Slashdot Mirror
Domain: itworld.com
Stories and comments across the archive that link to itworld.com.
Stories · 2,036
-
Taiwan Protests Apple Maps That Show Island As Province of China
itwbennett writes "Taiwan is demanding Apple revise its mapping software and remove a label that describes the island as a province of China, rather than as a sovereign state. The complaint was lodged after local media reports said that users on the island had noticed the change in Apple's latest iOS and Mac OS versions. 'The maps don't acknowledge Taiwan as its own nation. We voiced our disapproval, and hope Apple will make the change,' an official with Taiwan's foreign ministry said Wednesday. This isn't the first time such a mistake was made. Google also labeled Taiwan as a Chinese province in 2005." -
How Your Compiler Can Compromise Application Security
jfruh writes "Most day-to-day programmers have only a general idea of how compilers transform human-readable code into the machine language that actually powers computers. In an attempt to streamline applications, many compilers actually remove code that it perceives to be undefined or unstable — and, as a research group at MIT has found, in doing so can make applications less secure. The good news is the researchers have developed a model and a static checker for identifying unstable code. Their checker is called STACK, and it currently works for checking C/C++ code. The idea is that it will warn programmers about unstable code in their applications, so they can fix it, rather than have the compiler simply leave it out. They also hope it will encourage compiler writers to rethink how they can optimize code in more secure ways. STACK was run against a number of systems written in C/C++ and it found 160 new bugs in the systems tested, including the Linux kernel (32 bugs found), Mozilla (3), Postgres (9) and Python (5). They also found that, of the 8,575 packages in the Debian Wheezy archive that contained C/C++ code, STACK detected at least one instance of unstable code in 3,471 of them, which, as the researchers write (PDF), 'suggests that unstable code is a widespread problem.'" -
EU Parliament: Other Countries Spy, But Less Than the UK, US
itwbennett writes "An E.U. Parliament survey of 5 member states found that 4 of the 5 (U.K., France, Germany and Sweden) engage in bulk collection of data. Only the Netherlands doesn't, but that's not because it doesn't want to. In fact, The Netherlands is currently setting up an agency for that purpose. France, which summoned the U.S. ambassador to explain allegations that the NSA spied on Alcatel-Lucent, ranks fifth in the world in metadata collection. And Sweden? Its National Defence Radio Establishment (FRA) is alleged to have been running 'upstreaming' operations (tapping directly into the communications infrastructure as a means to intercept data) for the collection of private data — collecting both the content of messages as well as metadata of communications crossing Swedish borders through fibre-optic cables from the Baltic Sea." -
EU Parliament: Other Countries Spy, But Less Than the UK, US
itwbennett writes "An E.U. Parliament survey of 5 member states found that 4 of the 5 (U.K., France, Germany and Sweden) engage in bulk collection of data. Only the Netherlands doesn't, but that's not because it doesn't want to. In fact, The Netherlands is currently setting up an agency for that purpose. France, which summoned the U.S. ambassador to explain allegations that the NSA spied on Alcatel-Lucent, ranks fifth in the world in metadata collection. And Sweden? Its National Defence Radio Establishment (FRA) is alleged to have been running 'upstreaming' operations (tapping directly into the communications infrastructure as a means to intercept data) for the collection of private data — collecting both the content of messages as well as metadata of communications crossing Swedish borders through fibre-optic cables from the Baltic Sea." -
Microsoft Makes It Harder To Avoid Azure
itwbennett writes "Earlier this week, Microsoft rolled out a handful of hybrid cloud services that make it easy for businesses to start using Azure in a small way. What struck blogger Nancy Gohring about the announcement was 'how deeply Microsoft is integrating Azure into other products,' with the intention of moving long-time customers onto Azure in ways that are hardly perceptible to them." -
Torvalds: Free OS X Is No Threat To Linux
jfruh writes "Apple is now offering upgrades to the latest version of OS X for free. When Linux inventor Linus Torvalds was asked whether this threatened Linux (presumably by someone who had only a passing knowledge of all the things 'free' can mean when applied to software) it gave him an opportunity for a passionate defense of open source. Torvalds also says that he'll keep programming until it gets 'not interesting,' which hasn't happened yet." The newest version of OS X may be gratis for Apple hardware buyers, but it's notably far from the original, (literally) un-branded sense of "mavericks." -
The Cloud: Convenient Until a Stranger Nukes Your Files
jfruh writes "Thanks to a plethora of cloud storage accounts, Dan Tynan thought his days of carrying a thumb drive around with him and worrying about email stripping out his attachments were over. But that was before he discovered that his Box.com account and all the files in it had vanished without a trace. With tech support coming up empty, Tynan had to put on his journalist hat to track down the bizarre sequence of events that ended with his account handed over to another user, who didn't ask for it and didn't even know who Tynan was." -
