Sunday, June 19, 2011

Sega hack hits 1.29 million users

Sega has confirmed that the personal data of 1.29 million of its customers was stolen in an attack on its systems.

It comes after the computer games firm said on Friday that e-mail addresses and dates of birth stored on the Sega Pass database were accessed by hackers.

However, Sega continues to say that payment information, such as credit card numbers, remained safe.

Sega spokeswoman Yoko Nagasawa said: "We are deeply sorry for causing trouble to our customers."

She added: "We want to work on strengthening security."

Ms Nagasawa added that it was not yet known when the Sega Pass online network could be restarted.

'Investigation'

In an e-mail sent to Sega Pass users on Friday, the company wrote: "Over the last 24 hours we have identified that unauthorised entry was gained to our Sega Pass database.

"We immediately took the appropriate action to protect our consumers' data and isolate the location of the breach. We have launched an investigation into the extent of the breach of our public systems."

Sega explained that it had reset all passwords and urged customers to change their log-on details on other services and websites where they used the same credentials.

It added that password details had not been stored in plain text, suggesting that they may have been secured by some kind of encryption.

Sega is the latest in a line of games companies to suffer hacking and denial of service attacks on their online services.

Nintendo, Sony and several multi-player gaming communities have been hit in recent months.

The hacker group Lulz Security, which has been involved in a number of high profile attacks, including one against Sega rival Nintento, has denied involvement in the Sega case.

Instead it showed some sympathy for the company on its Twitter feed.

"We want to help you destroy the hackers that attacked you. We love the Dreamcast, these people are going down," it said.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

Friday, June 17, 2011

US builds net for cyber war games

The United States government is building its own "scale model" of the internet to carry out cyber war games.

Several organisations, including the defence company Lockheed Martin, are working on prototypes of the "virtual firing range".

The system will allow researchers to simulate attacks by foreign powers and from hackers based inside the US.

More than $500m (�309m) has been allocated by the Department of Defense to develop "cyber technologies".

The National Cyber Range project is being overseen by the Defense Advance Research Projects Agency (Darpa), which was also involved in early network research that led to the internet.

When ready, it will function as a test-bed for defensive and possibly offensive technologies such as network protection systems.

Having a controllable mini-internet would allow researchers to carry-out experiments "in days rather than the weeks it currently takes," Darpa spokesman Eric Mazzacone told the Reuters news agency.

Unlike the real internet, the in-house version could be wiped or reset between tests, explained Mr Mazzacone.

Development of the National Cyber Range is currently in the hands of several organisations, including Johns Hopkins University in Baltimore and Lockheed Martin.

One of their prototypes will be selected to go into operation later in the year.

Act of war

The United States has been gradually increasing funding for internet security-related projects.

In 2008, the US military was the subject of a serious cyber attack when part of its network became infected by a worm known as agent.btz.

President Obama, in May 2009, declared the cyber threat to be one of the "most serious" challenges facing the country.

Since then, his government claims to have been the subject of several attempted attacks, originating from overseas.

Lockheed Martin, one of the contractors involved in the National Cyber Range project was itself the subject of a security breach in May 2011.

Earlier this month, the Pentagon said it planned to publish proposals to categorise cyber attacks as acts of war.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

Teen hacker stole Lady Gaga songs

Lady Gaga Lady Gaga was one of the artists who had details stolen. <!-- Empty - Wide embedded hyper -->

An 18-year-old computer hacker who stole songs from artists including Lady Gaga has been sentenced to 18 months detention in Germany.

The court heard how the teenager, who called himself DJ Stolen, earned more than 15,000 euros (�13,260) by breaking copyright laws and hacking personal information from a number of singers.

The hacker used phishing emails and Trojan horse software to steal unpublished songs and then offer them for sale on the internet.

Anti-piracy teams in the UK and Germany noticed a growing number of pre-release tracks being leaked much earlier than normal.

Tracks were stolen from Lady Gaga, Justin Timberlake, Leona Lewis, Kesha and Mariah Carey in 2009 and 2010.

Kesha Singer Kesha had private photos stolen from her computer

The teenager, referred to in court as 'Deniz A' because of his age, was also found guilty of downloading explicit private photos from Kesha's computer.

Apology to Gaga

The court in the German city of Duisburg also heard how a letter of apology was published in Daily Bild, a German tabloid newspaper, from the teenager saying:

"Dear Lady Gaga, I am ashamed of what I have done. I did not think about the consequences."

The judge ruled that the teen was "driven more by a desire for recognition than by criminal intent".

The 18-year-old was also ordered to have therapy for an addiction to the internet.

Another hacker, 23, whose name wasn't released, was also given an 18 months suspended sentence.

Jeremy Banks, from the International Federation of the Phonograhic Industry (IFPI), which helped with the investigation said the sentences acted as a "deterrent" to others.

