Friday, December 22, 2006

Google Search Convicts Hacker. Google Search Convicts Hacker. An anonymous reader writes "Google search terms have helped convict a wireless hacker. The queries the hacker performed were introduced into evidence at court, where Matthew Schuster was charged with disrupting his former employer's wireless network and imitating other users' MAC addresses to obtain access. From the article: 'Court documents are ambiguous and don't reveal how the FBI discovered his search terms. That could have happened in one of three ways: an analysis of his browser's history and cache; an Alpha employee monitoring the company's wireless connection; or a subpoena to Google from the police for search terms tied to his Internet address or cookie. (Ed. emphasis added) Google has confirmed that it can provide search terms if given an Internet address or Web cookie, but has steadfastly refused to say how often such requests arrive.' [Slashdot: Your Rights Online] 11:58:16 PM  PermaLink   / trackback []

Judge: Can't link to Webcast if copyright owner objects | CNET News.com A federal judge in Texas has ruled that it is unlawful to provide a hyperlink to a Webcast if the copyright owner objects to it. U.S. District Judge Sam Lindsay in the northern district of Texas granted a preliminary injunction against Robert Davis, who operated Supercrosslive.com and had been providing direct links to the live audiocasts of motorcycle racing events. Lindsay ruled last week that "the link Davis provides on his Web site is not a 'fair use' of copyright material" and ordered him to cease linking directly to streaming audio files. The audio Webcasts are copyrighted by SFX Motor Sports, a Texas company that is one of the largest producers of "Supercross" motorcycle racing events. SFX sued Davis in February, noting that fans who go to its own Web site will see the names and logos of sponsors including wireless company Amp'd Mobile. (Anyone who clicked on the link from Davis' site, however, would not see the logos of companies that paid to be sponsors.) While Lindsay's decision appears to be the first to deal with direct or "deep" links to Webcasts, this is not the first time courts have wrestled with the legality of copyright law and direct links. In 2001, a U.S. federal appeals court ruled that a news organization could be prohibited from linking to software--illegal under the Digital Millennium Copyright Act--that can decrypt DVDs. "The injunction's linking prohibition validly regulates (2600 Magazine's) opportunity instantly to enable anyone anywhere to gain unauthorized access to copyrighted movies on DVDs," the appeals court said. 11:51:41 PM  PermaLink   / trackback []

Judge Rules Against Deep-Linking of Content. Judge Rules Against Deep-Linking of Content. An anonymous reader writes "A Texas judge has ruled that, if a copyright owner objects to the linking of content from another web site, that link must be taken down. This case, which may have some far-reaching implications, centered around a motorcross website. The site, run by a Robert Davis, provided links directly to live feeds of 'Supercross' events streaming from the SFX Motor Sports site. The company filed suit, claiming that the direct links were denying it advertising revenue. The article sites previous cases, where sites were prohibited by judges from linking to files which violated copyright law (such as DVD decryption software). From the article: 'But in those lawsuits, the file that was the target of the hyperlink actually violated copyright law. What's unusual in the SFX case is that a copyright holder is trying to prohibit a direct link to its own Web site. (There is no evidence that SFX tried technical countermeasures, such as referrer logging and blocking anyone coming from Davis' site.)'" [Slashdot: Your Rights Online] 11:45:42 PM  PermaLink   / trackback []

Clipboard Data Theft Optional In IE 7 Clipboard Data Theft Optional In IE 7. A little known secret about Microsoft's Internet Explorer Web browser is the long-standing feature that lets Web sites silently read data stored in the Windows "clipboard" -- the storage space that serves as a semi-temporary repository for any text the user has recently cut-and-pasted or copied in virtually any Windows program. Apparently, Microsoft has finally changed that feature with IE 7. The newest version of the browser throws up a prompt asking users whether they really want to share the contents of their clipboard (should they stumble upon a site that tries to filch it). Are you still using IE 6 and want to see how the clipboard feature works? Visit this harmless proof-of-concept site with IE 6 after you use a Windows program to copy and paste some text or numbers (even though it's a harmless example page, maybe it's best not to copy that Quicken data you were just entering). As the site explains, data copied to the Windows clipboard stays there until it is replaced by more cut-and-pasted data, and/or when you log out of your machine or turn it off. It's probably worth mentioning that alternative Web browsers such as Firefox and Opera do not allow Windows clipboard data-stealing. [Security Fix] 11:14:16 PM  PermaLink   / trackback []