DHHS Preparing 'Tech Surge' To Fix Remaining Healthcare.gov Issues
itwbennett writes "It's no secret that the healthcare.gov website has been plagued by problems since its launch 3 weeks ago. On Sunday, the Department of Health and Human Services said that it's now bringing in the big guns: 'Our team is bringing in some of the best and brightest from both inside and outside government to scrub in with the [HHS] team and help improve HealthCare.gov,' the blog post reads. 'We're also putting in place tools and processes to aggressively monitor and identify parts of HealthCare.gov where individuals are encountering errors or having difficulty using the site, so we can prioritize and fix them.' Other emergency measures being taken as part of what HHS calls a 'tech surge' include defining new test processes to prevent new problems and regularly patching bugs during off-peak hours. Still unclear is how long it will take to fix the site. As recently reported on Slashdot, that could be anywhere from 2 weeks to 2 months." -
OCZ May Be On Its Last Legs
itwbennett writes "OCZ, one of the first commercial solid-state drive (SSD) makers has been blaming a shortage of NAND for its woes for some time now, but things have taken a precipitous turn for the worse: 'For its second fiscal quarter ended August 31, 2013, revenue was $33.5 million, a huge drop compared to revenue of $55.3 million for the first quarter of 2013 and revenue of $88.6 million for the second quarter of 2012. The net loss for this quarter was massive, $26 million, a doubling of the $13.1 million loss in the same quarter last year.' The company has burned through cash, its stock collapsed, and now so have sales. Meanwhile, other SSD makers are doing well. So what is happening here?" -
When Opting Out of Ad Tracking Doesn't Opt You Out
jfruh writes "Privacy blogger Dan Tynan couldn't help but notice the ads targeting his web browsing for a plus-sized women's clothing store, not least because he's neither a woman nor plus-sized. But trying to figure out why those ads kept popping up in his browser led to some disturbing discoveries. He had opted out of targeted Google ads, and at first glance the ads seemed to come from Google — but digging deeper, he found that Google's DoubleClick was only the intermediary, which meant his opt-out didn't apply. And his opt-outs from other ad services seemed to have vanished." -
Ask Slashdot: What Are the Hardest Things Programmers Have To Do?
itwbennett writes "Software development isn't a cakewalk of a job, but to hear programmers tell it (or at least those willing to grouse about their jobs on Quora and Ubuntu Forums), what makes programming hard has little to do with writing code. In fact, if the list compiled by ITworld's Phil Johnson has it right, the single hardest thing developers do is name things. Are you a software developer? What's the hardest part of your job?" -
Lavabit Briefly Allowing Users To Recover Their Data
itwbennett writes "Former users of the Lavabit encrypted email service that was shut down in August have 72 hours (starting yesterday at 7 p.m. U.S. Central Time) to change their passwords and start recovering their data. 'Following the 72 hour period, Thursday, October 17th, the website will then allow users to access email archives and their personal account data so that it may be preserved by the user,' said Lavabit's founder and owner Ladar Levison." -
For Playstation 4 Owners, Bad News On USB, Bluetooth Headsets
itwbennett writes "Until now Sony has done a pretty good job of keeping future Playstation 4 owners happy. But last week they finally hit a rock when Game Informer posted an article about headset compatibility. At launch, USB headsets that work with the PS3 won't work with the PS4. Sony says that eventually there will be a system update that addresses the problem but for now, even your Sony-branded USB headset won't work. If you use a Bluetooth headset (as most PS3 owners do) the news is even worse. Bluetooth headsets will not be supported and no update is planned to address this. ITworld's Peter Smith is shedding a tear for his $250 Turtle Beach PX5 headset." -
MIT Develops "Kinect of the Future"
itwbennett writes "Using radio signals, MIT researchers can pinpoint someone's location — through a wall — with accuracy of +/- 10 centimeters. Fadel Adib, a Ph.D student on the project, said that gaming could be one use for the technology, but that localization is also very important. He said that Wi-Fi localization, or determining someone's position based on Wi-Fi, typically requires the user to hold a transmitter, like a smartphone for example. 'What we're doing here is localization through a wall without requiring you to hold any transmitter or receiver [and] simply by using reflections off a human body,' he said. 'What is impressive is that our accuracy is higher than even state of the art Wi-Fi localization.'" -
Who's Getting Pay-By-Phone Right? The Fast Food Industry
jfruh writes "Techno-enthusiasts have been predicting for years that cell phones will become one of the main means that we use to pay for items — but most Americans stubbornly cling to cash and credit cards, mostly because cash and credit cards are infinitely more convenient. In order to woo people into buying things electronically, merchants need to make phone purchases better than traditional payment systems, not just another option. The fast food industry is leading the way with a plethora of apps that make ordering remotely a snap." -
