Saturday, July 23, 2011

Careers for my Ethical Hackers? Still looking for a co-author for “A Just Cyber War”...

The Code War Arms Race

"A story in Bloomberg Businessweek gives the first in-depth look at a wave of new start-ups selling cyber weaponry. The story describes this as the evolution of the defense industry in response to a wave of brazen attacks against Google, the Pentagon, the IMF and thousands of companies. It's pretty scary stuff, especially considering that these new weapons are not regulated at all."

[From the article:

Traditional military logic falls apart in the Code War. Deterrence and arms treaties are but philosophical concepts when invisible weapons are involved. Assigning certain blame for an attack may be impossible when it’s conducted through computers in dozens of countries. The fear of retaliation—which kept the Cold War from becoming hot—may not apply.

[Related stuff: (More at: http://www.technolytics.com/downloads.asp)

http://www.technolytics.com/Cyber_Commanders_Handbook_Preview.pdf

Cyber Commander's eHandbook

(Preface and TOC only)

http://www.technolytics.com/Right_to_bear_cyber_arms_CCH9-2.pdf

The Right to Bear Cyber Arms

Legal authorities agree there are gray areas and a fine line between activism on the one hand, and terrorism and hostile action against a government on the other. When you include the use of cyber attacks in the equation, the line quickly expands to an area of gray.



A new argument in the online banking area?

http://www.databreaches.net/?p=19786

How Fast Is Fast Enough to Tell Customers About Data Breaches?

July 22, 2011 by admin

Sue Reisinger writes on Corporate Counsel:

In financial data breaches, timing is almost everything. On June 13 a federal court held Comerica Bank liable for data breach losses even though it notified the customer and stopped all account activity within six hours. Two days later Citigroup Inc. was explaining why it took nearly a month to start notifying 360,000 customers of a breach. While Comerica didn’t act fast enough for the court, experts say Citi’s delay may have been justified.

Confusing? Such disparities can baffle not only companies and consumers, but also lawmakers trying to create a uniform standard for handling breaches.

Read more on Corporate Counsel.

[From the article:

It started with a simple e-mail that landed in the inbox of Experi-Metal Inc.'s controller, Keith Maslowski, in January 2009. The message appeared to come from the company's bank, and Maslowski followed the directions to click on a link and enter confidential log-in data and other codes as part of routine maintenance. The details are laid out in a lawsuit that the small metal shop in Sterling Heights, Michigan, filed against Comerica. Scam artists used Maslowski's codes to initiate more than 85 wire transfers, moving $1.9 million out of the company's account to China, Estonia, Finland, Russia, and Scotland.

It took the bank only six hours to spot the unusual activity, notify the customer, and stop the transfers. But it wasn't good enough for the federal judge. Court documents show that the company had only two prior transfers in two years. On June 13 U.S. district court judge Patrick Duggan in Detroit ruled that Comerica was responsible for the $560,000 that remained unrecovered because the bank didn't act "in good faith." The judge ruled that "a bank dealing fairly with its customer, under these circumstances, would have detected and/or stopped the fraudulent wire activity earlier."



Do you suppose this is based on the Secret Service's requirements for a Presidential BlackBerry?

BlackBerry PlayBook First Tablet To Gain NIST Approval

"Despite its current struggles to win over consumers, RIM has always been strong in the enterprise. The company remained steadfast in its support for corporate environments with the launch of the PlayBook, calling it the only business-grade tablet. The NIST is now ready to back that claim, giving the BlackBerry PlayBook its stamp of approval — meaning it's now the lone tablet that is certified for use in U.S. government agencies."



Upgrading the Google cars? Now they can match you to your house, job, hobby, favorite entertainment, etc.

http://techcrunch.com/2011/07/22/google-acquires-facial-recognition-software-company-pittpatt/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Techcrunch+%28TechCrunch%29

Google Acquires Facial Recognition Software Company PittPatt

PittPatt, a project spawned from Carnegie Mellon University, develops a facial recognition technology that can match people across photos, videos, and more.

… Google has reportedly been exploring adding facial recognition to its products (i.e. Google Goggles) more seriously but has held back because of privacy concerns. As the company told Search Engine Land in March, Google wouldn’t put out facial recognition in a mobile app unless there were very strict privacy controls in place.

But in May, Google Chairman Eric Schmidt said the company is “unlikely to employ facial recognition programs.”

Google issued this statement confirming the acquisition:

“The Pittsburgh Pattern Recognition team has developed innovative technology in the area of pattern recognition and computer vision. We think their research and technology can benefit our users in many ways, and we look forward to working with them.”



