Ars Technicast special edition, part 2: Spotting bad actors inside a company

Our limited edition podcast series continues as we focus on dangerous insiders.

Artist's impression of an insider threat stealing your stuff.

Enlarge / Artist's impression of an insider threat stealing your stuff. (credit: D-Keine / Getty Images)

In the second of our series of podcasts on artificial intelligence produced in association with Darktrace, we dive into something a little spookier: the world of "insider threat" detection.

There've been a number of recent high profile cases where people within organizations use their access to data for selfenrichment or ill-intent, and it slipped past the usual policies and tools that are collectively referred to as "data loss prevention." Most of the time, employees are long gone before the data theft is noticed (if it ever is), and preventing data loss almost requires a Minority Report level of pre-cognition.

To get some insight into how AI could play a role in detecting insider threats, Ars editors Sean Gallagher and Lee Hutchinson spoke with Kathleen Carley, Director of the Center for Computational Analysis of Social and Organizational Systems at Carnegie Mellon University about her research into identifying the tells of someone about to take the data and run.  Lee and Sean also talked to Rob Juncker, Senior Vice President of Research and Development at data loss prevention software company Code42 about whether or not AI can really help detect when people are about to walk off or upload their employer's data. And Justin Fier, Director for Cyber Intelligence and Analysis at Darktrace, spoke with Lee about how AI related technologies are already being brought to play and to stop insider threats.

Read 5 remaining paragraphs | Comments

Guidemaster: The best portable SSDs you can buy right now

Which portable SSDs are worth your time and money? We tested a bunch to find out.

Guidemaster: The best portable SSDs you can buy right now

Enlarge (credit: Valentina Palladino)

Portable SSDs are a good way to increase the amount of storage you have to preserve digital data and take that data with you wherever you go. These powerful accessories let you pack a huge amount of storage in your daily bag, giving you a place to offload files from your computer or smartphone, a place to access files you only need in certain circumstances, and backup important information on the go.

But the world of portable SSDs is a large one, and deciding on the best device for your needs can be a challenge. It's not just about how small the device is, how durable it is, or how many gigabytes of storage it has—the speed of a portable SSD can heavily influence your satisfaction with it. SSDs in general promise better read and write speeds than HDDs, so you'll see a general increase if you're going from one to the other. However, not all portable SSDs perform the same—even if they advertise similar maximum speeds.

To help you decide which portable SSD may work for you, Ars put some of the newest and most popular portable SSDs on the market to the test and judged them on speed, design, durability, compatibility, and price. Here are our findings:

Read 54 remaining paragraphs | Comments

Titan: Googles Fido-Sticks in Deutschland erhältlich

Nun kommen Googles Sicherheitsschlüssel Titan auch nach Deutschland. Seit kurzem können sie im Google Store in mehreren Varianten bestellt werden. (2-FA, Google)

Nun kommen Googles Sicherheitsschlüssel Titan auch nach Deutschland. Seit kurzem können sie im Google Store in mehreren Varianten bestellt werden. (2-FA, Google)

Is the US market ready to embrace a $500 game console?

A look at history, and inflation, suggests it might be.

Last week, a Bloomberg report about PS5 component costs suggested the upcoming system would cost no less than $450 for Sony to manufacture. Add in costs for packaging, shipping, and retail markup, and Sony would likely need to charge about $500 per PS5 just to break even on the hardware at launch (though taking a loss on hardware has also been an option, historically).

The prospect of a $500 PS5 got industry watchers chattering about whether such a price point could be broadly acceptable to the US console-buying market. A look back at console-pricing history suggests that, while a $500 launch would be at the high end of nominal prices, it actually sits right near the middle of the pack when inflation and median buying power are taken into account.

Inflated expectations?

In the history of the game industry, only two game console have launched at an MSRP above $500: the $650 Neo Geo in 1991 and the $700 3DO in 1993 (Fig. 1). Both of those consoles sold for way more than the contemporary competition and became instant niche products, as well as cautionary tales for anyone who might decide to price a console too highly in the future.

Read 11 remaining paragraphs | Comments

Larry Tesler: Pionier grafischer Benutzeroberflächen ist tot

Erst bei Xerox, dann bei Apple, Amazon und Yahoo: Sein ganzes Leben lang hat Larry Tesler versucht, die Welt der Computertechnik mit grafischen Bedienelementen und objektorientierten Programmiersprachen voranzubringen. Im Alter von 74 Jahren ist der In…

Erst bei Xerox, dann bei Apple, Amazon und Yahoo: Sein ganzes Leben lang hat Larry Tesler versucht, die Welt der Computertechnik mit grafischen Bedienelementen und objektorientierten Programmiersprachen voranzubringen. Im Alter von 74 Jahren ist der Informatiker gestorben. Ein Nachruf von Oliver Nickel (Apple, Xerox)

Elektroautos: Die elektrischste Tiefgarage Deutschlands

Welche Herausforderungen kommen auf einen Netzbetreiber zu, wenn künftig Tiefgaragen oder Parkplätze komplett mit Lademöglichkeiten für Elektroautos ausgestattet werden? Golem.de hat sich ein Pilotprojekt von Netze BW bei Stuttgart angeschaut und erste…

