
More Mark Fiore brilliance.
Via The San Francisco Chronicle.
Enjoy.
- ferg
A crackdown by the Chinese government on anonymous domain name registrations has chased spammers from Chinese registrars (.cn) to those that handle the registration of Russian (.ru) Web site names, new spam figures suggest. Yet, those spammy domains may soon migrate to yet another country, as Russia is set to enforce a policy similar to China’s beginning April 1.More here.
In mid-December 2009, the China Internet Network Information Center (CNNIC) announced that it was instituting steps to make it much harder to register a Web site anonymously in China, by barring individuals from registering domains ending in .cn. Under the new policy, those who want to register a new .cn domain name need to hand in written application forms, complete with a business license and an identity card.
Chinese authorities called the move a crackdown on phishing and pornographic Web sites, but human rights and privacy groups marked it as yet another effort by Chinese leaders to maintain tight control over their corner of the Internet. Nevertheless, the policy clearly caught the attention of the world’s most profligate spammers, who spam experts say could always count on Chinese registrars as a cheap and reliable place to buy domains for Web sites that would later be advertised in junk e-mail.
According to data obtained from two anti-spam experts, new registrations for sites advertised in spam began migrating from .cn to .ru just a few weeks after the Chinese domain policy took effect.
A federal judge on Wednesday said the George W. Bush administration illegally eavesdropped on the telephone conversations of two American lawyers who represented a now-defunct Saudi charity.More here.
The lawyers alleged some of their 2004 telephone conversations to Saudi Arabia were siphoned to the National Security Agency without warrants. The allegations were initially based on a classified document the government accidentally mailed to the former Al-Haramain Islamic Foundation lawyers. The document was later declared a state secret and removed from the long-running lawsuit weighing whether a sitting U.S. president may create a spying program to eavesdrop on Americans’ electronic communications without warrants
“Plaintiffs must, and have, put forward enough evidence to establish a prima facie case that they were subjected to warrantless electronic surveillance,” U.S. District Judge Vaughn Walker ruled, in a landmark decision. Even without the classified document, the judge said he believed the lawyers “were subjected to unlawful electronic surveillance” (.pdf) in violation of the Foreign Intelligence Surveillance Act, which requires warrants in terror investigations.
It’s the first ruling addressing how Bush’s once-secret spy program was carried out against American citizens.
Ten million Americans a year are victims of identity theft. It's a growing problem in the United States, but fighting it doesn't appear to be a priority, a new report says.More here.
A report by the Justice Department Inspector General released Tuesday cites the wide-ranging costs and dangers of ID theft. Although the report has no new numbers, the financial losses are believed to be substantially higher than the $15.6 billion documented in 2005.
Inspector General Glenn Fine found the effort to combat the problem, however, has lagged since the President's Task Force on ID Theft was established in 2007.
"We found that to some degree identity theft initiatives have faded as priorities," said Fine. He said the Justice Department has not developed a coordinated plan to combat ID theft and that some recommendations of the President's Task Force have not been addressed. No one has been appointed to oversee the efforts, the report says.
A Ukrainian national who traded on insider information he obtained by hacking into a secure computer network was ordered by a U.S. judge to forfeit $580,000 in profits, interest and civil penalties, U.S. securities regulators said on Monday.More here.
The U.S. Securities and Exchange Commission had accused Oleksandr Dorozhko of gaining access to material nonpublic information about IMS Health Inc's third-quarter 2007 earnings by infiltrating the computer network of Thomson Financial. IMS had planned to announce negative earnings after the market closed that day.
Minutes after the hack and just before IMS's earnings release, Dorozhko purchased 630 put options on IMS's common stock, the SEC said in a statement.
After IMS's stock dropped a record 28 percent the next day, Dorozhko sold the put options and pocketed $287,346, the SEC said.
A hacker who helped TJX hacker Albert Gonzalez and others gain access to corporate networks was sentenced to 7 years and one day on Monday .More here.
Christopher Scott, 27, pleaded guilty to breaching the wireless access points of several retailers between 2003 and 2007 to siphon credit and debit card numbers, which he then passed to Gonzalez. Prosecutors say that together the men pilfered nearly 20 million credit and debit cards, which retailers say led to $200 million in losses from fraud.
They used the cards to obtain cash advances from ATMs or sold the account information to other carders, who encoded the data to blank and counterfeit bank cards for fraudulent use. Scott’s take from the crimes was at least $400,000, according to prosecutors. He was paid in cash and with pre-paid bank cards and used the money to rent limos and partied with up to 10 women at a time, prosecutors say, and later bought a car, jewelry and $400,000 house.
The government is seeking forfeiture of $400,000, nine computers and an array of other electronic goods from Scott. Restitution will be determined at a future hearing.