Lenovo Shows Android Laptop In Leaked User Manuals
itwbennett writes "PC maker Lenovo accidentally posted manuals on its website showing an Android laptop called the IdeaPad A10. Lenovo spokesman Chris Millward said the company had planned on making an official announcement for the device, and that 'the product has not been canceled. It will be going out to the market.' Launch dates and pricing to come, but specs show that it could be a budget product." -
Mountain View To Partially Replace Google Wi-Fi
itwbennett writes "Google launched the citywide Wi-Fi network with much fanfare in 2006 as a way for Mountain View residents and businesses to connect to the Internet at no cost. It covers most of the Silicon Valley city and worked well until last year, as Slashdot readers may recall, when connectivity got rapidly worse. As a result, Mountain View is installing new Wi-Fi hotspots in parts of the city to supplement the poorly performing network operated by Google. Both the city and Google have blamed the problems on the design of the network. Google, which is involved in several projects to provide Internet access in various parts of the world, said in a statement that it is 'actively in discussions with the Mountain View city staff to review several options for the future of the network.'" -
The Ridiculous Tech Fees You're Still Paying
Esther Schindler writes "None of us like to spend money (except on shiny new toys). But even we curmudgeons can understand that companies need to charge for things that cost them money; and profit-making is at the heart of our economy. Still, several charges appear on our bills that can drive even the most complacent techie into a screaming fit. How did this advertised price turn into that much on the final bill? Why are they charging for it in the first place? Herewith, fees that make no sense at all — and yet we still fork over money for them. For example: 'While Internet access is free in coffee shops, some public transit, and even campsites, as of 2009 15% of hotels charged guests for the privilege of checking their e-mail and catching up on watching cat videos. Oddly, budget and midscale hotel chains are more likely to offer free Wi-Fi, while luxurious hotels — already costing the traveler more — regularly ding us.'" -
NSA's New Utah Data Center Suffering Meltdowns
linuxwrangler writes "NSA's new Utah data-center has been suffering numerous power-surges that have caused as much as $100,000 damage per event. The root cause is 'not yet sufficiently understood' but is suspected to relate to the site's 'inability to simultaneously run computers and keep them cool.' Frustrating the analysis and repair are 'incomplete information about the design of the electrical system' and the fact that "regular quality controls in design and construction were bypassed in an effort to fast track the Utah project."" Ars Technica has a short article, too, as does ITworld. -
Japan Promises an Ultra-High-Tech 2020 Olympics
jfruh writes "When Japan first hosted the Olympics in 1964, it was a platform for the country to showcase that it was a first-rate technical nation, with brand new bullet trains for visitors and the games broadcast in color via satellite for the first time. Japan's tech industry is already preparing for the 2020 Tokyo Games, with Japanese companies promising ultra-high-def TV, super-fast cell phone networks, and autonomous self-driving cars on the roads." -
CERN Launches Line Mode Browser Emulator
itwbennett writes "As part of the project to preserve the world's first website and all of the accompanying technology, CERN last week launched a line mode browser emulator. To make the browser experience authentic, the developers recreated how terminals would draw one character at a time by covering the page in black and then revealing each character by erasing a character-sized rectangle from that cover, one-by-one, line-by-line. They also recreated the sound of typing on older keyboards, specifically an IBM RS/6000 keyboard, by using HTML5 audio elements." -
Google's Scanning of Gmail To Deliver Ads May Violate Federal Wiretap Laws
New submitter SpacemanukBEJY.53u writes "In a declaration that could make Google very nervous, a U.S. federal judge on Thursday rebuffed Google's defense of its targeted ad system that scans the content of Gmail. Judge Lucy Koh — who also heard the Apple-Samsung case — found Google's terms and conditions and privacy policy isn't clear to users. Koh subsequently allowed a class-action suit to proceed against the company (official ruling). The plaintiffs in the suit allege Google violates federal and state wiretap laws by scannning the messages sent by non-Gmail and Gmail users." -
The Most WTF-y Programming Languages
itwbennett writes "A couple of years ago, developer Sammy Larbi undertook a project to identify which languages had the most instances of the string 'WTF' in their GitHub code repositories. At the time, Objective C topped the list. ITworld's Phil Johnson has updated Larbi's research using GitHub data from the last 21 months, but instead of screen-scraping GitHub search results as Larbi had done, he queried the GitHub Archive for stand-alone instances of 'WTF' in the comments attached to GitHub commits to weed out cases where the string 'WTF' was legitimately used in the code. The three most baffling languages for 2012/13: C++, Lua, and Scala. Objective C comes in at #16." -
Can Internet Pseudonymity Be Saved?
