Archive for 2012/08/29

A web server of the service turned out to be publicly accessible. It contained 2,600 documents including itineraries and boarding passes. Scanned copies of credit cards (including security code) were also available as well as screenshots of internet banking accounts.

The documents from the German police contained information about cases of credit card fraud.

The badly secured server also contained complaints of travelers, sent to their travel agency or airline.

Complaints have been filed with Dutch and German prosecution services about this ordeal.

It’s clear that web servers of ticket services contain a “treasure trove” of information.

Dutch language news article:
http://www.nu.nl/internet/2895992/tixnl-lekt-duizenden-paspoorten-bankafschriften-en-creditcards-.html

Dutch Socialist Party MP Sharon Gesthuizen argues (among other things):

“The security of IT systems can only be properly tested by subjecting them to cyber attacks within an actual, working internet environment. Such an attack should obviously be conducted by an expert; within the hacker community one can find a lot of those geniuses. By organizing a joint effort, enabling these hackers to execute targeted attacks, within an overall setup facilitated by the government, IT security can be put to the test in the best possible way.”

Dutch language news article:
http://www.automatiseringgids.nl/nieuws/2012/35/gesthuizen-sp-laat-hackers-helpen-beveiligen

Meanwhile, Dutch civil rights organization Bits of Freedom is supporting the views of Gesthuizen stating that she has published “a good memo” and “important topics are being covered”.
Dutch language Tweet: https://twitter.com/bitsoffreedom/status/240738257653092352

Previously:

Dutch Socialist Party Releases Comprehensive IT Strategy: No Ban On Downloading From An Illegal Source. Wants Copy Levy Or A Broader Internet Levy
http://vrritti.com/2012/08/29/dutch-socialist-party-releases-comprehensive-it-strategy-no-ban-on-downloading-from-an-illegal-source-wants-copy-levy-or-a-broader-internet-levy/

Did Bin Laden order his guards to prevent him from being captured alive? Or were his ‘guards’ actually local intelligence officers?

Slain Al Qaeda leader Osama bin Laden was killed by a bullet to the brain before Navy SEALs had even entered his bedroom in a Pakistan compound, a new book reveals.

New details have emerged of the daring 2011 raid which ended the terrorist leader’s life in an eagerly-anticipated first-hand account written by one of the men involved in the covert mission.

Writing under the pseudoymn Mark Owen, the SEAL says they were stealthily climbing a narrow staircase in the Abbottabad compound when the team’s point man saw a man’s head emerge from a doorway.

We were less than five steps from getting to the top [of the stairs] when I heard suppressed shots. BOP. BOP,” Owen writes in “No Easy Day” according to the Huffington Post which obtained an advance copy. “I couldn’t tell from my position if the rounds hit the target or not. The man disappeared into the dark room.”

When the SEALs entered the room, they found Bin Laden dead on the floor and a woman crying over his body.

He was wearing a white sleeveless T-shirt, loose tan pants and a tan tunic — and was unarmed.

“Blood and brains spilled out of the side of his skull,” Owen writes, saying the most wanted man in America was twitching and convulsing.

Owen and another SEAL then pointed their lasers at Bin Laden’s chest.

“[We] fired several rounds,” he says in the book. “The bullets tore into him, slamming his body into the floor until he was motionless.”

Previous reports suggested Bin Laden was armed and had attempted to fight back in his final moments, but Owen describes the 9/11 mastermind as a coward.

More:
http://www.nydailynews.com/news/world/osama-bin-laden-killed-bullet-brain-navy-seals-arrived-book-reveals-article-1.1146861

The man in question is Scott Moskowitz. His company, Blue Spike LLC, has been furiously filing patent suits in East Texas against companies that use common digital water-marking techniques to prevent copyright infringement. His other targets include Sound Hound, Viggle, TuneSat and Facebook.

The filing also notes that Moskowitz has worked with the federal government and various professional societies, that he has two degrees from UPenn, and that Forbes and New York Times once referred to his work.

Other Blue Spike defendants include: Rovio; MySpace; Audible Magic; Specific Media; Photobucket; DailyMotion; Soundcloud; Myxer; Qlipso; Brightcove; MediaFire; Zedge; Harmonics; iMesh; Metacafe; iPharoah.

Much more:
http://gigaom.com/2012/08/28/genius-or-troll-patent-owner-sues-dozens-over-anti-piracy-method/

The powerful business lobby, perhaps the biggest supporter of controversial legislation intended to stem online piracy, is at it again. The group is up with a billboard advertisement in Manhattan’s Times Square and an online video series urging Congress to “protect America’s IP rights.”

