Friday, March 9, 2007

Open-source ID project awaits Microsoft's blessing | CNET News.com An open-source rival to a Microsoft identity tool has been in limbo for months, awaiting the software giant's go-ahead on certain patent-related issues. Developers working on the Higgins project want to create a tool equivalent to Microsoft's Windows CardSpace, but fear the software giant's legal wrath if they don't receive permission on certain features. Although parts of the project continue to move forward, proponents say it may not reach its full potential without Microsoft's help. "There are some pieces that we would not be able to release that we would like to," Mary Ruddy, a Higgins project leader, said Thursday. "We want to make sure that the intellectual property for all of our open-source projects is really clean, so that people can feel confident about using our code." In September, Microsoft pledged not to assert its patents pertaining to nearly three dozen Web services specifications. That did help the Higgins project, but developers say that wasn't enough to help them deliver all the features they hope to. They have asked Microsoft to provide guarantees that it won't sue on other parts of its intellectual property. 4:42:06 PM  PermaLink   / trackback []

Open-Source ID Project Awaits Microsoft's Blessing. Open-Source ID Project Awaits Microsoft's Blessing. An anonymous reader writes to mention that an open-source alternative to Microsoft's CardSpace tool has been on hold for months while they await patent blessing from the Redmond software giant. "While CardSpace is available on Windows, one goal of the Higgins project is to cover other operating systems. Higgins wants to offer an open-source alternative that works on Windows and on alternatives such as Linux and Mac OS X. The application would work similarly to CardSpace." [Slashdot] 4:39:39 PM  PermaLink   / trackback []

Justice: FBI misused Patriot Act powers - Yahoo! News The FBI improperly and, in some cases, illegally used the USA Patriot Act to secretly obtain personal information about people in the United States, a Justice Department audit concluded Friday. And for three years the FBI underreported to Congress how often it forced businesses to turn over the customer data, the audit found. Attorney General Alberto Gonzales, who oversees the FBI, described the problems cited in the report as unacceptable and left open the possibility of criminal charges. He ordered further investigation. "Once we get that information, we'll be in a better position to assess what kinds of steps should be taken," Gonzales told reporters following a speech to privacy officials. [...] The FBI also used so-called "exigent letters," signed by officials at FBI headquarters who were not authorized to sign national security letters, to obtain information. In at least 700 cases, these exigent letters were sent to three telephone companies to get toll billing records and subscriber information. "In many cases, there was no pending investigation associated with the request at the time the exigent letters were sent," the audit concluded. In a letter to Fine, Gonzales asked the inspector general to issue a follow-up audit in July on whether the FBI had followed recommendations to fix the problems. "To say that I am concerned about what has been revealed in this report would be an enormous understatement," Gonzales told the privacy officials. "Failure to adequately protect information privacy simply is a failure to do our jobs." Senators outraged over the conclusions signaled they would provide tougher oversight of the FBI -- and perhaps limit its power. "The report indicates abuse of the authority" Congress gave the FBI, said Senate Judiciary Committee Chairman Patrick Leahy (news, bio, voting record), D-Vt. "You cannot have people act as free agents on something where they're going to be delving into your privacy." The committee's top Republican, Pennsylvania Sen. Arlen Specter (news, bio, voting record), said the FBI appears to have "badly misused national security letters." The senator said, "This is, regrettably, part of an ongoing process where the federal authorities are not really sensitive to privacy and go far beyond what we have authorized." Sen. Russ Feingold (news, bio, voting record), D-Wis., another member on the panel that oversees the FBI, said the report "proves that 'trust us' doesn't cut it." The American Civil Liberties Union said the audit proves Congress must amend the Patriot Act to require judicial approval anytime the FBI wants access to sensitive personal information. "The Attorney General and the FBI are part of the problem and they cannot be trusted to be part of the solution," said Anthony D. Romero, the ACLU's executive director. 4:34:53 PM  PermaLink   / trackback []

