Hacker takes out dark web hosting service using well-known exploit

A hacker is proving that sites on the dark web, shrouded in anonymity, can easily be compromised.   

On Friday, the unnamed hacker began dumping a sizable database stolen from Freedom Hosting II onto the internet, potentially exposing its users.

The hosting service, Freedom Hosting II, was known for operating thousands of sites that were accessible through the Tor browser; the “dark web” is essentially the encrypted network comprising Tor servers and browsers. But on Friday, the service appeared to be down. Its main landing page was replaced with a message saying that it had been hacked.

Allegedly, Freedom Hosting II had been hosting child pornography sites, though its anonymous operator claimed to have a zero-tolerance policy toward such content, according to the hacker behind the breach.

To read this article in full or to leave a comment, please click here

Read more

Court orders Google to produce emails stored abroad

A federal court in Pennsylvania has ordered Google to comply with search warrants and produce customer emails stored abroad, in a decision that is in sharp contrast to that of an appeals court in a similar case involving Microsoft.

Magistrate Judge Thomas J. Rueter of the U.S. District Court for the Eastern District of Pennsylvania ruled Friday that the two warrants under the Stored Communications Act (SCA) for emails required by the government in two criminal investigations constituted neither a seizure nor a search of the targets’ data in a foreign country.

Transferring data electronically from a server in a foreign country to Google’s data center in California does not amount to a seizure because “there is no meaningful interference with the account holder’s possessory interest in the user data,” and Google’s algorithm in any case regularly transfers user data from one data center to another without the customer’s knowledge, Rueter wrote.

To read this article in full or to leave a comment, please click here

Read more

Google ordered by U.S. court to produce emails stored abroad

Google has been ordered by a federal court in Pennsylvania to comply with search warrants and produce customer emails stored abroad, in a decision that is in sharp contrast to that of an appeals court in a similar case involving Microsoft.

Magistrate Judge Thomas J. Rueter of the U.S. District Court for the Eastern District of Pennsylvania ruled Friday that the two warrants under the Stored Communications Act (SCA) for emails required by the government in two criminal investigations constituted neither a seizure nor a search of the targets’ data in a foreign country.

Transferring data electronically from a server in a foreign country to Google’s data center in California does not amount to a seizure because “there is no meaningful interference with the account holder’s possessory interest in the user data,” and Google’s algorithm in any case regularly transfers user data from one data center to another without the customer’s knowledge, Judge Rueter wrote.

To read this article in full or to leave a comment, please click here

Read more

Cybersecurity and freedom of speech under President Trump

While President Donald Trump decided not to sign an executive order on cybersecurity (pdf), which would have required a review of the nation’s cyber vulnerabilities to be done in a mere 60 days, he told reporters, “I will hold my cabinet secretaries and agency heads accountable, totally accountable for the cybersecurity of their organization.”

8 months later, vulnerable Pentagon servers still not patched

To read this article in full or to leave a comment, please click here

Read more

German consumer groups sue WhatsApp over privacy policy changes

WhatsApp’s privacy policy change allowing Facebook to target advertising at its users has landed the company in a German court.

The Federation of German Consumer Organizations (VZBZ) has filed suit against WhatsApp in the Berlin regional court, alleging that the company collects and stores data illegally and passes it on to Facebook, the federation said Monday.

Facebook acquired WhatsApp in October 2014, but it wasn’t until August 2016 that WhatsApp said it would modify its privacy policy to allow it to share lists of users’ contacts with Facebook. The move made it possible to match WhatsApp accounts with Facebook ones where users had registered a phone number, giving the parent company more data with which to make new friend suggestions and another way to target advertising.

To read this article in full or to leave a comment, please click here

Read more

Trump, May agree to take on ISIS in cyberspace

The U.K. and U.S. are planning to work more closely to combat the spread of extreme Islamist ideology in cyberspace, British Prime Minister Theresa May said on Friday.

May was speaking at a White House news conference, alongside U.S. President Donald Trump, held to outline the results of talks between the two leaders. May is in Washington as the first foreign head of state to meet Trump.

She noted the conventional military fight against ISIS is working and the group is losing territory but noted the two countries “need to redouble our efforts.”

“Today we’re discussing how we can do this by deepening intelligence and security cooperation and critically, by stepping up our efforts to counter Daesh in cyberspace,” she said, using an alternate name for the terrorist group.

To read this article in full or to leave a comment, please click here

Read more

Get 72% off NordVPN Virtual Private Network Service For a Limited Time – Deal Alert

NordVPN gives you a private and fast path through the public Internet. All of your data is protected every step of the way using revolutionary 2048-bit SSL encryption even a supercomputer can’t crack. Access Hulu, Netflix, BBC, ITV, Sky, RaiTV and much more from anywhere in the world. Unmetered access for 6 simultaneous devices. You’re sure to find dozens of good uses for a VPN. Take advantage of the current 72% off deal that makes all of this available to you for just $3.29/month (access deal here). This is a special deal available for a limited time.

To read this article in full or to leave a comment, please click here

Read more

Controversial Park Service tweets arose from old Twitter passwords

Two instances of tweets from U.S. National Park Service accounts that became political hot potatoes in the last few days were the result of bad password management, according to officials.

The first incident took place on inauguration day when the main National Park Service account retweeted images from a CNN reporter that compared unfavorably the crowd size at President Donald Trump’s inauguration with that of President Barack Obama’s in 2009.

When Trump began to openly dispute the images and smaller crowd sizes, the National Park Service deleted the retweet and apologized.

“We regret the mistaken RTs from our account yesterday and look forward to continuing to share the beauty and history of our parks with you,” it said Saturday.

To read this article in full or to leave a comment, please click here

Read more