Monday, May 9, 2011

TalkTalk offers website blocking

Internet provider TalkTalk is to give customers the option of filtering malicious or offensive material out of their broadband service.

The company claims it is the first major ISP to offer centralised blocking at server level.

As well as stopping malicious software, parents will be able to prevent their children accessing adult material.

Security professionals have questioned whether the service will be able to react fast enough to new threats.

Smart scan

Conventional systems for blocking internet content rely on security software installed on users' PCs.

TalkTalk's Home Safe runs on the company's central computer system and sits between the web and individual home connections.

Its anti-virus system works by scanning a site that someone wants to visit to see if it harbours malicious programs. Those found to be clean will be put on a "white list" for 24 hours.

A spokesman for TalkTalk said that the system was discriminating enough to be able to block individual adverts on web pages that were booby-trapped with malware but would still let a user interact with the rest of that page.

To make the system work, TalkTalk has to scan all websites that its users visit. However the company said that it does not record details that could identify individual customers, such as their IP address.

No pornography

Parents worried about their children seeing adult material will be able to log on to a web page and define their own content filters.

Sites containing pornography or online gambling can be blocked completely.

There will also be the option to put timed locks on certain websites, such as Facebook or game portals, to stop children viewing them when they should be doing school homework.

"Start Quote

The 'homework time' option is ingenious although not likely to be such a hit with the kids"

End Quote Charlotte Nunes USwitch

Similar PC-based systems have been criticised for their overly-broad filtering - often stopping young people accessing legitimate research sites.

TalkTalk said that its service would be able to tell the difference between sites that are wholly about a subject and ones that merely mentioned it.

For instance, parents who block sites that promote self harm might be happy for their children to see ones that educate about the issue.

Charlotte Nunes, a spokesperson for comparison site USwitch, called Home Safe was a "useful and well thought out freebie".

"Controlling security centrally from the network rather than on each individual device should make it far simpler for households to protect themselves against unwanted content," said Ms Nunes.

"The 'homework time' option is ingenious although not likely to be such a hit with the kids," she added.

False positive

Some security experts have questioned the ability of TalkTalk's system to protect against malware.

Rik Ferguson, senior security researcher at Trend Micro said that larger sites, frequently hit by threats, could present a problem.

He suggested that the 24-hour "all clear" white list might not work for services such as Facebook.

"The frequency with which we see rogue apps popping up on Facebook is much greater than one every 24 hours," he said.

Mr Ferguson suggested that a useful addition would be to scan outbound internet traffic, to spot when infected PCs are sending spam or taking part in large-scale web attacks.

TalkTalk's parental protection system would likely prove to be a small, but surmountable challenge to tech savvy teenagers, added Mr Ferguson.

He pointed out that many would resort to their mobiles in order to reach banned sites.

"There are a lot of ways around it," he said. "That's the big challenge for parents and security firms."

TalkTalk's spokesman insisted that its filters were not intended intended as a cure-all.

"This is the most robust system that's available but what it's not is a substitute for good parenting," he said.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Friday, May 6, 2011

Hacker group denies Sony attack

Online vigilante group Anonymous has denied being behind an attack that led to the theft of personal data from around 77 million PlayStation users.

The secretive "hacker collective" had earlier been singled-out by Sony as the possible guilty party.

But a posting on Anonymous' blog said: "Let's be clear, we are legion, but it wasn't us. You are incompetent Sony."

The electronics giant has offered compensation to users who suffer fraud as a result of the theft.

Earlier this week, Sony sent a letter to the US Congress accusing Anonymous of being involved in the attack.

"Sony has been the victim of a very carefully planned, very professional, highly sophisticated criminal cyber attack," said the letter, signed by Sony America boss Kazuo Hirai.

He said that Sony had found a file planted on its network labelled "Anonymous" and bearing the group's slogan, "We are legion".

But Anonymous said that it had been framed by online thieves to throw law enforcement off track.

"Start Quote

Whoever broke into Sony's servers... clearly wanted Anonymous to be blamed for the most significant digital theft in history"

End Quote Anonymous' statement

The group, which made headlines in December 2010 after it used software freely available over the internet to temporarily bring down the sites of MasterCard and Visa, said that its members were not credit card thieves.

"Whoever broke into Sony's servers to steal the credit card info and left a document blaming Anonymous clearly wanted Anonymous to be blamed for the most significant digital theft in history," the statement read.

Revenge attack

According to Sony, the group targeted the company and facilitated the hacking in retaliation for the electronics giant's recent legal action against George Hotz.

The US-based hacker was accused of breaking copyright laws by devising a way to change the operating system on Sony PlayStations.

The case was eventually settled after Mr Hotz agreed not to repeat such behaviour in future.

Sony claimed that the massive data theft also coincided with a distributed denial-of-service (DDoS) attack on its website by Anonymous.

Denial-of-service attacks take servers down by overwhelming them with traffic.

But Anonymous denies all responsibility for allowing access to online gamers' data, including millions of credit card numbers.

"No one who is actually associated with our movement would do something that would prompt a massive law enforcement response," said the group's statement.

"On the other hand, a group of standard online thieves would have every reason to frame Anonymous in order to put law enforcement off the track."

Apologies and compensation

Meanwhile, Sony's CEO Sir Howard Stringer has apologised for the first time to all those affected by the security breach.

"Start Quote

To date, there is no confirmed evidence any credit card or personal information has been misused"

End Quote Sir Howard Stringer Sony's CEO

In a blog post on the PlayStation website, he wrote that the company was working on heightening security measures to "protect your information better than ever".

He also offered compensation to US PlayStation Network and Qriocity users in the form of a year-long free enrolment in an identity protection programme.

The programme includes a $1m (�608,000) identity theft insurance policy for each user, should they become victims of any future cyber-attacks.

In a bid to reassure Sony's customers and regain their trust, Mr Stringer added that "to date, there is no confirmed evidence any credit card or personal information has been misused, and we continue to monitor the situation closely."

Many PlayStation Network users have been upset about the company taking two days after discovering the theft before contacting law enforcement and almost a week to inform the people affected by the breach, after it was first discovered on 20 April.

Targeting Viacom

After publishing its statement regarding Sony, Anonymous also issued a warning to entertainment giant Viacom.

The group said that because of Viacom, "thousands of people have undergone the unfortunate experience of receiving falsely-claimed copyright infringements".

Viacom is known for taking aggressive legal action to get its content removed from video sharing websites.

In 2007, the company attempted to sue YouTube for $1bn (�608m).

As part of its counter-action, YouTube's parent company Google accused Viacom of uploading some videos itself and manipulating them to look like amateur copies.

The case against YouTube was eventually thrown out.

In its statement, Anonymous wrote: "Anonymous demands from Viacom a public press release to admit and apologise for the fraud and crimes that they have committed.

"Anonymous also demands that Viacom allows everyone throughout the internet full rights to be able to express themselves.

"Lastly, we, the citizens of the world, demand that Viacom stops their attempts to gather personally identifying information such as IPs, which are of no relevance to them."



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Flexible smartphone set for debut

A prototype flexible smartphone made of electronic paper has been created by Canadian researchers.

The PaperPhone can do all the things bulkier smartphones can do such as make and take calls, send messages, play music or display e-books.

The gadget triggers different functions and features when bent, folded and flexed at its corners or sides.

"Everything is going to look and feel like this within five years," said creator Dr Roel Vertegaal.

The device emerged from a collaboration between researchers at the Human Media Lab at Queen's University, Canada and Arizona State University's Motivational Environments Research group.

"This computer looks, feels and operates like a small sheet of interactive paper," said Dr Vertegaal in a statement. "You interact with it by bending it into a cell phone, flipping the corner to turn pages, or writing on it with a pen."

The millimetres thick prototype is built from the same e-ink technology found in Amazon's Kindle e-book reader and this is bonded to flex sensors and a touchscreen that interprets drawings and text written on it.

The prototype was created in order to investigate how easy it is for people to use bending and flexing to control such a device. The early version is connected to a laptop to interpret and record the ways test subjects flexed it.

Dr Vertegaal predicted that widespread use of larger versions of the PaperPhone might make the paperless office a reality.

The PaperPhone prototype will be on display on 10 May at the Computer Human Interaction conference in Vancouver.

At the same show the research team plan to show off a device they called the Snaplet. This device takes on different functions depending on how it is worn and bent.

The wristband is a watch when convex, a PDA when flat and a phone when concave.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Thursday, May 5, 2011

Apple acts on iPhone tracking bug

Apple has released a software update to fix a glitch that saw iPhones and iPads secretly record owners' movements.

The problem came to light when security researchers found a hidden file on the devices containing a record of everywhere they had been.

Used with certain software, the file could generate a map of all a person's movements with the phone.

Apple denied that it has used the information to track user location and blamed a bug in the software.

No conspiracy

The update, which is available through the iTunes store, cuts the amount of stored data to just a week and no longer transfers it to the owner's computer when the phone is connected.

And if users disable the location services setting on their iPhone or iPad, it will stop collecting data completely.

Permission for the tracking was given by users, albeit hidden away in the terms and conditions for the iTunes store.

The data was logged via cell towers and wi-fi access points.

The storage of the data was brought to light in a blog post from researchers Alasdair Allan and Peter Warden.

At the time Mr Allan said that he did not think there was "any sort of conspiracy going on".

"However, we're both worried about this level of detailed location data being out there in the wild. While the cell phone operators already have this data, it takes a court order to obtain it from them. You can now do the equivalent by simply leaving your iPhone in a bar. That doesn't seem right to me."

Mobile privacy

In response Apple said: "The iPhone is not logging your location, rather it's maintaining a database of wi-fi hotspots and cell towers around your current location, some of which may be located more than 100 miles away from your iPhone to help your phone rapidly and accurately calculate its location when requested."

It said it was collecting some location data with the goal of providing iPhone users with an "improved traffic service in the next couple of years".

Many smartphone owners chose to voluntarily opt in to location tracking services such as Foursquare and Mobile Me but there is rising concern about how companies use such data.

Later this month Apple and Google are due to testify at a US senate hearing on mobile privacy as the firms come under increasing pressure to reveal how they collect and store location data.

Smartphones running Google's Android operating system also store data but it is an opt-in service, according to the firm.

A lawsuit has been filed against Apple in Florida last week, accusing the firm of violating privacy laws. Two women in Michigan are also suing Google over data collected by Android devices.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Wednesday, May 4, 2011

Sony blames vigilantes for breach

Sony has blamed the online vigilante group Anonymous for indirectly allowing the security breach that allowed a hacker to gain access to the personal data of more than 100m online game users.

In a letter to Congress, Sony said its network was breached at the same time as it was defending itself against a denial-of-service attack from Anonymous.

Denial-of-service attacks take servers down by overwhelming them with internet traffic.

Sony said that it had been the target of attacks from Anonymous because it had taken action against a hacker in federal court in San Francisco.

'We are legion'

It added that the attack that stole the data had been launched separately while it was distracted by the denial-of-service attack, and that it was not sure whether the organisers of the two attacks were working together.

Sony said that it had discovered on Sunday a file planted on one of its servers named Anonymous and featuring the line "We are legion", which is a phrase used by the group.

The vigilante group has denied being involved in the data theft.

In the letter to members of the House Commerce Committee, Kazuo Hirai, chairman of Sony Computer Entertainment America, defended the way that his company had dealt with the breach.

Sony discovered a breach in its Playstation video game network on 20 April but did not report it to US authorities for two days and only informed consumers on 26 April.

"Throughout the process, Sony Network Entertainment America was very concerned that announcing partial or tentative information to consumers could cause confusion and lead them to take unnecessary actions if the information was not fully corroborated by forensic evidence," the letter said.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Intel unveils 22nm Ivy Bridge processor

Intel has unveiled its next generation of microprocessor technology, code named Ivy Bridge.

The upcoming chips will be the first to use a 22 nanometer manufacturing process, which packs transistors more densely than the current 32nm system.

Intel said it would also be using new Tri-Gate "3D" transistors, which are less power hungry.

