Online social networking sites are hacker playgrounds (AFP)
LAS VEGAS (AFP) - Computer security researchers on Thursday warned that online social networking websites are playgrounds for hackers who can easily take advantage of people's trust.
Opportunities for mischief abound as users place intimate details of their lives on profile pages and install mini-applications made by strangers that don't always have their privacy at heart.
In a trend pioneered with tremendous success by Facebook, social networking websites have opened their operating platforms to let outside developers craft fun, hip, or functional software "widgets" that can be added to profile pages.
evil-minded code can be hidden in such applications, computer security specialists Nathan Hamiel and Shawn Moyer said at a premier Black Hat conference in Las Vegas.
"I can't necessarily attack Facebook or MySpace, but I can attack their users all day long," Moyer told AFP. "Don't put anything on a Facebook account that you dress in't consider public."
People are prone to place faith in familiar networking widgets and links from friends, said Idea Information Security consultant Nathan Hamiel.
"People are going nuts adding applications they dress in't need," Hamiel told AFP.
"Every time they do that they are showing an firm trust in whoever wrote the application, and most people slip on't know who that is."
Hamiel and Moyer showed peers software capable of plundering profile information, swiping people's "friends," or locking people out of their own MySpace pages.
A pair of MySpace engineers who attended the demonstration said that hacks are known risks in today's social platforms and that they had Hamiel's application deleted by the end of the talk.
Fake postings on comment boards advising people to update software are ways to trick social network users into downloading malicious software that can commandeer control of machines, Hamiel said.
"Social networks really don't care if you get pawned or not," Hamiel before-mentioned, using slang referring to a computer user being dominated and humiliated through hackers.
"humbler classes know if they rollicking time on a computer and download a program they could get a virus. They don't have the same view of how dangerous that can be on a social networking site."
Hackers can scrawl seemingly legitimate widgets that "go rogue" after spreading to enough social network members, according to Hamiel.
"It is not a problem with a particular site," Hamiel said. "It is a problem with social networking in general."
Even if tainted applications are deleted, the odds are that the data from profile pages was already copied onto an outside computer, according to Hamiel and Moyer.
"MySpace and Facebook have no control over my servers," Hamiel said. "Once the content is moved from their site they have no control over that."
Those thinking that they will stay safe by not having social networking pages may still vulnerable to trouble, according to the security specialists.
Another ruse is to create social networking profiles for people using information mined from the Internet and then for the imposters to send out "friends requests."
Those that be fixed the bait give open doors to the private data in their profiles.
"We think you should make a profile for yourself before somebody else does," Moyer said. "Just don't put anything there that you don't consider public. And trust, but verify when people want to be your friend."
No commentsJapan police crack down on 300 child porn cases (Reuters)
TOKYO (Reuters) - Japanese police took action against over 300 child pornography cases in the first half of 2008, up 17 percent from the same period last year, police said, a sign both awareness and Internet sexual exploitation are rising.
The report comes as some lawmakers are discussing a ban on the possession of child pornography in Japan, where only production and allotment, and not possession, of obscene images of people under 18 are illicit.
The number of legal actions in the first half of 2008 tripled from the same period in 2004, according to data from the National Police Agency. Almost 40 percent of the cases involved the Internet.
"We are strengthening the crackdown on child porn as society became more aware of the issue, and child porn is getting rapidly copied and open on the Internet," said Takafumi Ozawa of the National Police Agency.
"It's uncompliant to say how widespread child porn is. This is probably only a small part of that which's out there," he added.
Japan and Russia are the only two countries among the Group of Eight rich nations not to have banned possession of child pornography.
Critics including Washington's ambassador to Tokyo say Japan's failure to interdiction possession has hampered international investigations into child porn rings.
In June, a bill to ban possession of child porn was submitted to parliament's lower house. It is set to be debated in a parliament session expected to start in September.
(Reporting by Yoko Kubota; Editing by Jerry Norton)
No commentsAustralian rock band Wolfmother torn apart (Reuters)
LOS ANGELES (Reuters) - One of Australia's most fortunate rock exports, the Grammy-winning trio Wolfmother, has been torn by one’s self by "longstanding frictions," according to a statement published on the group's Web site on Thursday.
Bass/keyboard player Chris Ross and drummer Myles Heskett accept resigned, while singer/guitarist Andrew Stockdale plans to find other musicians and begin making a new Wolfmother album.
