Pirate Bay block comes into force in Finland

Found on YLE on Monday, 09 January 2012
Browse Filesharing

Customers of the Elisa and Saunalahti internet service providers can no longer use those internet connections to visit The Pirate Bay website. Helsinki District Court ordered the ISPs to block the Pirate Bay last October, but the block went into effect Monday.

As of Monday evening, at least one Pirate Bay mirror site in operation on servers outside Sweden was reportedly not blocked to Elisa and Saunalahti customers. Meanwhile, one domain name that previously linked to The Pirate Bay, but now takes users to the website of Electronic Frontier Finland was blocked for Elisa and Saunalahti subscribers.

DNS baseded blocks are easy to get around; IP based blocks might very well affect other sites with have nothing to do with the website in question. Nevertheless, all of that is simply censorship.

E-ballot device for presidential vote has bugs, report confirms

Found on CNet News on Sunday, 08 January 2012
Browse Politics

An e-voting machine that is to be used for the presidential election this year has been found to have "anomalies" such as failing to record votes or logging the wrong vote and freezing, according to a government report.

Specifically, the DS200 failed in some cases to record when the touch screen was calibrated or the system was powered on or off, failed to read votes correctly when a ballot was inserted at an angle, and accepted a voted ballot without recording the ballot on its internal counter and without recording the marks, according to the report.

Every time. Every single time there's something to vote for in the US, you read about how the voting machines fail to do the job correctly. Yet the officials don't throw them out. It's amazing that on one hand there's a space station successfully floating in the orbit, yet nobody seems to be able to build a simple machine that counts votes in a reliable and controllable way.

Adobe Plans Fixes for Critical 3D Bugs in Reader, Acrobat X

Found on eWEEK on Saturday, 07 January 2012
Browse Software

Adobe will fix a slew of security flaws in Reader and Acrobat, including the critical 3D vulnerabilities that were discovered in December, as part of its quarterly update.

Adobe's quarterly updates will include fixes for two vulnerabilities that Adobe patched on Dec. 16 in the Windows versions of Acrobat and Reader 9 and earlier as part of an emergency update.

Best bugfix for Adobe products? Uninstall them. Their flash player and pdf reader are the main attack vectors. Flash will be pointless in the wake of HTML5 and when it comes to pdf, there are quite a few alternatives which, as an added bonus, are by far smaller and faster than Adobe's bloatware.

Grooveshark now feels lawsuit wrath of all major music labels

Found on CNet News on Friday, 06 January 2012
Browse Legal-Issues

A breach-of-contract lawsuit filed yesterday against Grooveshark means that all the major recording labels are suing the popular music streaming service.

The free-music service has become a dartboard of late for the recording industry's lawsuits. Sony Music Entertainment and Warner Music Group filed a lawsuit last month accusing the company of copyright infringement.

I wish they would really reform copyright law. Three or four years of copyright protection is enough. After that, music should be free to use. In your everyday job, you don't get paid for some work you did 30 years ago. You get paid for what you do today.

US Threatened To Blacklist Spain For Not Implementing Site Blocking Law

Found on TorrentFreak on Thursday, 05 January 2012
Browse Legal-Issues

In a leaked letter sent to Spain’s outgoing President, the US ambassador to the country warned that as punishment for not passing a SOPA-style file-sharing site blocking law, Spain risked being put on a United States trade blacklist.

More than 100 leaked cables showed that the US had helped draft new Spanish copyright legislation and had heavily influenced the decisions of both the government and opposition.

Solomont’s threat was that should Spain not pass the Sinde Law (described by some as the Spanish SOPA) then the country would be degraded further and placed on the Priority Watch List. This serious step would mean that Spain was in breach of trade agreements and could be subjected to a range of “retaliatory actions”.

Sweet secret diplomatics. It's always nice to see such extortions blow up right into their faces, showing the real truth behind those smiling faces. Exactly this is why whistleblowers and services like Wikeleaks are needed. Or better: required. Nations always need to be afraid that their shady practices get uncovered, otherwise there would never be an end to them.

PayPal Tells Buyer To Destroy Purchased Violin Instead Of Return For Refund

Found on The Consumerist on Wednesday, 04 January 2012
Browse Various

Oh PayPal... will you never learn how to resolve a situation without having everyone hate you? Mere weeks after enduring the wrath of the internet resulting from its war with Regresty.com, PayPal has once again hit viral vitriol gold. This time, a seller claims that she's out $2,500 and an antique violin after the company told the buyer to destroy the instrument.

