Wednesday, March 15, 2006


News Item 5501 PGP Creator's Zfone Encrypts VoIP.

PGP Creator's Zfone Encrypts VoIP. Philip Zimmermann, creator of PGP wrote in to tell me about Zfone, his new system for encrypting any SIP VoIP voice stream. His first release is Mac & Linux only. I tested it with him using Gizmo as our client and it was pretty trivial to use. While it should work on most any SIP compatible VoIP client, he hopes that clients like OpenWengo and Gizmo will incorporate Zfone directly into the UI. Zfone has no centralization, and has been submitted to the IETF. He hasn't yet determined a license, but he believes strongly in releasing source code for all encryption products. A windows client is forthcoming. [Slashdot]
1:20:36 AM  PermaLink   / trackback []  

News Item 5500 California Bill Would Ban "Pretexting".

California Bill Would Ban "Pretexting". "Californians have a right to privacy and pretexting not only violates that right, it makes every single one of these victims a prime candidate for identity theft" [GT: Privacy]
1:15:49 AM  PermaLink   / trackback []  

News Item 5499 New York Plugs Largest Known Internet Privacy Leak

What prosecutors say may have been the largest breach of privacy in Internet history has been resolved.

The settlement with Datran Media, a leading e-mail marketer, follows an investigation that identified the improper disclosure of the personal information of more than six million American consumers.

"With this case, we hope to set a new standard for Internet marketers and consumer research companies," New York Attorney General Eliot Spitzer said. "Personal information secured through a promise of confidentiality must always remain confidential."

Datran was alleged to have used improperly information it had obtained from several companies that compile and sell information on consumers.


1:14:00 AM  PermaLink   / trackback []  

News Item 5498 Oak Ridger - Judge considers releasing IDs of jurors

GREENEVILLE, Tenn. -- A federal judge heard arguments Tuesday on a petition to release the names, addresses and telephone numbers of jurors who failed to reach a final verdict against two Newport lawmen accused of shaking down Hispanic motorists for cash.

What began as an attempt by defense attorneys and The Knoxville News Sentinel to quiz the jurors from the first trial before the officers are retried in April offered a precedent-setting battle over the public's right to information versus the jurors' right to privacy.

"I think I'm prepared to rule First Amendment rights outweigh privacy rights of jurors," U.S. District Judge Ronnie Greer said Tuesday.

But the judge said he was worried that reporting of any juror interviews could prejudice future jurors when Newport Police Sgts. James W. Roach Jr. and Patrick Sheldon are retried.


1:11:41 AM  PermaLink   / trackback []  

News Item 5497 Report: 80 percent of emails out to manipulate - IT Security News - SC Magazine US

Four out of five inbound emails are designed to deceive the recipient, according to a new report studying the scope of abusive online messages.

The Messaging Anti-Abuse Working Group's (MAAWG) Email Metric Report, which analyzed data from more than 127 million mailboxes during last year's fourth quarter, found that more than 142 billion emails either were tagged or blocked before they reached the end user.

Another 61.3 billion emails were the victims of dropped connections, the study showed. Nearly 37 billion emails were unaltered before reaching their destination.


1:08:35 AM  PermaLink   / trackback []  

News Item 5496 CDT, Others Again Challenge FCC Wiretapping Ruling.

CDT, Others Again Challenge FCC Wiretapping Ruling. CDT and a broad coalition of public interest, academic and business groups today again urged a federal appeals court to overturn a Federal Communications Commission (FCC) ruling requiring that broadband Internet and interconnected voice-over Internet Protocol (VOIP) services be designed to make government wiretapping easier. The brief stressed that the government has never shown that there is a problem to be solved by extending the "Communications Assistance for Law Enforcement Act" to the Internet, and that Congress explicitly excluded the Internet from the wiretapping design mandate. [Center for Democracy and Technology]
1:06:10 AM  PermaLink   / trackback []  

News Item 5495 Update: New FBI management system could cost $500M.

Update: New FBI management system could cost $500M. A redesigned case management system being created by the FBI could cost as much as $500 million, far more than the agency sunk into a similar initiative abandoned last year, according to a government watchdog agency. [Computerworld Data Mining News]
1:02:19 AM  PermaLink   / trackback []  

News Item 5494 DOJ Lowers Number of Subpoenaed Google Search Records.

DOJ Lowers Number of Subpoenaed Google Search Records. Federal judge indicates he's looking favorably on government's new request. [PCWorld.com - Latest News Stories]
12:59:23 AM  PermaLink   / trackback []  




  Tuesday, March 14, 2006


News Item 5493 ID management a 'human problem,' says privacy group.