He said the crimes caused "huge damage to artists and record companies".



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

Virgin tackles infected customers

About 1500 customers of internet service provider Virgin Media have been warned that their PCs are infected with a malicious virus.

The targeted customers had fallen victim to the SpyEye trojan that steals logins for online bank accounts.

Letters have been sent to those affected, giving them advice on how to clean up their computers.

Virgin is understood to be the first UK ISP to give specific warnings to customers about viruses on their PCs.

The other major service providers tackle malware at the individual computer level, offering free anti-virus software and advice.

Virgin said it had received information about the SpyEye infections from the Serious and Organised Crime Agency.

Early warning

The company stressed that it had not been monitoring user activity, rather some of their customers' IP addresses were found by law enforcement while investigating criminal botnets.

"It's a small number compared to the four million customers we have," said a spokesman, "but regardless of that, because of the seriousness it's still important to communicate with our customers."

The letters stress the seriousness of the situation and urge customers to update their security software and scan their machine to find and remove the malicious program. Alternatively, customers can sign up for a help service that allows a Virgin to remotely find and fix problems.

The spokesman added that the Virgin campaign started in August 2010 and since then it had sent letters to "several thousand" customers about a serious infection on their home computer.

"The category we are looking at are the ones that put our customers at most risk or the ones that will steal from them," he said.

SpyEye first appeared in early 2010 and has steadily gathered victims ever since. Some machines are infected via booby-trapped webpages or by tricking people into clicking on links that lead to the trojan being installed.

The SpyEye trojan and its many variants are being produced with a software kit that allows novices to put together their own versions of the malware. The kit, which costs $500 (�310), also comes with a tool to help control all the PCs that are infected.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

Thursday, June 16, 2011

Duke Nukem PR firm publicly axed

US games publisher Take 2 has parted company with public relations firm The Redner Group, following Twitter comments concerning Duke Nukem Forever.

Redner's contract was terminated after it said journalists who gave the game a poor review would be blacklisted.

Take 2's subsidiary, 2K Games, said it did not share "or endorse" the views.

Duke Nukem Forever, which has been in development since 1998, was criticised for its embarrassing character, dated design and poor controls.

The row erupted when Redner Group's founder, Jim Redner, published an angry tweet as the negative reviews of Duke Nukem Forever started to come in.

"Too many went too far with their reviews...we r reviewing who gets games next time and who doesn't based on today's venom," he tweeted.

The threat was quickly picked up by blog and gaming sites across the world, accusing Take 2 of strong arm tactics.

A day later, 2K Games sacked Redner Group and tweeted that it maintained "a mutually respectful relationship with the press and will continue to do so. We don't condone @TheRednerGroup's actions at all".

The most recent message on Redner's Twitter feed reads: "Again, I want everyone to know that I was acting on my own. 2K had nothing to do with this. I am so very sorry for what I said."

Classic reworked

First announced in 1998, Duke Nukem Forever was cancelled in 2009 when its developer - 3D Realms - collapsed.

"Start Quote

Too many went too far with their reviews...we r reviewing who gets games next time and who doesn't based on today's venom "

End Quote Tweet Jim Redner

It was subsequently resurrected by US developer Gearbox Software which released the game on PC, PS3 and XBox 360.

It now holds the record for the longest time between game releases. That was formerly held by StarCraft, which had a 12-year hiatus.

The series had legions of fans who waited in expectation of the next release.

However, while expectations were high, the final product disappointed most reviewers.

US game website 1Up said the game was one "not even the most maladjusted 13-year-old could love", IGN described it as a "muddled, hypocritical exercise in irritation" although compensated for by "solid shooting mechanics", and Gamespot UK said "it turns a famous gaming icon into an embarrassment".

Rik Henderson, a former co-presenter of Gamesmaster and writer with Pocket Lint, said that he was surprised at such a public statement by Jim Redner, but not the sentiment expressed.

"This sort of thing happens behind the scene regularly from a number of different companies; I've encountered this on many an occasion, naming no names," he told BBC News.

"Considering the number of games that come out every year, not everything is an A list title.

Mr Henderson said it was common practice for firms not to send out review code until a game was in the shops and journalists who broke such gentleman's agreements would find themselves down the list when it came to receiving future games.

However, he added that a game like Duke Nukem Forever had been so hyped up that this course of action was not a realistic option.

"That said, I'm still waiting for my review code," he quipped.

Take 2 refused to make any further comment on the ongoing row when contacted by the BBC.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

Hackers attack Malaysian websites

Hackers have attacked dozens of government websites in Malaysia, days after a hacking group criticised the country over censorship.

Malaysian officials said attempts had been made to hack 51 websites, and at least 41 had been disrupted.

The "Anonymous" group of hackers had threatened Malaysia with an attack this week, accusing the government of blocking some websites.

