(g+) IAM-Tools im Vergleich: Keycloak oder Authentik?

Keycloak hat ausgereifte Enterprise-Funktionen, Authentik intuitive Bedienung und einen schnellen Einstieg. Wir zeigen, wann welches Tool besser ist. Eine Analyse von Philip Lorenz (Software, OpenID)

Keycloak hat ausgereifte Enterprise-Funktionen, Authentik intuitive Bedienung und einen schnellen Einstieg. Wir zeigen, wann welches Tool besser ist. Eine Analyse von Philip Lorenz (Software, OpenID)

35 Jahre Total Recall: “Schaff deinen Hintern auf den Mars”

Das sagt die Hauptfigur in Paul Verhoevens Science-Fiction-Film Total Recall zu sich selbst. Der Film ist ein Klassiker, den man mehrmals anschauen kann. Von Peter Osteried (Science-Fiction, Film)

Das sagt die Hauptfigur in Paul Verhoevens Science-Fiction-Film Total Recall zu sich selbst. Der Film ist ein Klassiker, den man mehrmals anschauen kann. Von Peter Osteried (Science-Fiction, Film)

Anzeige: Das ultimative Wissensbundle für die LFCS-Zertifizierung

Dieses E-Learning-Paket mit fünf spezialisierten Kursen und einem Bonuskurs bietet die ideale Vorbereitung auf die LFCS-Zertifizierung und vermittelt praxisorientiertes Wissen für die Verwaltung von Linux-Systemen. (Golem Karrierewelt, Server-Applikati…

Dieses E-Learning-Paket mit fünf spezialisierten Kursen und einem Bonuskurs bietet die ideale Vorbereitung auf die LFCS-Zertifizierung und vermittelt praxisorientiertes Wissen für die Verwaltung von Linux-Systemen. (Golem Karrierewelt, Server-Applikationen)

After BlackSuit is taken down, new ransomware group Chaos emerges

As BlackSuit’s dark web site goes dark, Chaos is already around to pick up the slack.

Hot on the heels of a major ransomware group being taken down through an international law enforcement operation comes a new development that highlights the whack-a-mole nature of such actions: A new group, likely comprised of some of the same members, has already taken its place.

The new group calls itself Chaos, in recognition of the .chaos name extension its ransomware stamps on files it has encrypted and the “readme.chaos[.]txt” name given to ransom notes sent to victims. Researchers at Cisco’s Talos Security Group said Thursday that since Chaos emerged in February, it has engaged in “big-game hunting”—meaning attacks designed to extract hefty payments—that have mainly targeted organizations in the US and, to a lesser extent, the UK, New Zealand, and India. Talos said it recently observed the group demanding a ransom of about $300,000.

Walking in your footsteps

In exchange for paying the demanded ransom, victims get a pinky swear that they’ll receive a decryptor and a detailed report of the vulnerabilities the group members found in the victim’s network and that the group will delete all the data in its possession. Victims who refuse to pay face the threat of never getting their data unlocked, having data publicly disclosed, and being subjected to distributed denial-of-service attacks.

Read full article

Comments

Starlink kept me connected to the Internet without fail—until Thursday

“Starlink went down across the entire front.”

A rare global interruption in the Starlink satellite Internet network knocked subscribers offline for more than two hours on Thursday, the longest widespread outage since SpaceX opened the service to consumers nearly five years ago.

The outage affected civilian and military users, creating an inconvenience for many but cutting off a critical lifeline for those who rely on Starlink for military operations, health care, and other applications.

Michael Nicolls, SpaceX's vice president of Starlink engineering, wrote on X that the network outage lasted approximately 2.5 hours.

Read full article

Comments

North Korean hackers ran US-based “laptop farm” from Arizona woman’s home

North Korea made millions from the scheme.

Christina Chapman, a 50-year-old Arizona woman, has just been sentenced to 102 months in prison for helping North Korean hackers steal US identities in order to get "remote" IT jobs with more than 300 American companies, including Nike. The scheme funneled millions of dollars to the North Korean state.

Why did Chapman do it? In a letter sent this week to the judge, Chapman said that she was "looking for a job that was Monday through Friday that would allow me to be present for my mom" who was battling cancer. (Her mother died in 2023.) But "the area where we lived didn't provide for a lot of job opportunities that fit what I needed. I also thought that the job was allowing me to help others."

She offered her "deepest and sincerest apologies to any person who was harmed by my actions," thanked the FBI for busting her, and said that when she gets out of prison, she hopes to "pursue the books that I have been working on writing and starting my own underwear company."