Network engineers from Yahoo are pitching what they admit is a "really ugly hack" to the Internet's Domain Name System, but they say it is necessary for the popular Web content provider to support IPv6, the long-anticipated upgrade to the Internet's main communications protocol.Major 'Net players mulling IPv6 "whitelist".More here.
Yahoo outlined its proposal for changes to DNS recursive name resolvers at a meeting of the Internet Engineering Task Force (IETF) held here this week.
Yahoo says it needs a major change to the DNS -- which matches IP addresses with corresponding domain names -- in order to provide IPv6 service without inadvertently cutting off access to hundreds of thousands of visitors. Under Yahoo's proposal, these visitors would continue accessing content via IPv4, the current version of the Internet Protocol.
The reason Yahoo is seeking this change to the DNS is that a significant percentage of Internet users have broken IPv6 connectivity. Web content providers say they need mechanisms to discover that a user's IPv6 connectivity is broken and to switch these users to IPv4 on the fly. Yahoo views DNS as the best place to make this switch.
On the same day that Google Inc. and the GoDaddy Group Inc. complained about China to a congressional committee, U.S. Navy Admiral Robert Willard appeared before the U.S. House Armed Services Committee with an even stronger warning about cyber-threats posed by China.More here.
Willard's comments about China received little press attention but were stronger than anything said by either company.
"U.S. military and government networks and computer systems continue to be the target of intrusions that appear to have originated from within the PRC (People's Republic of China)," said Willard.
He said that most of the intrusions are focused on acquiring data "but the skills being demonstrated would also apply to network attacks."
Security researchers on Friday unveiled an open-source device that captures the traffic of a wide variety of wireless devices, including keyboards, medical devices, and remote controls.More here.
Keykeriki version 2 captures the entire data stream sent between wireless devices using a popular series of chips made by Norway-based Nordic Semiconductor. That includes the device addresses and the raw payload being sent between them. The open-source package was developed by researchers of Switzerland-based Dreamlab Technologies and includes complete software, firmware, and schematics for building the $100 sniffer.
Keykeriki not only allows researchers or attackers to capture the entire layer 2 frames, it also allows them to send their own unauthorized payloads. That means devices that don't encrypt communications - or don't encrypt them properly - can be forced to cough up sensitive communications or be forced to execute rogue commands.
At the CanSecWest conference in Vancouver, Dreamlab Senior Security Expert Thorsten Schroder demonstrated how Keykeriki could be used to attack wireless keyboards sold by Microsoft. The exploit worked because communications in the devices are protected by a weak form of encryption known as xor, which is trivial to break. As a result, he was able to intercept keyboard strokes as they were typed and to remotely send input that executed commands on the attached computer.
A China-based root DNS server associated with networking problems in Chile and the U.S. has been disconnected from the Internet.More here.
The action by the server's operator, Netnod, appears to have resolved a problem that was causing some Internet sites to be inadvertently censored by a system set up in the People's Republic of China.
On Wednesday, operators at NIC Chile noticed that several ISPs (Internet service providers) were providing faulty DNS information, apparently derived from China. China uses the DNS system to enforce Internet censorship on its so-called Great Firewall of China, and the ISPs were using this incorrect DNS information.
That meant that users of the network trying to visit Facebook, Twitter and YouTube were directed to Chinese computers instead.
In Chile, ISPs VTR, Telmex and several others -- all of them customers of upstream provider Global Crossing -- were affected, NIC Chile said in a statement on Friday. The problem, first publicly reported on Wednesday, appears to have persisted for a few days before it was made public, the statement says.
Hacker Albert Gonzalez, who participated in a cybercrime ring that stole tens of millions of credit and debit card numbers, was sentenced to 20 years in prison today.More here.
The sentence imposed by U.S. District Court Judge Douglas P. Woodlock was for Gonzalez's role in a hacking ring that broke into computer networks of Heartland Payment Systems, which processed credit and debit card transactions for Visa and American Express and retailers Hannaford Supermarkets and 7-Eleven.
The sentence will run concurrently with two other 20-year sentences meted out Thursday, also in the U.S. District Court for the District of Massachusetts by a different federal judge, Patti B. Saris. Gonzalez pleaded guilty in all three cases last December, with the U.S. Department of Justice agreeing to seek no more than 25 years in prison in each case, with all sentences to run concurrently.
Acceleration in the use of electronic medical records may lead to an increase in personal health information theft, according to a new study that shows there were more than 275,000 cases of medical information theft in the U.S. last year.More here.
Unlike stealing a driver's license or a credit card, data gleaned from personal health records provides a wealth of information that helps criminals commit multiple crimes, according to Javelin Strategy & Research, a Pleasanton, California-based market research firm.
Information such as social security numbers, addresses, medical insurance numbers, past illnesses, and sometimes credit card numbers, can help criminals commit several types of fraud. These may include: making payments from stolen credit card numbers and ordering and reselling medical equipment by using stolen medical insurance numbers.
