Pirate Bay domain suspended thanks to controversial verification system

Found on The Register on Monday, 07 December 2015
Browse Filesharing

Broadly, the companies that sell domains to users – called registrars – are now required to send a verification email to the domain name holders every time a new domain is registered or the domain details are modified.

In theory, the validation process is extremely easy: you receive an email from your registrar and simply have to click on a link to verify that the domain's registration information is true and accurate. Then you are done.

The suspension is under ICANN's control and there is little or nothing that your registrar can do about it. The problem of course is the system relies on people receiving and responding to an email.

For years and years people are warned not to click on random links they receive via email, and ICANN wants to rely on just that. Why bother at all? As long as a domain is being paid for, someone obviuosly has an interest in it; and for "fighting terrorists" it should be simple for the feds to track the money. On the other hand, IP lawyers don't have access to that.

Bye, bye, bananas

Found on Washington Post on Sunday, 06 December 2015
Browse Science

In the mid 1900s, the most popular banana in the world—a sweet, creamy variety called Gros Michel grown in Latin America—all but disappeared from the planet. At the time, it was the only banana in the world that could be exported. But a fungus, known as Panama Disease, which first appeared in Australia in the late 1800s, changed that after jumping continents.

Now, half a century later, a new strain of the disease is threatening the existence of the Cavendish, the banana that replaced the Gros Michel as the world's top banana export, representing 99 percent of the market, along with a number of banana varieties produced and eaten locally around the world.

The Cavendish is less desirable, more susceptible to other diseases, has a tendency to bruise, doesn't ripen easily or last very long before spoiling, and is "lamentably bland," as Mike Peed wrote in a 2011 piece for the New Yorker.

Biodiversity, ever heard of it? Obviously companies like Dole and Chiquita haven't. Of course neither did Monsanto. That's why as many different varieties as possible should be cultivated; not only would it reduce the effects of a disease, but it also would make shopping much more interesting.

More Than 80% of Mobile Apps Have Encryption Flaws, Study Finds

Found on eWEEK on Saturday, 05 December 2015
Browse Hardware

More than 80 percent of mobile devices have encryption flaws, while an application written in any of a trio of scripting languages—including PHP, ColdFusion and Classic ASP—are more likely to have serious flaws.

Many companies' security programs have become more mature, but a large number of smaller software startups have cropped up, with novice programmers in many cases, Wysopal said.

"These things are easy to fix, but they are so pervasive it goes to show that the mobile developers are really ignorant about how to write good crypto code," he said.

Maybe it would be a decent idea to make them liable for bad practices. Bugs can always happen, but neglecting established and known security approaches should not happen. Obviously it is common practice to produce insecure toys which are a security nightmares.

Sysadmin's £100,000 revenge after sudden sacking

Found on The Register on Friday, 04 December 2015
Browse Pranks

“The European office couldn't wait, however, so James “used an aggregated on-demand international ISDN connection so the databases could sync as required.”

“This was massively expensive, but was only needed for two weeks before we could place the order for broadband. The system worked fine unattended, and everyone was happy as the ERP system worked flawlessly.”

Despite the outbreak of happiness, “a week later the IT Manager called me into a meeting with HR to inform me I had been made redundant, effectively immediately.”

“Two months later,” James wrote, “I received a call from the horrified IT Director (the IT Manager himself had been made redundant straight after me), to ask if I knew why they faced an ISDN bill for over £100,000.”

Always think twice before you fire someone.

Let's Encrypt Enters Public Beta

Found on Electronic Frontier Foundation on Thursday, 03 December 2015
Browse Internet

EFF's Encrypt the Web project aims to fix that, and Let's Encrypt—a collaboration with Mozilla, the University of Michigan, Cisco, Akamai and many other sponsoring organizations—should be a huge step forward.

The larger barrier, though, is difficulty. Once someone has purchased a certificate, they need to install it on their website, a time consuming and error-prone process that requires significant technical skill, which is a cost in itself.

Not to mention it is annoying to renew your certificate every 90 days, which is the maximum lifetime. If you run your own server, you might want to run some beta software to automate the updates; if you are on shared hosting, or require stable and production-ready solutions, better stick to traditional SSL certificates.

Mark Zuckerberg Philanthropy Pledge Sets New Giving Standard

Found on Bloomberg on Wednesday, 02 December 2015
Browse Various

Facebook’s chief executive officer and his wife, Priscilla Chan, unveiled the plan in an open letter to their newborn daughter, Max (short for Maxima), in a Facebook post on Tuesday, promising to donate 99 percent of their stock in the social-networking company "during our lives."

The new Chan Zuckerberg Initiative will be a limited liability company controlled by Mark and Priscilla, not a charitable trust, meaning they will also make philanthropic investments and back political causes.

There’s also one more thing in common with the philanthropic endeavors of Buffett, Gates and Zuckerberg: they reduce their tax bills, as the contributions are tax-deductible.

A very noble decision, isn't it? Zucky shifts shares from a company he controls to another company he controls with an additional bonus you might want to call tax evasion; and by donating it "during their lives" they make sure that they won't run out of money anytime soon (if you could waste the approximately 450 million they keep). Not to forget, there is also the assumption that Facebook's stock value will stay the same or grow. A dangerous assumption on the Internet where you can kick the bucket any day, like former hyped sites like MySpace et al proved (and younger users are already moving on). Yes, the concept is good, but it's not like he suddenly turned into a saint.

Mozilla Wants To Split Off Its Thunderbird Email/Chat Client, Says Mitchell Baker Memo

Found on Techcrunch on Tuesday, 01 December 2015
Browse Software

“I believe Thunderbird should would thrive best by separating itself from reliance on Mozilla development systems and in some cases, Mozilla technology,” Baker wrote in her open memo, posted on Mozilla’s public governance forum.

Mozilla now views any support for Thunderbird, even the limited support it has been providing for the past three years, as akin to “paying a tax,” in Baker’s words, on top of the work those engineers spend building Firefox.

Looks like Chromezilla Mozilla burns all the bridges. If someone takes over Thunderbird and continues the free and open source client, this decision might actually be the best. Chromefox Firefox isn't the lightweight browser it once used to be and just tries to turn into an embarrassing copy of Chrome. Sure, people switch more and more to webmail, but if you truly want control of your email, nothing beats having a local copy.

A Battery Revolution in Motion

Found on CNRS News on Monday, 30 November 2015
Browse Technology

The first prototype of a sodium-ion battery has just been revealed by the RS2E, a French network bringing together researchers and industrial actors. This technology, inspired by the lithium-ion batteries already used in portable computers and electric vehicles, could lead to the mass storage of intermittent renewable energy sources.

Being three times lighter than sodium ions, lithium ions also make it possible to produce very lightweight batteries, an undeniable asset when it comes to portable electronics.

However, for the mass-storage of energy the weight itself isn't much of an issue. It doesn't really matter if you have a one ton block in your basement, or a three ton block; and for most portable devices it won't matter too much either.

Telegram Messenger delivers candygrams to stalkers

Found on The Register on Sunday, 29 November 2015
Browse Software

Over at Github, Ola Flisbäck offers up a depressing demonstration of just how easy it is to zero in on an individual by watching the stream of presence and status notifications.

Here's the problem: in trying to make sure Telegram is usable, it's been made way too chatty. For example, Flisbäck writes, “The Telegram Android app sends a notification to all contacts when it becomes or stops being the "foreground" app on the device.

If The Grugq and Matthew Green are right and Telegram's encryption is also problematic, the app is probably more like the spook's friend than the enemy of civilisation

So much for the promise of security.

What the New Star Trek Show Needs in Order to Triumph

Found on Wired on Saturday, 28 November 2015
Browse Various

This month CBS announced plans to launch a new Star Trek TV series in 2017. Few details are known about the show—which will be produced by Alex Kurtzman, who co-wrote the last two Star Trek films—but that hasn’t stopped fans from speculating.

Speculations are just speculations. We will see it when it goes on air.