Slashdot Mirror
The Beginning of the End For Hadopi?
zrbyte writes "TorrentFreak reports on the latest developments in the french Hadopi saga. 'The private company entrusted to carry out file-sharing network monitoring for the French government has been hacked. Trident Media Guard, which is responsible for gathering data for so-called 3 strikes warnings was hacked and now has some of its data out in the wild, an event which has the potential to upset the operation of Hadopi.' TMG temporarily suspended the gathering of data on file-sharers while they investigated the breach, later claiming that the attack was on 'an unprotected test server with no confidential data.'"
Isn't it "the beginning of the end" for everything today?
http://slashdot.org/poll/2174/The-world-will-end-
Hey, I was only kidding. You don't have to MOD me "Troll" . . . again . . . .
Can you talk about a hacking when the data was openly available for anyone to see and take ? Even TMG withdrew their "data theft" accusation...
http://torrentfreak.com/french-3-strikes-suspended-due-to-anti-piracy-security-alert-110517/
Sarkozy doesn't want any freedom of expression on the Internet:
http://www.laquadrature.net/en/frances-g8-focuses-on-control-and-restrictions-to-online-freedoms
http://kcrg.biz/2011/05/sarkozy-expels-the-freedoms-of-its-civilized-internet/
What's with all these headings that don't really reflect reality? As far as I can tell, there is no indication at all that this breach will bring about the (non-temporary) end of this kind of system in France. Wishful thinking is fair enough, but it doesn't have to be the main attraction surely?
Quoting TorrentFreak: "Actually, hacked is probably too strong a word, since it appears TMG left the front door open." According to Bluetouff (the one who performed the 'hack'), the "Index of" wasn't disabled, so the data was left in the open. Oh, btw, Hadopi is about punishing people if they didn't secure enough their wifi / computer ...
The Apache Software Foundation should never have entered the distributed computing arena.
Wait, what?
Bio questions? Ask me to start a Q&A journal. Computer analogies available for most topics!
Just used my mod points on another article a few minutes ago, and then this shows up :-)
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
but given the stubbornness that showed the French government since the very beginning of the law project, I seriously doubt it.
It's also said that the France president will make the three-strikes system one of the main subjects of the e-G8 coming soon, so sadly now is probably not the time of the end for Hadopi.
I don't want Sarkozy and nobody cares, why should I care what the garden gnome wants?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Whats with the public of France bending over like this with such draconian copyright laws?
Its not fair at all, Sarkozy's just pussy whipped, his wife owns a record label so he passes all these one-sided
laws just to please her. It shouldn't be allowed and the public doesn't even seem to give a damn.
Now, it might be different how my company handles tests, but I'd have guessed it would be a bit more difficult to hack a "test" server because, well, it's used for testing. Not for public viewing. It may seem odd to the unsuspecting eye, but test servers are usually vastly better protected than productive systems. First, for the obvious reason that they are used internally and thus reaching them is usually a bit more tricky than accessing a system that needs external connections, and second because test servers are usually used for software that's not yet launched and hence usually a bit more "secret" than software that already made it into the open.
Is it me or is having a "hacked test server" not looking too well on their security bill?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Also :
-Hadopi have severed the link between them and TMG, as a result of this hack
Source: telecompaper + the French media
(and it was their only source of monitoring)
-the CNIL decided to investigate TMG due to this lack of protection of what may be personnal data.
-TMG decided to sue the hacker, but then removed the complaint
It's pretty easy to demonstrate already how Hadopi works. 1. Back Trace, 2. Call Internet Police.
(I'm french)
Actually, there was no hacking. Which makes things much worse.
They stupidly left data available to everybody on a server reacheable using a simple navigator. This is much worse than hacking, because we know that it's difficult to prevent a determined hacking, but letting the data on an internet connected webserver without any protection?
And this is not the first time that their competences have been challenged (let's not talk about ethics).
As someone that creates test servers all day long as part of my job I have to wonder what they mean by this. For us to create a true and proper test server it is a MIRROR of our production server. Then we make the changes we need... TEST it.. if everything works we make the changes on production. "Just a test server" really?
TMG temporarily suspended the gathering of data on file-sharers while they investigated the breach, later claiming that the attack was on 'an unprotected test server with no confidential data.
So I suppose if this is really not confidential data they should have no issues with it being released on the Net then, huh?
if you even temporarily be a moron enough to vote any right-wing party, that happens. thats all that there is to it. the reason for you voting for the right wing party, does not matter. in this case, french voted for right mainly because of the culture clash in between migrant population, and anti-immigrant sentiments.
right wing parties dont do any shit for what you have actually voted for, but what they want to do when they are in power. and this is what's happening in france. its as simple as that.
Read radical news here
The test server in question is used by media companies to verify the upload and registration for use of 'media signature files' - generated "fingerprints" of copyrighted media, where TMG is the repository of these media fingerprints for online companies to access and use in copyrighted-media testing against UGC uploaded to their servers by the pubic. So, if anything was 'stolen' it was the media signatures, the equivalent to stealing virus definitions from an anti-virus company. As usual, the uneducated are blowing everything out of proportion.
BTW, from my interactions with the technical staff at TMG, the IT staff seems competent while being stretched very thin, but IMHO their management are french silver-spoon aristocrats, clueless to the point of it feeling criminal to me the fact of them being tasked with the responsibility they've been granted (stewardship over the protection of all copyrighted streamed media within France).