April 2016 – Page 63 – news.buyenne.com

Efficiency Sanitizer: Google will Performance-Lücken mit LLVM finden

Den Compilerbaukasten LLVM wollen Google-Entwickler um Werkzeuge erweitern, die typische Leistungsprobleme von Code auffinden sollen. Ähnliche Konzepte zur Adress- und Speicherverwaltung werden bereits erfolgreich eingesetzt. (LLVM, Softwareentwicklung)

Flashback: Declassified 1970 DOD cybersecurity document still relevant

The Ware Report’s recommendations still important as proven by ransomware and breaches.

Networks may look different, but the security problems are basically the same.

The National Security Archives at George Washington University has just added a classic text of computer security to its "Cyber Vault" project—the original version of what came to be known as the "Ware Report," a document published by the predecessor to the Defense Advanced Research Projects Agency in February 1970. And as much as technology has changed in the 46 years that have passed, the Ware Report would still hold up pretty well today with a few notable edits.

The document, officially entitled "Security Controls for Computer Systems: Report of the Defense Science Board Task Force on Computer Security," was the result of work undertaken in 1967 at the behest of the Advanced Research Projects Agency (ARPA, now DARPA) to deal with the risks associated with the rapid growth of "multi-access, resource-sharing computer systems"—the primordial network ooze from which the Internet would be born. Authored by a task force led by computer science and security pioneer Willis Ware, the report was a first attempt to take on some of the fundamental security problems facing a future networked world.

The Ware Report included a list of conclusions and recommendations that (based on recent data breaches and security failures) many have failed to take to heart. The first of these is one that recent ransomware attacks seem to show that organizations have forgotten. "Providing satisfactory security controls in a computer system is in itself a system design problem," Ware wrote in the summary memo accompanying the report. "A combination of hardware, software, communication, physical, personnel and administrative-procedural safeguards is required for comprehensive security. In particular, software safeguards alone are not sufficient."

Read 4 remaining paragraphs | Comments

Deutsche Telekom: Prepaid-Tarife erhalten höhere Geschwindigkeit

Die Deutsche Telekom versieht ihre Prepaid-Tarife mit höherer Geschwindigkeit. Die Umstellung der Prepaid-Tarife erfolgt für Bestandskunden ohne Aufpreis. (Telekom, Mobilfunk)

Apple Car: Das Apple-Auto soll per Carsharing vermarktet werden

Apple soll in Berlin ein Expertenteam aus der Automobilindustrie versammelt haben, das im Geheimen an dem sagenumwobenen Apple-Auto forschen soll. Das Auto soll einem Medienbericht zufolge als Carsharing-Modell angeboten werden. (Auto, Apple)

Ubuntu on Windows im Test: Eine neue Hassliebe auf der Kommandozeile

Wenn der Linux-Redakteur über die Windows-Nutzung flucht, ist eigentlich alles wie immer. Doch die Vorschau von Ubuntu auf Windows ist viel mehr als nur ein weiterer Grund zum Aufregen. (Windows 10, Ubuntu)

Flughafen Heathrow: Passagiermaschine kollidiert mutmaßlich mit Drohne

Es war wohl eine Drohne: Am Sonntagmittag stieß ein Verkehrsflugzeug der britischen Fluggesellschaft BA in der Luft mit einem Objekt zusammen. Der Vorfall verlief zum Glück ohne Schaden. (Drohne, Flugzeug)

Applied Micro: X-Gene 3 und 3XL sollen Intels Xeon E5 schlagen

32 oder 64 CPU-Kerne mit ARMv8- und TSMCs 16FF+-Technik: Applied Micro möchte mit dem X-Gene 3(XL) eine Alternative zu Intels Xeon E5 liefern. Erste Messwerte sehen die CPUs gleichauf, bis 2017 und danach sind diese Resultate aber nicht mehr zeitgemäß. (ARM-Server, Prozessor)

Microsoft: Videoanrufe mit Skype ohne Plugin im Edge-Browser möglich

Skype lässt sich künftig auch ohne Plugin direkt im Edge-Browser für Videotelefonate nutzen – möglich macht das die ORTC-Medien-Engine. Sobald Chrome und Firefox den H.264-Codec nativ unterstützen, sollen Nutzer auch dort keine Plugins mehr für Skype im Web benötigen. (Skype, Microsoft)

Skype lässt sich künftig auch ohne Plugin direkt im Edge-Browser für Videotelefonate nutzen - möglich macht das die ORTC-Medien-Engine. Sobald Chrome und Firefox den H.264-Codec nativ unterstützen, sollen Nutzer auch dort keine Plugins mehr für Skype im Web benötigen. (Skype, Microsoft)

Nintendo: NX soll auf Polaris-Architektur und Vulkan-API setzen

Es gibt neue, sehr technische Gerüchte über die mögliche nächste Konsole von Nintendo. Dem Informanten zufolge setzt sie auf die Polaris-GPU-Architektur von AMD sowie die Vulkan-API und verwendet ein Verfahren zur Beschleunigung von Grafik in Games. (Nintendo NX, Nintendo)

Norwegian Authorities Sued Over Popcorn-Time Domain Seizure

Two digital rights groups have filed a lawsuit to challenge the Government’s seizure of a Popcorn-Time related domain name. The groups believe that the website, which offered information and links to the popular streaming software, did nothing wrong. In any case, a domain name seizure is seen as a disproportionate measure.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and ANONYMOUS VPN services.

popcornt In recent years the Popcorn Time application has gained popularity worldwide, mostly thanks to its ability to stream torrent files in a Netflix-style interface.

This development raised concern among many movie industry companies, who have been working hard to contain the threat by going after several forks and their developers.

Most recently, Norwegian rightholders reported a local Popcorn Time site to the local economic crime police. Responding to this referral, the authorities seized the Popcorn-Time.no domain name.

Unlike the name suggests, the site didn’t host the application itself but instead posted news articles, as well as links to sites that offered the application.

Many were surprised by the action and legal experts including Professor Olav Torvund of the Norwegian Research Center for Computers and Law openly voiced their concerns.

Not only is the legality of the site debated, but also the use of a far-reaching measure without a proper judicial review.

Responding to these concerns, two digital rights groups have now filed a lawsuit against the authorities. Electronic Frontier Norway (EFN) and the Norwegian Unix User Group (NUUG) want the court to decide whether the domain seizure was appropriate.

“We feel that this is an important case that addresses the limits of free speech,” EFN’s managing director Tom Fredrik Blenning tells TorrentFreak.

“If this procedure is found to be legal, domain name seizures will make it possible for the police to shut down a forum based on mere suspicion that a site discusses potential illegal actions.”

As far as the digital rights groups are concerned the Popcorn-Time information site was operating legally.

But even if there are legitimate legal concerns, they believe that domain name seizures should only be applied in extreme cases where lives are at stake. This was certainly not the case here.

“The decision to seize the domain name was made by a low-ranking lawyer employed by the police,” Blenning says.

“Our position is that this decision may very well be wrong, but even if it is a correct decision, it is one that should be made by a judge in a court of law.”

Through the lawsuit the groups hope to answer two main questions. Firstly, was Popcorn-Time.no violating the law even though it only offered links to and information about the application.

Secondly, is a domain name seizure proportionate when it’s not obvious whether a website is actually breaking the law?

According to the two digital rights groups, the authorities clearly went too far. They hope that the court will agree and that similar broad enforcement measures can be prevented in the future.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and ANONYMOUS VPN services.