The Chamber says it is not pushing any particular bill and characterizes the campaign as a chance to raise awareness and reshape public opinion after efforts to pass legislation imploded last winter.

“This is an awareness campaign about the prevalence and danger of counterfeit goods – not a legislative push,” said Trinh Nguyen, spokeswoman for the U.S. Chamber of Commerce’s Global IP Center. “This campaign is not political.”

This time, the Chamber is de-emphasizing the regulatory impact on the Internet and Hollywood’s interests while playing up the effects of counterfeiting on the pharmaceutical industry and broad consumer goods markets.

The Times Square billboard, a video advertisement that will remain at the intersection of 42nd Street and 8th Avenue through the end of September, promotes the group’s website, DangerousFakes.com, which asks viewers to contact their Member of Congress.

Technology industry lobbyists were not surprised to see the Chamber pushing tighter online piracy restrictions. Indeed, bills with very similar language have been introduced multiple times under different names since 2010.

“The more that the content industry can just bang the drum that this is a problem, the better their odds,” one industry lobbyist said. “If you can get something moving with the bill, anything is possible.”

More:
http://www.rollcall.com/news/chamber_renews_push_for_anti_piracy_legislation-217048-1.html?pos=olobh

Deputies found Mervin Clopton, 41, at a parking lot and in possession of 118 counterfeit DVD movies, one just released to movie theaters last week.

More:
http://www.highlandnews.net/articles/2012/08/28/news/doc503ce8fdb4958580468927.txt

U.S. District Judge Gloria M. Navarro issued an order today in Liberty Media v FF Magnat — the recently dismissed copyright infringement lawsuit filed June 20 by Corbin Fisher against file locker Oron.com — that declared that funds contained in a PayPal account owned by Oron can be unfrozen as long as $749,821.50 (most of which is currently owed to CF) remains frozen until it is paid to the plaintiff as part of the court-enforced settlement.

“The maximum amount to which Plaintiff could possibly be entitled to is the sum awarded in the Settlement Agreement, plus the amount that Plaintiff subsequently requested in attorneys’ fees and costs,” wrote Judge Navarro in her three-page order granting in part an Oron motion. “Specifically, Plaintiff is entitled to $550,000.00 under the terms of the Settlement Agreement, and is currently seeking $199,821.50 in attorneys’ fees and costs, the sum total of which is $749,821.50. This amount must remain frozen in Defendant’s PayPal account.

“However,” she continued, “the Court previously ordered PayPal to satisfy the judgment that Plaintiff received against the Defendant in the Court’s Order enforcing the settlement agreement. Therefore, once PayPal has paid the ordered $550,000.00 to Plaintiff, PayPal must keep only the remaining $199,821.50 frozen until Plaintiff’s Motion for Attorneys’ Fees is resolved. To that end, the Court grants, in part, Defendant’s Motion for Disbursement of Funds. Until PayPal, Inc. pays Plaintiff the sum of $550,000.00, as previously ordered, a total amount of $749,821.50 must remain frozen in Defendant’s PayPal account. Any sum exceeding that amount must be unfrozen.”

So, Oron remains on the hook for three-quarters of a mil, assuming the attorneys’ fees are granted, and it appears that the answer to our question whether PayPal paid the $550,000 last Friday or not is… not.

http://news.avn.com/articles/Judge-Issues-Order-on-PayPal-Funds-in-Corbin-Fisher-v-Oron-486179.html

http://news.avn.com/articles/Ninth-Circuit-Panel-Slams-Door-on-Oron-Appeals-486143.html

Previously:

Lawyers accuse Cyberlocker Oron.com of laundering money through Hong Kong and converting almost $3m into gold bullion
http://vrritti.com/2012/08/21/lawyers-accuse-cyberlocker-oron-com-of-laundering-money-through-hong-kong-and-converting-almost-3m-into-gold-bullion/

http://vrritti.com/?s=oron.com&submit=Search

http://www.wired.com/wiredscience/2012/08/circadian-rhythm-molecules/

Democratization of surveillance

http://www.wired.com/wiredenterprise/2012/08/phonesat/

An operator responsible for monitoring surveillance footage for the town of Shrewsbury in the U.K. has been arrested after authorities discovered that he downloaded footage of a young couple caught by the cameras having sex in the town center.

Catherine Hughes and Kevin Naylor were evidently so charged up over England’s June match against France in the Euro 2012 game (which ended in a tie), that they decided to have sex in the street in downtown Shrewsbury, according to the Mirror.

The couple must not have heard that U.K. streets are blanketed with thousands of closed-circuit surveillance cameras (CCTVs).

