Lawsuit: Citibank refused to reimburse scam victims who lost “life savings”

Citibank’s poor security helped scammers steal millions, NY AG’s lawsuit says.

A large Citibank logo on the outside of a bank building.

Enlarge / The Citibank logo on a bank in New York City in January 2024.

Citibank is being accused of illegally refusing to reimburse scam victims who lost money due in part to Citibank's poor online security practices by New York Attorney General Letitia James in a lawsuit filed today in US District Court for the Southern District of New York.

"The lawsuit alleges that Citi does not implement strong online protections to stop unauthorized account takeovers, misleads account holders about their rights after their accounts are hacked and funds are stolen, and illegally denies reimbursement to victims of fraud," James' office said in a press release.

The AG's office alleged that Citi customers "have lost their life savings, their children's college funds, or even money needed to support their day-to-day lives as a result of Citi's illegal and deceptive acts and practices."

Read 9 remaining paragraphs | Comments

Film Companies Counter Reddit: “An IP Address is Not a Person”

Reddit is refusing to share the IP addresses of users who posted piracy-related comments, as that would violate their First Amendment right to anonymous speech. Responding to this argument, film companies now use a line of reasoning that’s traditionally been used as a defense by accused pirates. “An IP address is not a person,” they inform the court.

From: TF, for the latest news on copyright battles, piracy and more.

ip addressOver the past decade and a half, hundreds of thousands of alleged BitTorrent pirates were taken to court for sharing mostly video content without permission from rightsholders.

While this activity is still ongoing, at least to a degree, not all courts have welcomed this type of lawsuit.

On several occasions, courts dismissed piracy claims after ruling that “an IP address is not a person”. In 2014, for example, Florida federal court Judge Ursula Ungaro dismissed a lawsuit ruling that IP address evidence can’t identify the person who allegedly shared a pirated movie.

Geolocation software might make a reasonably accurate estimate of where the associated account holder lives, but even if an exact home address is known, an IP address can’t identify the person who used it to pirate.

“Even if this IP address is located within a residence, the geolocation software cannot identify who has access to that residence’s computer and who would actually be using it to infringe Plaintiff’s copyright,” Judge Ungaro explained.

Filmmakers who use IP addresses as piracy evidence are generally not keen on this conclusion, especially when it gets in the way of their legal efforts. Intriguingly, however, several movie companies now hope to use it to gain an advantage in their dispute with Reddit.

Film Companies: An IP address is Not a Person

The film companies, which include Voltage Holdings, are no strangers to the IP address argument. They previously filed lawsuits against alleged BitTorrent pirates based on IP address evidence that didn’t result in the desired outcome.

A Canadian court, for example, concluded that while IP address evidence may link pirate activity to an internet connection, it can’t conclude that the account holder is the person who committed that offense. Or put differently: an IP address is not a person.

So, when Reddit recently defended the anonymous speech of its users in a piracy-related case, arguing that an IP address is “identifying information,” Voltage knew what its response should be.

In a reply, the filmmakers counter that sharing the IP addresses of the Reddit users doesn’t violate their anonymous speech rights. IP addresses don’t “unmask” the Redditors, they argue.

“Movants are not ‘unmasking’ Reddit’s subscribers. Movants’ subpoena merely requests Internet Protocol (‘IP’) address logs. An IP address is not a person,” the film companies argue, citing Judge Ungaro’s order.

“Accordingly, Reddit’s pages of arguments based upon the First Amendment standards for unmasking anonymous speakers are not applicable,” they add.

Anonymous Speech at Stake?

Reddit is concerned that the filmmakers could obtain the identities of the affected users by subpoenaing their ISP for the account holder information behind the IP addresses. While the account holders might not be the Redditors, it potentially puts their anonymity at risk.

The film companies previously said that they have no intention of going after the Redditors. Instead, they want to use their comments to show that Internet provider Frontier failed to reasonably implement a policy for terminating repeat infringers.

Since disclosing the IP addresses won’t directly identify anyone, their request can’t harm anonymous speech in any way, they add.

This reply shows that the request has multiple angles and the tables can be turned be either side. What’s helpful, however, is that the film companies have shared information on want they intend to do with the requested IP addresses.

Narrowing Down the Search

In theory, the Redditors’ households can be potentially identified using Reddit’s IP address logs via a follow-up subpoena to their ISP. However, the filmmakers suggest that identities are not essential to their request. Instead, they see most value in the following information.

1. Information that shows the comments were made by people who used a Frontier connection to boast about piracy.

2. Identifying the number of copyright infringement notices rightsholders sent to Frontier for the associated IP addresses.

main frontier

Neither of these points require the filmmakers to know who the Redditors or associated subscribers are. Then again, without legal guarantees, Reddit may still be concerned that the filmmakers will do more.

Alternatives?

Ultimately, the court will reach a decision after weighing the First Amendment rights of the Redditors against the interests of copyright holders. Previously, the balance tipped in favor of Redditors, twice.

In the present dispute the rightsholders only seek IP addresses, not the names and email addresses of Redditors. But whether that will change things remains to be seen.

