Behold, the Facebook phishing scam that could dupe even vigilant users

HTML block almost perfectly reproduces Facebook single sign-on Window.

Behold, the Facebook phishing scam that could dupe even vigilant users

Enlarge (credit: anujraj)

Phishers are deploying what appears to be a clever new trick to snag people’s Facebook passwords by presenting convincing replicas of single sign-on login Windows on malicious sites, researchers said this week.

Single sign-on, or SSO, is a feature that allows people to use their accounts on other sites—typically Facebook, Google, LinkedIn, or Twitter—to log in to third-party websites. SSO is designed to make things easier for both end users and websites. Rather than having to create and remember a password for hundreds or even thousands of third-party sites, people can log in using the credentials for a single site. Websites that don’t want to bother creating and securing password-based authentication systems need only access an easy-to-use programming interface. Security and cryptographic mechanisms under the hood allow the the login to happen without the third party site ever seeing the username password.

Researchers with password manager service Myki recently found a site that purported to offer SSO from Facebook. As the video below shows, the login window looked almost identical to the real Facebook SSO. This one, however, didn’t run on the Facebook API and didn’t interface with the social network in any way. Instead, it phished the username and password.

Read 3 remaining paragraphs | Comments

Erneuerbare Energien: Shell übernimmt Heimakku-Hersteller Sonnen

Der Erdölkonzern Shell setzt sein Engagement im Bereich erneuerbare Energien fort. Nun kauft das Unternehmen einen Konkurrenten für Teslas Powerwalls aus dem Allgäu. (Akku, Technologie)

Der Erdölkonzern Shell setzt sein Engagement im Bereich erneuerbare Energien fort. Nun kauft das Unternehmen einen Konkurrenten für Teslas Powerwalls aus dem Allgäu. (Akku, Technologie)

Filmmakers Want Phone Ban and Special Court to Tackle Indian ‘Cam’ Piracy

Now that ‘cam’ piracy is being outlawed in India, the local Film Federation is calling for a special court to handle these cases. In addition, it wants phones to be banned from theaters. While the movie industry requests these tough measures, new data suggest that Indian ‘cam’ piracy has dropped drastically in recent years, at least for some movies.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

With Bollywood, India has a thriving movie industry that’s known all around the world.

On the other hand, the country also has one of the highest piracy rates, which is seen as a major threat by industry insiders.

Following pressure from U.S. movie companies, India’s government recently agreed to update its Cinematograph Act to outlaw ‘cam’ piracy. Anyone recording or transmitting movies in a movie theater without permission now faces a three-year prison sentence.

This change was welcomed by film industry insiders around the world. The Film Federation of India (FFI) is also happy, but the group notes that more may be required to effectively deter pirates.

Supran Sen, Secretary General of the Film Federation told IANS that enforcement authorities haven’t been very helpful in the past. Therefore, they would like to see a special court where these ‘cam’ piracy cases can be handled.

“We want the government to tackle the problem of piracy by creating special courts where our pleas can be considered seriously. Many a times when we approached police with complaints about issues like piracy, they ignored us,” Sen said.

FFI’s Vice-President Ramesh Tekwani affirms the call for a special court and adds that mobile phones should be banned from movie theaters as well.

”[The] announcement is fine but people should be stopped from recording films by asking them to deposit their phones before entering theaters,” Tekwani said.

”One single phone can shoot the entire film. People also know different ways to record the film,” he added.

It is not uncommon for movie theaters to implement strict anti-piracy measures and the movie industry could mandate a phone ban of its own, if they can convince theaters to do so.

While that will certainly burden the public at large, the Film Federation believes that it’s essential to get a grip on piracy.

The question is, however, how ‘urgent’ this matter is at the moment. According to new data released by the International Intellectual Property Alliance, India-sourced ‘cam’ piracy has dropped drastically in recent years.

Last year there were only two films that leaked from India, a significant drop compared to a year earlier. At the same time, unauthorized movie audio recordings decreased as well.

“In 2018, there were two camcorded videos sourced to Indian theaters, down from ten in 2017. There were 23 illicit audio recordings sourced to Indian theaters last year, down from 36 in 2017,” IIPA notes. 

With thousands of cinema screens and more than two billion tickets sold per year, these numbers are relatively low for the world’s leading film market.

That said, IIPA relies on data from the MPAA, and it’s unclear whether Bollywood films are counted as well. A quick search suggests that more than two Indian movies were cammed last year.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Wochenrückblick: Kein Download vom Mars, kein Upload ins Netz

EU-Unterhändler bürokratisieren mit Leistungsschutzrecht und Uploadfilter das Internet. Am Mars geht Opportunity in Rente. Zurück auf der Erde fühlen wir uns eingeschnürt. (Golem-Wochenrückblick, Urheberrecht)

EU-Unterhändler bürokratisieren mit Leistungsschutzrecht und Uploadfilter das Internet. Am Mars geht Opportunity in Rente. Zurück auf der Erde fühlen wir uns eingeschnürt. (Golem-Wochenrückblick, Urheberrecht)

YouTube’s Copyright Strikes System Used to Blackmail Content Creators

YouTube’s copyright take-down system has been abused by blackmailers trying to extort channel owners into paying up or face the prospect of having their channels banned by YouTube.A few weeks ago, YouTube creators ObbyRaidz and KenzoOG both independent…



YouTube's copyright take-down system has been abused by blackmailers trying to extort channel owners into paying up or face the prospect of having their channels banned by YouTube.

A few weeks ago, YouTube creators ObbyRaidz and KenzoOG both independently received bogus copyright strikes on their accounts from blackmailers who asked to be paid in order for the strikes to be reversed. Both creators received two strikes each, short of the three strikes that could see their accounts disabled.

