×
Encryption

NSA Foils Much Internet Encryption 607

An anonymous reader writes "The New York Times is reporting that the NSA has 'has circumvented or cracked much of the encryption, or digital scrambling, that guards global commerce and banking systems, protects sensitive data like trade secrets and medical records, and automatically secures the e-mails, Web searches, Internet chats and phone calls of Americans and others around the world, the documents show. ... The agency, according to the documents and interviews with industry officials, deployed custom-built, superfast computers to break codes, and began collaborating with technology companies in the United States and abroad to build entry points into their products. The documents do not identify which companies have participated.'" You may prefer Pro Publica's non-paywalled version, instead, or The Guardian's.
Communications

Ask Slashdot: Can Creating New Online Accounts Reduce Privacy Risks? 164

rjnagle writes "I'm concerned about the implications of storing personal data on Gmail, Facebook, and other social media sites. I'm less worried about individual data than the accumulating mass of data which potentially be used against me (for targeted marketing, credit reporting and who knows what else?) One solution I'm considering is just to abandon individual accounts and start clean and new gmail/facebook accounts. So while Google/Doubleclick might possess lots of data about me from 2001-2012, from this point on, they only have a clean slate. Would this kind of solution address my privacy concerns? (assuming I remove cookies, change IP address before doing so etc). Or are an individual's profile by now so unique that simply creating a new gmail or Facebook account would fail to prevent these data collection agencies from figuring out who I am? Insights and tips are appreciated."
Privacy

NRA Joins ACLU Lawsuit Against NSA 531

cold fjord writes with this excerpt from The Hill: "The National Rifle Association joined the American Civil Liberties Union's lawsuit on Wednesday to end the government's massive phone record collection program. In a brief filed in federal court, the NRA argues that the National Security Agency's database of phone records amounts to a 'national gun registry.' 'It would be absurd to think that the Congress would adopt and maintain a web of statutes intended to protect against the creation of a national gun registry, while simultaneously authorizing the FBI and the NSA to gather records that could effectively create just such a registry,' the group writes. ... In its filing, the gun-rights group claims that the NSA's database would allow the government to identify and track gun owners based on whether they've called gun stores, shooting ranges or the NRA. 'Under the government's reading of Section 215, the government could simply demand the periodic submission of all firearms dealers' transaction records, then centralize them in a database indexed by the buyers' names for later searching,' the NRA writes."
Security

Stuxnet Expert Dismisses NIST Cyber Security Framework, Proposes Alternative 32

An anonymous reader writes "Ralph Langner, the security expert who deciphered how Stuxnet targeted the Siemens PLCs in Iran's Natanz nuclear facility, has come up with a cybersecurity framework for industrial control systems (ICS) that he says is a better fit than the U.S. government's Cyber Security Framework. Langner's Robust ICS Planning and Evaluation, or RIPE, framework takes a different approach to locking down ICS/SCADA plants than the NIST-led one, focusing on security capabilities rather than risk. He hopes it will help influence the final version of the U.S. government's framework."
Privacy

Security Company Attributes Tor Traffic Surge To Botnet 55

hypnosec writes "A cyber defense and IT security company has claimed that the reason behind recent surge in number of clients connecting to Tor is in fact a relatively unknown botnet and not NSA or genuine adoption of Tor. In late August there was a huge increase in Tor network traffic and number of clients connecting to the Tor network. As of this writing number of connections has quadrupled with over 2,500,000 clients connecting to the network. According to Fox-it, the surge in traffic is because of a botnet dubbed 'Mevade.A,' which is known to have Tor connectivity features. The company noted that the botnet may have links to a previously detected botnet dubbed 'Sefnit,' which also featured Tor connectivity. Fox-it claimed that they have found "references that the malware is internally known as SBC to its operators.""
Government

GameFly Scores In Longstanding DVD Mailing Complaint 147

An anonymous reader writes "GamePolitics reports that the Postal Regulatory Commission has ordered [PDF] the U.S. Postal Service to equalize the rates paid by mailers who send round trip DVDs, and concluding (sort of) a dispute that has been underway for more than four years. The new postage rates take effect on September 30th. Some mailers, prominantly Netflix, send their round-trip movie DVDs as 'letters,' but GameFly's gaming disks are sent in slightly bigger envelopes as 'flats' to avoid breakage, and so GameFly has paid a much higher postage rate. GameFly argued that this was unfair discriminatory treatment because USPS was providing special hand-sorting treatment for Netflix disks without charging Netflix for the extra handling. But now there's a new twist: the Postal Service wants to reclassify DVD mailing [PDF] as a competitive product, where the prices would not be limited by the rate of inflation, because it says that mailed DVDs compete with the internet, streaming services, and kiosks such as Redbox. The regulatory agency is accepting responses [PDF] from interested persons until September 11th to the Postal Service's latest comments on its request [PDF]."
Censorship