Clearly the Judge calculates a “Fair Penalty” but will the defendant keep appealing? Probably.

http://www.wired.com/threatlevel/2011/07/kazaa-verdict-slashed/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29

Judge Slashes ‘Appalling’ $1.5 Million File Sharing Verdict to $54,000

… The decision by U.S. District Judge Michael Davis follows the third trial in the Recording Industry Association of America’s lawsuit against Jammie Thomas-Rasset, the first file sharer to take an RIAA lawsuit to a jury trial. Under the case’s latest iteration, a Minnesota jury dinged her in November $62,500 for each of 22 songs she pilfered on Kazaa.

With the decision, Judge Davis has now overturned the judgments of three separate juries in the case dating to 2007. And Friday’s outcome is not likely to be the last word, either.

Thomas-Rasset, of Brainerd, Minnesota, has repeatedly vowed to appeal what her lawyers said were “excessive damages.” Her first trial ended with a $222,000 judgment, but Davis declared a mistrial, on the grounds that he’d improperly instructed the jury on a point of law. After the second trial, Davis tentatively reduced the award from $1.92 million to $54,000, and ordered a new trial on damages if the parties didn’t agree to that amount or settle. That third trial last year ended in the $1.5 million judgement that Davis overruled Friday.


(Related) PayPal as Judge, Jury and Executioner?

PayPal Joins London Police Effort

"PayPal has joined a music copyright association and the City of London police department's bid to financially starve websites deemed 'illegal.' When presented with sufficient evidence of unlicensed downloading from a site, the United Kingdom's PayPal branch 'will require the retailer to submit proof of licensing for the music offered by the retailer,' said the International Federation of the Phonographic Industry's latest press release."

The press release can be found here.

[From the article:

The real question is whether, at any time in this process, the City of London submits the evidence of infringement or some aspect of the process to a court for review. The ECD has a history of working with the Metropolitan Police Film Piracy Unit, long at the service of the movie industry's Federation Against Copyright Theft.

FACT aided UK law enforcement to prosecute the famous Filesoup file sharing site. The police eventually dropped that case, conceding that the legal basis for a criminal trial wasn't there.



This is the promise of the Internet. Learn anything from the best teacher in the world – not some guy in your neighborhood who thinks he knows what he is doing...

http://www.wired.com/playbook/2011/07/pitching-video-analysis/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29

MLB Coach Offers Video Analysis for Young Pitchers

Don Cooper, pitching coach for MLB’s Chicago White Sox, recently created DonCooperBaseball.com with the intent of providing video analysis for pitchers, no matter their age. His plan might seem ambitious, but the former big league pitcher believes he can leverage his 33 years of professional experience to right the wrongs taught by coaches at various levels of the sport.

“There is a lot of what I feel is poor information being given out there by people who don’t really have the background to be instructing [pitchers],” Cooper told Wired.com.



This looks interesting...

http://www.makeuseof.com/tag/windows-pc-shape-winutilities/

Get Your Windows PC Back Into Shape With WinUtilities

There are lots of tools that will attack part of the mess, like your Internet history files or registry cleaners, but what about fragmented hard drive space, duplicate files or junk registry keys?

The bottom line is that if you’re running Windows and you don’t want to spend all of your time running 100 applications to take care of each of the areas where Windows wastes space, then you’ll want to run a single app that can handle it all. One such free utility is an awesome program called WinUtilities offered by YL Software.

… The free version of this Windows utility has most of the features completely unlocked (at least all of the ones that I tried work 100%).

The application is split up into utility groups like Clean Up & Repair, Optimize & Improve, and Privacy & Security. Each of these areas has its own collection of tools.



At first glance, this looks so dumb it must be brilliant!

Why Waste Servers' Heat?

"A new paper from Microsoft Research (PDF) suggests a radical but slightly mad scheme for dealing with some of the more basic problems of the data centre. Rather than build server farms that produce a lot of waster heat, why not have distributed Data Furnaces, that heat home and offices at the same time as providing cloud computing? This is a serious suggestion and they provide facts and figures to make it all seem viable. So when it gets cold all you have to do is turn up the number crunching ..."



Oh boy, free money! Right?

http://www.lawsuitjackpots.com/index.html

Lawsuit Jackpots

Lawsuit Jackpots.com is a free and independent source of information and news about emerging legal issues, established legal issues, lawsuits filed, lawsuits in progress, settlements, unclaimed property, class actions, mass tort law, law firms, individual lawyers, other legal resources and legal matters of interest to consumers and the entire legal community. Consumers will find the Site helpful for seeking legal remedy for being victimized and lawyers will find the site helpful for disseminating useful information about themselves, their areas of expertise and active legal matters which they are currently handling.


No comments: