NYPD Twitter campaign 'backfires' after hashtag hijacked

Found on BBC News on Wednesday, 23 April 2014
Browse Internet

Users were asked to tweet a photo of themselves with officers and add the hashtag #myNYPD as part of a social media campaign.

But while several people did so, the hashtag was also picked up by others who used it to identify tweets containing photos of the NYPD in more hostile situations.

You reap what you sow. The NYPD obviously isn't known for being friendly.

Easy-to-Use NTP Amplification Emerges as Common DDoS Attack Vector

Found on eWEEK on Sunday, 20 April 2014
Browse Internet

The two most popular types of reflection attacks, which bounce network traffic off intermediate servers on the Internet, have shot up in popularity, accounting for 23 percent of all infrastructure attacks in the 2014 first quarter, Akamai stated in its Prolexic Quarterly Global DDoS Attack Report.

The largest attack seen by Akamai targeted a European entertainment firm, and exceeded 200G bps at its peak, the firm said. The attack lasted more than 10 hours, and amplified the attack volume through vulnerable servers using a combination of NTP and the Domain Name System (DNS) reflection.

To be fair, NTP and DNS both were developed long before there was any reason to think about abuse. Or better: the network was so small back then that it was easy to find out who is the abuser.

After Netflix pays Comcast, speeds improve 65%

Found on Ars Technica on Monday, 14 April 2014
Browse Internet

Netflix's decision to pay Comcast for a direct connection to the Comcast network has resulted in significantly better video streaming performance for customers of the nation's largest broadband provider.

Comcast is among several ISPs who have refused payment-free interconnection. Verizon and AT&T are still demanding money from Netflix, with customers paying the price in poor video quality.

That's just like Amazon paying a higher postage so that deliveries arrive. ISP's need to be traffic-agnostic: it must not matter what traffic runs through their cables. If their marketing made mistakes and sold more capacity and higher speeds than available, well, it's their problem.

Why No One Trusts Facebook To Power The Future

Found on ReadWrite on Saturday, 05 April 2014
Browse Internet

Facebook has a perception problem, which is largely driven by the fact it controls huge amounts of data and uses people as fodder for advertising. Facebook has been embroiled in numerous privacy controversies over the years, and was built from the ground up by a kid who basically double-crossed his Harvard colleagues to pull it off in the first place.

Perhaps the largest driver of skepticism towards Facebook is the level of control it gives users—which is arguably limited. Sure, you can edit your profile so other people can’t see your personal information, but Facebook can, and it uses your data to serve advertisers.

People forget how to really connect to others, because there's a service that makes it oh so easy to do that. That's why users slowly begin to rely on the service more and more until, at some point, they are depending from it. You can trust FB because the same way a sheep can trust its butcher.

Record labels say ‘Russian Facebook’ is a haven for music piracy

Found on Ars Technica on Friday, 04 April 2014
Browse Internet

The record companies, which focus on a sampling of artists’ work in their suits, seek court orders to remove the infringing material and to require VK to implement content identification and removal measures like audio fingerprinting to prevent unauthorized uploading of infringing materials.

“VK’s music service, unlike others in Russia, is an unlicensed file-sharing service that is designed for copyright infringement on a large scale,” said International Federation of the Phonographic Industry chief executive Frances Moore.

Everything is a haven for piracy according to the entertainment industry. Their crying and whining is so boring.

Oracle’s Java Cloud Service open to code execution hacks, researchers warn

Found on Ars Technica on Thursday, 03 April 2014
Browse Internet

Researchers have released technical details and attack code for 30 security issues affecting Oracle's Java Cloud Service. Some of the issues make it possible for attackers to read or modify users' sensitive data or to execute malicious code, the researchers warned.

Java has security issues? Now if that only would be something new.

LinkedIn email addresses exposed by plug-in software

Found on BBC News on Tuesday, 01 April 2014
Browse Internet

The email addresses of LinkedIn users can easily be exposed via a web browser add-on tool, it has been revealed.

LinkedIn said it was taking legal action over the plug-in and advised users to uninstall it.

"We are doing everything we can to shut Sell Hack down. On 31 March LinkedIn's legal team delivered Sell Hack a cease-and-desist letter as a result of several violations," a spokesman told the BBC.

Maybe LinkedIn should not make the email addresses public in the first place. They cannot really believe that with a simple C&D their design error will be fixed. On the other hand, today is April 1st.

Alibaba confirms plans to offer IPO in US

Found on CNet News on Sunday, 16 March 2014
Browse Internet

Alibaba, which controls nearly 80 percent of China's Internet shopping market, is expected to raise more than $15 billion, giving it a $130 billion valuation. That lofty target would challenge Facebook's record Internet IPO, which raised $16 billion in 2012.

The faces of the executives at Amazon will turn all pale; and Ebay won't be thrilled either. Alibaba also helps alternative payment method since Ebay's Paypal doesn't do business with that company.

WhatsApp chats not as secret as you think

Found on The Register on Thursday, 13 March 2014
Browse Internet

Bas Bosschert has described a process by which the chat database can be read even if it's encrypted.

For Bosschert's attack to work, all that's required is that the user grants sufficient permissions to the malicious app. As he writes: “ since [the] majority of the people allows everything on their Android device, this is not much of a problem.”

WhatsApp was never secure and I doubt that Facebook would be happy if all messages are so secure that it cannot look at them at some point.

Tor is building an anonymous instant messenger

Found on The Daily Dot on Saturday, 01 March 2014
Browse Internet

Tor, the team behind the world’s leading online anonymity service, is developing a new anonymous instant messenger client, according to documents produced at the Tor 2014 Winter Developers Meeting in Reykjavík, Iceland.

Over the long term, TIMB will likely become the messenger of choice for Tor users. Software such as TorChat and BitMessage already have significant userbases and smart advocates, but with the full weight of the Tor Launcher and team behind it, there’s little reason to imagine TIMB won’t succeed.

Secure communication is essential these days; the recent leak about the spying on Yahoo users by GCHQ is just another reason. Of course politicians will say that this only makes it harder to track down terrorists, child molesters, druglords and whatever else you can imagine; it should be obvious though that those who are part of the organized crime have secure ways for communication and the wide spread adoption of strong encrytion won't change much. In the end, the development of such systems speeds up because people are sick of being monitored, be it by WhatsApp or the NSA et al.