Anzeige: Penetration Testing lernen und Sicherheitslücken schließen

Penetration Testing hilft dabei, Schwachstellen zu erkennen, bevor sie ausgenutzt werden. Ein zweitägiger Workshop vermittelt zentrale Angriffstechniken, Abwehrstrategien und den Umgang mit bewährten Tools. (Golem Karrierewelt, Sicherheitslücke)

Penetration Testing hilft dabei, Schwachstellen zu erkennen, bevor sie ausgenutzt werden. Ein zweitägiger Workshop vermittelt zentrale Angriffstechniken, Abwehrstrategien und den Umgang mit bewährten Tools. (Golem Karrierewelt, Sicherheitslücke)

Universities (finally) band together, fight “unprecedented government overreach”

New statement is weak—but a start.

Last Friday, in an op-ed piece on the Trump administration's war on American universities, we called for academia to 1) band together and 2) resist coercive control over hiring and teaching, though we noted that the 3) "temperamental caution of university administrators" means that they might "have trouble finding a clear voice to speak with when they come under thundering public attacks from a government they are more used to thinking of as a funding source."

It only took billions of dollars in vindictive cuts to make it happen, but higher education has finally 1) banded together to 2) resist coercive control over its core functions. More than 230 leaders, mostly college and university presidents, have so far signed an American Association of Colleges and Universities statement that makes a thundering call gentle bleat for total resistance "constructive engagement" with the people currently trying to cripple, shutter, and/or dominate them. Clearly, 3) temperamental caution remains the watchword. Still, progress! (Even Columbia University, which has already capitulated to Trump administration pressure, signed on.)

The statement largely consists of painful pablum about how universities "provide human resources to meet the fast-changing demands of our dynamic workforce," etc, etc. As a public service, I will save you some time (and nausea) by excerpting the bits that matter:

Read full article

Comments

Drunk man walks into climate change, burns the bottoms of his feet off

Climate change is a danger to health in a wide variety of ways.

Climate tipping points pose grave risks to human health—and, unsurprisingly, approaching them while tipsy only makes the fallout more blistering, according to a case study in the New England Journal of Medicine.

In this week's issue, NEJM spotlights the effects of the climate crisis on clinical health with a series of case studies. One is the searing story of an inebriated gentleman who regrettably took a one-minute walk while barefoot during the unprecedented 2021 Northwest heat dome. The man walked across asphalt during the extreme weather, in which air temperatures reached as high as 42° C (108° F). That's about 21° C (38° F) above historical averages for the area.

Asphalt can absorb 95 percent of solar radiation and easily reach 40° F to 60° F above air temperatures on hot days. It's unclear how hot the asphalt was when the man walked across it, but it was clearly hot enough to melt some flesh.

Read full article

Comments

ChatGPT head tells court OpenAI is interested in buying Chrome

OpenAI would love to own Chrome, and it’s not alone.

The remedy phase of Google's antitrust trial is underway, with the government angling to realign Google's business after the company was ruled a search monopolist. The Department of Justice is seeking a plethora of penalties, but perhaps none as severe as forcing Google to sell Chrome. But who would buy it? An OpenAI executive says his employer would be interested.

Among the DOJ's witnesses on the second day of the trial was Nick Turley, head of product for ChatGPT at OpenAI. He wasn't there to talk about Chrome exclusively—the government's proposed remedies also include forcing Google to share its search index with competitors.

OpenAI is in bed with Microsoft, but Bing's search data wasn't cutting it, Turley suggested (without naming Microsoft). "We believe having multiple partners, and in particular Google's API, would enable us to provide a better product to users," OpenAI told Google in an email revealed at trial. However, Google turned OpenAI down because it believed the deal would harm its lead in search. The companies have no ongoing partnership today, but Turley noted that forcing Google to license its search data would restore competition.

Read full article

Comments

MPA and RIAA Want to be Heard in Crucial DMCA Subpoena Appeal

The MPA and RIAA want to have their say in a crucial third-party Ninth Circuit appeal about the use of DMCA subpoenas against alleged online pirates. Fearing a ruling that could limit their enforcement options, the groups requested speaking time at an upcoming hearing. This intervention, as well as previous commentary from the EFF, which is backed by a new party, underscores the high-stakes nature of the case.

From: TF, for the latest news on copyright battles, piracy and more.

pirate-flagTackling online piracy is a complicated endeavor that often begins with efforts to identify the operators of infringing sites and services. This is also where the first hurdles show up.

Many pirates keep their identities concealed. This applies to the operators of sites and services as well as their users.