jfruh writes "Imagine that you're a lawyer who also runs a popular sexual fetish podcast. Or that you're a blogger on political issues and you want to determine for yourself who you're going to get into political arguments with. Or you're a transgender woman who isn't out to your real-life associates but you want to explore your gender identity online. Or that you're a female gamer who wants to play World of Warcraft without being hit on or harassed. All of these people have perfectly good reasons for wanting to use a pseudonym online. And yet more and more websites are making it difficult or impossible to do so, often for perfectly legitimate reasons of improving civility and stopping anonymous abuse. How can pseudonymity — one of the key foundations of early internet communities — be saved?" -
IBM Promises $1B Investment In Linux Development
itwbennett writes with a link to a story you'll need to mentally upgrade from "expected to" to "just happened" about IBM's $1 billion dollar investment in Linux officially announced Tuesday morning at LinuxCon (the WSJ broke the story yesterday), by IBM VP Brad McCredie. IBM, says the linked article, will use all that money "to promote Linux development as it tries to adapt Power mainframes and servers to handle cloud and big data applications in distributed computing environments. The investment will fund Linux application development programs for IBM's Power servers and also be used to expand a cloud service where developers can write and test applications for Power servers before deployment. It will also facilitate software development around IBM's new Power8 chips, which will go into servers next year." It's not the only time that IBM has recently tossed around the B-word, and as Nick Kolakowski notes at Slash BI, it's also not the first time IBM has put that much money into Linux. -
Flash Memory Won't Get Cheaper Any Time Soon
jfruh writes "Some melancholy news from the Hot Chips symposium last week: NAND memory, which powers the solid-state drives that have revolutionized storage, has broken the $1 per gigabyte barrier and isn't getting any cheaper. 'They will always be ten times the cost of a hard drive,' says analyst Jim Handy. There are newer technologies in development, but they won't be able to beat NAND on price for years." -
PS Vita TV's Killer App: Remote Play
jfruh writes "When Sony announced the PS Vita TV yesterday, most observers saw it as competition for the Apple TV and Roku, or maybe the Ouya. But gaming writer Peter Smith views it differently; he thinks that remote play, including the ability to stream games from the upcoming PlayStation 4 console, will be the Vita TV's killer-app. In that sense, it isn't so much a low-cost replacement for casual gamers as an add-on to the high-end PS4. '[W]hen you're in the middle of a game and someone wants to watch TV, you can just grab a Vita and keep on playing. (This is similar to the popular "tablet play" feature of Nintendo's Wii U, without the Wii U's limitation of having to stay in close proximity to the base console.) ... For any Playstation 4 household with more than one TV I think the PS Vita TV will become a 'must-have' accessory; it's almost like getting a second PS4 for $100.'" -
Court Bars Apple From Making Industry-Wide E-book Deals
itwbennett writes "The federal judge presiding over the U.S. electronic books case against Apple has barred the company from striking deals that would ensure that it could undercut prices of other retailers in the e-book market and also prohibited Apple from letting any one publisher know what deals the company is striking up with other publishers. For its part, Apple said it plans to appeal the ruling (PDF), denying that it conspired to fix ebook pricing. Meanwhile, Amazon is alerting customers of their potential payout, which could be as much as $3.82 for every eligible Kindle book." -
Court Bars Apple From Making Industry-Wide E-book Deals
itwbennett writes "The federal judge presiding over the U.S. electronic books case against Apple has barred the company from striking deals that would ensure that it could undercut prices of other retailers in the e-book market and also prohibited Apple from letting any one publisher know what deals the company is striking up with other publishers. For its part, Apple said it plans to appeal the ruling (PDF), denying that it conspired to fix ebook pricing. Meanwhile, Amazon is alerting customers of their potential payout, which could be as much as $3.82 for every eligible Kindle book." -
How Gen Y Should Talk To Old People At Work
jfruh writes "A lot of ink has been spilled explaining to Boomers and Gen Xers how they can best manage, motivate, and retain talented members of the Millenial generation on the job. But it's a two-way street, and those born in the '80s and later could also use a lesson on how to best communicate with older co-workers, who after all will determine their promotion and pay raises for the foreseeable future. Advice includes: make actual phone calls, mirror the level of formality your co-workers use in e-mails, and for Pete's sake don't ask them things like 'R U going?' in a non-texting medium." -
