IoT Devices Are Secretly Phoning Home Slashdotby BeauHD on privacy at January 1, 1970, 1:00 am (cached at February 28, 2016, 11:40 pm)

An anonymous reader writes: A popular internet-enabled security camera "secretly and constantly connects into a vast peer-to-peer network run by the Chinese manufacturer of the hardware," according to security blogger Brian Krebs. While the device is not necessarily sharing video from your camera, it is punching through firewalls to connect with other devices. Even if the user discovers it, it's still extremely hard to turn off. Krebs notes that the same behavior has been detected in DVRs and smart plugs -- they're secretly connecting to the same IP address in China, apparently without any mention of this in the product's packaging. One security researcher told Krebs the behavior is an "insanely bad idea," and that it opens an attack vector into home networks.

Read more of this story at Slashdot.

IoT Devices Are Secretly Phoning Home Slashdotby BeauHD on privacy at January 1, 1970, 1:00 am (cached at February 28, 2016, 11:40 pm)

An anonymous reader writes: A popular internet-enabled security camera "secretly and constantly connects into a vast peer-to-peer network run by the Chinese manufacturer of the hardware," according to security blogger Brian Krebs. While the device is not necessarily sharing video from your camera, it is punching through firewalls to connect with other devices. Even if the user discovers it, it's still extremely hard to turn off. Krebs notes that the same behavior has been detected in DVRs and smart plugs -- they're secretly connecting to the same IP address in China, apparently without any mention of this in the product's packaging. One security researcher told Krebs the behavior is an "insanely bad idea," and that it opens an attack vector into home networks.

Read more of this story at Slashdot.

Al-Shabab attack: Civilians killed in Somalia's Baidoa AL JAZEERA ENGLISH (AJE)(cached at February 28, 2016, 11:01 pm)

Civilians die in bombing claimed by armed group of traffic junction and restaurant in city 245km northwest of Mogadishu.
Chinese ISPs Caught Injecting Ads And Malware In Their Network Traffic Slashdotby BeauHD on china at January 1, 1970, 1:00 am (cached at February 28, 2016, 10:40 pm)

Chinese Internet Service Providers (ISPs) have been caught red-handed for injecting advertisements as well as malware through their network traffic. Three Israeli researchers uncovered that the major Chinese-based ISPs named China Telecom and China Unicom, two of Asia's largest network operators, have been engaged in an illegal practice of content injection in network traffic. Chinese ISPs had set up many proxy servers to pollute the client's network traffic not only with insignificant advertisements but also malware links, in some cases, inside the websites they visit. If an Internet user tries to access a domain that resides under these Chinese ISPs, the forged packet redirects the user's browser to parse the rogue network routes. As a result, the client's legitimate traffic will be redirected to malicious sites/ads, benefiting the ISPs.

Read more of this story at Slashdot.

Chinese ISPs Caught Injecting Ads And Malware In Their Network Traffic Slashdotby BeauHD on china at January 1, 1970, 1:00 am (cached at February 28, 2016, 10:40 pm)

Chinese Internet Service Providers (ISPs) have been caught red-handed for injecting advertisements as well as malware through their network traffic. Three Israeli researchers uncovered that the major Chinese-based ISPs named China Telecom and China Unicom, two of Asia's largest network operators, have been engaged in an illegal practice of content injection in network traffic. Chinese ISPs had set up many proxy servers to pollute the client's network traffic not only with insignificant advertisements but also malware links, in some cases, inside the websites they visit. If an Internet user tries to access a domain that resides under these Chinese ISPs, the forged packet redirects the user's browser to parse the rogue network routes. As a result, the client's legitimate traffic will be redirected to malicious sites/ads, benefiting the ISPs.

Read more of this story at Slashdot.

Claims of violations test Syria's fragile truce AL JAZEERA ENGLISH (AJE)(cached at February 28, 2016, 10:31 pm)

Conditional ceasefire still intact but opposition and Russians trade charges amid reports of attacks in Hama and Aleppo.
Law enforcement's next privacy overreach will be the metadata of things (The Registe SANS ISC SecNewsFeed(cached at February 28, 2016, 10:00 pm)

Law enforcement's next privacy overreach will be the metadata of things (The Registe SANS ISC SecNewsFeed(cached at February 28, 2016, 10:00 pm)

Rubio, Cruz Try To Kill Neutrality On 1 Year Rule Anniversary Slashdotby BeauHD on internet at January 1, 1970, 1:00 am (cached at February 28, 2016, 9:40 pm)

An anonymous reader writes: Presidential hopefuls Marco Rubio and Ted Cruz have joined six other Senators in pushing the new Restoring Internet Freedom Act, which would dismantle the rules, walk-back the FCC's Title II reclassification of ISPs as common carriers, and prevent the FCC from trying to pass net neutrality rules in the future. In a statement posted to the Rubio website, the Presidential hopeful states the new law is necessary because the FCC's "burdensome" net neutrality rules are destroying innovation, diversity, and network investment. "Through burdensome regulations and tight control like the net neutrality rule, the government only hinders accessibility and the diversity of content," said Rubio. "Consumers should be driving the market, and we can help by encouraging innovation, incentivizing investment, and promoting the competitive environment this industry needs."

