US moves to block cigarette sales over the Internet

Found on The Inquirer on Friday, 18 March 2005
Browse Internet

The card companies joined forces with scary-sounding U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) to block the sales of cigarettes over state lines.

A spokesman for the AFT claimed its investigations showed, "that millions of dollars each year in illegal sales of cigarettes are diverted to fund terrorists and criminal organizations."

In some states – such as New York - the sale of tobacco products over the Internet is banned. The ATF claims that many New Yorkers buy their fags from other states in order to get around the ban - depriving the state of an estimated $100 million a year in cigarette sales taxes.

You can slap that "funding terrorism" sticker on almost everything if you want. Here comes an even better idea: ban tabacco completely. No smokers (active and passive), more healthy people, less cancer, less accidents (falling asleep with a cig) and so on. The way I see it, there would be only positive results. Oh wait, of course, there won't be making any more money from it. What a shame. There were recently rumors that the tabacco industry adds menthol, sugar and chocolate flavors to make smoking easier and more attractive for children...

CSS Support Could Be IE's Weakest Link

Found on Microsoft Watch on Wednesday, 16 March 2005
Browse Software

Microsoft will be doing a lot to make developers and customers happy with its pending Internet Explorer release, if partner sources with inside information on the IE 7.0 browser are right.

The company will continue to drag its feet by refusing to provide full support for the CSS2 (Cascading Style Sheets Level 2) W3C (Worldwide Web Consortium) standard, Microsoft partners say.

Sources claiming familiarity with Microsoft's IE 7.0 plans said the company will add some additional CSS2 support to its new standalone browser.

But Microsoft isn't planning to go the whole way and make IE 7.0 fully CSS2 compliant, sources said.

One partner said that Microsoft considers CSS2 to be a "flawed" standard and that the company is waiting for a later point release, such as CSS2.1 or CSS3, before throwing its complete support behind it.

CSS2 cannot be more flawed than MS products. Other browsers support CSS2 and don't complain. Plus, it should be easy for MS to upgrade to CSS2.1 or CSS3 later along with the normal bugfixes. Another interesting point would be the size of IE7. IE5.5 (incl. SP2) was a 84MB download; compared to others, eg FireFox with not even 5MB, this is quite a lot. But since I won't touch XP, and don't have W2k3, it doesn't really affect me now.

Internet users massacre cookies

Found on The Inquirer on Tuesday, 15 March 2005
Browse Internet

Market research outfit Jupiter Research has published a study that shows more than half of Internet users delete cookies. This seriously undermines website operators' ability to measure consumer behaviour on their sites, the report said.

Eric Peterson, analyst for Jupiter Research, said that most users feared that if they took cookies from a site they will have their personal details blasted all over the interweb or get sucked into spam campaigns.

Peterson said such moves were making it impossible for companies to do any monitoring of customers and the problems caused by cookie deletion were going to get worse.

He said that website operators need to look for new technologies to solve the problem. He thinks more companies will start using Flash to track consumers each time they visit a site.

And I'm one of them. I don't want websites to greet me when I come back, or adjust to my browsing habits. There are a few cases where I allow cookies, like for automatic logins on some boards. Switching to Flash wouldn't help. Most of those Flash files are just eyecandy anyway, and not really important in 99% of all cases; like Javascript. If more webmasters would switch from cookies to Flash for tracking users, I'd simply turn off Flash in my proxy.

Swedish ISP raid prompts backlash

Found on The Register on Monday, 14 March 2005
Browse Legal-Issues

A raid by Swedish authorities last week against Bahnhof, Sweden's oldest and largest ISP, has been hailed by Hollywood as a major blow against movie piracy. But questions have been raised about whether the 10 March raid, orchestrated by Swedish anti-piracy organisation Antipiratbyran, and involving the seizure of data involving thousands of users, might have violated the country's strict data privacy laws.

Bahnhof has issued a statement (in Swedish) expressing concerns that data involving as many as 20,000 users was seized during the raid. The raid against Bahnhof is not the first anti-piracy bust in the country but it's reportedly the first to take place without any advance notice.

Reg readers inform us that the Swedish Data Inspection Board is to investigate alleged collection and computation of personal data conducted by the Swedish antipiracy office in connection with the Bahnhof raid. This remains unconfirmed since we were unable to reach anyone at the board for comment.

It's about time that someone shows the entertainment industry their limits. They not only treat customers like criminals by crippling CDs, but now it also affects people who have nothing to do with anything. People who are just on the same server as someone else they don't like.

Privacy vs. Piracy?

Found on Techdirt on Sunday, 13 March 2005
Browse Legal-Issues

The entertainment industry certainly loves to raid ISPs these days. Perhaps it's payback for all those recent court rulings saying that ISPs shouldn't just roll over and hand out private data every time the entertainment industry suspects wrongdoing. Last week, they raided an Australian ISP and a Swedish one. The Swedish one was with the help of authorities (the Australian one wasn't), but it was still organized by the entertainment industry. However, in raiding the ISP and carting away lots of info, some are wondering if the raid violated strict data privacy laws in that country. It certainly raises some interesting questions in the light of all of the many, many data leaks over the past couple of weeks. If your data happens to be stored on the same server as someone who is breaking the law, does that mean your data is open to review from private sources?