On Eve Of Election, Australia's Conservatives Announce Mandated Filtering Policy 87

Dan B. writes "After Australia's Conservative party (LNP) quietly posted a policy [PDF] to impose mandatory internet filtering just one day prior to the country's election, local premiere internet forum Whirlpool has gone in to overdrive with the fastest 50 page thread ever. At 8:30pm, both sides of politics were busy running media releases, with the Conservatives hastily back-pedalling on the policy, and the Government attacking it, accusing them of hypocrisy after voting down their own proposed filter 3 years prior, stating there was no proof filtering works."
The Courts

Jury Finds Google Guilty of Standards-Essential Patents Abuse Against MS 278

recoiledsnake writes "A federal jury in Seattle ordered Google to pay Microsoft $14.5 million in damages for breach of contract for failing to license at reasonable terms standard essential patents covering wireless and video technology used in the Xbox game console. Motorola had demanded Microsoft pay annual royalties of up to $4 billion for use of patents that are part of the H.264 video and 802.11 wireless standards, which are baked into Windows and the Xbox video game console. Microsoft said it was willing to pay royalties but not at the 2.25 percent of the product price that Motorola sought. We previously covered Motorola's exorbitant demands."
The Almighty Buck

PayPal Freezes MailPile's Account 443

rysiek writes "Remember MailPile, the privacy-focused, community-funded FOSS webmail project with built-in GPG support? The good news is, the funding campaign is a success, with $135k raised (the goal was $100k). The bad news is: PayPal froze MailPile's account, along with $45k that was on it, and will not un-freeze it until MailPile team provides 'an itemized budget and your development goal dates for your project.' One of the team members also noted: 'Communications with PayPal have implied that they would use any excuse available to them to delay delivering as much of our cash as possible for as long as possible.' PayPal doesn't have a great track record as far as fund freezing is concerned — maybe it's high time to stop using PayPal?"
Privacy

What Marketers Think They Know About You and What They Really Do 277

mattydread23 writes "Data broker Acxiom did something a little unusual this week. It launched a service that lets you see the data they've collected on you. CITEworld writer Ron Miller checked it out, and found it to be mostly laughably inaccurate. Among the things they got wrong included his religion, his interests, and the number of kids he has. But worst? It pegged him as a Windows user."
The Courts

Court Orders Retrial In Google Maps-Related Murder Case 152

netbuzz writes "Ruling that a judge erred in blocking two computer security experts from testifying that an incriminating Google Maps search record found on the defendant's laptop was planted there, a North Carolina appeals court has ordered a new trial for ex-Cisco employee Bradley Cooper, convicted two years ago in the 2008 strangulation death of his wife Nancy. 'The sole physical evidence linking Defendant to Ms. Cooper's murder was the alleged Google Map search, conducted on Defendant's laptop, of the exact area where Ms. Cooper's body was discovered,' wrote the appeals court. 'We hold ... that erroneously preventing Defendant from presenting expert testimony, challenging arguably the strongest piece of the State's evidence, constituted reversible error and requires a new trial.'"
United Kingdom

FOI Request Reveals UK Houses of Parliament Workers' Passion For Adult Content 61

Anita Hunt (lissnup) writes "Hot on the heels of Dave Cameron's demands to make such content universally 'opt-in,' the Independent reports 'Westminster computers were prevented from accessing sex sites 114,844 times last November alone and on 55,552 in April, while February saw just 15 and in June officials blocked 397 attempts.' No explanation has been offered for the variation, although it would be interesting to know if the fall in the number of recorded/reported attempts coincides with the date the FOI request was filed."
The Almighty Buck

Martin Luther King Jr's Children In Court Over MLK IP 344

cervesaebraciator writes "Slashdot has reported before about the copyright nightmare of Dr. Martin Luther King Jr.'s 'I Have a Dream' Speech. Now, questions of intellectual property and the legacy of Dr. King have caused his children to go to court. The estate, run by King's sons, claims the rights to the intellectual property and memorabilia of Dr. King as assets. Accordingly, it has filed suit against the non-profit Martin Luther King Jr. Center for Nonviolent Change, run by King's daughter, for plans to continue using King memorabilia once a royalty-free licensing agreement expires, (which the estate says will be in September). As is the case with increasing frequency, one is left to wonder about the implications intellectual property claims have for free speech when they can be applied to so public a figure as Dr. King."
Patents

