Police chief: 'Put CCTV in every home'

Found on The Telegraph on Monday, 09 March 2015
Browse Various

CCTV cameras should be installed by homeowners and businesses to help detectives solve crimes in the age of austerity, Britain’s most senior policeman has said.

When the Metropolitan Police Commissioner was asked if business and home owners needed to make greater use of CCTV cameras he said yes, adding: “We’ve got a strategy to encourage people, with their cameras, is to move them down to eye level.”

It's just a small step from there to Orwell's telescreens.

Tor developers look beyond U.S. government funding

Found on The Daily Dot on Sunday, 08 March 2015
Browse Internet

In 2013, Tor received more than $1.8 million from the U.S. government, about 75 percent of the $2.4 million in total annual expenses, according to their latest publicly available tax returns.

There is actually wide agreement among both Tor insiders and outsiders that discussing Tor’s government funding is an important next step for the organization.

Funny how the government funds a tool which only exists because governments snoop too much.

Quebec resident Alain Philippon to fight charge for not giving up phone password at airport

Found on CBCNews on Saturday, 07 March 2015
Browse Legal-Issues

Alain Philippon, 38, of Ste-Anne-des-Plaines, Que., refused to divulge his cellphone password to Canada Border Services Agency during a customs search Monday night at Halifax Stanfield International Airport.

He's been charged under section 153.1 (b) of the Customs Act for hindering or preventing border officers from performing their role under the act.

Giving away your phone or laptop password does not improve any airport security at all; it's just for snooping around and teaching the civilian the lesson that officials can do everything. Fortunately, for laptops there is a solution: an encrypted dual-boot system with a hidden OS, just like Truecryt offered it: depending on the password, the PC either boots your important OS, or another OS which will satisfy the curiosity of anybody else. That should be available for smartphones too.

uTorrent Quietly Installs Cryptocurrency Miner, Users Complain

Found on TorrentFreak on Friday, 06 March 2015
Browse Software

Many users of the popular BitTorrent client uTorrent are complaining about it silently installing a cryptocurrency miner with a recent update. The Epic Scale tool, which slows down host computers, is reportedly being installed without consent and for some is particularly hard to remove.

uTorrent hasn't been a real option anymore since it was sold.

Samsung builds high-tech dream doghouse with a pup spa

Found on CNet News on Thursday, 05 March 2015
Browse Various

Brian Dowling, director of production, calls it "the dog kennel of the future." The two-room doghouse is rounded with a see-through front wall, giving it a retro-futuristic look. A paw-and-bones design decorates the inside walls. There are lots of soft pillowy parts to nap on.

According to the International Business Times, the Dream Doghouse comes with a £20,000 price tag. That's about $30,475 or AU$39,000.

The sad thing is that there are pet owners stupid enough who would pay that much.

Why Clinton’s Private Email Server Was Such a Security Fail

Found on Wired on Wednesday, 04 March 2015
Browse Internet

On Wednesday the AP reported that Clinton actually ran a private mail server in her home during her entire tenure leading the State Department, hosting her email at the domain Clintonemail.com.

Any protection it had there—aside from the physical protection of the Secret Service—would have been limited to the Clintons’ own personal resources.

So a presidential candidate ignores record-keeping and transparency rules? That's not a good start.

WordPress to Remain Most Attacked Platform, Researchers Say

Found on eWEEK on Tuesday, 03 March 2015
Browse Internet

The trend will continue in 2015, driven by the lack of security awareness among WordPress' large user base and the lack of security expertise among its plugin developers, according to experts.

In 2010, Joomla and its associated plugins had four times as many vulnerabilities reported as Drupal and WordPress, according to the National Vulnerability Database. In 2012, Drupal led the pack, and in 2014, WordPress and its plugins had three times as many bugs reported as the next highest CMS.

Wordpress has to address not only its own bugs, but also needs to disable dropped or unsupported plugins. The developers need to realize that abandoning a plugin can cause big problems, and webmasters have to understand that it is essential to keep their CMS updated, as well as the used plugins.

In major goof, Uber stored sensitive database key on public GitHub page

Found on Ars Technica on Monday, 02 March 2015
Browse Internet

Uber is trying to force GitHub to disclose the IP address of every person that accessed a webpage connected to a database intrusion that exposed sensitive personal data for 50,000 drivers. The court action revealed that a security key unlocking the database was stored on a publicly accessible place, the online equivalent of stashing a house key under a doormat.

The wording of Uber's complaint, saying a security key protecting the Uber database was stored on a publicly assessable GitHub page, is a step backwards for Uber as it attempts to reassure the public that the significant amount of information it holds is safe from prying eyes.

Someone might try to file a suit against Uber for neglecting basic security priciples. Github is okay for code that can be public, but any sensitive data should never come close to it.

Microsoft: The Web Will 'Just Work' With Windows 10 Browser

Found on eWEEK on Sunday, 01 March 2015
Browse Software

In a lengthy blog post Feb. 26, Charles Morris, program manager lead for Project Spartan, admitted that as the IE version numbers crept upward, Microsoft "heard complaints about some sites being broken in IE—from family members, co-workers in other parts of Microsoft, or online discussions."

"In addition, we revised our internal engineering processes to prioritize real-world interoperability issues uncovered by our data analysis. With these processes in place, we set about fixing over 3000 interoperability bugs and adding over 40 new Web standards (to date) to make sure we deliver on our goals," he stated.

IE has always been a real problem for those developing websites. Differents HTML workarounds for the different IE versions, as well as CSS and Javascript workarounds. It's like Microsoft loved to cause problems just because it could.

Under U.S. Pressure, PayPal Nukes Mega For Encrypting Files

Found on TorrentFreak on Saturday, 28 February 2015
Browse Various

After coming under intense pressure PayPal has closed the account of cloud-storage service Mega. According to the company, SOPA proponent Senator Patrick Leahy personally pressured Visa and Mastercard who in turn called on PayPal to terminate the account. Bizarrely, Mega's encryption is being cited as a key problem.

“MEGA has demonstrated that it is as compliant with its legal obligations as USA cloud storage services operated by Google, Microsoft, Apple, Dropbox, Box, Spideroak etc, but PayPal has advised that MEGA’s ‘unique encryption model’ presents an insurmountable difficulty,” Mega explains.

A single old senator can force the biggest payment processors to stop doing business with a customer, without any trial? Kim Jong-un would be proud.