This relative anonymity is a nuisance to anti-piracy groups, including the RIAA and MPA. While most online services refuse to voluntarily hand over user details, legal tools can help rightsholders move forward.

In recent years, DMCA subpoenas have established themselves as a key anti-piracy enforcement tool. These requests don’t require any oversight from a judge and are typically signed off by a court clerk. This makes them ideal to swiftly identify online pirates.

DMCA Subpoenas at Risk

Both the RIAA and MPA have used these subpoenas to identify owners of pirate sites and individual infringers. The groups would like DMCA subpoenas, as detailed in DMCA §512(h), to remain in their toolbox but there are concerns that a recent court order could hinder their effectiveness.

The case in point doesn’t involve the RIAA or MPA. It’s a dispute between several independent film companies and Internet provider Cox. The latter successfully objected to a DMCA subpoena which sought to obtain the personal details of numerous alleged BitTorrent pirates.

The main contention in this case is whether DMCA subpoenas apply to residential Internet providers. Cox argued against, describing itself as a mere conduit provider benefiting from the DMCA’s §512(a) safe harbor, which does not require ISPs to take anything down, because the ISP doesn’t store content.

For background, a brief summary of the four types of ISPs under 17 U.S.C. § 512.

– §512(a): transitory digital network communications; services that merely pass on bits and bytes
– §512(b): system caching; services that temporarily store (cache) data
– §512(c): storage of information on systems; services that host data
– §512(d): information location tools; services that connect users to online locations (e.g. social media, search engines)

Last year, the court agreed with Cox’s reasoning and quashed the subpoena. The order concluded that DMCA subpoenas typically don’t apply to DMCA §512(a) services, but do apply to other providers that store or link to infringing content directly.

The film companies, including Capstone Studios and Millennium Funding, didn’t give up. After the motion for reconsideration failed, they filed an appeal at the Ninth Circuit Court of Appeals. Among other things, the appeal argued that Cox also falls under DMCA §512(d), as it can remove or disable ‘references or links’ to infringing content.

In addition, the rightsholders also argue that DMCA subpoenas apply to § 512(a) service providers. Therefore, they say, a DMCA subpoena should be valid for Cox.

MPA and RIAA Want to be Heard

The language of the DMCA can be complex at times and open to interpretation. The film companies hope that they can force a breakthrough via the court of appeals, but an adverse ruling that further restricts the scope of DMCA subpoenas is possible too.

The risk of an adverse ruling clearly has the MPA and RIAA worried. They often use these subpoenas to request information from third-party services such as Cloudflare, social media companies, and domain registrars.

The trade groups previously shared their thoughts in an amicus brief. They didn’t take sides in the dispute, but pointed out that the lower court’s ruling was too broad. Specifically, they questioned the part suggesting that IP addresses may never function as links, within the context of the section 512(d) safe harbor.

MPA and RIAA instead argued that section 512(d) services, which could cover reverse proxy providers such as Cloudflare, can link to pirate websites through IP-addresses.

If the district court’s order stands, the validity of MPA and RIAA DMCA subpoenas may be in question. For this reason, the group urged the court to limit its findings to the evidence at hand, without the contested and presumably unneeded IP-address interpretation.

To further reiterate this position, MPA and RIAA asked for speaking time at a hearing scheduled for June. They request 10 minutes of the court’s time, while keeping the available time for the other parties at 15 minutes each.

“MPA and RIAA invest substantial resources to combat online piracy, including through the use of section 512(h) subpoenas. Because infringers hide under aliases and behind proxies, section 512(h) subpoenas are a key tool to combat online infringement and protect the legitimate creative industries,” the groups inform the court.

“Amici intend to use their time to advocate for reversal or a narrow ruling, preventing unintended consequences for subpoenas and issues not before this Court that could have unintended consequences on the carefully-crafted compromise reflected in the DMCA.”

MPA and RIAA brief

amice

The court has yet to rule on this request. While the movie companies don’t object, Cox doesn’t want to extend the hearing by ten minutes, but wants the MPA and RIAA to use the film companies’ time instead.

‘Trolls’

Where the MPA and RIAA call for a more narrow and restricted ruling, an additional third-party has submitted an amicus brief that extends far beyond the legal intricacies of the DMCA’s section 512.

That submission comes from Charles Muszynski, who has been embroiled with movie companies and their attorneys for several years. Their dispute started when the movie companies targeted LiquidVPN, which had been purchased by one of Muszynski’s companies.

That particular legal battle is over, but follow-up litigation in international courts continues to this day. According to Muszynski, the movie companies are of a “copyright troll” group that operates a “criminal racketeering and money laundering sham” that he likens to the criminal Prenda Law operation.

