IFTTT changes their ToS, claims ownership of all that goes through new API

3. Ownership. IFTTT shall own all right, title, and interest (and all related moral rights and intellectual property rights) in and to the Developer Tool, Service, and Content

12. Patent License. Licensee hereby grants IFTTT a nonexclusive, sublicensable, perpetual, fully-paid, worldwide license to fully exercise and exploit all patent rights with respect to improvements or extensions created by or for Licensee to the API

And many more things that really are not too acceptable.

See this blog post

My heroic and lazy stand against ifttt

Unaoil and the Panama Papers: A tale of a Bribe Factory and shady offshore money

The Huffington Post Bribe Factory

After a six-month investigation across two continents, Fairfax Media and The Huffington Post can reveal that billions of dollars of government contracts were awarded as the direct result of bribes paid on behalf of firms including British icon Rolls-Royce, US giant Halliburton, Australia’s Leighton Holdings and Korean heavyweights Samsung and Hyundai.

The investigation centres on a Monaco company called Unaoil, run by the jet-setting Ahsani clan. Following a coded ad in a French newspaper, a series of clandestine meetings and midnight phone calls led to our reporters obtaining hundreds of thousands of the Ahsanis’ leaked emails and documents.

Source: The Bribe Factory: The company that corrupted the global oil industry

And leaders, politicians, sports stars, conmen, criminals hiding their illegally gained money offshore via the Mossack Fonseca law firm. All visible through a huge trove of information taken from a hacked email server.

panama papers

What a world we live in, what a great thing leakers and investigative journalists are.

Study finds relationship between knowing you’re under surveillance and the views you post online

Instead, it attenuates the relationship between the opinion climate and voicing opinions except among a small number of participants who believe surveillance is not justified. Those who firmly believe that the govern-ment’s monitoring programs are unacceptable decide whether to share their views entirely independently of both perceived surveillance and the opinion climate. […]Although not directly measured, the individuals who comprise this group may very well be members of the avant-garde who are highly educated and vocal about their views regardless of circumstances, and individuals who are so turned off by sur-veillance that they are unwilling to ever share political beliefs online. In support of this speculation, a post hoc OLS regression predicting unjustified surveillance atti-tudes revealed that greater political knowledge (β = .30, p < .001) and low willing-ness to self-censor (β = −.16, p < .10) were significant and marginally significant predictors. [...] For the remainder—and majority—of participants, being primed of government surveillance significantly reduced the likelihood of speaking out in hostile opinion climates. [...]Theoretically, it adds a new layer of chilling effects to the spiral of silence[...] the participants in this study who were the most susceptible to conformist behavior were those who supported these controversial surveillance policies. These individuals expressed that surveillance was necessary for maintaining national security and they have nothing to hide. However, when these individuals perceive they are being monitored, they readily conform their behavior—expressing opinions when they are in the majority, and suppressing them when they’re not.[...] those holding the dominant opinion eagerly volunteered their ideas (over 6 on a 7-point scale), but the “nothing to hide” group seemed to experience some degree of dissonance when their views were in the minority, as they were inclined to “hide” them.

Source: Under Surveillance – 1077699016630255.full.pdf

From Under Surveillance: Examining Facebook’s Spiral of Silence Effects in the Wake of NSA Internet Monitoring
by
Elizabeth Stoycheff

Important stuff if you want to run a democracy.

Windows 10 May Delete Your Programs Without Asking

Windows may remove programs during an update for compatibility reasons. If a program is known to cause crashes, bugs, or otherwise conflict with Windows, Windows may remove it to keep your system stable. If this happens, the “All of your files are exactly where you left them” screen will appear like normal–this screen always appears during major updates–but Windows will actually have removed some of your program files.

It looks like this feature is designed to help protect the average Windows user, who might have outdated programs installed. Windows can clean them up and make sure they don’t cause problems. However, Windows doesn’t provide any notice that it’s removed a program–the program will just appear to vanish from your system.