ID management a 'human problem,' says privacy group. CIOs and IT managers should be aware that IT projects fail due to myriad factors and that technology may not be the answer to a problem, according to Australian Privacy Foundation Chair Anna Johnston. [Computerworld Privacy News]
9:49:04 AM  PermaLink   / trackback []  

News Item 5492 Security hole found in crypto program Gnu Privacy Guard.

Security hole found in crypto program Gnu Privacy Guard. Developers of the open source Gnu Privacy Guard encryption software have reported a security flaw that could allow an attacker to sneak malicious code into a signed e-mail message. [Network World on Privacy]
9:46:31 AM  PermaLink   / trackback []  

News Item 5491 ISO rejects China's WAPI security protocol.

ISO rejects China's WAPI security protocol. The International Organization for Standardization (ISO) last week rejected a security protocol that was backed by some Chinese representatives as an amendment to the group's wireless LAN standard. [Network World on Privacy]
9:44:19 AM  PermaLink   / trackback []  

News Item 5490 Google, Government Square Off over Search Terms

Search provider Google and the U.S. Department of Justice are expected to clash March 14 inside a federal court over whether Google should surrender information on its customers' search habits to law enforcement officials.

U.S. District Judge James Ware presides over a hearing slated to begin at 9 a.m. and to last about an hour. While Ware isn't expected to make a ruling March 14, his give and take with attorneys may provide indications as to how he might rule in the future.

The case has touched a nerve with consumers and businesses, because Internet searches often reveal private information and trade secrets.


9:41:41 AM  PermaLink   / trackback []  

News Item 5489 Downloadable RMS Lectures About Software Freedom.

Downloadable RMS Lectures About Software Freedom.   Goran Gugic writes "On a recent visit to Croatia Richard Stallman gave two speeches which are now available as podcasts: 'Dangers of Software Patents' (OGG, 80MB, 132') and 'GNU Movement, Free Software and the Future of Freedom' (OGG, 65MB, 110'). The files can be found in the podcast section (site in Croatian). A higher-bandwidth mirror is also available"  [Slashdot: Your Rights Online]
9:36:20 AM  PermaLink   / trackback []  

News Item 5488 PATRIOT Renewal Rubber Stamped, NSA Spying May Be Next.

PATRIOT Renewal Rubber Stamped, NSA Spying May Be Next.

Despite the best efforts of EFF, other civil liberties organizations, and their supporters, Americans' privacy rights took some serious body-blows from Congress this week. For more on the PATRIOT Act: The USA PATRIOT Act was renewed without meaningful reform, and key Congressmen backed away from a full investigation of the NSA's domestic spying program, instead making a deal with the White House to legalize it.

Whether because of election year fears or White House pressures, Republican Senators who had been holding out for significant new checks on the PATRIOT Act dropped the fight when offered a few sham reforms. The renewal bill was then quickly approved by the Senate and, this week, approved by the House and signed by the President.

Why are the "compromise" bill's three reforms worthless? Let's take each in turn.

The bill provides a procedure for recipients of super-secret National Security Letters (NSLs) to challenge the never-ending gag orders that accompany these FBI-issued subpoenas. But the ACLU (with help from EFF) already demonstrated that these gag orders could be successfully challenged in court without a change to the law. This new "reform" actually makes things worse: under the new law, these gag orders can't be challenged at all within a year of being issued, and if the government simply tells the court that lifting the gag order will hurt national security, the government wins. We think this procedure is just as unconstitutional as the original law.

The bill didn't include a requirement that NSL recipients seeking legal advice disclose their lawyer's name to the FBI. But this "reform" simply removed something bad from one of the renewal bill's earlier versions; it didn't change the original PATRIOT Act at all.

Finally, the bill clarified that NSLs can't be served on libraries that don't provide electronic communication services. But NSLs already can't be served on libraries lacking those services.

Unfortunately, it gets worse. Senate Republicans this week stated that they had reached a deal with the White House to legalize the NSA's domestic spying program. The agreement allows government investigators to conduct warrantless wiretaps for up to 45 days before having to go to a court, even in non-emergency situations. Currently, the law only allows such surveillance without a warrant for 72 hours in emergencies and for 15 days by the Executive when war is declared. Because of this deal, an in-depth Congressional investigation of the NSA program -- what it actually involves and whether it broke the law -- has been deflected for now.