No group has yet said they carried out the attack.

But Anonymous said in an earlier web post that Malaysia's censoring of films and television shows and its blocking of file-sharing websites amounted to a denial of human rights.

The exact nature of the attacks was not immediately clear, and it may be that they were denial of service overloads, rather than hacking intrusions into the computer servers.

The main Malaysian government portal was among the websites that was targeted, and it was still inaccessible on Thursday.

The Malaysian Communications and Multimedia Commission said attacks on websites with the .gov.my domain began late on Wednesday.

"We do not expect the overall recovery to these websites to take long as most websites have already recovered from the attack," the commission said in a statement.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

HP sues Oracle over chip dispute

Hewlett Packard (HP) is suing Oracle over a chip dispute in the latest clash between the two former allies.

The lawsuit accuses Oracle of behaving illegally in deciding that future versions of its database software will not support one line of HP servers.

The servers use an Itanium chip that Oracle insists is being phased out.

HP claim that Oracle's decision to stop the support will hurt its clients - Oracle has denied the claims, calling the lawsuit "malicious and meritless".

Relations between the two companies have deteriorated in the past year.

HP's former boss, Mark Hurd, joined Oracle almost a year ago.

HP had then threatened court action, claiming that Oracle would "exploit the knowledge of HP's strengths and weaknesses" as a result of hiring Mr Hurd.

'Strong-arm tactics'

"Start Quote

The silence from Oracle is deafening. We are very disappointed it has come to this"

End Quote Bill Wohl Hewlett Packard

The current dispute is the result of a combination of factors.

It centres around the future of the Itanium chip manufactured by Intel and the growing rivalry between the two companies in the field of server hardware market.

In March, Oracle announced that its database software would no longer support HP servers that use the chip.

It said it had evidence that Intel was planning to phase out the product, hence it did not plan to provide software that supports the processor - something Intel has denied.

But Oracle said in a statement that: "Intel's plans to end-of-life Itanium will be revealed in court".

HP says Oracle's real concern is to try to force customers to buy the Sun Microsystems servers manufactured by it.

The company claimed Oracle was using "strong-arm tactics to coerce customers into replacing their HP servers with Sun servers they do not want".

HP said it had sent a legal notice to Oracle last week, but a lack of response from Oracle had left it with no choice but to take legal action against its former ally.

"The silence from Oracle is deafening. We are very disappointed it has come to this," said Bill Wohl of HP.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

Wednesday, June 15, 2011

LulzSec &#39;takes down&#39; CIA website

The hacker group Lulz Security has claimed it has brought down the public-facing website of the US Central Intelligence Agency.

The alleged hack on CIA.gov occurred on the same day the group opened a telephone request line so its fans could suggest potential targets.

On its Twitter feed, the group wrote: "Tango down - cia.gov - for the lulz".

The CIA website was inaccessible at times on Wednesday but the hack claim could not immediately be verified.

It was unclear if the outage was due to LulzSec's efforts or to the large number of internet users trying to check the site.

'Denial of service'

LulzSec has risen to prominence in recent months by attacking Sony, Nintendo, several US broadcasters, and the public-facing site of the US Senate.

On Wednesday it claimed to have launched denial of service attacks on several websites as a result of opening its "request line", although it gave no details.

The claim regarding the CIA.gov website emerged a few hours later. A CIA spokesman told the Associated Press the agency was "looking into" the report.

LulzSec publicised the details of its telephone hotline on its Twitter feed.

Callers to the US number are met with a recorded message, in a heavy French accent, by an individual calling himself Pierre Dubois.

While the 614 area code appears to relate to the state of Ohio, it is unlikely that this is its real location.

Lulz Security said it had used distributed denial-of-service attacks (DDoS) against eight sites suggested by callers.

It also claimed to have hit the websites of gaming magazine The Escapist, and multiplayer games EVE Online and League of Legends.

DDoS attacks typically involve crashing a website by inundating it with requests from computers under the attacker's control.

Protest groups

Little is known about Lulz Security, other than their apparent "hacktivist" motivation.

The organisations and companies that it targets are often portrayed as having acted against the interests of citizens or consumers.

Its high-profile attack on SonyPictures.com exposed the company's ongoing inability to secure users' personal data, LulzSec claimed.

Along with Anonymous, LulzSec has raised the profile of hacker groups as a potential threat to online services.

Hacktivists see their role as staging valid protests in the most high profile way possible, according to Peter Wood, founder of security consultancy First Base.

"The things they are exploiting at the moment are the sort of mistakes that organisations seem to have been making ever since they connected to the internet.

"Finally there are some players out there who are using them as a means to protest. Whether everyone agrees with them is a different question."



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

LulzSec opens hack request line

The hacker group Lulz Security has opened a telephone request line so its fans can suggest potential targets.