When Windows 10’s first big update arrived, many people on Reddit noticed a variety of programs were being silently removed–most of which were hardware-related utilities. People have reported that it removed the popular Speccy, CPU-Z, HWMonitor, and CCleaner programs from many people’s systems. Many people claim it removed hardware drivers like Intel Rapid Storage Technology and AMD Catalyst Control Center, too. In some cases, people even reported that it removed PDF viewers and antivirus programs (perhaps outdated ones). Confusingly, it seems like the Windows update removed these programs from some computers but not others. Reports are not completely consistent.

Source: Windows 10 May Delete Your Programs Without Asking

You an get them back, apparently, but wow! Balls! I don’t want my OS deleting stuff from my PC!

Windows 10 Upgrade Reportedly Starting Automatically On Windows 7 PCs – Slashdot

Many users have confirmed in the comment section of a popular reddit post that “Windows 7 computers are being reported as automatically starting the Windows 10 upgrade without permission.” It’s no secret that Microsoft wants users to upgrade to their new OS. Earlier in the year, Windows 10 was set as a ‘recommended update’ so when you install new security or bug patches, the new OS is selected by default as well.

Source: Windows 10 Upgrade Reportedly Starting Automatically On Windows 7 PCs – Slashdot

Bloody hell, Microsoft, how do you think it’s OK to do this to people’s computers?!

TP Link routers to block open source firmware due to FCC rules

The new FCC rules are meant to limit interference and target third-party firmware because it allows users to modify their radio frequency parameters. While the FCC requirements don’t actually block third-party firmware, it’s much easier for a router manufacturer to comply with the ruling by blocking out custom firmware like OpenWRT or Tomato altogether than it is to test that firmware for compliance.

http://lifehacker.com/tp-link-blocks-open-source-router-firmware-in-complianc-1764335555

This is one of the major learning points for OSS – compliance is incredibly important for widespread adoption, even if it is boring to implement, like documentation

TM law gone nuts – E*Trade sues LastPass for the use of the * in a logo!

LastPass is a popular password manager used by millions over years. E*Trade is… uhm… patent trolls, I guess? Some finance company with an * in the logo. LastPass uses the logo as a recognition point in the browser toolbar and input boxes, so you can easily choose which account to fill in. The LastPass * was red, E*Trade is purple and green. So LastPass now has 3 dots (…) as the logo. Much more hard to see and use. Goes to show how crazy trademark law is. Fuck you E*Trade shitheads, for making my daily life just a little bit more difficult.

Source: LastPass Forums • View topic – New Logo tomorrow – so what?

Windows 10 Is Showing Ads On Your Lockscreen, Here’s How to Turn Them Off

Windows 10’s new Spotlight feature usually shows you neat photographs and fun facts when you first start your computer. Now, it’s started showing ads. Here’s how to turn it off.

Source: Windows 10 Is Showing Ads On Your Lockscreen, Here’s How to Turn Them Off

So not only is Windows invading your privacy with windows 10, but is progressively flaunting your non-ownership of the platform.

Companies Are Using Big Data to Discourage Employees From Having Costly Surgery

Do you work for a big company? Have you been having back pain? Your company probably knows about it already thanks to high-tech healthcare companies that it hired. Welcome to our brave new world of big data.

Source: Companies Are Using Big Data to Discourage Employees From Having Costly Surgery

They are using this to improve the health of their employess. Good. But also to track who is trying to get pregnant. Bad. Health information is very private for a reason. Having your employer look at it is very very bad and can lead to discrimination based on your medical history.

Anaheim cops in Disneyland’s backyard have had plane based mass mobile phone hacking stuff going for years

Pentagon: DRTBox can usually nab phone’s crypto session keys in under a second.

Source: City cops in Disneyland’s backyard have had “stingray on steroids” for years

Military grade Dirtboxes have been flying for the police without requiring a warrant for years. The 4th Reich irrepresive surveillance machine strikes again – Anaheim won’t be the only police force using this stuff.

Microsoft explains why Irish Warrant Fight is important

Without trust, Microsoft thinks, nobody is going to use any cloud services, and the Snowden revelations put the trustworthiness of all technology suppliers in the spotlight. So when a warrant arrived at Microsoft’s Dublin data centre one day in 2013, a not uncommon occurrence for a cloud host, Microsoft was ready to kick back.