NPR Reports: Flying Without ID Is A Tricky Business. NPR Reports: Flying Without ID Is A Tricky Business. Posted by DWT - Are you flying for the holidays this year? Are you bringing id with you? What happens if you don't? NPR reporter Martin Kaste reports on the practical implications of TSA's secret law which affects millions of travelers every day. The text of the federal law that requires travelers to show identification is a secret -- you cannot read it because the federal government insists the law itself is "Sensitive Security Information." TSA's spokesperson refused to even be interviewed on tape discussing this point with NPR. John Gilmore and others are asking the United States Supreme Court to hear his legal challenge to the secrecy aspect of this law. [Privacy and Security Law Blog] 11:12:22 PM  PermaLink   / trackback []

NPR : Travelers Test Rules on Flying Without Identification Morning Edition, December 21, 2006 * So you're on vacation and you lose your wallet. Can you fly home without your picture identification? Maybe. The Transportation Security Agency says the federal regulations governing this question are "secret." In practice, some travelers do fly without identification. 11:09:07 PM  PermaLink   / trackback []

Celebrate EFF's Sweet 16 on Jan. 11 in San Francisco! Celebrate EFF's Sweet 16 on Jan. 11 in San Francisco! All teenagers have big dreams for their sweet 16, and EFF is no different: we want to throw the Best Party Ever, we want a new car, and we want to secure your digital rights. We're kidding about the car, but please do join EFF for a birthday bash to celebrate 16 years fighting for your rights. The party will be on January 11, 7-10 PM at 111 Minna Gallery in San Francisco. DJ Ripley and Kid Kameleon will be keeping the dancefloor hopping all night long. A $20 donation gets you in the door. No one will be turned away for lack of funds, and all proceeds go toward our work defending your digital freedom. This fundraiser is open to the general public. 21+ only, cash bar. Please RSVP to events@eff.org or on Upcoming.org. What: EFF Sweet 16 Party When: January 11, 2007 7-10 PM Where: 111 Minna Gallery 111 Minna Street San Francisco, CA 94105 www.111minnagallery.com Tel: (415) 974-1719 [EFF: Deep Links] 11:04:46 PM  PermaLink   / trackback []

Forensically Unrecoverable Hard Drive Data Destruction. Forensically Unrecoverable Hard Drive Data Destruction. This paper, written by Daniel James, is a good introduction in to data destruction and recovery touching on the basics with good references defined for further research. By Daniel James. [Infosec Writers Latest Security Papers] 11:02:01 PM  PermaLink   / trackback []

Privacy Office Slams Secure Flight Testing, But Doesn't Call It Illegal. Privacy Office Slams Secure Flight Testing, But Doesn't Call It Illegal. According to a report released today by the Department of Homeland Security Privacy Office, the Transportation Security Administration publicly misrepresented how it handled commercial data while testing the controversial Secure Flight program. "As ultimately implemented, the commercial data test conducted in connection with the Secure Flight program testing did not match TSA's public announcements," the Privacy Office said. The Privacy Act of 1974 requires an agency to give public notice when it establishes or changes a system of records. The Privacy Office stopped short of explicitly saying that TSA violated the law during the testing, though did note, "However well-meaning, material changes in a federal program's design that have an impact on the collection, use, and maintenance of personally identifiable information of American citizens are required to be announced in Privacy Act system notices and privacy impact assessments." [EFF: Deep Links] 11:00:08 PM  PermaLink   / trackback []

2007 Preview: Newt's Muzzle, Google's Data, and Microsoft Over the Line. 2007 Preview: Newt's Muzzle, Google's Data, and Microsoft Over the Line. Greetings. As 2006 draws to a close, I wanted to review three issues from this year that are likely to be of considerable note in 2007.   [Lauren Weinstein's Blog] 10:57:10 PM  PermaLink   / trackback []