Audit Finds FBI Abused Patriot Act. Audit Finds FBI Abused Patriot Act. happyslayer writes to mention that according to Yahoo! News a recent audit shows that the FBI has improperly and in some cases illegally utilized the Patriot Act to obtain information. "The audit by Justice Department Inspector General Glenn A. Fine found that FBI agents sometimes demanded personal data on individuals without proper authorization. The 126-page audit also found the FBI improperly obtained telephone records in non-emergency circumstances. The audit blames agent error and shoddy record-keeping for the bulk of the problems and did not find any indication of criminal misconduct. Still, 'we believe the improper or illegal uses we found involve serious misuses of national security letter authorities,' the audit concludes." [Slashdot] 4:27:43 PM  PermaLink   / trackback []

The Local - Olofsson claims Sweden has tapped phones 'for decades' Deputy prime minister Maud Olofsson has added a new twist to Sweden's divisive surveillance debate. The Centre Party leader claims that defence minister Mikael Odenberg's proposed legislation would merely codify practices that have already been in operation for decades. Previously, at a time when all telecommunications were state-operated, Sweden's National Defence Radio Establishment (Försvarets Radioanstalt - FRA) regularly tapped telephone lines in and out of the country, says Olofsson. 4:23:29 PM  PermaLink   / trackback []

The Local - 'Big brother' surveillance makes waves in Sweden A far-reaching wiretapping programme proposed by Sweden's government to defend against foreign threats, including monitoring emails and telephone calls, has stirred up a fiery debate in the past few weeks, with critics decrying the creation of a "big brother" state. The new legislation, to be presented to parliament on Thursday, would enable the National Defence Radio Establishment (FRA) to tap all Internet and telephone communication in and out of Sweden. 4:21:39 PM  PermaLink   / trackback []

Sweden Admits Tapping Citizens' Phones for Decades. Sweden Admits Tapping Citizens' Phones for Decades. paulraps writes  "Sweden is close to implementing new surveillance legislation that will include the monitoring of emails, telephone calls and keyword searches using advanced pattern analysis. The objective is to detect 'threats such as terrorism, IT attacks or the spread of weapons of mass destruction' but the proposals have divided the country. In a misguided attempt to put people at ease, the government admitted that Sweden has been tapping its citizens' phones for decades anyway."  [Slashdot: Your Rights Online] 4:18:28 PM  PermaLink   / trackback []

FTC Finalizes Landmark Adware Settlement. FTC Finalizes Landmark Adware Settlement. The Federal Trade Commission today finalized its landmark settlement requiring adware distributor Zango Inc. (formerly 180solutions) to hand over $3 million and change some of its most egregious practices. The settlement bars Zango from contacting the computers of people who installed Zango software before Jan. 1, 2006. After the proposed settlement was announced in November 2006, CDT submitted recommendations to the FTC highlighting the challenges that will come with enforcing it. In a letter to CDT, the FTC today acknowledged that it would need to remain vigilant to ensure that Zango abides by the terms of the settlement. The commission also urged CDT to pass along any evidence of future offenses by Zango stemming from CDT's ongoing forensics work in the adware/spyware arena. [Center for Democracy and Technology] 4:08:24 PM  PermaLink   / trackback []

Symantec: Adult Spam Down, Image Spam Climbs. Symantec: Adult Spam Down, Image Spam Climbs. New study finds spammers now focus on health-related products and general product pitches. [PC World: Latest Technology News] 4:04:44 PM  PermaLink   / trackback []

The Blotter(ABC NEWS) - Exclusive: Report Says FBI Violated Patriot Act Guidelines The FBI repeatedly failed to follow the strict guidelines of the Patriot Act when its agents took advantage of a new provision allowing the FBI to obtain phone and financial records without a court order, according to a report to be made public Friday by the Justice Department's Inspector General. The report, in classified and unclassified versions, remains closely held, but Washington officials who have seen it tell ABC News it documents "numerous lapses" and describe it as "scathing" and "not a pretty picture for the FBI." FBI Director Robert Mueller is scheduled to brief Congress on the report at noon. The officials say the inspector general found the FBI underreported by at least 20 percent the use of the controversial provision, known as National Security Letters, NSLs, in required disclosures to Congress. The Patriot Act gave FBI agents the ability to demand telephone, bank, credit card and library records by issuing an administrative letter, bypassing the need to seek a warrant from a federal judge. 1:02:02 PM  PermaLink   / trackback []