What Microsoft has done is refuse to comply, putting itself voluntarily in contempt of court. At issue is a piece of legislation called the 1986 Stored Communications Act, and the software firm is challenging two key things about it. Firstly, that the act covers private data that happens to be stored on your behalf by a third party (in this case Microsoft). Microsoft argues that the personal data is not its own, much as a UGC hosted YouTube argues that it doesn’t own material that is “stored at users’ direction”
[…]
“These are the private communications of our customers. They’re not ours. We don’t have access to them. We don’t want access to them,” he told an audience this week. “That’s a very different position to saying that any data stored with a cloud provider is a business record of that cloud provider, that can then be turned over to the government. That is a very dangerous precedent.”

And an interview with The Register clarified that point further: “By design we tell customers it is yours, we’re not going to access your data.”

Source: Microsoft legal eagle explains why the Irish Warrant Fight covers your back

Rabobank puts NFC payment on all KPN simcards

The simcards have an NFC element that belongs to the Rabobank. I guess that means that Rabobank must then get quite a lot of information from the telco provider that you wouldn’t necessarily want them to have. Worrying.

KPN geeft sinds begin dit jaar een nieuw type simkaart uit dat contactloos betalen per telefoon mogelijk maakt. Dat zijn simkaarten met een NFC-element erin. Rabobank huurt als het ware een veilig kluisje op KPN-telefoons. Er zijn geen plannen om vergelijkbare overeenkomsten te sluiten met telecomaanbieders. Omgekeerd staat KPN wel open voor andere banken om ruimte om zijn NFC-simkaarten te huren.

Source: Rabobank zet contactloos betalen op alle KPN-simkaarten – Emerce

CBP wordt Autoriteit Persoonsgegevens

Per 1 januari is de naam van het College bescherming persoonsgegevens (CBP) veranderd in Autoriteit Persoonsgegevens. Voortaan kan de Autoriteit Persoonsgegevens boetes opleggen en zijn organisaties verplicht ernstige datalekken direct te melden aan de toezichthouder. Onvoldoende zorgvuldige omgang met persoonsgegevens levert voortaan dus zowel een boete als reputatieschade op. De maximale boete is 820.000 euro.

Source: Nieuwe taken voor Autoriteit Persoonsgegevens – Emerce

Spying on Congress and Israel: NSA Cheerleaders Discover Value of Privacy Only When Their Own Is Violated

NSA under President Obama targeted Israeli Prime Minister Benjamin Netanyahu and his top aides for surveillance. In the process, the agency ended up eavesdropping on “the contents of some of their private conversations with U.S. lawmakers and American-Jewish groups” about how to sabotage the Iran Deal. All sorts of people who spent many years cheering for and defending the NSA and its programs of mass surveillance are suddenly indignant now that they know the eavesdropping included them and their American

Source: Spying on Congress and Israel: NSA Cheerleaders Discover Value of Privacy Only When Their Own Is Violated

Oh dear, so you’re all for spying on people unless it’s suddenly yourself?

Why is Microsoft monitoring how long you use Windows 10?

This might seem like a slightly strange statistic for Microsoft to keep track of, but the company knows how long, collectively, Windows 10 has been running on computers around the world. To have reached this figure (11 billion hours in December, apparently) Microsoft must have been logging individuals’ usage times

Source: Why is Microsoft monitoring how long you use Windows 10?

AVG: “Web TuneUP” extension multiple critical vulnerabilities: exposes browsing history and other personal data

When a user installs AVG AntiVirus, a Chrome extension called “AVG Web TuneUp” with extension id chfdnecihphmhljaaejmgoiahnihplgn is force-installed. I can see from the webstore statistics it has nearly 9 million active Chrome users.

the attached exploit steals cookies from avg.com. It also exposes browsing history and other personal data to the internet, I wouldn’t be surprised if it’s possible to turn this into arbitrary code execution.

Source: Issue 675 – google-security-research – AVG: “Web TuneUP” extension multiple critical vulnerabilities – Google Security Research – Google Project Hosting

Windows 10 uploads your Encryption Key to Microsoft with no opt-out.

