Archive for 2012/11/01

Which allows attacker to:

- shut down security checkpoints

- shut down ATM terminals

- take over control of computer systems at 2,294 businesses and organizations

Dutch language news article:
http://www.volkskrant.nl/vk/nl/2694/Tech-Media/article/detail/3340772/2012/11/01/Nieuw-lek-onthuld-13-656-bedrijven-zijn-eenvoudig-te-hacken.dhtml

Dutch language news article:
http://www.nu.nl/internet/2947863/overheidssites-sturen-gegevens-derden.html

Revenue expected to increase by 23% on average for following years. VOD is cannibalizing DVD sales

Dutch language news article:
http://www.nu.nl/internet/2948362/anderhalf-miljoen-nederlanders-gebruiken-video-on-demand.html

- A 5th Microsoft zero-day was discovered with Stuxnet.
- Flame was in the wild for more than 6 years before being discovered.

More:
http://community.controlglobal.com/content/12th-ics-cyber-security-conference-observations

How about U.S. users?

Ensuring that files are not pirated will be the job of content owners, a major change from Megaupload, which the U.S. film industry says was directly responsible for taking down illegally uploaded content.

“Content owners can still remove infringing material and they will even get direct delete access if they agree not to make us responsible for actions of users,” Dotcom said.

Much more:
http://www.reuters.com/article/2012/11/01/net-us-megaupload-mega-announcement-idUSBRE8A007M20121101

http://www.theregister.co.uk/2012/10/31/california_privacy_crackdown_mobile/

http://www.theregister.co.uk/2012/11/01/us_china_export_sanctions_fushine/

http://www.theregister.co.uk/2012/11/01/silver_tail/

http://www.theregister.co.uk/2012/11/01/huawei_report_security_router_hacker/

http://www.theregister.co.uk/2012/11/01/data_protection_law_justice_committee_demands_rewrite_of_draft_proposals/

http://www.theregister.co.uk/2012/11/01/android_app_privacy_audit/

http://www.imperva.com/docs/HII_Monitoring_Hacker_Forums_2012.pdf

http://www.yomiuri.co.jp/dy/national/T121030003585.htm

http://www.telegraph.co.uk/sponsored/russianow/society/9646526/internet-restrictions-russia.html

http://rt.com/news/richard-branson-rt-assange-705/

http://www.infowars.com/sweden-pays-jobless-youth-to-move-to-norway/

http://www.infowars.com/new-cell-phone-surveillance-method-raises-privacy-concerns/

Kim Dotcom unveils “Me.ga” domain, mega plan to fool law enforcement

More:
http://arstechnica.com/tech-policy/2012/11/kim-dotcom-unveils-me-ga-domain-mega-plan-to-fool-law-enforcement/

Why? Because the search giant had posted images linked to his name on Google Images, implying that he was a criminal. Milorad “Michael” Trkulja was victorious in a similar case against Yahoo in March 2012, where he won A$250,000 ($233,000). The Victoria Supreme Court’s Justice David Beach is expected to rule on damages next week.

Trkulja, who has lived in Australia for 42 years, was shot in the back by a masked man while at a restaurant in the Melbourne suburbs in 2004.

Subsequently, searches on Google Images brought up pictures of himself and other people—alleged murderers and drug traffickers—with his name listed below. Trkulja argued the caption “Melbourne Crime” (which was the name of the now-defunct website that had published the photos) might lead some Internet users to believe he was a criminal.

According to the BBC, Trkulja also complained the first hit as part of a Google search on his name was this sentence: “Former music promoter Michael Trkulja was shot in the back by a hitman wearing a balaclava while dining at a St. Albans restaurant in June 2004.”

The man from the former Yugoslavia said this established a “false innuendo” that a hitman had been hired to kill him—and that others had deliberately avoided contact with him in public as a result.

More:
http://arstechnica.com/tech-policy/2012/10/google-loses-melbourne-crime-defamation-case-man-feels-vindicated/

http://news.cnet.com/8301-11386_3-57543673-76/tech-breakthrough-may-double-smartphone-life/

http://news.cnet.com/8301-1009_3-57543300-83/homeland-security-chief-banks-under-attack-by-hackers/

Publisher SWP has ordered 120 people who have illegally downloaded one of its books to pay the full retail price instead. The party offering access to the book as well as two websites have been offered a settlement of 10,000 EUR.

When the sales of the successful primary school book “Van kerndoel tot leerlijn” suddenly came to a halt, the marketing executive of the publisher searched on the internet for an explanation for the drop in sales. SWP publisher Paul Roosenstein explains how they arrived at a LinkedIn-group, became a member and discovered that a Principal of a primary school in Amsterdam provided the members of that group with access to his “DropBox”. The Principal encouraged them to go and download the book from that storage service.

More than 120 group members of other primary schools have made use of the opportunity and two websites copied the PDF to their webpages.

Roosenstein calculated that the direct damages for the publisher would amount to 35,000 EUR worth of lost sales during the period May to October. “But the subsequent damage is much higher as future revenue will no longer be generated. The author of the book, Mareille van der Stap – a fellow teacher – has been seriously affected in relation to her income.”

SWP has gone and hired a law firm and is now litigating against the three major parties: the Principal and the two public websites. A subpoena has been sent to all of the 120 LinkedIn members who applied for and received access to the DropBox account. The subpoena contains a proposal to settle at a cost of 24,90 EUR, the retail price of the book.

The deadline for individual downloaders ended this afternoon at 4 pm. If they did not pay, it would result in a 5,000 EUR fine. “We have received an unexpected amount of reactions,” Roosenstein states. About 80 percent has responded. Half of them have paid the price of the book immediately, sometimes accompanied by apologies. “The remainder has sent lenghthy e-mails, sometimes accompanied by pictures showing them with the physical copies of the books which they already had in their possession. Others are angry and are now demanding to receive the print version. And some are threatening never to buy from us again.”

Whether the Principal and the sites have already responded Roosenstein doesn’t know. They have received the letter by mail and it had been sent by our lawyer.

Roosenstein advises every publisher who is experiencing a sudden drop in sales, to find out whether the drop is the result of piracy. “Regardless of the fact that we want to recover the damages, I also wanted to make a statement. How can this be? Shouldn’t people who are working in the educational sector set a good example?

Translated from the Dutch news article:
http://www.boekblad.nl/uitgeverij-swp-pakt-piraterij-stevig-aan.199174.lynkx

Most of all, can governments cope with instant information verification by citizens and businesses?

In a strongest warning to date by any Government Official, the US Defence Secretary Mr. Leon Panetta at a conference, described the dangers of cyber threats by likening a cyber attack to a “Cyber Pearl Harbour”. His comments highlighted the growing complications and scale of the threats faced by the governments worldwide.

The Middle East region has witnessed a rise in cyber attacks, more focused on Government IT assets. Middle East oil and gas companies have been targeted in massive attacks on their computer networks, these attacks were also engineered against financial organizations and critical infrastructure.

Governments all over the globe are trying their best to cope up with these new cleverly engineered attacks. The 2nd Annual IT for Government will provide the Government officials with a better understanding of the current situation and arm them with methods to re engineer their information and cyber security efforts to successfully confront these threats. The summit scheduled for the 19th – 20th November 2012, will be held at Habtoor Grand Resort and Beach, Dubai, UAE. Sessions like ‘Auditing the Hacker’s mind: the Hacker’s Profiling Project 2.0 ‘ will provide a close view and analysis of hacker’s way of functioning through the findings of the immensely successful Hacker Profiling Project. 2.0.

More:
http://www.ameinfo.com/government-officials-gather-2nd-annual-government-317302