Archive for 2012/04/09

http://www.wired.com/cloudline/2012/04/area-i51/

On April 12, the Internet Corporation for Assigned Names and Numbers will stop accepting applications for a new round of generic top-level domains, or gTLDs, the part of a web address that appears to the right of the period (“com” and “org” are among 22 current top-level domains). The application process is expected to result in hundreds, if not thousands, of new gTLDs, which will likely start going live sometime next year.

http://adage.com/article/digital/google-plots-web-domain-buying-spree/234009/

Seven dedicated plaintiffs have filed a complaint in federal court challenging key provisions of the National Defense Authorization Act. Specifically, the suit avers that the vagueness of several key terms in that law are creating a dangerous environment for reporters and activists to such a degree that the right of free speech is being infringed.

Named defendants in the complaint include President Barack Obama, Secretary of Defense Leon Panetta, Attorney General Eric Holder, Speaker of the House John Boehner, and Arizona Senator John McCain among others.

The Freedom 7, as the plaintiffs have been christened by the media, count many notable journalists and activists in their number: Chris Hedges, Daniel Ellsberg, Noam ChomskyBirgitta JónsdóttirJennifer “Tangerine” BolenKai Wargalla and Alexa O’Brien.

More:

http://www.thenewamerican.com/usnews/constitution/11457-broad-coalition-of-journalists-and-activists-join-in-legal-challenge-to-ndaa

https://www.stopndaa.org/aboutLawsuit.php

http://torrentfreak.com/mpaa-joins-google-facebook-eff-in-repeat-infringer-copyright-battle-120409/

Previously:

Flava Works is suing the web host Voxel.net and LeaseWeb.com for failing to remove MyVidster.com from its servers despite dozens of DMCA notices. MPAA Now Files Amicus Brief
http://vrritti.com/2012/04/08/flava-works-is-suing-the-web-host-voxel-net-and-leaseweb-com-for-failing-to-remove-myvidster-com-from-its-servers-despite-dozens-of-dmca-notices-mpaa-now-files-amicus-brief/

Every attempt to do so has been bitterly fought. It’s the one constant in Silicon Valley’s battles against the copyright industries. The fight has crippled the traditional, historical partnership between technology and creators that benefited everyone. But it has also had an awful unintended consequence: it has weakened our ability to establish the clear property rights we need to protect our privacy.

http://www.theregister.co.uk/2012/04/09/breaking_the_internet_no_property_no_privacy/

http://www.techdirt.com/articles/20120404/21120918379/just-how-much-do-shows-like-game-thrones-owe-to-piracy.shtml

Dutch language news article:
http://www.security.nl/artikel/41053/1/Siemens_laat_Stuxnet-lek_al_571_dagen_ongemoeid.html

See also:

Every owner/operator should be asking their vendors how ladder logic upload/download is secured, as well as firmware upload/download and commands that could be used maliciously to affect the availability or integrity of the process. Vendors, you should be able to tell your customers what you are doing to address this, when it will be ready, and what the upgrade process is.

http://www.digitalbond.com/2012/04/06/stuxnet-type-attacks-are-easy/

The Internet Society of China released a paper today entitled ‘Written Proposal on Resisting Internet Rumors‘, that details methods to clamp down on online rumours amongst other perceived issues.

The paper urges Internet companies to take “effective measures” to prevent online rumours by “seriously obeying the country’s laws and regulations as well as self-disciplinary rules.”

These outlines seem to be particularly focused towards China’s microblogging services.

http://www.zdnet.com/blog/asia/chinas-internet-firms-urged-to-prevent-the-spread-of-online-rumors/1600

Anonymous, a loosely knit group that has attacked financial and government websites around the world, hacked into Chinese government websites last week, defacing several, media reports said.

The group used the Twitter account “Anonymous China” to publicize the attacks, posting links to data files that contained passwords and other personal information from the hacked websites. (twitter.com/#!/AnonymousChina)

“First we want to alert the Chinese government that we aren’t afraid, and we are going to show the truth and fight for justice,” Anonymous hacker “f0ws3r” told Reuters.

The hacker, who declined to provide any personal details, was contacted through Anonymous China’s Twitter page. F0ws3r said the group planned more serious attacks against Chinese websites.

“Yes, we are planning more attacks, a few at a time,” f0ws3r said, adding that the plan was to take down the “Great Firewall of China”.

More:

http://www.reuters.com/article/2012/04/09/net-us-china-hackers-idUSBRE83808H20120409

http://torrentfreak.com/proxy-war-against-the-pirate-bay-heats-up-120408/

In addition to Medicaid clients, the breach also involved information from Children’s Health Insurance Plan (CHIP) recipients.
As part of its on-going investigation into the attack, DTS today reported to the Utah Department of Health (UDOH) that approximately 181,604 Medicaid and CHIP recipients had their personal information removed from the server. Of those individuals, 25,096 appear to have had their Social Security numbers compromised.

A thirst for intellectual property and trade secrets, and a bugeoning market of sophisticated mobile surveillance tools means that executives need to begin thinking and acting like spies in order to avoid being spied upon themselves, according to a presentation at the OWASP AppSec DC 2012 conference in Washington DC on Thursday.

Among the common attacks used against high value targets are SMS messages sent to the phones that contain links to Web pages that compromise the mobile device, Morehouse said. It’s not uncommon for these attack messages to imitate the standard “welcome” text message that arriving visitors get from the local mobile carrier that informs them of the local mobile and data rates. The messages are highly effective because mobile users are familiar with them and, in fact, expecting them as soon as they activate their phone.

The likelihood of having your mobile device hacked overseas varies based on the country you are visiting, who you are, and how interested state- and non-state actors are in your work or your employer. And, while China and Russia are the two countries that are most-often mentioned, Morehouse said surveillance of executives and other VIPs isn’t limited to those two destinations.

Morehouse said countries in the Asia-Pacific region, in general, as well as countries in Africa should have executives on guard.

While a few governments – notably China – are known to work with the cooperation of local carriers, Morehouse said that the rapid growth of the spy tools industry has democratized wireless surveillance, and given state and non-state actors plenty of tools to work with to compromise mobile devices.

Morehouse said firms like the Israeli firm ABILITY have tools that can detect the location of a mobile device to within 30 meters. Others allow sophisticated nation and non-nation state backed attackers to target phones by the phone number, IMEI (International Mobile Equipment Identity) number and intercept all inbound and outbound communications from the device and, in some cases, even decrypt encrypted communications on the fly. ELTA Systems, another Israeli firm, even markets a miniature blimp that can fly over targets of interest and suck up mobile signals, he said.

Morehouse said his interest in mobile defense was borne of his own travels around the Globe.

More:

http://threatpost.com/en_us/blogs/executives-abroad-may-get-owned-they-re-tarmac-040812

The value of the documentation found in his home was between $200 million and $400 million

http://news.cnet.com/8301-13924_3-57411033-64/before-move-to-amd-intel-engineer-stole-documents/

http://news.cnet.com/8301-1023_3-57411107-93/sony-expected-to-slash-10000-jobs/

http://arstechnica.com/tech-policy/news/2012/04/vote-pirate-notes-from-a-pirate-party-conference.ars