Rival chip manufacturers including AMD and IBM are understood to be planning similar designs.

Tri-Gate

The announcement marks a significant step forward in the commercial processor industry, which is constantly striving to build more transistors onto silicon chips.

One of the main measures of its progress is the length of the transistor "gate", measured in nanometers (1nm = 1 billionth of a meter).

A human hair is around 60,000 nm wide. Current best microchip technology features a 32nm gate.

It has been known for a long time that 22nm technology would form the next stage in the evolution of microprocessors.

However, the exact nature of Intel's offering has been a closely guarded secret, until now.

The company expects to begin commercial production later this year.

Kaizad Mistry, Intel's 22nm program manager, said that the arrival of Tri-Gate transistors would make a big difference to consumer products.

"What it enables in the market is improved power efficiency - so better performance for the same battery life or lower battery life for the same performance," said Mr Mistry.

In microprocessor design, a conducting channel passes through a switching gate which opens or closes - changing the output from 0 to 1.

Until now, those channels have been "planar" or flat on the silicon wafer.

Intel's Tri-Gate system replaces the channels with 3D "fins". Mr Mistry explained that the extra surface area made them more conductive, and able to work better on lower power.

Moore's law

The Ivy Bridge design allows approximately twice as many transistors to be crammed into the same space as on 32nm chips.

That improvement is consistent with Moore's Law - the observation made by Intel co-founder Gordon Moore that chip density would double every two years.

However, Intel, like other chip manufacturers, is getting closer and closer to certain physical limits which may prevent that from continuing.

The next chip manufacturing process will will be 14nm, followed by 11nm.

Atoms are typically around 0.5nm wide.

Kaizad Mistry believes that the current rate of growth will continue for some time.

"Gordon Moore himself said that no exponential is forever, but he would like us to delay that for as long as possible," said Mr Mistry.

"I have been in this industry since the mid-80s. At that time people were talking about the sub-micron barrier. There is always talk of a barrier."

Mr Mistry said that new innovations would keep processor design moving forward.

Rival systems

Intel currently accounts for around 80% of global microprocessor sales, according to market analysts IDC.

Its nearest rival, Advanced Micro Devices (AMD) has a 19% share.

AMD was the first to produce a prototype 22nm chip in 2008.

It is widely expected to pursue a similar fin-based system to Intel, known as FinFET.

However, the company has yet to announce its plans for a commercial product.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Sony enlists cyber-security firms

Sony has hired investigators after a breach of security, in which the personal data of more than 100 million online game users was compromised.

Cyber-security detectives from Guidance Software and Data Forte, among others, have been brought on board, said Sony.

The Playstation Network and Sony Online Entertainment have been taken offline.

Information including names, addresses and potentially even credit card numbers was stolen in the attack.

Officials from the US Federal Bureau of Investigation (FBI) said they were looking into the breach of data, which might include some credit card numbers.

'Outdated database'

Last week, Sony said the personal details of 77 million Playstation users may have been stolen by hackers.

On Tuesday, it said a further 25 million gamers had their personal details stolen because of a security breach.

The company said credit card details and other personal information had been taken from an "outdated database".

The new attack went beyond users of Playstation hardware, affecting PC and Facebook gamers.

Sony said direct debit information for about 10,700 customers in Austria, Spain, the Netherlands and Germany was stolen.

It also said credit or debit card details of some 12,700 non-US customers were compromised.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Spotify sets its sights on iTunes

Online music service Spotify is turning up the heat on Apple as it aims to create an alternative to iTunes.

The company is extending many of its premium services, including an iPhone and iPod app, to non-paying members.

It is also encouraging customers to import their music collection into Spotify, rather than Apple's system.

However, analysts have questioned how much impact the service can have, given iTunes' dominance and its close integration with Apple devices.

Restrictions

At the heart of the update, which will be rolled out automatically from 4 May, is an attempt to make Spotify the sole music management platform used by its 10m members.

Currently, only those who pay a monthly fee of between �5 and �9.99 are allowed to import tracks bought through iTunes into their Spotify library.

That option will now be made available all Spotify customers, 90% of whom use the free, advertising-funded version.