Pine Bluff - Scaled-back version of drug database passes Senate LITTLE ROCK - Scaling back the scope of a statewide database to monitor some prescription drug purchases gained Senate approval of the measure Thursday. The bill's sponsor said the amendments were intended to address concerns about patient privacy. [...] By a 20-7 vote, the Senate approved a bill by Sen. Denny Altes, R-Fort Smith, that would allow the state Board of Pharmacy to establish standards for setting up the database on drug purchases. The database would track schedule II and schedule III narcotics, such as morphine or OxyContin. "I think we've amended this about six times now," Altes said before the vote. "I think these changes should address all the concerns that were raised." Altes originally called for a database to track virtually all prescription drug purchases in the state. The measure passed by the Senate allows the Board of Pharmacy to set the criteria for the information to be tracked by the database. Sen. Jim Argue, D-Little Rock, said he still believed the database could be subject to abuse and could harm the privacy of some patients. "There is no evidence that a database like this works, but there is evidence that databases like this could be violated," Argue said. 12:33:58 PM  PermaLink   / trackback []

DNS Attack Factsheet Released. DNS Attack Factsheet Released. Hoped to be first in a series. [GT: Security and Privacy] 12:30:25 PM  PermaLink   / trackback []

Malware with Rootkit Features Grows. Malware with Rootkit Features Grows. "Rootkit techniques are becoming increasingly popular among malware creators." [GT: Security and Privacy] 12:28:49 PM  PermaLink   / trackback []

Homeland Security Tests Snoop Computer System. Homeland Security Tests Snoop Computer System. Parallax Blue writes "The Washington Times reports that Homeland Security has developed and is testing a new computer system called ADVISE (Analysis, Dissemination, Visualization, Insight and Semantic Enhancement) that collects and analyzes personal information on US citizens. Relevant data 'can include credit-card purchases, telephone or Internet details, medical records, travel and banking information.' The program apparently uses the same process as the Pentagon's Total Information Awareness project, which was aborted in 2003 due to privacy concerns." [Slashdot: Your Rights Online] 12:23:56 PM  PermaLink   / trackback []

Policy Makers call for University Internet Filters. Policy Makers call for University Internet Filters. At today[base ']s House Judiciary Subcommittee on Courts, the Internet, and Intellectual Property hearing, titled [base "]An Update - Piracy on University Networks,[per thou] we heard from legislators that they[base ']re very concerned about [base "]piracy[per thou] on campus networks. You should be able to watch the video of the hearing here. The common theme of the solutions was not only educating students (which all of the witnesses said that they were working on collaboratively), but for campuses to employ technology to filter the packets flowing over the network. read more [Public Knowledge - Blogging, Events, and Action Alerts] 12:16:28 PM  PermaLink   / trackback []

Video: the New Kid for the Block. Video: the New Kid for the Block. It looks like video sites are the new flashpoint in the battle against free speech online. Perhaps it is that many states control television broadcasts far more tightly than they control the press. Judges across the world clearly think they understand how to censor television - and are surprised when their attempts to do the same to video online don't work as effectively. In January it was Brazilian judges who found themselves caught in a hailstorm of criticism when attempting to prevent all Brazilians from downloading a salacious video of a Brazilian celebrity. When the only method of obeying the order at local ISP's disposal was blocking all of YouTube from Brazil, Brazilian net users rose up and complained. The decision was overturned three days later. This week, it was Turkey, whose Istanbul First Criminal Court ordered Turk Telekom to redirect its users away from YouTube to prevent them seeing a video that poured scorn on Turkey and the country's founder, Mustafa Kemal Ataturk. As in so many cases of government internet censorship, Turkey's reaction has affected the free speech rights of thousands of innocent parties, and done nothing to stop what they want to stop. The growing legions of Turkish net users were denied access to tools to share their own stories, while anti-Ataturk commentary still exists on YouTube and elsewhere. Meanwhile, nationalists inside Turkey found themselves unable to post their own responses to the video, meaning that the ratio of Turkey critics and supporters on YouTube no doubt lurched towards the critics. Those who agreed with the judges that this video was outrageous found themselves as effectively silenced as the video's maker. As one of the four college students who bravely petitioned the court Thursday, Kursat Cetinkoz, said: "Banning access to the Website does not punish those who did that (posted the videos) but the citizens of the Turkish Republic." It looks as if the court will now restore access now that the one video has been removed. To YouTube's credit, the company did not remove the video itself. Then again, it didn't have to: the original user appears to have deleted it from his or her account. The reaction in Turkey, and fear of discovery and retribution by the creator may have played its part in that personal decision. For free speech online to grow, we need to have not only network operators that cannot be intimidated, but we also need safety through anonymity for speakers. Tor, and services like it, work for both viewers and writers. With Tor and other anti-censorship programs, bypassing the court's censorship was straightforward - and publishing via anonymizers helps give intimated speakers the confidence to stand their ground. [EFF: Deep Links] 12:13:14 PM  PermaLink   / trackback []

