Corvus Crow
The Fireraven
Thursday, 07. August 2008, 22:30
Thursday, 07 August 2008
Censorship German hackers have constructed a route around the great firewall of China. The Chaos Computer Club said its technology will help athletes and journalists travelling to Beijing for the Olympic Games to circumvent censorship.

Visitors to China are being offered USB sticks containing a browser that connects via the TOR proxy network.

Chaos Computer Club is offering the technology partly to offer an easy way around Chinese censorship restriction but also to make a political point much closer to home.
There are already TOR exit nodes operational in China. However, it's important, especially in China, to bring such ways to the attention of non-tech people too who consider China's firewall unbreakable.
Wednesday, 06 August 2008
Miscellaneous Microchipped passports designed to have watertight security can actually be cloned in a matter of minutes.

A computer researcher was able to clone the chips on two British passports. They then implanted digital images of Osama bin Laden and a suicide bomber. The tampered chips were then passed as real by passport reader software used by the United Nations agency that sets standards for the e-passports.

These tests flag up several interesting and somewhat alarming points: They undermine claims that 3,000 blank passports stolen last week are useless as they can't be cloned, they also raise questions on the £4 billion spent by the government on ID cards which use the same technology.
It's a cat and mouse game, and terrorists will always win. Simply because a terrorist only needs to find a single weakness in any given system, while governments have to cover every hole, known or unknown. In the end, this would end up with total control and monitoring of every citizen, taking away privacy. And even then, the system will be vulnerable.
Tuesday, 05 August 2008
Miscellaneous In one of the more colossal security blunders in a long time, an unencrypted laptop containing sensitive information for 33,000 travelers has been reported stolen from San Francisco International Airport.

Officials with Transportation Security Administration say the laptop was discovered missing from a locked room more than a week ago, but unbelievably, they weren't warned until Sunday.

As if the lack of encryption and a tardy warning weren't enough, the company's CEO, Steven Brill, dismissed the incident as a simple burglary of a laptop. "For it to be more than that, the thief would have to hack into two different passwords - and even then would not get what identity thieves want most - a Social Security number and/or credit card information."
Oh wow, two passwords even. Let me guess, "12345" and "secret"?
Monday, 04 August 2008
Legal-Issues The federal judge who presided over the nation's only peer-to-peer copyright-infringement trial announced from the bench here Monday that he is likely to declare a mistrial.

At issue is whether the RIAA needs to prove that copyrighted music offered by a defendant on a peer-to-peer network was actually downloaded by anyone.

The judge's decision, which he said would be issued "hopefully before the end of September," is likely to have wide-ranging implications in the RIAA's file-sharing litigation campaign -- 20,000 lawsuits and counting.
Just imagine what happens if the RIAA/MPAA doesn't need to prove infringement: lawsuit are brought to everybody who accesses a P2P network. Then it's up to the user to prove that he did not make any music accessible. That's an "in dubio contra reo" way.
Sunday, 03 August 2008
Miscellaneous For a long time, Hushmail was considered a very secure email provider until an affidavit (PDF) from a DEA agent in 2007 showed that they had handed over 12 CDs of possibly decrypted data to law enforcement. Now, Cryptome has posted that the Hushmail encryption program is no longer the same program for which Hushmail releases their source. Is Hushmail even safe to use anymore?
Well, if you entrust the encryption to a third party, you should expect nasty surprises. While it's true that Hushmail only handed over emails which they also had the keys for, it shows that encryption needs to be done as soon as possible. Don't trust some random company to do it for you; just trust yourself. That's also why you should always prefer open source encryption software; with closed source, you can't be sure that there are no backdoors, as unlikely as it may be.
Random quote from Anonymous: Pascal keeps your hands tied. C gives you enough rope to hang yourself.