A key reason for the court siding with Reddit previously was that the filmmakers have other options to get similar evidence. The movie companies already have a list of IP addresses that allegedly pirated their films, for example.

Reddit also pointed this out in the current dispute, adding that the filmmakers already have a subpoena in hand to obtain the associated subscriber information from Frontier directly.

The filmmakers don’t dispute that they are able to get information on Frontier’s pirating subscribers. They indeed have a subpoena in hand, but note that this is limited to the subscribers who shared their films.

Given the already available options, the key question is whether the Reddit comments are unique and valuable enough as evidence in the Frontier case, to require Reddit to share the posters’ IP addresses.

The filmmakers’ reply indicates that they are open to a compromise. They suggest that, at minimum, they would like to verify that the Redditors were using a Frontier connection.

“Movants intend to show that these posts were made from same Frontier IP addresses where multiple notices of infringement were sent to Frontier. At the very least, Movants need to show that these posts were made from Frontier IP addresses for the Court to consider them as evidence,” they write.

Both the film companies and Reddit will get the opportunity to explain their motivations and concerns during a forthcoming hearing, after which the court will likely issue its decision.

A copy of the reply from Voltage Holdings, LLC; Screen Media Ventures, LLC; Killing Link Distribution, LLC; Family of the Year Productions, LLC; and Laundry Films, Inc is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Rhyming AI-powered clock sometimes lies about the time, makes up words

Poem/1 Kickstarter seeks $103K for fun ChatGPT-fed clock that may hallucinate the time.

A CAD render of the Poem/1 sitting on a bookshelf.

Enlarge / A CAD render of the Poem/1 sitting on a bookshelf. (credit: Matt Webb)

On Tuesday, product developer Matt Webb launched a Kickstarter funding project for a whimsical e-paper clock called the "Poem/1" that tells the current time using AI and rhyming poetry. It's powered by the ChatGPT API, and Webb says that sometimes ChatGPT will lie about the time or make up words to make the rhymes work.

"Hey so I made a clock. It tells the time with a brand new poem every minute, composed by ChatGPT. It’s sometimes profound, and sometimes weird, and occasionally it fibs about what the actual time is to make a rhyme work," Webb writes on his Kickstarter page.

The $126 clock is the product of Webb's Acts Not Facts, which he bills as "." Despite the net-connected service aspect of the clock, Webb says it will not require a subscription to function.

Read 6 remaining paragraphs | Comments

TerraMaster D5 Hybrid storage enclosure supports up to 2 hard drives and 3 SSDs

There are plenty of USB hard drives or SSDs on the market these days. Hard drives tend to offer more storage than a similarly-priced SSD, while solid state drives typically have much higher data transfer speeds. But the TerraMaster D5 Hybrid is a USB …

There are plenty of USB hard drives or SSDs on the market these days. Hard drives tend to offer more storage than a similarly-priced SSD, while solid state drives typically have much higher data transfer speeds. But the TerraMaster D5 Hybrid is a USB enclosure that doesn’t ask you to pick between one and the other. […]

The post TerraMaster D5 Hybrid storage enclosure supports up to 2 hard drives and 3 SSDs appeared first on Liliputing.

SIM-swapping ring stole $400M in crypto from a US company, officials allege

Scheme allegedly targeted Apple, AT&T, Verizon, and T-Mobile stores in 13 states.

SIM-swapping ring stole $400M in crypto from a US company, officials allege

Enlarge (credit: Wong Yu Liang | Moment)

The US may have uncovered the nation's largest "SIM swap" scheme yet, charging a Chicago man and co-conspirators with allegedly stealing $400 million in cryptocurrency by targeting over 50 victims in more than a dozen states, including one company.

A recent indictment alleged that Robert Powell—using online monikers "R," "R$," and "ElSwapo1"—was the "head of a SIM swapping group" called the “Powell SIM Swapping Crew.” He allegedly conspired with Indiana man Carter Rohn (aka "Carti" and "Punslayer") and Colorado woman Emily Hernandez (allegedly aka "Em") to gain access to victims' devices and "carry out fraudulent SIM swap attacks" between March 2021 and April 2023.

SIM-swap attacks occur when someone fraudulently induces a wireless carrier to "reassign a cell phone number from the legitimate subscriber or user’s SIM card to a SIM card controlled by a criminal actor," the indictment said. Once the swap occurs, the bad actor can defeat multi-factor authentication protections and access online accounts to steal data or money.

Read 14 remaining paragraphs | Comments

Japan government accepts it’s no longer the ’90s, stops requiring floppy disks

Government amends 34 ordinances to no longer require diskettes.

A pile of floppy disks

Enlarge (credit: Getty)

The Japanese government is finally letting go of floppy disks and CD-ROMs. It recently announced amendments to laws requiring the use of the physical media formats for submissions to the government for things like alcohol business, mining, and aircraft regulation.

Japan's minister for Digital Transformation, Taro Kono, announced the "war on floppy discs" in August 2022. Before the recent law changes, about 1,900 government procedures required the use of obsolete disk formats, including floppy disks, CDs, and MiniDiscs, for submissions from citizens and businesses.