Alas, someone at PayPal apparently is an expert in old violins, because the company determined the instrument was "counterfeit" and told the buyer he needed to destroy it in order to get his refund.

Actually that's a pretty easy way for scammers to get items to sell. You just buy, let's say, a violin worth $2,500 and then complain to Paypal that you've been screwed over by the seller. Paypal in it's unlimited wisdom sides with the buyer (as almost every single time) and tells him to break it into pieces. That's where you get the cheap $10 knockoff made in China and smash it to send the photo to Paypal as "proof", and voila, you get your $2,500 back and can keep the original violin as a bonus which you can prompty sell again. I seriously hope Paypal gets sued for this: they were at no time the owner of the violin and so ordering its destruction should be definatively an illegal act.

What's coming in Firefox 11

Found on CNet News on Tuesday, 03 January 2012
Browse Software

This is more than a new look, though, as many of the browser's features have been stripped out. This includes Firefox Sync, which allows seamless synchronization of personal data like bookmarks, passwords, and browsing history, and Mozilla's popular add-ons.

More HTML5 code is supported, Google's SPDY protocol for faster site loading can now be tested, Tilt support allows for 3D Web page visualization, and the HTML5 video controls have been redesigned.

Honestly, I don't really care anymore. Mozilla has messed up with its project changes and I won't bother with a new release every few weeks.

Belarus: Browsing Foreign Websites a Misdemeanor

Found on The Library of Congress on Monday, 02 January 2012
Browse Politics

The newly published Law imposes restrictions on visiting and/or using foreign websites by Belarusian citizens and residents. Under this new Law, the violation of these rules is recognized as a misdemeanor and is punished by fines of varied amounts, up to the equivalent of US$125.

It appears that business requests from Belarus cannot be served over the Internet if the service provider is using online services located outside of the country. The tax authorities, together with the police and secret police, are authorized to initiate, investigate, and prosecute such violations.

For example, suppose someone in Belarus buys something from Amazon, which is not a Belarusian company and thus is not registered in Belarus. The transaction is illegal, and so the Belarusian Attorney General would send a note to Amazon informing it that it is violating national law and might be sued.

The big companies simply will not care and either see them in court or just drop all traffic from Belarus. The latter is the best solution because it puts more pressure on Lukashenko who will have the pleasure to explain why Amazon, Google, Facebook, ebay and so on are not reachable anymore and why they are suddenly illegal. On the other hand, other countries aren't all innocent either; Belarus just does not care about hiding its plans.

Iran 'test-fires medium-range missile' in Gulf

Found on BBC News on Sunday, 01 January 2012
Browse Politics

Iranian naval commander Mahmoud Mousavi was quoted as saying the missile was equipped with the "latest technology" and "intelligent systems".

Tehran reacted angrily last week to reports that Western nations were planning to impose further sanctions targeting Iran's oil and financial sectors.

Iran threatened to close the Strait of Hormuz, which links the Gulf - and its oil-producing states - to the Indian Ocean.

When Saddam occupied Kuweit, the US didn't hesitate long to launch a full war against him. Of course not to protect Kuweit, but to safe its oil fields. Now that Iran is threatening the oil flow, the consequences are getting obvious.

Duqu, Stuxnet Built on Common Platform With Other Similar Super-Malware

Found on eWEEK on Saturday, 31 December 2011
Browse Software

Further analysis of the Duqu Trojan has revealed that the platform that was used to develop Stuxnet and Duqu may have been used to create similar Trojans, according to Kaspersky Lab.

Stuxnet took advantage of multiple zero-day vulnerabilities in Microsoft Windows, including an escalation-of-privilege flaw and exploited Microsoft's AutoRun functionality to spread across computers via infected USB drives.

Duqu also took advantage of a zero-day vulnerability in the Microsoft Windows kernel.

Gostev said "with a fair degree of certainty" that the Tilded platform had been created around the end of 2007 or early 2008 and underwent significant changes in the summer and autumn of 2010.

It makes sense that, when you already have the level of knowledge to build one of those trojans, you also build others. Just like Microsoft releases various different software packages, a blackhat company can release different high-level trojans.