Bitcoin Perfectly Anonymous — Until You Spend It
jfruh writes "One of the great attractions of Bitcoin as a currency is that it's completely secure and anonymous. But according to researchers (PDF) from UC San Diego and George Mason University, that anonymity starts to vanish the minute you exchange bitcoin for real-world items or conventional currencies. The researchers tracked transactions across the Bitcoin ecosystem and found points where it would be easy for a government with subpeona power to find the identity of a Bitcoin user. They also concluded that the currency wasn't especially attractive for money-laundering purposes." Graph theory explains many things. -
China's .cn Domain Servers Suffer DDoS Attack
jfruh writes "For years, DDoS attacks on various websites have been routinely launched by hackers within China. Now an attack of this sort has been launched against the foundations of the Chinese Internet — the domain servers for the country's top-level .cn domain. The attack raged over the weekend, disrupting and slowing access to .cn sites." -
Barnes & Noble Won't Give Up On the Nook
jfruh writes "Barnes & Noble's Nook e-reader line has largerly been regarded as a botched attempt to compete with the Kindle, whose failure has contributed to the bookseller's financial woes. Well, despite earlier statements that the company was abandoning it as a hardware platform, now the B&N CEO insists that the company is committed to the product line and the new Nooks are in development." -
NASA Testing Frickin' Laser Communications
itwbennett writes "The lunar laser communications demonstration will be part of the agency's Lunar Atmosphere and Dust Environment Explorer (LADEE) mission, which is scheduled to launch on Sept. 6. Here's how the system will work: When the satellite is in orbit around the moon and visible from Earth, one of three ground stations will shoot a laser towards its approximate location. The laser beam from Earth will scan a patch of sky and should illuminate the spacecraft at some point. When that happens, the spacecraft will begin transmitting its own laser towards the ground station and the two will lock on to each other. The technology should allow an upstream data rate, from the Earth to the spacecraft, of around 20Mbps and a much faster downstream rate of 622Mbps. That's roughly six times the speed that's currently possible with radio-based transmission, said Don Cornwell, mission manager for the lunar laser communications demonstration." -
How Companies Are Preparing For the IT Workforce Exodus
itwbennett writes "If you think there's a glut of contract IT workers now, just wait. 10,000 U.S. baby boomers will turn 65 every day from now until 2030, and at least some of them will want to ease into retirement. This may sound like music to the ears of IT organizations who already would rather hire temporary staff with specialized expertise — especially for working on legacy technologies. 'The contractor ratio, already high in tech, will continue to increase as companies allow retiring staff to work part-time hours or hire them for short-term projects,' says Matthew Ripaldi, senior vice president at IT staffing firm Modis." -
How Companies Are Preparing For the IT Workforce Exodus
itwbennett writes "If you think there's a glut of contract IT workers now, just wait. 10,000 U.S. baby boomers will turn 65 every day from now until 2030, and at least some of them will want to ease into retirement. This may sound like music to the ears of IT organizations who already would rather hire temporary staff with specialized expertise — especially for working on legacy technologies. 'The contractor ratio, already high in tech, will continue to increase as companies allow retiring staff to work part-time hours or hire them for short-term projects,' says Matthew Ripaldi, senior vice president at IT staffing firm Modis." -
Intel, Unisys Partner On New Range of Servers
itwbennett writes "Unisys is primarily a services and consulting company with just a small amount of revenue coming from hardware, but they may be on to something new that could 'could give them a competitive advantage at a time when the big guns are a mess,' says Andy Patrizio. Unisys and Intel are are set to introduce on September 9 a new kind of secure computing platform designed to as a replacement platform for RISC systems running mission-critical cloud and big data workloads. 'It sounds funny to hear Intel talk about RISC migration since it is in the RISC business with the Itanium,' says Andy Patrizio, 'but at this point, what's left? HP was the driving force behind Itanium and it's in chaos right now. IBM has a healthy RISC business, so the target is obviously what's left of the Sun installed base.'" -
Info Leak Wars To Get Messier