One of the operators in the CCTV monitoring center, an unnamed man in his 40s, allegedly downloaded the footage to his mobile phone and shared it “inappropriately.” The man has been suspended from his duties for possible violation of the Data Protection Act and is currently on bail.

More:
http://www.wired.com/threatlevel/2012/08/surveillance-arrest-sex/

http://torrentfreak.com/is-abc-starting-to-understand-bittorrent-demand-120829/

Hulu was conceived as a focal point for its owners to exert greater leverage in rights negotiations for online distribution, rather than as a viable business proposition in its own right. In one sense Hulu has since become a victim of its success, tangling with the emerging online business models of its parents. With their focus on content they are most interested in maximizing their carriage rights from all sources, rather than giving them away free without restrictions on Hulu. They have lost their fear of Google, reducing their need for a single portal for negotiations, and as a result Hulu is no longer necessary for them and has become almost a thorn in their sides.

Hulu will become just one of many sites where the content can be obtained.

Its owners will continue to run Hulu as a subscription service, since from this they derive ancillary revenue. But it will not be a cornerstone of their online strategies as it has been, and they will no longer allow it to compete as a free service with their own sites, or to jeopardize their ability to obtain carriage fees from other online distributors.

Much more:
http://www.theregister.co.uk/2012/08/28/hulu_rumours_do_not_bode_well/

Sonya Martin, 45, was convicted of managing a team of Chicago money mules who withdrew money from cash cards that had been loaded with looted funds. Cybercrooks had topped-up the payroll debit cards by breaking the encryption used to protect their sensitive financial data. Such cards are used by some firms to pay workers.

Hackers used compromised access to WorldPay’s systems to raise the account balance and withdrawal limits on targeted accounts before forging 44 payment cards associated with these compromised accounts. Funds were then withdrawn from these accounts in an overnight cash-out operation involving 2,100 ATMs in at least 280 cities in the US, Russia, Estonia, Italy, Hong Kong, Japan, and Canada in a coordinated operation on 8 November 2008, the FBI said.

The gang monitored the progress of the cash-out operation in real-time using WorldPay’s own computer systems before attempting (unsuccessfully) to erase their tracks. Infamous hacker Albert Gonzalez masterminded the whole scam as well as other credit card megabucks against TJ Maxx, Heartland Payments Systems and others. Gonzalez was jailed for 20 years in the spring of 2010.

More:
http://www.theregister.co.uk/2012/08/28/worldpay_money_mule_mangeress_jailed/

Before donning the sacred blue t-shirt and becoming a Genius Bar operative, staff must first pass through a 14 day training course teaching not only technical tips and tricks but also how to empathize with customers, monitor their nonverbal tics, and guide them to making a purchase. As the manual says: “Everyone in the Apple Store is in the business of selling.”

More:
http://www.theregister.co.uk/2012/08/29/apple_genius_bar_manual/

Panem et circenses

The @KimDotcom Twitter account modestly told the world: “BREAKING NEWS: The High Court just ruled the release of restrained assets to cover our legal fees in New Zealand.”

Dotcom has been waging a public social media and legal battle to get his considerable cache of cash, cars and other assets released so that he can cover his legal fees in both New Zealand and the US.

The High Court in Auckland confirmed a decision had been made by Justice Judith Potter, but would not provide details immediately.

The New Zealand Herald reported Dotcom has been given the use of NZ $6m which includes $2.6m for legal fees, $1m for future costs and $1m for rent for his Auckland mansion.

The release of the funds is the second ruling made by Justice Potter in recent months on the matter.

Last March, Justice Potter allowed Dotcom access to more than $750,000 of cash, investments and access to at least two of his fleet of prestige cars. Among that Dotcom was granted a $60,000 per month allowance while he fights the US for his IP and extradition charges in addition to a $20,000 in a monthly living allowance.

Since March he has also had access to a 2011 Mercedes-Benz G55AMG, brandishing the licence plate ‘Police’.

The news came as Dotcom was streaming tweets about his new venture. “The new Mega will offer one-click-encryption of ALL your data transfers, on the fly, easy to use, free of charge, TOTAL PRIVACY!”

And “We are building a massive global network. All non-US hosters will be able to connect servers & bandwidth. Get ready.”

http://www.theregister.co.uk/2012/08/29/dotcom_gets_money_from_court/

http://www.zdnet.com/is-the-social-networking-monoculture-ready-to-crumble-7000003329/

The broader internet levy needs to come into play when more than 70% of private copies derive from the internet.

The Socialist Party is the only Dutch political party that has published a comprehensive IT strategy.

The plan also covers issues such as net neutrality, profiling, data privacy, bandwidth management, cybercrime, internet addiction, data breach notifications, IT infrastructure and IT projects of the Dutch government, the need to invest in an internet economy, cooperation with hacker communities, dealing with cyber warfare and the use of open source software.