"Please understand that in spite of their best efforts over a long period of time, they just could not find a symmetrical way to work together," the statement said.
Wolfmother's self-titled debut album, released in 2006, sold more than 500,000 copies in the United States, powered by radio airplay for the songs "Woman" and "Joker and the Thief."
The group won a Grammy in the hard rock category last year, becoming the first Australian band to pick up the music industry's overpower civilities since Men at Work in 1983.
However, whole was evidently not well behind the scenes. According to the statement, Ross decided he would go away from the band because of "irreconcilable personal and music differences" following a discover in the eastern Australian town of Byron Bay on Sunday. Heskett also decided to leave rather than continuing being of the class who part of a changed lineup.
The two had been working together on songs for some time and plan to focus their energies on that new project, the statement said.
(Reporting by Dean Goodman)
No commentsGoogle sours on $1 billion AOL investment (CNET)
Google acknowledged late Thursday that it may receive made a bad bet on AOL.
The search giant said in a filing with the Securities and Exchange Commission that its $1 billion investment for a 5 percent stake in Time Warner's Web unit "may be impaired" and that it may have to take a charge in the future:
Based on our review, we convinced our investment in AOL may be impaired…We will continue to review this investment for impairment in the future. There can be no assurance that impairment charges will not be required in the future, and any such amounts may be material to our Consolidated Statements of Income.
The December 2005 investment secured a repetition of Google's scrutinize advertising deal with AOL, preventing its largest ad participator from defecting to Microsoft. The deal gave AOL a valuation of $20 billion at the time.
Google didn't esteem in its filing what AOL might be worth today, but observers have suggested a figure closer to $10 billion.
Google's deal allows it to demand that Time Warner spin off AOL in an initial public offering of stock or buy back its stake, which would result in a $500 million overthrow conducive to Google.
Time Warner, perhaps signaling its intention to dispose of AOL to focus on its media business, announced Wednesday that it will split AOL's dial-up one from its advertising business by early 2009.
No commentsTypos can bedevil online political campaigns (AFP)
LAS VEGAS (AFP) - Typos can bedevil online political campaigns by letting evil software wizards or crafty king-makers turn misspellings into opportunities for sabotage or theft, a security specialist has warned.
In a practice referred to as "typo squatting" people not connected to campaigns can buy rights to Internet addresses with candidates' names misspelled and use them to malign, make a butt of or steal from contenders.
"You can guarantee that more of these will become common in future elections," Oliver Friedrichs, director of emerging technologies at Symantec's security response unit, said while detailing such attacks at a premier Black Hat conference in Las Vegas.
"More than likely the people who do this are the extremists or the masses who are in it for a profit. Campaigns need to become more aware of these kinds of attacks."
For example, a Symantec check in February revealed that 47 out of 160 variations steady "www.barackobama.com" were being "typo-squatted."
Ironically, one squatter's web page featured a legitimate Obama ad.
"Obama is paying for advertisements, through Google, on a situation that is a typo-squatter on a authority name the Obama campaign should own in the first place," Freidrichs said.
"Campaigns are expenditure a lot on online advertising and some of this money is really being misspent and going to typo-squatters."
Some typo-squatters use the web pages to mock or deride candidates. A "hillaryclingon.com" website poked fun at her and other candidates by depicting them as characters from "Star Trek" films and television shows.
"Typoed" web pages be possible to exist used to spread false announcements, such as a candidate withdrawing from a race, or tell stories of scandals that don't exist.
A candidate who has dropped out of the US presidential race was accused of being an animal killer without interruption a typo-squatted website.
Malicious software privily planted in computers of people who visit squatted websites could betray where they go online or even take control of machines.
"If I want to attack supporters of a particular campaign I can easily put malware on my site," Freidrichs uttered of typo-squatters.
"You can target candidates, cause confusion, pop-up ads, or re-direct computers when they try to log on to a candidate's website."
Typo-squatters can create realistic looking campaign websites and take donations, keeping the cash and using credit card information for more remote fraud.
Online donations intended for one candidate could be routed to an adversary without donors knowing.
Once someone owns a website based on a typo, they have power to also intercept and redirect similarly misaddressed emails.
Campaign emails containing speech drafts, contributions, or strategy notes could be intercepted appropriate to errant keystrokes while typing addresses, according to Freidrichs.