Apple Receives Patent For Accessing Sets of Apps With Different Passcodes 156

wabrandsma writes, quoting Apple Insider "The technology, detailed in a patent awarded to Apple on Tuesday by the U.S. Patent and Trademark Office, deals with so-called 'access inputs' that determine what apps, device services, and functions can be accessed by a user. Apple's U.S. Patent No. 8,528,072 for a 'Method, apparatus and system for access mode control of a device,' describes a system that creates user access modes guarded by predetermined gesture inputs." Reading the patent, it appears Apple managed to patent allowing access to some programs without a passcode from the lock screen of a device while protecting others, so e.g. you can quickly swipe to make a phone call or control your music, but have to enter a code to read your email or access your word processor documents.
Encryption

NSA-resistant Android App 'Burns' Sensitive Messages 183

angry tapir writes "Phil Zimmermann's Silent Circle, which halted its secure mail service shortly after Lavabit, has released a messaging application for Android devices that encrypts and securely erases messages and files. The application, called Silent Text, lets users specify a time period for which the receiver can view a message before it is erased. It also keeps the keys used to encrypt and decrypt content on the user's device, which protects the company from law enforcement requests for the keys." Seems similar to pieces of the Guardian Project.
Encryption

Software Developer Says Mega Master Keys Are Retrievable 136

hypnosec writes that software developer Michael Koziarski has released a bookmarklet "which he claims has the ability to reveal Mega users' master key. Koziarski went on to claim that Mega has the ability to grab its users' keys and use them to access their files. Dubbed MegaPWN, the tool not only reveals a user's master key, but also gives away a user's RSA private key exponent. 'MEGApwn is a bookmarklet that runs in your web browser and displays your supposedly secret MEGA master key, showing that it is not actually encrypted and can be retrieved by MEGA or anyone else with access to your computer without you knowing,' reads an explanation about the bookmarklet on its official page."
China

China's Secret Scientific Megaprojects 142

An anonymous reader writes "The Diplomat reports on the 2006 National Medium to Long-term Plan (MLP) for the Development of Science and Technology, China's most ambitious national science and technology plan to date. The MLP consists of sixteen megaprojects — both civilian and military — that serve as 'S&T vanguard programs designed to transform China's science & technology capabilities in areas such as electronics, semiconductors, [and] telecommunications.' Thirteen of the megaprojects are listed in the MLP, while three are classified for national security reasons. The three classified megaprojects are likely the military components of the Shenguang Laser Project (used for thermonuclear weapons), the Beidou 2 Satellite Navigation System, and the Hypersonic Vehicle Technology Project."
Government

Prankster Calls NSA To Restore Deleted E-mail 221

First time accepted submitter manu0601 writes "Since the NSA snoops, intercepts and store our e-mails forever, why not use it as a backup service? It just lacks the API to restore files, therefore this guy [YouTube video] called the NSA to ask for a backup restoration. Guess what? It did not work." After all, why should we have to pay twice for services already performed with tax dollars?
Education

What Works In Education: Scientific Evidence Gets Ignored 440

nbauman writes "According to Gina Kolata in the New York Times, The Institute of Education Sciences in the Department of Education Sciences, U.S. Department of Education, has supported 175 randomized controlled studies, like the studies used in medicine, to find out what works and doesn't work, which are reported in the What Works Clearinghouse. Surprisingly, the choice of instructional materials — textbooks, curriculum guides, homework, quizzes — can affect achievement as much as teachers; poor materials have as much effect as a bad teacher, and good materials can offset a bad teacher's deficiencies. One popular math textbook was superior to 3 competitors. A popular computer-assisted math program had no benefit. Most educators, including principals and superintendents, don't know the data exists. 42% of school districts had never heard of the clearinghouse. Up to 90% of programs that seemed promising in small studies had no effect or made achievement scores worse. For example a program to increase 7th-grade math teachers' understanding of math increased their understanding but had no effect on student achievement. Upward Bound had no effect."
Crime

Russia Issues Travel Warning To Its Citizens About United States and Extradition 369

mendax writes "The New York Times reports that the Russian government is warning its citizens to not travel to countries that have an extradition treaty with the United States, noting that 'detentions of Russian citizens in various countries, at the request of American law enforcement, have become more frequent.' The article reports the Russian foreign ministry as saying,'Experience shows that the judicial proceedings against those who were in fact kidnapped and taken to the U.S. are of a biased character, based on shaky evidence, and clearly tilted toward conviction.'"

Slashdot Top Deals