jfruh writes "As we discussed this weekend, David Miranda, the partner of the Guardian's Glenn Greenwald, was detained while transporting encrypted data on the Snowden affair from Berlin; all his electronics were seized. Over at the Guardian offices, British police destroyed more of the newspaper's hard drives. Privacy blogger Dan Tynan sees where this one is going: reporters like Greenwald are going to stop even bothering to be circumspect with their revelations. Sorting through the contents of such infocaches to redact sensitive information just gives the government time to track you down. Eventually, the information will just be dumped online, warts and all, as soon as someone who wants the information public gets ahold of it." -
Write Windows Phone Apps, No Code Required
jfruh writes "One of the biggest challenges Microsoft has faced with its Windows Phone platform is that it's far behind in the apps race against iOS and Android. One way to close the gap is to lower the barrier to entry for new app devs, and Microsoft has done so with Windows Phone App Studio, a hosted service that lets you build applications without actually writing any code. The description of how App Studio works may leave you wondering how useful or exciting the apps created will be, but a surge of developer interest during the current beta program has surprised even Microsoft with its scope." -
Dell Dumps Keyboardless Windows RT Tablets
jfruh writes "On Friday, Dell was selling Windows RT tablets for as low as $300. By this morning, the cheapest one on offer was $479. The difference? The only tablets they're selling now come bundled with keyboards, which may indicate that customers are finding even the Metro-focused RT version of Windows 8 too irritating to navigate by touch alone. (If you really want a 10-inch Dell tablet without a keyboard it looks like you can still get one on Amazon, at least for the time being.)" -
Data Visualization: Too Easy To Be Too Slick?
jfruh writes "Data visualization tools are finally putting a longtime dream within reach: offering the ability to make beautiful, slick-looking charts out of datasets almost automatically. But are our psyches ready for the shift? Data scientist Pete Warden quickly put together a visualization of Facebook name geography. Though he didn't consider it to be a scientific sample that could drive major decisions, he quickly found that it drove discussion at the New York Times and on white supremacist websites. 'There is an element of "wow, it's so professionally presented that it must be true,"' said Jim Bell, chief marketing officer for Jaspersoft." -
Google To Encrypt Cloud Storage Data By Default
jfruh writes "Worries about snooping are now a permanent part of our computing landscape, but Google is attempting to ameliorate those fears by encrypting all data on its Google Cloud Storage service by default. Data is encrypted with 128-bit AES, and you can manage the keys yourself or have Google do it for you. A Google spokesperson said that the company "does not provide encryption keys to any government."" (Also at SlashCloud.) -
Forrester: NSA Spying Could Cost Cloud $180B, But Probably Won't
itwbennett writes "Forrester's James Staten argues in a blog post that the U.S. cloud computing industry stands to lose as much as $180 billion, using the reasoning put forth by a well-circulated report from The Information Technology and Innovation Foundation that pegged potential losses closer to $35 billion. But Staten's real point is that when it comes down to it the cloud industry will likely not take much of a hit at all. Because as much as they voice their displeasure, turning back isn't really an option for businesses using the cloud." -
US, Germany To Enter No-Spying Agreement
itwbennett writes "The German Federal Intelligence Service said in a news release that the U.S. has verbally committed to enter into a no-spying agreement with Germany. The no-spying agreement talks were announced as part of a progress report on an eight-point program proposed by German Chancellor Angela Merkel in July with measures to better protect the privacy of German citizens. In the progress report, the German government found that U.S. intelligence services comply with German law. Also, the operators of large German Internet exchanges and the federal government did not find any evidence that the U.S. spies on Germans, the government said." -
Next Up: the Jamming Wars