Welche Herausforderungen kommen auf einen Netzbetreiber zu, wenn künftig Tiefgaragen oder Parkplätze komplett mit Lademöglichkeiten für Elektroautos ausgestattet werden? Golem.de hat sich ein Pilotprojekt von Netze BW bei Stuttgart angeschaut und erste Erfahrungen ausgewertet. Ein Bericht von Friedhelm Greis (Elektroauto, RFID)

Huawei: “Von uns ausgerüstete 5G-Netzwerke sind doppelt so schnell”

Ein Huawei-Event in London ist trotz ständiger Warnungen und Angriffen der US-Regierung gut besucht. Der Ausrüster präsentiert sich mit der Branchenorganisation GSMA und nennt seine Technik führend. (Huawei, Handy)

Ein Huawei-Event in London ist trotz ständiger Warnungen und Angriffen der US-Regierung gut besucht. Der Ausrüster präsentiert sich mit der Branchenorganisation GSMA und nennt seine Technik führend. (Huawei, Handy)

Court Gives ‘Dynamic’ Pirate Site-Blocking the Green Light in Spain

A Spanish court has handed down an order that will compel local ISPs to block pirate sites and services, primarily to prevent the unlicensed distribution of live football matches. Several interesting novelties can be observed in the ruling, including that broadcaster Telefónica Audiovisual Digital can add new sites, IP addresses, and URLs, without judicial oversight.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

The unlicensed streaming of live sporting events has presented problems for rightsholders for years but more recently, with the rise of ‘pirate’ IPTV services, it has become a worldwide issue.

The phenomenon is being tackled from multiple directions, from targeting third-party Kodi add-on and app developers to attacking systems such as Xtream-Codes. The overall aim, however, is to prevent end-users from accessing streams, primarily via web-blocking mechanisms.

Following a lawsuit filed last November and a ruling handed down by the Madrid Commerical Court, Spanish broadcaster Telefónica Audiovisual Digital hopes it can benefit from this approach. A copy of the decision, handed down on February 11, 2019, and obtained by Cinco Días, reveals a broad injunction that targets many of the country’s Internet service providers.

The injunction targets prominent operators such as Vodafone, Orange, MásMóvil, Euskaltel, Lycamobile, and also Telefónica Audiovisual Digital’s own ISP, Telefónica. As a starting point, it identifies 44 pirate sites and services (reportedly managed by 30 ‘known piracy groups’), requiring that their URLs, domain names, and IP addresses are blocked within 72 hours.

All ISPs will be required to notify Telefónica Audiovisual Digital when they have blocked these resources, stating the day, hour and minute in each case. In addition, the inunction has a trick up its sleeve, in that it allows the broadcaster to notify new sites, URLs, domains and IP addresses to the ISPs every week for blocking, without having to refer to the court for permission.

The ISPs will be advised of the new online locations at exactly the same and they will be expected to act expeditiously in order to prevent their customers from accessing their pirated streams.

“The blocking of the new web resources (URLs, domains or IP addresses) must be done under access in HTTP and HTTP protocols, and within a maximum period of three hours from the notification of the new listing,” the decision reads, as cited by Cinco Días.

This part of the injunction is an obvious move designed to mitigate the threat posed by pirate services that implement their own technical measures to prevent being blocked. The theory is that if live data can be relayed to ISPs regarding the services’ current locations, they can be tackled more efficiently, a mechanism often referred to as ‘dynamic’ blocking.

Dynamic blocking orders can take several forms, with the most basic targeting relatively static services such as torrent and web-based streaming portals.

One such injunction was handed down in Sweden recently against The Pirate Bay and several other sites, targeting the platforms themselves plus any new URLs or IP addresses that may subsequently appear. A similar one was obtained by Foxtel in Australia last August.

However, given the fluid nature of live stream providers, it seems likely that the injunction just handed down in Spain will be more comparable to those previously obtained by the Premier League covering the UK market and La Liga, active in Denmark.

The new injunction obtained by Telefónica Audiovisual Digital is reportedly valid until May 25, 2022, and covers three football seasons. The company was awarded football broadcasting rights in June 2018 and that license is set to expire in 2022.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Bundesgerichtshof: Händler haftet nicht für Kundenbewertungen auf Amazon

Klarheit für Händler: Diese haften grundsätzlich nicht für Kundenbewertungen auf der Webseite des Online-Kaufhauses Amazon. Dies entschied der Bundesgerichtshof (BGH). (Amazon, Onlineshop)

Klarheit für Händler: Diese haften grundsätzlich nicht für Kundenbewertungen auf der Webseite des Online-Kaufhauses Amazon. Dies entschied der Bundesgerichtshof (BGH). (Amazon, Onlineshop)

Datenleck: Citrix informiert Betroffene über einen Hack vor einem Jahr

Sechs Monate hatten Angreifer Zugriff auf das interne Netz Citrix und konnten dabei umfangreich Daten kopieren. Mitbekommen hatte der Netzwerkdienstleister den Angriff erst nach einem Hinweis des FBI. Rund ein Jahr später informiert Citrix nun die Betr…

Sechs Monate hatten Angreifer Zugriff auf das interne Netz Citrix und konnten dabei umfangreich Daten kopieren. Mitbekommen hatte der Netzwerkdienstleister den Angriff erst nach einem Hinweis des FBI. Rund ein Jahr später informiert Citrix nun die Betroffenen - zumindest in den USA. (Citrix, Cyberwar)