Shred Your Data to Stay Ahead of the Pack. Shred Your Data to Stay Ahead of the Pack. IBM's chief scientist has developed a data sharing system that hides what that data contains--by shredding it. [PC World: Latest Technology News] 12:09:28 PM  PermaLink   / trackback []

Online Anti-Virus Scans: A Free Second Opinion. Online Anti-Virus Scans: A Free Second Opinion. Periodic online virus scanning is a good idea for Windows users, even for people already using up-to-date anti-virus tools. There are a couple of reasons I suggest this: First, anti-virus software is frequently slow to spot new threats. Take a gander at the daily "unrecognized" stats posted by Shadowserver.org, which tracks the performance (or lack thereof) of several popular tools in spotting new variants. That list currently examines the performance of several free programs, but the reality is not much different with the commercial tools. Just have a look at performance metrics and virus detection failure rates chronicled here and here. The second reason follows from the first: If something nasty does make it past your security defenses, usually the first thing it will try to do is disable the active protection and update features in those tools. In such cases, you probably would not know about the infection unless you turned to a third-party program that is not already installed on your computer. In my experience, two of the better free online anti-virus scanners are Panda Software's PandaScan and Kaspersky Lab's Free Virus Scan. Both require that you run the scans using Internet Explorer, as both require the installation of an ActiveX plug-in to do the job. F-Secure Corp., CA and BitDefender also offer free online scanners that also use IE and ActiveX, but I haven't yet tried those so I can't offer an opinion on them. TrendMicro's HouseCall service lets you install and run a free scanning tool from inside an IE or Firefox browser. However, I found the program both annoying -- it emitted a series of very loud and startling tones through my computer speakers while downloading virus definitions -- and ineffective. It crashed halfway through the scan, taking all of my other open Firefox windows with it, including an earlier, unsaved version of this blog post. (I had hoped Firefox 2.0's crash-recovery feature would save what I had typed as it had in previous crashes, but no such luck this time.) If you have just a single file or archive that you'd like to scan, I'd suggest submitting it to VirusTotal, a free online anti-virus engine that will scan your submission against more than two dozen of the most well-known tools. Depending on the speed of your PC and the number of files and hard drives you have, conducting an online scan can take between a few minutes to several hours to complete. It's not a bad idea to run the scan only when you can afford to be away from the PC for a few hours, or perhaps right before bedtime. Even on my test machine -- which sports a 2.2 GHz processor and 2 gigabytes of memory -- running several of the online scanners interfered with the simplest of tasks, such as composing an e-mail. [Security Fix] 12:07:01 PM  PermaLink   / trackback []

Crash-Testing a Killer Bot. Crash-Testing a Killer Bot. Israel rolls out a tiny, Uzi-toting robot. But what happens when the armed equivalent of the Blue Screen of Death occurs? In Danger Room. In Danger Room. [Wired News: Top Stories] 12:57:23 AM  PermaLink   / trackback []

Sweden: Monitor Communications. Sweden: Monitor Communications. A Swedish government security plan would allow a defense intelligence agency to monitor -- without a court order -- e-mail traffic and phone calls crossing the nation's borders. By the Associated Press. [Wired News: Top Stories] 12:35:34 AM  PermaLink   / trackback []