chicksdaddy writes "ITWorld has an interesting opinion piece on the next privacy battleground, which they say will be over citizens' rights to use jamming technology to (forcibly) opt-out of ubiquitous surveillance, as sensors pop up in more and more public spaces and private homes alike. 'Given the rapid pace of technological change, we don't know exactly what the future holds for us. But one thing is certain: personal privacy is going to turn from a "right" to a "fight" in the next decade, as individuals take up arms against government and private sector snooping on their personal lives.' The article mentions some skirmishes that have already occurred: employees using GPS jamming hardware to prevent employers from tracking their every movement, and the crush of new business for encrypted voice, video and texting services like SilentCircle (up 400% in the last two months). 'Absent the protection of the law, citizens should be expected to do what they do elsewhere: take matters into their own hands: latching onto tools and technology to give them the privacy that they aren't afforded by the legal system. However, there may not be an easy technology fix for ubiquitous, unregulated surveillance. Writing in Wired this week, Jathan Sadowski warns that the tendency for individuals to focus on securing their own data and communications and using technology to do may be misleading. 'The problem is that focusing on one or both of these approaches distracts from the much-needed political reform and societal pushback necessary to dig up a surveillance state at its root,' Sadowski writes." -
Bad Connections Dog Google's Mountain View Wi-Fi Network
itwbennett writes "Google launched its Mountain View, CA public public Wi-Fi network in August 2006. It was one of the first public wireless Internet services in the U.S. and was intended to provide free service across the city. But in 2012, one year after Google signed a 5-year agreement to continue the service, it started a slow decline to the point of being unusable. 'We started noticing it in very large files, things like operating system updates, but now it's on files as small as 500 kilobytes,' said Rajiv Bhushan, chief scientist of pharmaceutical startup Livionex and a long-time user of the network. A recent test by IDG News Service resulted in a total failure to get a working Internet connection at a dozen sites around Mountain View, including in the city's main downtown area and directly in front of Google's headquarters." I've had disappointing results trying to connect to several other public wireless nets around the U.S., both privately sponsored and municipal. Do you know of any that work especially well? -
Crunching the Numbers On Shared Cellphone Contracts
itwbennett writes "The Wall Street Journal has a handy online calculator to help you sort out which phone plan is best for you. But one thing you'll notice is that shared or 'family' plans rarely offer any real savings, or benefits beyond the convenience of having a single bill, says blogger Kevin Purdy, who is bracing himself to propose a phone plan separation with his wife." -
TOR Wants You To Stop Using Windows, Disable JavaScript
itwbennett writes "The TOR Project is advising that people stop using Windows after the discovery of a startling vulnerability in Firefox that undermined the main advantages of the privacy-centered network. The zero-day vulnerability allowed as-yet-unknown interlopers to use a malicious piece of JavaScript to collect crucial identifying information on computers visiting some websites using The Onion Router (TOR) network. 'Really, switching away from Windows is probably a good security move for many reasons,' according to a security advisory posted Monday by The TOR Project." -
US IT Worker Files Hiring Lawsuit Against Infosys, Class Action Proposed
itwbennett writes "Brenda Koehler is a VMware-certified professional network engineer with a master's degree in information systems and 17 years of experience. You might think that would qualify her for a lead VMware/Windows administrator, but Indian outsourcing firm Infosys apparently didn't. And Koehler has filed a lawsuit against the company, alleging that Infosys ignored her qualifications and eventually hired a Bangladeshi worker to staff a position she was qualified for. Koehler and her lawyers are asking the U.S. District Court for the Eastern District of Wisconsin to allow a class-action lawsuit against Infosys, with 'thousands' of potential plaintiffs in the case, according to the lawsuit, filed Thursday." -
Researchers Demo Exploits Bypassing UEFI Secure Boot
itwbennett writes "Researchers demonstrated at Black Hat this week two attacks that bypassed Secure Boot in order to install a UEFI bootkit — boot rootkit — on affected computers. The first exploit works because certain vendors do not properly protect their firmware, allowing an attacker to modify the code responsible for enforcing Secure Boot, said researcher Yuriy Bulygin, who works at McAfee. The second exploit demonstrated by the researchers can run in user mode, which means that an attacker would only need to gain code execution rights on the system by exploiting a vulnerability in a regular application like Java, Adobe Flash, Microsoft Office or others. In both cases, the exploits are possible not because of vulnerabilities in Secure Boot itself, but because of UEFI implementation errors made by platform vendors." Of course, a hardware security system that is too complex to verify seems like a fatal flaw.