Robots.txt tells hackers the places you don't want them to look

Found on The Register on Tuesday, 19 May 2015
Browse Internet

Melbourne penetration tester Thiebauld Weksteen is warning system administrators that robots.txt files can give attackers valuable information on potential targets by giving them clues about directories their owners are trying to protect.

Admins would be best excluding assets based on general terms and not through absolute references.

Very old news. This has been a common approach since the robots.txt exists. Admins should just use the access control options every webserver provides. If you don't want a resource to be accessible, put a password on it and/or restrict access based on the client IP address; or even better, don't put sensitive information on a public server.

Music Streaming Website Grooveshark Shuts Down

Found on Time on Friday, 01 May 2015
Browse Internet

The company was been being sued by a slew of record companies, including a $15 billion suit from Universal Music Group.

They must also wipe clean any records of copyrighted material, hand over their online and mobile platforms, and surrender their patents and intellectual property.

So either the labels just stomp the service, keep it running like it is (yeah, big chance) or hide it behind a over-priced paywall. Looking back at the history of the industry, it's most likely the stomping; and in a couple of months the labels will push out new press releases, telling everybody that piracy went up again.

No patch for remote code-execution bug in D-Link and Trendnet routers

Found on Ars Technica on Tuesday, 28 April 2015
Browse Internet

Home and small-office routers from manufacturers including Trendnet and D-Link are vulnerable to attacks that allow attackers anywhere in the world to execute malicious code on the devices, according to an advisory issued over the weekend.

ZDI officials went on to recommend the use of a firewall to block outside connections. Other researchers said that turning off a router's universal plug and play may also prevent exploits.

The more options you stuff into a device, the more problems can arise; and your router is the last thing you want to be vulnerable.

Pandora is paying out $0.0001 more per stream than it was last year

Found on Music Business Worldwide on Monday, 27 April 2015
Browse Internet

Pandora has revealed that its royalty payments to SoundExchange, the US licensing body which collects performance royalties on behalf of record labels and artists, have just increased by 8%.

An 8% rise in SoundExchange royalties might sound impressive, but in per-stream terms, it’s a micro-increase: up $0.0001 from $0.0013 (ad-funded) and $0.0023 (premium) in 2014.

Keep those royalties in mind when you read about GEMA/Youtube again. The GEMA at first wanted 0.1278 Euro per stream, in later negotiations still 0.01 Euro. No wonder they are called greedy.

Google now lets you download your search history

Found on CNet News on Monday, 20 April 2015
Browse Internet

The search giant has added a feature to Google accounts that allows users to download a copy of their past searches. The feature, which was discovered over the weekend by an unofficial Google blog, exports all of a person's Google searches to Google Drive and then allows them to be downloaded from there. The searches are saved in a ZIP archive with files that are categorized by year and quarter.

Why would anybody with a sane mind want Google to store everything about their searches?

Google Aims to Encrypt Most Ads by the End of June

Found on eWEEK on Saturday, 18 April 2015
Browse Internet

By bringing HTTPS support to all ad-serving platforms, Google wants to protect users from ad-borne security threats when watching videos or opening mobile apps.

By the end of June, most mobile, video and desktop display advertisements served to the Google Display Network, AdMob and DoubleClick publishers will also be fully encrypted.

SSL protected ads. Just what everybody wants.

French Intelligence Bill: 5 Web Hosting Providers Threaten To Leave the Country

Found on Slashdot on Sunday, 12 April 2015
Browse Internet

Five popular French web hosting providers, including Gandi and OVH, said on Thursday that the new French intelligence bill might push them to leave the country in order not to lose their customers. The five companies are protesting against the "real-time capture of data connection" and their analysis by the intelligence services using "+black boxes+ with blurred lines".

"These are thousands of jobs (...) that startups and large companies will also create elsewhere," they add. The press release was addressed to the French Prime Minister, Manuel Valls, and was co-signed by Gandu, OVH, IDS, Ikoula and Lomaco.

Maybe one day the politicians will learn that mass-surveillance will not solve any problems. If you make the haystack bigger, it won't make it easier to find the needle.

Gmail for Android gets a unified inbox view

Found on Ars Technica on Monday, 30 March 2015
Browse Internet

The Official Gmail Blog just announced that, starting today, an “All Inboxes” option will show up in the Gmail for Android navigation drawer (presumably, this requires an app update). The new option will display all your incoming mail from all your accounts in a single list.

Third-party mail (Exchange, Outlook, Yahoo, etc.) stays on a third-party server, and Gmail on Android just downloads the mail to your device and displays it.

Wouldn't be too surprising if that changes in the future.

Europol chief warns on computer encryption

Found on BC News on Sunday, 29 March 2015
Browse Internet

Hidden areas of the internet and encrypted communications make it harder to monitor terror suspects, warns Europol's Rob Wainwright.

"It's become perhaps the biggest problem for the police and the security service authorities in dealing with the threats from terrorism," he explained.

Mr Wainwright acknowledged this was a result of the revelations by former National Security Agency contractor Edward Snowden, who exposed how security services were conducting widespread surveillance of emails and messages.

Maybe if they would not have abused their powers in such massive ways, the users would not care as much. Encrytion is here now, and it will spread more and more.

Music Group Wants ISPs to Spy on Customers to Stop Piracy

Found on Torrentfreak on Thursday, 26 March 2015
Browse Internet

Following intense pressure from the Australian government, ISPs were warned that they had to come up with a solution to online piracy or face a legislative response.

Not only should they be pro-active when it comes to monitoring and warning subscribers, ISPs should also use technology to actively block access to infringing content on other levels.

Funny how suddenly this way of thinking is completely wrong when you change the participants: when you want weapon manufacturers to work on methods to stop the illegal use of guns, the industry will tell you that it's impossible and that they are not responsible for what's done with their guns; and the majority of politicians will agree.