Read more of this story at Slashdot.

Philippine teen pregnancy rates defy trend AL JAZEERA ENGLISH (AJE)(cached at February 28, 2016, 9:31 pm)

Country tops list of Asian countries, with one in 10 women in 15-19 age group already a mother, according to UN study.
Philippine teen pregnancy rates defy trend AL JAZEERA ENGLISH (AJE)(cached at February 28, 2016, 9:31 pm)

Country tops list of Asian countries, with one in 10 women in 15-19 age group already a mother, according to UN study.
Are CEOs Overpaid? Not Compared With College Presidents Slashdotby BeauHD on news at January 1, 1970, 1:00 am (cached at February 28, 2016, 9:10 pm)

schwit1 writes: For outrageous executive earnings, don't look to Wall Street -- look to academia. High pay for CEOs attracts annual attention and recitations about the immorality of capitalism, but when the focus is on average CEO pay, they make less than half the annual earnings of college presidents, according to CBS News. The average CEO earns $176,840 annually, an amount that would make a university president into a pauper. In academia, college presidents earn $377,261 annually. Americans outraged and indebted by high college costs will be quick to draw the parallel between a college president's pay and their tuition bill. Correlation, though, doesn't imply causation. College presidents aren't always the highest-paid college employees -- athletic coaches often earn more. Regardless, college presidents "are well into the 99th percentile of compensation for wage earners in the United States," Peter L. Hinrichs and Anne Chen noted for the Federal Reserve Bank of Cleveland.

Read more of this story at Slashdot.

RFC 6598 - Carrier Grade NAT, (Sun, Feb 28th) SANS Internet Storm Center, InfoCON: green(cached at February 28, 2016, 8:30 pm)

Three years ago Johannes published a diary on Reserved IP Address Space with a complete list of reserved IPv4 address that obviously included the well-known as well as some new one such as RFC 6598 (released in April 2012) [...] to accommodate the needs of Carrier-Grade NAT (CGN) devices." />

If you are curious as to whether you carrier is using RFC 6598 CGN addresses, you can check your logs or traffic (packets) for 100.64.0.0/10.

[1] https://tools.ietf.org/html/rfc6598
[2] https://isc.sans.edu/forums/diary/Reserved+IP+Address+Space+Reminder/13228

-----------
Guy Bruneau IPSS Inc.
Twitter: GuyBruneau
gbruneau at isc dot sans dot edu

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
RFC 6598 - Carrier Grade NAT, (Sun, Feb 28th) SANS Internet Storm Center, InfoCON: green(cached at February 28, 2016, 8:30 pm)

Three years ago Johannes published a diary on Reserved IP Address Space with a complete list of reserved IPv4 address that obviously included the well-known as well as some new one such as RFC 6598 (released in April 2012) [...] to accommodate the needs of Carrier-Grade NAT (CGN) devices." />

If you are curious as to whether you carrier is using RFC 6598 CGN addresses, you can check your logs or traffic (packets) for 100.64.0.0/10.

[1] https://tools.ietf.org/html/rfc6598
[2] https://isc.sans.edu/forums/diary/Reserved+IP+Address+Space+Reminder/13228

-----------
Guy Bruneau IPSS Inc.
Twitter: GuyBruneau
gbruneau at isc dot sans dot edu

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Airbus Patents Adjustable Seats, In-Seat Storage For Aircarft Slashdotby BeauHD on patents at January 1, 1970, 1:00 am (cached at February 28, 2016, 8:10 pm)

AmiMoJo writes: Airbus, a leading aircraft manufacturer, has recently applied for a pair of airplane seat patents that simultaneously look to increase customer comfort while stripping away what little room remains. The first patent is for a "Re-Configurable Passenger Bench Seat," which allows seat belts and arm rests to be moved to accommodate different size passengers (e.g. two large adults, or two small adults and two small children in a row). The second patent places a storage box under each seat, which is accessed by raising the seat cushion. Of course, this means there wouldn't be room for your feet under the seat in front of you.

Read more of this story at Slashdot.