These allegations are not immediately relevant for the DMCA subpoena argument. But, for the matter at hand, Muszynski’s amicus brief concurs and adopts the arguments that were previously made by the Electronic Frontier Foundation (EFF) in this case.

‘Trolling Sham’

amicus

EFF also used the “troll” terminology, albeit in a different context and without directly referring to the movie companies. EFF urged the court not to allow copyright holders to issue §512(h) subpoenas to ISPs who simply transmit data, as this could trigger more coercive settlement requests against internet subscribers.

The amicus curiae briefs from both EFF and Muszynski are still listed as pending, so it’s still unknown whether they will be considered by the Court of Appeals. That said, with many eyes on this case, it’s clear that there’s a lot at stake in the upcoming hearing, and in the ruling that will eventually follow.

A copy of the MPA and RIAA’s request to participate in the oral hearing is available here (pdf). Muszynski’s amicus curiae brief is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Google won’t ditch third-party cookies in Chrome after all

Google will no longer prompt you to disable third-party cookies in Chrome.

Google has made an unusual announcement about browser cookies, but it may not come as much of a surprise given recent events. After years spent tinkering with the Privacy Sandbox, Google has essentially called it quits. According to Anthony Chavez, VP of the company's Privacy Sandbox initiative, Google won't be rolling out a planned feature to help users disable cookies. Instead, cookie support will remain in place as is, possibly forever.

Beginning in 2019, Google embarked on an effort under the Privacy Sandbox banner aimed at developing a new way to target ads that could preserve a modicum of user privacy. This approach included doing away with third-party cookies, small snippets of code that advertisers use to follow users around the web.

Google struggled to find a solution that pleased everyone. Its initial proposal for FLoC (Federated Learning of Cohorts) was widely derided as hardly any better than cookies. Google then moved on to the Topics API, but the company's plans to kill cookies have been delayed repeatedly since 2022.

Read full article

Comments

Figment is another E Ink handheld game console made for text adventures (and maybe more)

E Ink displays offer a paper-like viewing experience that makes them a good fit for eBook readers and digital signage. They consume less power than LCD or AMOLED screens, emit no light, and can be viewed using ambient light only. But they also tend to …

E Ink displays offer a paper-like viewing experience that makes them a good fit for eBook readers and digital signage. They consume less power than LCD or AMOLED screens, emit no light, and can be viewed using ambient light only. But they also tend to have much lower screen refresh rates than other display technologies […]

The post Figment is another E Ink handheld game console made for text adventures (and maybe more) appeared first on Liliputing.

Taxes and fees not included: T-Mobile’s latest price lock is nearly meaningless

T-Mobile makes 5-year price guarantee after refusing to honor lifetime price lock.

T-Mobile is making another long-term price guarantee, but wireless users will rightfully be skeptical since T-Mobile refused to honor a previously offered lifetime price lock and continues to fight a lawsuit filed by customers who were harmed by that broken promise. Moreover, the new plans that come with a price guarantee will have extra fees that can be raised at any time.

T-Mobile today announced new plans with more hotspot data and a five-year price guarantee, saying that "T-Mobile and Metro customers can rest assured that the price of their talk, text and data stays the same for five whole years, from the time they sign up." The promise applies to the T-Mobile "Experience More" and "Experience Beyond" plans that will be offered starting tomorrow. The plans cost $85 or $100 for a single line after the autopay discount, which requires a debit card or bank account.

The price-lock promise also applies to four new Metro by T-Mobile plans that launch on Thursday. T-Mobile's announcement came three weeks after Verizon announced a three-year price lock.

Read full article

Comments

Harvard sues to block government funding cuts

Suit claims the funding freeze violates First Amendment, Title VI procedures.

On Monday, Harvard University filed a lawsuit that it hopes will end the federal government's hold on over $2 billion of research funds destined for the university's faculty. The suit claims that the government's demands for input on Harvard's hiring and admissions violate the university's First Amendment rights, and that the funding freeze hasn't followed the procedures laid out in federal law.

Earlier in April, the government sent a letter to Harvard demanding various changes, from altering university governance to enforcing a completely undefined "viewpoint diversity" on hiring and admissions. Failing to agree, the government suggested, would place the financial relationship between the government and Harvard at risk. Harvard responded with a strongly worded refusal and, by the end of the day, saw the government put over $2 billion in research funding on hold. Harvard was not told how long the hold would last or what exactly was needed to lift it.

The lawsuit seeks to reverse the hold. Harvard argues that there are two reasons the court should restore the flow of research money.

Read full article

Comments