Read full article

Comments

Copyright Lawsuit Accuses Meta of Pirating Adult Films for AI Training

Adult film producers Strike 3 Holdings and Counterlife Media have filed a significant copyright infringement lawsuit against tech giant Meta. A complaint filed at a California federal court alleges that their films were downloaded via BitTorrent for AI training purposes. With at least 2,396 movies at stake, potential damages could exceed 350 million dollars.

From: TF, for the latest news on copyright battles, piracy and more.

moviegenOver the past two years, rightsholders of all kinds have filed lawsuits against companies that develop AI models.

Most of these cases allege that copyrighted works are used to train models without authorization. This applies to text, but also to images and video.

A new lawsuit filed at a California federal court by two adult production companies focuses on a specific type of video downloaded from pirate sources.

Meta Sued for Massive Copyright Infringement

The complaint was filed by Strike 3 Holdings and Counterlife Media, which are known for popular adult brands including Vixen, Tushy, Blacked, and Deeper. Strike 3 is the most active copyright litigant in the United States, mostly targeting individual BitTorrent pirates.

The case against Meta also centers on unauthorized BitTorrent sharing but on a different scale. According to the adult companies, Meta downloaded at least 2,396 of their films since 2018, allegedly to aid their AI training.

“Defendant downloaded Plaintiffs’ Works from pirate sources for purposes of acquiring content to train its Meta Movie Gen, Large Language Model (“LLaMA”), as well as various other Meta AI Models that rely on video training content,” the complaint reads.

The complaint

lawsuit meta

The adult producers fear that this training may ultimately result in AI models that can create similar “Hollywood grade” films at a lower cost.

“By training so specifically on Plaintiffs’ Works, Meta’s AI Movie Gen may very well soon produce full length films with Plaintiffs’ identical style and quality, which other real world adult studios cannot replicate”

Tit for Tat

Meta allegedly downloaded the copyrighted works without permission and also stands accused of uploading them to third parties, who participated in the same BitTorrent swarms. Plaintiffs allege this is backed up by data from their proprietary in-house tracking software VXN Scan.

IP Address evidence

ips

BitTorrent transfers rely on a “tit for tat” algorithm where participants are rewarded for sharing content with others, as that significantly increases their download speeds. According to the complaint, Meta allegedly continued sharing pirated files for this purpose.

“Defendant was specifically aware of this issue and, discovery will likely show, is the reason why Defendant elected to continuously distribute Plaintiffs’ content as opposed to just purchasing a subscription or modifying its BitTorrent clients to download only,” the complaint notes.

“Meta made the deliberate choice to seed Plaintiffs’ motion pictures in order to capitalize on faster download speeds so it could infringe other content faster.”

Corporate IP Addresses and Hidden Datacenters

The adult producers discovered the alleged infringements after Meta’s BitTorrent activity was revealed in a lawsuit filed by several book authors. In that case, Meta admitted that it obtained content from pirate sources.

This prompted Strike 3 and Counterlife Media to search for Meta-linked IP addresses in their archive of collected BitTorrent data. This scan revealed that forty-seven IP addresses, identified as owned by Facebook, allegedly infringed their copyrighted works.

IP address ownership is linked through MaxMind’s database, and a list of thousands of alleged infringements from these addresses is provided as evidence.

MaxMind data

maxmind

The book authors lawsuit also revealed that Meta allegedly used “off-infra” IP addresses to conceal its BitTorrent activities. The adult producers argue that these stealth IPs were also used to pirate their works, identifying several they believe are linked to the activity.

Correlations between Meta IPs and third-party servers identify seven IP address ranges that show correlational activity. This includes similar download patterns as well as large-scale copyright infringement.

“These correlations also quantify that both the ‘off-infra’ as well as the Meta Corporate IP addresses act consistently in non-human patterns and that the acquisition of this content is for AI training data and not for personal use.”

Hidden datacenters?

hidden

Adding to these allegations, the complaint also identifies a Facebook employee who used a Comcast IP address to download content. This person, whose name is redacted, allegedly shared content via Meta corporate IPs and the stealth IP addresses.

Damages Up to $359 Million

Based on these allegations, Strike 3 Holdings and Counterlife Media accuse Meta of both direct and secondary copyright infringement, requesting a trial by jury.

The rightsholders seek statutory damages, which, for willful copyright infringement, could mean $150,000 per work. With 2,396 movies at stake, potential damages could reach $359 million.

Meta has yet to respond to the lawsuit, and all allegations have yet to be proven. This could potentially include a technical inspection of the VXN Scan tracking software, which is also used in many lawsuits against individual BitTorrent users.

Strike 3 has a history of settling copyright disputes out of court, so that’s a possible outcome here as well.

A copy of the complaint filed by Strike 3 Holdings and Counterlife Media at the U.S. District Court for the Northern District of California is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.