Universal reportedly wants Spotify to scale back its free streaming

Found on Engadget on Sunday, 22 March 2015
Browse Internet

Financial Times sources understand that Universal is using licensing negotiations to squeeze Spotify and demand more limits for those who don't pay up, such as restricting the amount of time they can play tunes in a given month.

Whether or not Spotify gives in is another matter. It can't afford to lose one of the major labels, but it's also adamant that having an enticing free tier is crucial to getting listeners to pay.

Universal should be happy with what it gets, or it might see even less revenue when demanding higher rates. It's similar to the original Financial Times article: you are required to sign up before you can read the article, so this backlink goes to Engadget instead.

Edits to Wikipedia pages on Bell, Garner, Diallo traced to 1 Police Plaza

Found on Capital on Friday, 13 March 2015
Browse Internet

Computer users identified by Capital as working on the NYPD headquarters' network have edited and attempted to delete Wikipedia entries for several well-known victims of police altercations, including entries for Eric Garner, Sean Bell, and Amadou Diallo.

NYPD IP addresses have also been used to edit entries on stop-and-frisk, NYPD scandals, and prominent figures in the city’s political and police leadership.

This why there is no trust.

DNS Server Error Brings Down iTunes, iCloud for 12 Hours

Found on eWEEK on Thursday, 12 March 2015
Browse Internet

The outage impacted sales on the iTunes Store, iBooks Store, App Store, and Mac App Store. Users were unable to buy apps or other content, and in some cases they were are prevented from downloading updates and even opening already-purchased apps.

What a nice quiet day this must have been.

Tor developers look beyond U.S. government funding

Found on The Daily Dot on Sunday, 08 March 2015
Browse Internet

In 2013, Tor received more than $1.8 million from the U.S. government, about 75 percent of the $2.4 million in total annual expenses, according to their latest publicly available tax returns.

There is actually wide agreement among both Tor insiders and outsiders that discussing Tor’s government funding is an important next step for the organization.

Funny how the government funds a tool which only exists because governments snoop too much.

Why Clinton’s Private Email Server Was Such a Security Fail

Found on Wired on Wednesday, 04 March 2015
Browse Internet

On Wednesday the AP reported that Clinton actually ran a private mail server in her home during her entire tenure leading the State Department, hosting her email at the domain Clintonemail.com.

Any protection it had there—aside from the physical protection of the Secret Service—would have been limited to the Clintons’ own personal resources.

So a presidential candidate ignores record-keeping and transparency rules? That's not a good start.

WordPress to Remain Most Attacked Platform, Researchers Say

Found on eWEEK on Tuesday, 03 March 2015
Browse Internet

The trend will continue in 2015, driven by the lack of security awareness among WordPress' large user base and the lack of security expertise among its plugin developers, according to experts.

In 2010, Joomla and its associated plugins had four times as many vulnerabilities reported as Drupal and WordPress, according to the National Vulnerability Database. In 2012, Drupal led the pack, and in 2014, WordPress and its plugins had three times as many bugs reported as the next highest CMS.

Wordpress has to address not only its own bugs, but also needs to disable dropped or unsupported plugins. The developers need to realize that abandoning a plugin can cause big problems, and webmasters have to understand that it is essential to keep their CMS updated, as well as the used plugins.

In major goof, Uber stored sensitive database key on public GitHub page

Found on Ars Technica on Monday, 02 March 2015
Browse Internet

Uber is trying to force GitHub to disclose the IP address of every person that accessed a webpage connected to a database intrusion that exposed sensitive personal data for 50,000 drivers. The court action revealed that a security key unlocking the database was stored on a publicly accessible place, the online equivalent of stashing a house key under a doormat.

The wording of Uber's complaint, saying a security key protecting the Uber database was stored on a publicly assessable GitHub page, is a step backwards for Uber as it attempts to reassure the public that the significant amount of information it holds is safe from prying eyes.

Someone might try to file a suit against Uber for neglecting basic security priciples. Github is okay for code that can be public, but any sensitive data should never come close to it.

Firefox 36 swats bugs, adds HTTP2 and gets certifiably serious

Found on The Register on Thursday, 26 February 2015
Browse Internet

Mozilla has outfoxed three critical and six high severity flaws in its latest round of patches for its flagship browser.

The new version of the browser also adds HTTP2 support ®

Google sure quickly dropped it's Spdy protocol.

Is email broken?

Found on BBC News on Friday, 20 February 2015
Browse Internet

For many people, email was their first experience of online communication, and seemed at first a magical new way of connecting at work and at home. Now, though, it looks old hat. Teenagers, we are told, are using everything from Snapchat to WhatsApp to communicate and are unlikely to respond if you email them - something I can confirm from personal experience.

Of around 200 emails from outside my organisation, many were from mailing lists I signed up to in the dim and distant past.

Email will survive Facebook, WhatsApp, Twitter and Snapchat and you cannot complain about too many emails if you signed up for them in the first place. The thruth behind such FUD campaigns is caused by the propaganda machinery paid by the social network companies because the hate email. They cannot build profiles of you for making money with you, simply because they don't see the emails you send. That's the total opposite to your WhatsApp or Twitter accounts, where every single action travels through their systems and help profiling you and your contacts.

Facebook bug could have ERASED the ENTIRE WORLD

Found on The Register on Friday, 13 February 2015
Browse Internet

Software engineer Laxman Muthiyah has reported a dangerous vulnerability capable of deleting any photo from Facebook, prompting The Social NetworkTM to patch the hole within two hours and issue one of its biggest bug-spotting cheques ever.

Muthiyah published a proof of concept video detailing the vulnerability and received praise from industry for finding the bug.

You might wonder how big the "biggest bug-spotting cheques ever" was: $12,500 USD. He could have easily sold it for 10-100x the amount on underground markets. For something as critical as this, FB got lucky in exchange for some pocket change.