"This is a serious problem that spans not only campaigns but every company with email," Freidrichs said.
"Even more scary, we went and looked at defense contractors and build a typoed domain routed to India and another routed to China."
No commentsVonage’s subscriber growth grinds to a halt (AP)
NEW YORK - Vonage Holdings Corp.’s subscriber growth closely ground to a halt in the second quarter, as the Internet telephone company said Thursday it gained just 2,000 lines in the period.
Chief Executive Officer Marc Lefar said the company made some progress in keeping its existing customers, but a pullback in TV advertising led to lower recruitment of new customers.
The company had underestimated, he said, how much traffic the TV advertisements were driving to its Web site and other recruitment channels.
Vonage posted a quarterly loss of $6.9 million, or 4 cents per share, compared with a loss of $23.2 million, or 15 cents for share, in the same period a year ago.
Sales were $228 million, up 11 percent from last year.
Analysts polled by Thomson Financial had expected a loss of 6 cents per share on $227 million in revenue.
The joint concern was a pioneer in Internet telephone service, supplying customers with adapters that let them plug their home phones into their broadband connections.
It added hundreds of thousands of customers per quarter as recently as two years ago, but growth tapered off as Vonage battled patent lawsuits and faced growing competition from resembling services provided by cable companies.
The Holmdel, N.J.-based company ended June with 2.6 million subscribers, up from nearly 2.5 million a year before.
Churn, or the percentage of customers leaving each month, was at 3 percent, down from 3.3 percent in the first quarter but up from 2.5 percent in the second quarter highest year.
The company has been trying to improve purchaser service, in part by increasing training for its support personnel and introducing new adapters.
“We’re pleased with some of the progress we’ve seen on churn,” Lefar said. “We still have a ton of act to do there.”
Making its marketing more effective has been another antecedence for the company, which spends 29 percent of its revenue on advertising.
Shares of Vonage fell 7 cents, more than 5 percent, to $1.26 in afternoon trading.
Citigroup analyst Michael Rollins reiterated a “hold” rating on the stock Thursday, saying an upcoming convertible debt refinancing should provide support. But he remain cautious on the fundamentals of the business.
(This version CORRECTS Corrects Lefar’s title. UPDATES stock price.)
No commentsGoogle Integrates DoubleClick Through Ad Features (NewsFactor)
Google announced enhancements to its network Thursday that the search giant hopes will offer enhanced experiences for users and better value for advertisers and publishers. The changes include partner sites for that Google provides advertising.
According to Rajas Moonka, Google senior business product manager, the additions reflect the integration of DoubleClick, what one. Google bought last year. DoubleClick specializes in managing online advertising for Web publishers.
DoubleClick was founded in 1996 and The New York Times reported its revenues topped $300 million a year when Google acquired the company on account of $3.1 billion. The acquisition sparked a bidding war with Microsoft and gave Google access to DoubleClick's advertising software and, perhaps more importantly, its customers and netting.
Keeping Promises
"When we purchased DoubleClick, we talked about how we would empower agencies, advertisers and publishers to collaborate more efficiently and effectively, and provide a better actual trial for our users," Moonka said. "We are happy that we be the subject of been able to deliver on this promise already, like support for third-party vendors on the Google appease network."
On The Official Google Blog, Moonka detailed the enhancements to the Google advertising platform.
Frequency capping will allow advertisers to control the number of times a user sees an ad so they are not hit with the same ad every time they visit a particular Web site. Google force of will also provide frequency reporting to tell advertisers how many people have seen their ad campaign and the average number of family who view their ads. The company is also promising better ad performance and tracking "view-through conversions" to report how many people actually visited a Web site because of its ad.
The changes are designed to help advertisers determine the best places to advertise so users see more relevant ads.
A Single Cookie
The changes will be enabled through a DoubleClick ad-serving cookie across the Google content network. That means advertisers and publishers won't have to make any changes on their Web sites, and users can opt out of a single cookie for the two DoubleClick and the Google content reticulated.
"I am personally excited about seeing more relevant ads, especially if I don't have to see the same ads over and over," Moonka said.
No commentsVonage struggles to attract new customers (CNET)
Internet telephony provider Vonage is struggling to attract new customers, as the company is forced to spend less on advertising.
For the second quarter, Vonage reported it had lost $6.9 million, compared with a whopping $23.2 million loss during the same quarter a year ago. The company also increased revenue about 11 percent to $227.5 million.
