0.

NetHack 3.6.0 is dedicated to the memory of the author Terry Pratchett. Besides the Tourist character class inspired by his stories, NetHack now contains "a huge number of quotes from many of the Discworld novels."

Time to play again.