Results of research by Nikhef and Networking4all
Dutch language news article:
http://webwereld.nl/nieuws/107800/hele-certificaatketen-overheid-gebrekkig-beveiligd.html
Previous DigiNotar articles: http://vrritti.com/?s=diginotar
Archive for 2011/09/02
None of the Certification Authorities of the Dutch State nor its 7 mandated authorities have limited the Path Length of their certificates. This means hackers can create an unlimited amount of Certification Authorities capable of signing certificates. This also means that the Dutch State is not in compliance with generally accepted best practices. To make matters worse: some browser makers have not rejected all of the potentially compromised certificates of DigiNotar
Posted: 2011/09/02 in Education / Awareness, Network Security, Privacy / Data Protection, Public PolicyDutch National Police calling on Internet Industry to support fight against distribution of online child abuse images. “If someone uses multiple creditcards every month, paying for one and the same service then that should trigger an alert”
Posted: 2011/09/02 in Education / Awareness, Enforcement, New Business ModelsSite operators and hosting providers could be a bit more on guard in relation to whether their infrastructure is being used by paedophiles
One cannot eradicate this problem, but what can be done, should be done…
Dutch language news article:
http://www.telegraaf.nl/binnenland/10473445/__KLPD_wil_hulp_tegen_kinderporno__.html?p=35,3
Can Someone Block Google From Passing Along A DMCA To ChillingEffects?
Posted: 2011/09/02 in Education / Awareness, GoogleJason Wilder, who sent a DMCA take down notice to Google, but asked Google not to forward his takedown to ChillingEffects. Google told him that it was the company’s official policy in order to remain transparent about any content removed from the site, and saying that if Wilder doesn’t want the noticed passed along to ChillingEffects, then he can rescind the notice. Wright seems to think this somehow opens Google up to liability.
Nothing about 17 USC 512 requires that the complainant agree that his notice be made public and Google’s policy is not the law. So by refusing to remove the copyrighted material, Google is now potentially liable for the infringement. Now that’s cold.
HTC’s User Behavior Logging (Apps installed/removed – Keyboard Activity – Personal details – Message details – Contact details)
Posted: 2011/09/02 in Education / Awareness, New Business Models, Privacy / Data Protection, Stats / reportsData collection server located in the Amazon Cloud
More:
http://infectedrom.com/showthread.php/505-HTCs-User-Behavior-Logging
See also:
http://www.carrieriq.com/overview/IQInsightExperienceManager/ExperienceManager.datasheet.pdf
http://forum.xda-developers.com/showpost.php?p=16158314&postcount=2
DigiNotar has not filed any criminal complaint regarding server hacks / compromised SSL-certificates
Posted: 2011/09/02 in Cybercrime, Education / Awareness, Network Security, Privacy / Data ProtectionDutch language news article:
http://www.security.nl/artikel/38336/1/DigiNotar_mogelijk_strafbaar_wegens_nalatigheid.html
Company CloudFlare named “tech pioneer” and received technology award for protecting the website operated by hackers who attacked SONY
Posted: 2011/09/02 in Education / Awareness, Network Security, Privacy / Data Protection, The CloudLulzSec created its own website and then signed up with CloudFlare, which isn’t a Web hosting provider, but a network operator. Requests to CloudFlare-connected sites route through CloudFlare servers first, and the company says it can double the speed of site delivery while also protecting websites against denial of service attacks and other online problems.
In LulzSec’s case, the denial of service attacks came quickly after the group released information from its Sony hacks, but the site stayed up.
CloudFlare boss Matthew Prince described how the attacks made CloudFlare’s service better:
The experience of being attacked by some of the Internet’s most notorious hackers has validated CloudFlare’s core value proposition: if you can share data about attacks across a network, rather than keeping it siloed within each organization, everyone using that network can benefit. As hackers tried to take down LulzSec, CloudFlare recorded all the patterns of the attacks. In the last 3 weeks, we’ve generated more than 1 million new rules to better mitigate threats targeted at our users. Those rules were propagated in realtime to benefit the whole CloudFlare community. We’ve written about this benefit previously and it was truly awesome to watch as the system rapidly got smarter and smarter as more attacks were launched. While we will never stop every attack, we will also never stop learning.
WEF singled out this approach to site security, noting that “In an ironic twist, one of CloudFlare’s former clients turned out to be the hacker group, LulzSec, a vote of confidence in CloudFlare’s approach.”
Riot-Busting Backpack Scorches Your Face and Dyes You Blue
Posted: 2011/09/02 in Education / Awareness, Tech EvolutionCopyright holders and anti-piracy companies have been dealt a blow in their attempts to monitor and track down student file-sharers in Norway
Posted: 2011/09/02 in Education / Awareness, Illegal File SharingFollowing a decision by the Data Inspectorate, universities will not be allowed to spy on the online activities of their students and data gathered for network maintenance purposes will kept well away from rightsholders and lawyers.
http://torrentfreak.com/hunt-for-student-file-sharers-thwarted-by-data-privacy-ruling-110901/
Verizon launched a new video service recently, and currently is giving free Netflix for LG Revolution buyers. But there’s a cost to that video that you’d better understand
Posted: 2011/09/02 in Education / Awareness, New Business ModelsThe download and use of Verizon Video will incur data charges according to your data plan. A data plan is required for use of this service.
Streaming video on your smartphone can increase your data use substantially.
http://www.zdnet.com/blog/mobile-news/verizon-wireless-turning-to-video-to-tap-that-cap/4175
Google’s Eric Schmidt: “jobs are created by the private sector, and government policies have a huge influence on this”
Posted: 2011/09/02 in Education / Awareness, Google, Public Policy“The next generation of these leaders will be doing something mobile, local and social,” Schmidt posited, “These are terms we use today for the way people live and work.”
http://www.zdnet.com/blog/btl/googles-schmidt-talks-apple-patents-and-jobs-at-dreamforce/57151