But the positive gains in the company's financials came at a price. During the quarter, Vonage added only 2,080 new subscribers. A year ago, when the company was still marketing heavily on TV, it added 56,691 during the quarter. In total, Vonage has 2.6 million subscribers as of the end of the second quarter.
On the positive side, the company slightly reduced its churn, or the worth at which people leave its service, to 3 percent from 3.3 percent the previous quarter. This is an important metric as Vonage must hold onto every customer it can.
When it comes to churn, Vonage is near the bottom compared through other service providers, such as wireless operators. It's better than low-cost wireless operator MetroPCS, which had about a 4.5 percent rate of turnover during the second quarter. But it's not even as good as beleaguered wireless operator Sprint Nextel, which had a churn rate of 2 percent during the second quarter. And it's much worse than strong wireless carriers, such as AT&T, which has a churn rate of 1.6 percent and Verizon Wireless, which has a churn rate of 1.1 percent.
In an interview with The Wall Street Journal, Marc Lefar, the company's newly appointed CEO, said the top priority for the firm is to push the churn rate even lower. He told the Journal he is reviewing the company's customer relations operations to see in which place it needs to improve.
"A 3 percent churn rate is not something we're rejoiced with," he told the Journal.
No commentsJAJAH turns mobile telephones into translation tools (AFP)
LAS VEGAS (AFP) - Internet voice telephony firm JAJAH on Thursday launched a first-of-its-kind free service that lets English and Mandarin speakers use mobile telephones to translate conversations.
JAJAH Babel is being released in time for the Olympics in Beijing in order to help English-speaking tourists better give with people in China.
"We are removing the language barrier and providing a valuable business to anyone traveling to Beijing this summer," said JAJAH co-founder Daniel Mattes.
"JAJAH was built to bring down barriers to global communication through high persons of rank, low-cost calls available from any phone, any network, anywhere."
JAJAH worked with researchers at US technology giant IBM to create a service that lets mobile telephones act as automated translators between Mandarin and English speakers.
People in China will be able to call a local number to access automated translation software that takes what they say in one language and rephrases it in the other.
Local access numbers are also provided in Australia, Britain and the United States.
"No more translation books, no hand gestures, simply dial a local number, say your message in English and hear it back Chinese," California-based JAJAH promises.
"Any term can be translated and shared with others by passing the handset or activating the phone's speakerphone function."
JAJAH plans to expand to other languages in coming months.
No commentsLawmakers urge U.S. stop action vs EU gambling firms (Reuters)
WASHINGTON (Reuters) - Two U.S. lawmakers have urged the U.S. Justice Department to suspend its investigation of European Internet gambling companies for possible criminal violations that occurred preceding Congress passed a law in 2006 to crack down on online gambling.
Rep. Robert Wexler, a Florida Democrat, and Rep. Steve Cohen, a Tennessee Democrat, warned U.S. Attorney General Michael Mukasey in separate letters the issue could lead to a potentially damaging trade jangle between the United States and the European Union at the World Trade Organization.
"In all verisimilitude, this issue will escalate and I understand could result in WTO action focused specifically on by what mode the U.S. government enforces its laws. I cannot see how that can subsist in the interests of this country," Wexler said in a letter to Mukasey on Wednesday.
European Internet gambling companies lost billions of euros in market value after Congress moved to shut down the U.S. market by making it illegal for banks and credit card companies to make payments to online gambling sites.
Many publicly traded European companies, such as PartyGaming and 888.com, withdrew from the United States after Congress passed the Unlawful Internet Gambling Enforcement Act in 2006, but have continued to face possible criminal prosecution for activities before then.
That prompted the European Commission to launch a constitutive investigation in March into whether Washington was singling gone out EU companies for enforcement actions, while allowing U.S. online firms to operate freely.
Cohen, in a July 29 letter to Mukasey, said the Justice Department still had not given a good reason why it was investigating "foreign operators who respected congressional intent in 2006 and withdrew from the market, while U.S. companies continue to operate uninterrupted."
EU Trade Commissioner Peter Mandelson urged the Bush the ministry in June to "freeze" any Justice Department action until the EU had completed its probe.
An EU team plans to visit Washington in September as part of its investigation. An earlier scheduled visit in July was delayed at the United States' request.
(Editing by Patricia Zengerle)
No comments