Nevertheless, this week's events shouldn't be taken as final defeats. Members of Congress who were dissatisfied with the PATRIOT bill -- Democrats and Republicans alike -- are already proposing new non-sham reforms, while the plan to legalize the NSA Program still has opponents on both sides of the aisle. EFF believes that the spying program did in fact break the law and violate the Constitution, as we have alleged in our lawsuit against AT&T for helping the NSA with this massive fishing expedition into Americans' private communications. As always, EFF will stay on the front lines and fight hard to ensure that your civil liberties are protected.

[EFF: Deep Links]
9:31:33 AM  PermaLink   / trackback []  

News Item 5487 PaulDotCom's Web Site: Security Podcasts Roundup

We at PaulDotCom security weekly listen to many podcasts in an attempt to assimilate as much information as possible. Each podcast we listen to has its own strengths, and there are few on this list that I would dismiss altogether, but I'll let you be the judge. There have been a few other blog postings related to security podcasts:

What follows is an attempt to be a comprehensive list of what we've found out there, so if we miss something, just let us know!


9:20:49 AM  PermaLink   / trackback []  

News Item 5486 Proposed New Jersey Laws Would Chill Free Speech.

Proposed New Jersey Laws Would Chill Free Speech.

EFF and Other Groups Call for Bills' Withdrawal

San Francisco - A diverse coalition of companies, public interest organizations, and legal scholars, including the Electronic Frontier Foundation (EFF), craigslist, Public Citizen, the US Internet Industry Association (USIIA), the Center for Democracy and Technology (CDT) and Professors Lyrissa C. Barnett Lidsky and Jennifer M. Urban, sent an open letter today to three New Jersey assemblymen, urging them to withdraw their support from two bills designed to eliminate anonymous online speech.

Assembly bills A1327 and A2623 would require Internet service providers to record users' identities and reveal them in any claim of defamation. While aimed at curbing online bad actors, the bills instead run afoul of the First Amendment[~]which protects the right to speak anonymously[~]as well as a federal law designed to protect speech in online fora. The bills would require identification of an online poster before the facts were resolved, leading to a flood of unsubstantiated claims designed simply to unmask online speakers.

"Protecting anonymity is vital to maintaining the diversity of viewpoints on the Internet," said EFF Staff Attorney Kurt Opsahl. "Keeping online debates robust enables democracy, even if it allows name-calling and strongly worded opinions about political figures."

The open letter calls for Assemblymen Peter J. Biodi, Wilfredo Caraballo, and Upendra J. Chivukula not to waste taxpayer resources in defending these bills that will inevitably be struck down in court. New Jersey courts are already handling claims of defamation online in a careful and constitutionally appropriate manner, balancing a speaker's anonymity rights with the merits of the plaintiff's claim. The well-established standard in New Jersey and elsewhere for deciding whether to order the identification of anonymous defendants has functioned well to separate ill-founded lawsuits from cases in which identification is appropriate.

As evidence of this balanced approach, the open letter points to the cases available for review on a web site maintained by the Cyberslapp Coalition[~]several of whose members signed the open letter[~]at www.cyberslapp.org. The Cyberslapp web site provides briefs, evidence, and opinions from nearly four dozen "John Doe" cases in which the standard has been discussed and applied. The site, which permits search both by keyword and by state of decision, is provided free of charge as a resource for litigants on both sides of Doe disputes.

For the full text of the open letter:
http://eff.org/Privacy/Anonymity/NewJerseyLetter.pdf

The Cyberslapp Coalition:
http://www.cyberslapp.org

Contact:

Kurt Opsahl
Staff Attorney
Electronic Frontier Foundation
kurt@eff.org

[EFF: Breaking News]
9:17:52 AM  PermaLink   / trackback []  

News Item 5485 Blanket digital licence fails in France - Carry on pirates, carry on DRM

Blanket digital licence fails in France.

Carry on pirates, carry on DRM

Under heavy pressure from the French government, the country's parliament has voted against introducing the world's first blanket licence for sharing digital media. A section that would have permitted internet users to freely exchange copyrighted material, effectively legitimizing file sharing, and hastening the demise of digital rights management (DRM) software, had passed an earlier reading in a vote last December.

[The Register - Internet and Law: Digital Rights/Digital Wrongs]
9:14:13 AM  PermaLink   / trackback []  

News Item 5484 Security Hole Found in GPG Crypto Program.

Security Hole Found in GPG Crypto Program. could allow attacker to place code in signed e-mail. [PCWorld.com - Latest News Stories]
9:11:21 AM  PermaLink   / trackback []  

News Item 5483 Faulty McAfee Update Wreaks Havoc.

Faulty McAfee Update Wreaks Havoc. VirusScan update prompted users to delete good software along with viruses. [PCWorld.com - Latest News Stories]
9:09:57 AM  PermaLink   / trackback []