A channel that receives more than three strikes in a three-month period may be disabled, and it's this YouTube penalty that the blackmailers are relying on in order to extort content creators.

The blackmailers asked for $USD 150 to be sent to a nominated PayPal account, or $75 in Bitcoins, in order to not file a third strike to bring the channels down and to reverse the two earlier strikes.

YouTube does not require the person or organisation filing the copyright strike to provide sufficient proof of copyright abuse, and in the case of the blackmailers, they used a newly created account attached to a throwaway Gmail account in order to file the copyright complaint. YouTube's bias towards copyright holders when disputes arise have long been a complaint from content creators on the platform.

Posting about his situation, ObbyRaidz stated that he had attempted to contact YouTube to point out this flagrant abuse of their copyright system, but received no assistance on the matter. It wasn't until ObbyRaidz's pleas on Twitter received thousands of retweets that YouTube finally responded, also via a tweet, and reversed the fraudulent strikes for both YouTubers.

YouTube's lack of response has also become another point of criticism in this incident, with even bigger channels unable to get any attention unless their social media posts went viral, very much like the situation ObbyRaidz faced.

It is unknown how many others have fallen victim to the same scam, and if their pleas for help from YouTube were eventually answered, or without a viral backlash, completely ignored.

[via The Verge]

Windows Subsystem for Linux update will let you access Linux file from Windows

One of the most surprising things about Windows 10 is that you have the option of enabling a Windows Subsystem for Linux, installing a Linux distribution such as Ubuntu, and then running Linux commands in a Bash shell. The feature has been around in on…

One of the most surprising things about Windows 10 is that you have the option of enabling a Windows Subsystem for Linux, installing a Linux distribution such as Ubuntu, and then running Linux commands in a Bash shell. The feature has been around in one form or another since early 2016, but Microsoft keeps fine-tuning […]

The post Windows Subsystem for Linux update will let you access Linux file from Windows appeared first on Liliputing.

SPUDwrite is a DIY E Ink typewriter… with a printer… and an LCD display

Modern computers can do an awful lot of things. You can write a novel, or read one. You can listen to music, compose music, or create a music video. And you can waste countless hours watching cat videos on YouTube. All of which is to say that computers…

Modern computers can do an awful lot of things. You can write a novel, or read one. You can listen to music, compose music, or create a music video. And you can waste countless hours watching cat videos on YouTube. All of which is to say that computers are amazing productivity tools… and time wasters. […]

The post SPUDwrite is a DIY E Ink typewriter… with a printer… and an LCD display appeared first on Liliputing.

Shell buys Sonnen, Tesla’s competitor in the home battery business

The acquisition follows Shell’s purchase of EV charging company Greenlots.

A worker assembling a Sonnen battery.

Enlarge / An employee working for the manufacturer of solar batteries, Sonnen GmbH, in the Bavarian village Wildpoldsried, southern Germany, is pictured on July 5, 2016. (credit: CHRISTOF STACHE/AFP/Getty Images)

On Friday, oil major Royal Dutch Shell and German energy storage company Sonnen announced that Shell would acquire Sonnen for an undisclosed amount.

Sonnen has been one of the top competitors with Tesla's Powerwall in the US home battery market. The company built its base in Germany, attaching batteries for self-consumption to homes with solar panels. Sonnen now claims 40,000 batteries installed in households in Germany, the US, and Australia.

The company's assets include proprietary software that optimizes a home's battery use in combination with solar power.

Read 5 remaining paragraphs | Comments

Researchers, scared by their own work, hold back “deepfakes for text” AI

OpenAI’s GPT-2 algorithm shows machine learning could ruin online content for everyone.

This is fine.

Enlarge / This is fine.

OpenAI, a non-profit research company investigating "the path to safe artificial intelligence," has developed a machine learning system called Generative Pre-trained Transformer-2 (GPT-2 ), capable of generating text based on brief writing prompts. The result comes so close to mimicking human writing that it could potentially be used for "deepfake" content. Built based on 40 gigabytes of text retrieved from sources on the Internet (including "all outbound links from Reddit, a social media platform, which received at least 3 karma"), GPT-2 generates plausible "news" stories and other text that match the style and content of a brief text prompt.

The performance of the system was so disconcerting, now the researchers are only releasing a reduced version of GPT-2 based on a much smaller text corpus. In a blog post on the project and this decision, researchers Alec Radford, Jeffrey Wu, Rewon Child, David Luan, Dario Amodei, and Ilya Sutskever wrote:

Due to concerns about large language models being used to generate deceptive, biased, or abusive language at scale, we are only releasing a much smaller version of GPT-2 along with sampling code. We are not releasing the dataset, training code, or GPT-2 model weights. Nearly a year ago we wrote in the OpenAI Charter: “we expect that safety and security concerns will reduce our traditional publishing in the future, while increasing the importance of sharing safety, policy, and standards research,” and we see this current work as potentially representing the early beginnings of such concerns, which we expect may grow over time. This decision, as well as our discussion of it, is an experiment: while we are not sure that it is the right decision today, we believe that the AI community will eventually need to tackle the issue of publication norms in a thoughtful way in certain research areas.

OpenAI is funded by contributions from a group of technology executives and investors connected to what some have referred to as the PayPal "mafia"—Elon Musk, Peter Thiel, Jessica Livingston, and Sam Altman of YCombinator, former PayPal COO and LinkedIn co-founder Reid Hoffman, and former Stripe Chief Technology Officer Greg Brockman. Brockman now serves as OpenAI's CTO. Musk has repeatedly warned of the potential existential dangers posed by AI, and OpenAI is focused on trying to shape the future of artificial intelligence technology—ideally moving it away from potentially harmful applications.

Read 6 remaining paragraphs | Comments