It would be interesting if the industry can be sued by other customers who have accounts on the servers. After all, by taking them away, the entertainment industry seriously affects their businesses. So, can those innocent people start a class action lawsuit, demanding compensation for the lost money? And if so, wouldn't it be cheaper for the industry to leave ISPs alone indead of paying a lot more in compensation?

AOL's Terms of Service Update for AIM

Found on eWEEK on Saturday, 12 March 2005
Browse Software

America Online, Inc. has quietly updated the terms of service for its AIM instant messaging application, making several changes that is sure to raise the hackles of Internet privacy advocates.

The revamped terms of service, which apply only to users who downloaded the free AIM software on or after Feb. 5, 2004, gives AOL the right to "reproduce, display, perform, distribute, adapt and promote" all content distributed across the chat network by users.

"You waive any right to privacy. You waive any right to inspect or approve uses of the content or to be compensated for any such uses," according to the AIM terms-of-service.

Although the user will retain ownership of the content passed through the AIM network, the terms give AOL ownership of "all right, title and interest in any compilation, collective work or other derivative work created by AOL using or incorporating this [user] content."

"In addition, by posting content on an AIM Product, you grant AOL, its parent, affiliates, subsidiaries, assigns, agents and licensees the irrevocable, perpetual, worldwide right to reproduce, display, perform, distribute, adapt and promote this content in any medium," it added.

No thanks. I was pondering whether to install AIM too, since some people I know are using it. Now there's another reason to stay in IRC. If I should change my mind about AIM, then the installation would definitively include encryption. I think it's possible to use SSL certificates in AIM; but then there is always GAIM, which supports RSA.

Hobbit Movie in Four Years?

Found on Slashdot on Friday, 11 March 2005
Browse Various

At the Powerhouse Museum LOTR Exhibition in Sydney, Peter Jackson has said a film version of The Hobbit is three years away at least. Reasons for the delay include the sale of MGM, which part-owns the movie rights to The Hobbit, and Jackson's recently filed suit against New Line Cinema, the other part-owner. Jackson is currently filming King Kong at his new facility in Wellington, NZ. Slashdot readers will also be interested in the high security planned for King Kong's pre-release screenings.

And when is the Silmarillion planned to be turned into a movie?

Spyware Analysis of P2P Software

Found on Slashdot on Thursday, 10 March 2005
Browse Filesharing

Benjamin Edelman, a PhD candidate in Economics and a Law student at Harvard, has analyzed the hidden (or not) additions to a user's machine when they install some of the major Windows P2P clients. He analyzes the length and readabilty of their licenses, what is revealed or hidden in the software's installer and includes screenshots for illustration. Clear, concise and eye-opening.

A really interesting article with some detailled information about eDonkey, iMesh, Kazaa, LimeWire and Morpheus. Exeem would have been interesting too. If you're going to take part in P2P, use the open source clients. With all the current P2P hype, many try to take the chance and (ab)use it for making money. Now, there's nothing wrong with making money; but not when they use spyware. When it was clear that Exeem was closed source, it was also clear that it would contain spyware.

P2P (More) Legal in France

Found on Slashdot on Thursday, 10 March 2005
Browse Filesharing

A french appeal court ruled yesterday in favour of somebody who downloaded about 500 movies, on the ground that those were private copies, and that he didn't redistributed them, and that a tax was payed on blank media. This sets the huge precedent that P2P is legal over there. For the details, apparently no distinction was made on the method used to download the movies (upload issues) and the famous EUCD directive was even used by the defending lawyer.

I bet the movie industry is grinding their teeth now. Kind of surprising to see that this happened in France, who recently decided that posting exploits is illegal. But whatever, it's good to see that P2P isn't guilty by default.

Security Researcher Condemned

Found on Constitutional Code on Wednesday, 09 March 2005
Browse Legal-Issues

Yesterday the French security researcher Guillame Tena, aka Guillermito, has been fined a suspended fine of 5000 euros by a French court for publishing a vulnerability in the Viguard anti-virus software of the company Tegam.

That the fine is suspended means that Guillermito will have to pay up if he continues to publish about the vulnerability and other software vulnerabilities. As a result he has taken the Tegam publication, and a dozen others, from his website. He writes:

No more demonstration of security software weaknesses. It's now forbidden in my country. On march 8 2005 I've been condemned for exposing flaws in the anti-virus software and publishing proof of concept programs to demonstrate them. That's exactly what I did for a dozen or so steganography program, which often contained security holes so big you could pass a truck through.

So now you have to believe the editors marketing. Welcome in DisneyWorld. All steganography programs are perfect, super-solid, unbreakable, undetectable, without bugs nor flaws. They are all perfect. Use them. Hahaha. What a joke.

Conclusion #1: Never buy from Tegam; flaws will exist, but not posted and therefore not fixed. Conclusion #2: France just moved to happy happy land. Too bad there is still the rest of the world. Good luck trying to fight that rest, Tegam.