Security of Java takes a dangerous turn for the worse, experts say

Found on Ars Technica on Thursday, 12 September 2013
Browse Software

The security of Oracle's Java software framework, installed on some three billion devices worldwide, is taking a turn for the worse, thanks to an uptick in attacks targeting vulnerabilities that will never be patched and increasingly sophisticated exploits, security researchers said.

The version, which Oracle stopped supporting in February, is still used by about half of the Java user base, he said.

Of course Oracle won't care: those Java users are no paying customers and because of that not of any interest at all. This is one of the worst combinations: a company that tries to squeeze as much profit out of anything, and a software which is loaded with security issues. The best solution still is to never install Java in the first place.

Ofcom: Piracy accounts for one in four downloads

Found on BBC News on Wednesday, 11 September 2013
Browse Filesharing

Just 2% of UK internet users accounted for almost three-quarters of online piracy over a year, the report Ofcom indicated.

It also said pirates spent more on legal downloading and streaming than those who never access illegal content.

The company processed 21,475 responses to four surveys over the year to research the report.

Seems like pirates are the better consumers.

New Snowden Documents Show NSA Deemed Google Networks a "Target"

Found on Slate on Tuesday, 10 September 2013
Browse Internet

Aside from targeting Petrobras, Fantastico revealed that in a May 2012 presentation reportedly used by the agency to train new recruits how to infiltrate private computer networks, Google is listed as a target.

Further afield, the NSA has apparently targeted the computer networks of Saudi Arabia’s Riyad Bank and Chinese technology company Huawei for surveillance, the documents show.

Those in charge seem to think they can just sit and wait; but it is about time to take a close look at what the NSA, GCHQ and others are really doing. Obviously they have gone out of control.

NSA Documents Show United States Spied Brazilian Oil Giant

Found on Globo Fantastico on Monday, 09 September 2013
Browse Internet

The internal computer network of Petrobras, the Brazilian oil giant partly owned by the state, has been under surveillance by the NSA, the National Security Agency of the United States.

These new disclosures contradict statements by the NSA denying espionage for economic purposes.

Other targets include French diplomats – with access to the private network of the Ministry of Foreign Affairs of France – and the SWIFT network, the cooperative that unites over ten thousand banks in 212 countries and provides communications that enable international financial transactions.

The statement also stresses that the collected intelligence is not used “to steal the trade secrets of foreign companies on behalf of – or give intelligence we collect to – US companies to enhance their international competitiveness or increase their bottom line.”

Sure. It's not used for economical gain at all. The NSA has also never lied to the public.

Why should you trust Google, Facebook more than the NSA?

Found on CNet News on Sunday, 08 September 2013
Browse Internet

"We want to be really, really clear that whenever you give us information, we're going to take it."

You might translate Egan's words as: "We're going to use everything you give us to make money. How could you possibly think otherwise, silly?"

Last Thursday, Google was in a San Jose court explaining very politely that of course it has every right to not only scan every e-mail you send via Gmail -- but also every e-mail that's sent to your Gmail account.

The argument used by Google, Facebook, Apple, Twitter, and the NSA is the same: Trust us. We're just doing our job. We know right from wrong.

Trust has to be earned on a personal level. That means that you can never trust corporations.

TSA says you can keep your shoes on at more airports

Found on NBC News on Saturday, 07 September 2013
Browse Various

TSA Precheck allows passengers who have been pre-approved to keep on their shoes and belt, not remove their jackets, keep their laptops inside their cases, and not have to remove select liquids and gels from their bags.

Later this year, the TSA said it will allow other U.S. citizens to apply for 5-year enrollment online after submitting fingerprints and paying an $85 fee.

$85 should be within the budget of any terrorist.

Revealed: The NSA’s Secret Campaign to Crack, Undermine Internet Security

Found on Pro Publica on Friday, 06 September 2013
Browse Internet

The agency has circumvented or cracked much of the encryption, or digital scrambling, that guards global commerce and banking systems, protects sensitive data like trade secrets and medical records, and automatically secures the e-mails, Web searches, Internet chats and phone calls of Americans and others around the world, the documents show.

Intelligence officials asked The Times and ProPublica not to publish this article, saying that it might prompt foreign targets to switch to new forms of encryption or communications that would be harder to collect or read.

The articles should contain every single detail. The NSA and GCHQ have done nothing to deserve any trust and people should now which methods are reliable in order to protect their privacy from abuse. From now on, new encryption standards made in the US or UK will have a hard time.

Insanity: PayPal Freezes Mailpile's Account, Demands Excessive Info To Get Access

Found on Techdirt on Thursday, 05 September 2013
Browse Various

Their IndieGoGo campaign has been a huge success, going past their $100,000 target, and is currently at around $137,000, which will allow the three person team to focus on it full time.

Except... as the team announced this morning, PayPal, for reasons known only to PayPal, has decided to freeze their funds and won't let Mailpile access the money that people donated.

"Afer 4 phone calls, the last of which I spoke to a supervisor, the understanding I have come to is, unless Mailpile provides PayPal with a detailed budgetary breakdown of how we plan to use the donations from our crowd funding campaign they will not release the block on my account for 1 year until we have shipped a 1.0 version of our product."

Exactly this is why I will never ever recommend Paypal to anybody. Pretending to be the moral police, Paypal tries to keep funds for as long as possible for fishy reasons and floods the legal owners with ridiculous demands just to hold onto the money. The hundreds of thousands (or probably even millions) of dollars would earn some nice interest while the owners are blocked from using their money. Paypal could, like any even just remotely serious bank, verify users before they are allowed to use their accounts; but as long as an email address is all you need the abuse and scamming will not end. Paypal accepts this and uses it as an excuse to freeze accounts in order to profit from those funds; and if the public attention gets too big it suddenly weasels its way out by saying it was just a mistake. However, without that sort of attention, Paypal would never call it a mistake, but business practice.

Spotify sued over user playlists, said to infringe copyright

Found on Ars Technica on Wednesday, 04 September 2013
Browse Legal-Issues

British dance music label Ministry of Sound (MoS) has filed a lawsuit against Spotify. MoS claims that by hosting playlists that mimic tracklists on its collections, Spotify has violated UK copyright law.

The company is now arguing that its actual track listings are creative works worthy of copyright protection. It's an extraordinary claim, not too different from claiming a copyright over something like a simple list of one's own favorite songs.

Stupidity just reached another level. Every DJ in the world suddenly would have a giant collection of copyrighted lists.

Record labels ask broadband providers to collect data on illegal downloads

Found on The Guardian on Tuesday, 03 September 2013
Browse Legal-Issues

BT, Virgin Media, BSkyB and TalkTalk are being asked by music and film companies to sign up to a voluntary code for policing illegal downloading. Negotiations have been under way for months with the BPI and the British Video Association, whose members include the BBC and Hollywood studios.

Measures could include throttling internet connections to slow them down, blocking users from particular sites, disconnecting offenders from broadband for a limited period and ultimately prosecution. Broadband companies would need to keep a list of those customers they had sent letters to.

In other news: car manufacturers are asked to monitor the habits of the owners to track down bad drivers. Measures could include slowing cars down, blocking drivers from their favorite streets, locking them out of their car for a limited period and ultimately prosecution.