The move will be widely seen as an attempt to placate fans who were angered by restrictions recently imposed on the service.

The limits saw the amount of music that free users can listen to halved. It also reduced the number of times an individual track can be played to to five.

Gustav Soderstrom, chief product officer at Spotify, confirmed that the company was aiming "to make iTunes redundant".

"We think it is a better experience. If it is not, people will go back to iTunes," he added.

He explained that customers had requested a greater tie-up between the music they owned and the service they used to create playlists.

"Users are juggling two products at the same time and they said they really wanted to synch their playlists with their iPods and iPhones," he said.

As well as allowing users to synch music with Apple products, Spotify is making its iPhone and Android apps available to non-subscribers.

New clothes

The company has also hammered out a deal with record labels which centres around the creation of bespoke playlists.

It will now offer bundles of tracks for discounted prices. Ten tracks will cost �7.99, 15 tracks �9.99, 40 tracks �25 and 100 tracks �50.

Spotify hopes the innovation will breathe new life into its download service, which it admits has "been a bad experience" for users.

However, Mark Mulligan, an analyst with Forrester Research, was underwhelmed by the changes.

"They don't sound like great discounts to me. All it is doing is applying album pricing to playlists. You might even be able to do that on iTunes already," he said.

"I can see what Spotify is trying to do, it wants to acquire the clothes of the more robust music services by offering ways of buying as well as listening to music and creating an alternative music management platform."

He suggested that Spotify would always lack the clout of Apple.

"iTunes is a very bloated music management service but people use it because it is tied to their devices. Apple offers access to the cloud, it has a billing relationship with users.

"Managing music from Spotify doesn't really do much. People will still have to go back to iTunes to buy new tracks. It is hard to see significant numbers of people using it," he said.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Monday, May 2, 2011

Sony says 25m extra users hacked

Sony has warned that almost 25 million extra Playstation users may have had their personal details taken in a hacker attack.

The admission comes as the company reels from a number of security breaches.

On Monday, it took the Sony Online Entertainment (SOE) service offline as part of its wider investigation.

Last week, it admitted that the personal details of 77m Playstation users may have been stolen by hackers.

'Cyber-attacks'

In a message to its customers, Sony said: "We had previously believed that SOE customer data had not been obtained in the cyber-attacks on the company."

However, it added that "on May 1 we concluded that SOE account information may have been stolen".

Sony was quoted by the Associated Press news agency as saying that the latest incident occurred on 16 and 17 April.

This was earlier than the larger Playstation user security breach.

Sony said that during the security breach, details of non-US users were compromised.

It explained that the direct debit details of almost 11,000 customers in Austria, Spain, the Netherlands and Germany were stolen, as were the credit or debit card details of some 13,000 non-US customers.



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement

Digital book sales soar in the UK

Sales of digital books are soaring in the UK, figures from the Publishers Association show.

The association said that in 2010 sales of e-books and audio book downloads in the "general titles" category, which includes novels and consumer titles, shot up from �4m to �16m.

Academic and professional books still dominated overall digital sales, which reached �180m last year.

It still remains a small proportion of total book sales, which hit �3.1bn.

However, the increased digital sales suggests devices such as Amazon's Kindle and the Sony Reader are increasingly making an impact.

Copyright review

Richard Mollet, chief executive of the Publishers Association, said: "Digital publishing is growing at an impressive rate in whichever part of the sector you choose to look.

"Now that technology is putting e-reading devices into consumers' hands, we are starting to see the rapid growth of digital sales in this area too, as consumer publishers develop digital formats to reach wider audiences."

He added the traditional print book market remains "hugely popular" and the figures suggest print and digital books will co-exist in the future.

In the US, electronic books sold more than either hardbacks or paperbacks in February.

The Publishers Association said the digital innovation taking place in the UK could be threatened if copyright laws are watered down in a government review.

Mr Mollet said: "The innovation in the digital marketplace and the strength of British publishers' export performance is only possible because of the robust and flexible copyright framework which underpins the UK creative industries."



Powered By WizardRSS.com | Full Text RSS Feed | Amazon Plugin | Hud Settlement Statement