It claims to have launched denial of service attacks on several websites as a result, although it did not detail which ones.

The unspecified hacks formed part of a wave of security breaches that the group called Titanic Takeover Tuesday.

LulzSec has risen to prominence in recent months by attacking Sony, Nintendo and several US broadcasters.

The group publicised the telephone hotline on its Twitter feed.

Callers to the US number are met with a recorded message, in a heavy French accent, by an individual calling themself Pierre Dubois.

While the 614 area code appears to relate to the state of Ohio, it is unlikely that this is its real location.

Lulz Security said it had used distributed denial of service attacks (DDoS) against eight sites suggested by callers.

It also claimed to have hit the websites of gaming magazine The Escapist, and multiplayer games EVE Online and League of Legends.

DDoS attacks typically involve crashing a website by inundating it with requests from computers under the attacker's control.

It is unclear, in this instance, if LulzSec went beyond overloading the sites and sought to gain access to information stored on their servers.

Protest groups

Little is known about Lulz Security, other than their apparent "hacktivist' motivation.

The organisations and companies that it targets are often portrayed as having acted against the interests of citizens or consumers.

Its high profile attack on SonyPictures.com exposed, Lulz claimed, the company's ongoing inability to secure users' personal data.

Along with Anonymous, LulzSec has raised the profile of hacker groups as a potential threat to online services.

Hacktivists see their role as staging valid protests in the most high profile way possible, according to Peter Wood, founder of security consultancy First Base.

"The things they are exploiting at the moment are the sort of mistakes that organisations seem to have been making ever since they connected to the internet.

"Finally there are some players out there who are using them as a means to protest. Whether everyone agrees with them is a different question."



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials

Google ramps up speed of search

Google has made changes to its search engine as it strives to get consumers the information they want faster.

Its new Instant Pages system will shave between two to five seconds off the time it takes for a web page to load, the company said.

It is also planning to offer voice-activated and enhanced image searching.

Google, which processes one billion requests every day, said search remained its core focus.

The firm still dominates the market although Microsoft's Bing is slowly eating into its share.

Bing's US searches rose to 14 percent in May from 12 percent at the end of 2010. It also powers searching on Yahoo, which has 15.9 percent of the market while Google's share slipped to 66 percent from 67 percent, according to measurement firm comScore

Instant Pages works by pre-loading the page associated with the top search result in the background as a user decides what to click on.

Google relies on its relevance technology to confidently predict the number one result a user will pick.

That means when the top pre-rendered link is chosen, the web page opens instantaneously.

The search giant said it typically takes around five seconds for a web page to launch once someone clicks on it.

"We at Google will not be happy until we make the Web as easy to flip through as a magazine," Google fellow Amit Singhal said at the Inside Search event in San Francisco.

"We are obsessed with speed. We often say speed is still the killer app," he added.

During a demo at the event the Washington Post home page loaded immediately with Instant Pages, compared to 3.2 seconds without it.

Last year the Silicon Valley firm introduced Google Instant which gives users results to queries while queries are being typed into the search box.

Positive impact

"What we have observed is that every time we shave 15 milliseconds from the speed, users search more and more, said Mr Singhal.

Over the next couple of weeks Instant Pages will be made available to users of Google's Chrome web browser.

The company said it would open access to the software code so other browsers such as Firefox and Internet Explorer could also incorporate the feature.

"Making it ubiquitous will make people go wow, Google just made the web faster," said Matt Rosoff, west coast editor of Business Insider.

"As far as Google is concerned it is another thing that will continue to draw people to Google and make sure they don't leave for another competitor like Microsoft."

Say it

On mobile, Google is offering an alternative to the traditional keyword search with icons linked to common searches such as restaurants, coffee shops and bars.

It said that the move was prompted by a rise in searches involving nearby places.

The company is also preparing to introduce voice-activated search for personal computers. The feature already exists on mobile devices.

The tool, represented by a small microphone icon in the far right of the Google search box, will appear over the coming days.

In a demonstration, reporters were shown that the search engine understands the difference between Worcester, Massachusetts, and Wooster College - words that sound the same but are spelt differently.

"Arguably speaking is the most natural way we learn to express our needs. It remains to be seen what kinds of usage scenarios may be important when it comes to the desktop. As the data comes in we will learn (that) over time," said Mike Cohen, manager of speech technology at Google.

According to Google, voice search traffic has grown six-fold over the past year, and every day users speak about two years' worth of speech into the system.

The company also revealed during its presentation that as many as 230 billion words a day are entered into the language bank system, helping to improve the way it deals with accents, pronunciations and colloquialisms.

The speech recognition tool will only be available on Google's Chrome web browser for now but executives said they hope other software makers would eventually implement the technology.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Settlement Statement | WordPress Tutorials