Full report in Dutch:
http://www.sp.nl/service/rapport/120823-ict-knooppunten-oplossingen.pdf

Dutch language news article:
http://www.nu.nl/tech/2895294/sp-wil-illegaal-downloaden-afkopen-.html

As complaints mounted, one passenger stuck on the runway pledged on Twitter to “continue to rant about United Airlines till my plane takes off.” United now says the problem is under control.

More:
http://news.cnet.com/8301-1001_3-57502077-92/united-airlines-network-outage-snarls-air-travel/

Lawyers for a young Army private accused of leaking a trove of classified information to the website WikiLeaks said Tuesday that military prosecutors have withheld hundreds of emails related to his pretrial detention at a Marine Corps brig.

David Coombs, a lawyer for Pfc. Bradley Manning, argued at a pretrial hearing that prosecutors have yet to turn over about 700 emails in their possession. But he said the emails he’s already aware of paint a portrait of a military more concerned with combating negative publicity than with Manning’s welfare and reveal that high-level officials, including a three-star general, were briefed about the conditions of his confinement.

More:
http://www.armytimes.com/news/2012/08/ap-bradley-manning-lawyers-want-emails-on-quantico-detention-082812/

The UK Advertising Standards Authority (ASA) has banned a press advert for Sky’s (Sky Store) movie rental service after rival ISP BT complained that it would have required a significantly faster internet connection than Sky Broadband could deliver in order to meet their “available instantly” promise.

Sky Store is an online movie rental service that allows the operators customers to use their remote control for downloading movies via their Sky Broadband connection to a Sky+ TV box. BT challenged that Sky’s advert, which claimed customers could “rent movies instantly through your Sky+ box“, misleadingly exaggerated the speed with which consumers could use the service.

More:
http://www.ispreview.co.uk/index.php/2012/08/asa-uk-bans-sky-tv-advert-for-instant-movie-rental-downloads-claim.html

http://www.infowars.com/tsa-workers-perform-bag-searches-at-rnc/

“The problem is a shortage of liquidity – that is what is causing the problems with the banks. It feels exactly as it felt in 2008,” said one senior London-based bank executive.

http://www.telegraph.co.uk/finance/financialcrisis/8721151/Market-crash-could-hit-within-weeks-warn-bankers.html

and:

This time, the world’s no. 1, 5 and 10 ranked European banks (by assets) are in trouble, with combined assets totaling $7.6 trillion.
http://etfdailynews.com/2012/08/28/market-shock-coming-this-fall-uk-telegraph-sources-spy-gld-faz-tza-indexsp-inx/

Shirley Hornstein (@Shirls on Twitter) spent that past year touting her connections to various startup friendly celebs as well as Sean Parker and his San Francisco-based VC firm Founders Fund. But, as TechCrunch reports today—in an exposé that should prove thoroughly mortifying to Hornstein—few of her claims hold water.

More:
http://gizmodo.com/5938727/who-is-shirley-hornstein

A second suspected member of the LulzSec hacker group has been arrested for his alleged role in a 2011 network security breach at Sony Pictures Entertainment.

Raynaldo Rivera, 20, of Tempe, Ariz., surrendered to authorities today in Phoenix, the Federal Bureau of Investigation said in a statement. An indictment unsealed today charged Rivera with conspiracy and unauthorized impairment of a protected computer. He faces 15 years in prison if convicted.

Cody Kretsinger, of Phoenix, was indicted last September in connection with the attack and has pleaded guilty, the FBI said.

Rivera, who is allegedly known by the monikers “neuron” and “royal,” is accused of participating in an SQL injection attack on Sony Picture’s Web site in June 2011 and downloading thousands of names, birth dates, addresses, e-mails, phone numbers, and passwords. The information for was then posted to Pastebin, and the attack was announced on the group’s Twitter feed.

The hacking group taunted the studio on Twitter, saying it was the “beginning of the end” for Sony.

“Hey @Sony, you know we’re making off with a bunch of your internal stuff right now and you haven’t even noticed?” LulzSec tweeted. “Slow and steady, guys.”

The group boasted on Twitter that it had made off with the personal information for more than a million people, but Sony said the actual number was closer to 37,000.

http://news.cnet.com/8301-1009_3-57502233-83/second-accused-lulzsec-hacker-arrested-in-sony-breach/

http://arstechnica.com/science/2012/08/youre-less-likely-to-lie-if-you-sign-your-name-before-filling-out-forms/

http://arstechnica.com/information-technology/2012/08/big-brother-meets-big-data-the-next-wave-in-net-surveillance-tech/