One of the excellent features of new Windows devices is that disk encryption is built-in and turned on by default, protecting your data in case your device is lost or stolen. But what is less well-known is that, if you are like most users and login to Windows 10 using your Microsoft account, your computer automatically uploaded a copy of your recovery key – which can be used to unlock your encrypted disk – to Microsoft’s servers, probably without your knowledge and without an option to opt-out.
[…]
As Green puts it, “Your computer is now only as secure as that database of keys held by Microsoft, which means it may be vulnerable to hackers, foreign governments, and people who can extort Microsoft employees.”

Source: Recently Bought a Windows Computer? Microsoft Probably Has Your Encryption Key

Microsoft: Upgrade to Windows 10 NOW or TONIGHT!

The large pop-up screen, which first appeared over the weekend, gives users the option of upgrading straight away or … that evening. Users can still opt out by clicking on the red ‘X’ in the top right corner of the window, but less savvy computer users (part of Redmond’s core market segments) might not figure that out.

Source: Microsoft steps up Windows 10 nagging

Wow, guys, we don’t want your massive privacy invasion called Windows 10!

Congress strips out privacy protections from CISA ‘security’ bill

Under the original CISA legislation, companies would share their users’ information with federal government departments once it had been anonymized. The government could then analyze it for online threats, while the companies received legal immunity from prosecution for breaking existing privacy agreements.

But as the bill was amended, the privacy parts of the proposed law have been stripped away. Now companies don’t have to anonymize data before handing it over. In addition, the government can use it for surveillance and for activities outside cybercrime. And in addition, companies don’t have to report security failings even if they spot them.

Source: Congress strips out privacy protections from CISA ‘security’ bill

Cox Is Liable for Pirating Subscribers, Ordered to pay $25 million

Internet provider Cox Communications is responsible for the copyright infringements of its subscribers, a Virginia federal jury has ruled. The ISP is guilty of willful contributory copyright infringement and must pay music publisher BMG $25 million in damages.

cox-logoToday marks the end of a crucial case that will define how U.S. Internet providers deal with online piracy in the future.

Following a two-week trial a Virginia federal jury reached a verdict earlier today (pdf), ruling that Cox is guilty of willful contributory copyright infringement.

The case was initiated by BMG Rights Management, which held the ISP responsible for tens of thousands of copyright infringements that were committed by its subscribers.

During the trial hearings BMG revealed that the tracking company Rightscorp downloaded more than 150,000 copies of their copyrighted works directly from Cox subscribers.

It also became apparent that Cox had received numerous copyright infringement warnings from Rightscorp which it willingly decided not to act on.

The case was restricted to 1,397 copyrighted works and a six-person jury awarded #25 million in damages. The award is lower than the statutory maximum, which would have been over $200 million.

Source: Cox Is Liable for Pirating Subscribers, Ordered to pay $25 million – TorrentFreak

Apart from the sum, which is amazing, the way the information was collected (downloading directly from subscribers) is in itself a form of piracy and therefore this evidence, being illegal, must be inadmissable?

Ted Cruz campaign using firm that harvested data on millions of unwitting Facebook users

Ted Cruz’s presidential campaign is using psychological data based on research spanning tens of millions of Facebook users, harvested largely without their permission, to boost his surging White House run and gain an edge over Donald Trump and other Republican rivals, the Guardian can reveal.

A little-known data company (Cambridge Analytica), now embedded within Cruz’s campaign and indirectly financed by his primary billionaire benefactor, paid researchers at Cambridge University to gather detailed psychological profiles about the US electorate using a massive pool of mainly unwitting US Facebook users built with an online survey.
Facebook
Twitter
Pinterest
Watch the Guardian’s sit-down interview with Ted Cruz: ‘Minorities suffer when police are vilified’

As part of an aggressive new voter-targeting operation, Cambridge Analytica – financially supported by reclusive hedge fund magnate and leading Republican donor Robert Mercer – is now using so-called “psychographic profiles” of US citizens in order to help win Cruz votes, despite earlier concerns and red flags from potential survey-takers.

Source: Ted Cruz campaign using firm that harvested data on millions of unwitting Facebook users