Kono announced intentions to amend regulations to support online submissions and cloud data storage, changing requirements that go back several decades, as noted recently by Japanese news site SoraNews24.

Read 8 remaining paragraphs | Comments

Boeing withdraws bid for safety exemption as details on missing bolts emerge

Boeing workers apparently failed to replace bolts after reinstalling door plug.

Tarp-like material covers a large opening in the side of a Boeing airplane.

Enlarge / A hole is covered where a door plug blew off a Boeing 737 Max 9 plane used by Alaska Airlines. (credit: Getty Images)

Boeing is withdrawing an application for a safety exemption related to its 737 Max 7 aircraft as more details emerge on the cause of a near-disaster involving a 737 Max 9 plane used by Alaska Airlines.

While initial inspections of Alaska Airlines' fleet of Boeing 737 Max 9s turned up "many" loose bolts, a Wall Street Journal report yesterday said it now appears that "bolts needed to secure part of an Alaska Airlines jet that blew off in midair appear to have been missing when the plane left Boeing's factory."

"Boeing and other industry officials increasingly believe the plane maker's employees failed to put back the bolts when they reinstalled a 737 Max 9 [door plug] after opening or removing it during production, according to people familiar with the matter," the article said.

Read 11 remaining paragraphs | Comments

Banana Pi BPI-M7 router board now available for $165 (RK3588 processor, dual 2.5 Gb Ethernet, WiFi 6 and BT 5.2)

The Banana Pi BPI-M7 is a single-board computer with a Rockchip RK3588 processor, two 2.5 Gb Ethernet ports, support for WiFi 6 and Bluetooth 5.2, LPDDR4X memory, eMMC storage, and an M.2 slot with support for an optional PCIe 3.0 x4 NVMe SSD. First a…

The Banana Pi BPI-M7 is a single-board computer with a Rockchip RK3588 processor, two 2.5 Gb Ethernet ports, support for WiFi 6 and Bluetooth 5.2, LPDDR4X memory, eMMC storage, and an M.2 slot with support for an optional PCIe 3.0 x4 NVMe SSD. First announced in November, the Banana Pi BPI-M7 is now available for purchase from […]

The post Banana Pi BPI-M7 router board now available for $165 (RK3588 processor, dual 2.5 Gb Ethernet, WiFi 6 and BT 5.2) appeared first on Liliputing.

Microsoft Edge is apparently usurping Chrome on people’s PCs

An apparent bug that plays into criticisms of how Microsoft pushes Edge.

Microsoft Edge is apparently usurping Chrome on people’s PCs

Enlarge (credit: Aurich Lawson | Getty Images)

If you run the Chrome browser in Windows 10 or 11 and you've suddenly discovered that you're running Microsoft Edge instead, you're not alone. The Verge's Tom Warren reports that he and multiple other users on social media and Microsoft's support forums have suddenly found their Chrome browsing sessions mysteriously replicated in Edge.

Without an official comment from Microsoft, Warren posits that the tab-snatching happened because of a bug or an inadvertently clicked-through dialog box that triggers a feature in Edge that's meant to make it easier to (intentionally) switch browsers. The setting, which can accessed by typing edge://settings/profiles/importBrowsingData into the browser's address bar, offers to import recent browsing data from Chrome every time you launch Edge, as opposed to the one-time data import it offers for Firefox.

Assuming it is a bug, this data-importing issue is hard to distinguish from some of Microsoft's actual, officially sanctioned, easy-to-reproduce tactics for pushing Edge. I encountered two of these while installing Chrome on a PC for this piece—one when I navigated to the Chrome download page and another across the top of Edge's Settings pages after I had set another browser as my default.

Read 3 remaining paragraphs | Comments

Raspberry Pi is planning a London IPO, but its CEO expects “no change” in focus

Eben Upton says hobbyists remain “incredibly important” while he’s involved.

Raspberry Pi 5 with Active Cooler installed on a wood desktop

Enlarge / Is it not a strange fate that we should suffer so much fear and doubt for so small a thing? So small a thing! (credit: Andrew Cunningham)

The business arm of Raspberry Pi is preparing to make an initial public offering (IPO) in London. CEO Eben Upton tells Ars that should the IPO happen, it will let Raspberry Pi's not-for-profit side expand by "at least a factor of 2X." And while it's "an understandable thing" that Raspberry Pi enthusiasts could be concerned, "while I'm involved in running the thing, I don't expect people to see any change in how we do things."

CEO Eben Upton confirmed in an interview with Bloomberg News that Raspberry Pi had appointed bankers at London firms Peel Hunt and Jefferies to prepare for "when the IPO market reopens."

Raspberry previously raised money from Sony and semiconductor and software design firm ARM, and it sought public investment. Upton denied or didn't quite deny IPO rumors in 2021, and Bloomberg reported Raspberry Pi was considering an IPO in early 2022. After ARM took a minority stake in the company in November 2023, Raspberry Pi was valued at roughly 400 million pounds, or just over $500 million.

Read 8 remaining paragraphs | Comments