A key finding from the report is that fraud resulting from exposure of health data has risen from 3% in 2008 to 7% in 2009, a 112% increase.
Computer-security researchers say new "smart" meters that are designed to help deliver electricity more efficiently also have flaws that could let hackers tamper with the power grid in previously impossible ways.More here.
At the very least, the vulnerabilities open the door for attackers to jack up strangers' power bills. These flaws also could get hackers a key step closer to exploiting one of the most dangerous capabilities of the new technology, which is the ability to remotely turn someone else's power on and off.
The attacks could be pulled off by stealing meters — which can be situated outside of a home — and reprogramming them. Or an attacker could sit near a home or business and wirelessly hack the meter from a laptop, according to Joshua Wright, a senior security analyst with InGuardians Inc. The firm was hired by three utilities to study their smart meters' resistance to attack.
These utilities, which he would not name, have already done small deployments of smart meters and plan to roll the technology out to hundreds of thousands of power customers, Wright told The Associated Press.
There is no evidence the security flaws have been exploited, although Wright said a utility could have been hacked without knowing it. InGuardians said it is working with the utilities to fix the problems.
While we still can't say for sure whether Katrina Kaif and Salman Khan are together or not, we do know that both B-town actors like to keep things clean and juicy! The Bollywood beauty recently starred in a commercial for Slice Mango Juice, while B-town's bad boy has shot an ad for Active Wheel Detergent.
Amrita Rao has gone all glam with her latest photo-shoot. From a fairly normal girl, she's turned into a babe. We asked her what had convinced the girl who was launched in Ishq Vishq and acted in Bhagat Singh, Main Hoon Na and Vivaah to suddenly take a turn into the land of plunging necklines.
Aishwarya Rai gave some easy life to other contemporary actors like Priyanka Chopra, Vidya Balan, Kareena Kapoor.
Yes, I guess so. I have been offered many shows in the past but I wasn’t really looking at doing TV. So, what appealed to you about Fear Factor Khatron Ke Khiladi?
Bollywood actor Sanjay Dutt, who overcame drug addiction in his youth, today appealed youths to stay away from it.
Since I was young, I have always loved to travel. Whether it was a long eight hour drive down to Florida to see my Grandpa, or a quick weekend to D.C. or Philly, or even just a jaunt to a small town in the middle of nowhere in Georgia, I love to travel. Traveling reminds me of when I was young, when I was a student and I had no serious cares in the world, aside from your usual teenage dramas and first heartbreaks. Honestly, while I love living in New York and I love my people here, I'm still trying to figure out what kind of career I need to pay the bills and to keep me sustained and fulfilled in an emotional sense. It's really difficult. If I had my way, I would write full-time. Traveling, even if it's a brief getaway, makes me feel like I'm seventeen again, with my journal and my books, settling in for a long train ride, ready for newness, ready for anything.
When I was eighteen, my mom and I tagged along on a University of Alabama study abroad program called "In the Footsteps of Virginia Woolf," the best trip I've ever taken in my life thusfar. We traveled all over England, to London, to Kent, to Sussex and finally to Cornwall, and when I stood on our hotel balcony I could see the pulsing light of Woolf's lighthouse. I got to watch my mom's face light up with joy while we walked through Vita Sackville West's garden at Sissinghurst. I saw Woolf's original manuscript of Orlando, handwritten in purple ink, that she gave to Vita, installed at Knole.
I've visited Andalusia, Flannery O'Connor's home in Milledgeville, Georgia, where she lived her entire life and wrote there - I saw her typewriter and her crutches.
I've held Sylvia Plath's childhood valentines to her mother in my hands. I've also held two feet of her hair, braided, in my bare hands at the Lilly Library in Bloomington, Indiana.
I've walked through ancient cemeteries in the UK, kissed the Blarney stone (after some intense anti-bacterial wiping) and taken down epitaphs from decrepit tombstones in Massachusetts. I've danced with Frenchmen and Spaniards in Madrid, even though I barely speak French and speak absolutely no Spanish. I lit a candle for my Grandmother in Notre Dame. I walked through the house where Nathaniel Hawthorne was born, and the house on which he based The House of Seven Gables. I dropped my favorite childhood necklace into the bay in Sausilito.
While standing in the Monk's House garden, where Virginia and Leonard Woolf's ashes are buried next to each other, I watched a big black cat cross through in the blinding sunlight.

"Years ago my heart was set to live, oh
And I've been trying hard against unbelievable odds
It gets so hard at times like now to hold on
But guns they wait to be stuck by, and at my side is God
And there ain't no one gonna turn me round
Ain't no one going to turn me round...
There's people around who'll tell you that they know
And places where to send you
And it's easy to go
They'll zip you up and dress you down and stand you in a room
But you don't have to, you can just say 'No'
And there ain't no one gonna turn me round
Ain't no one going to turn me round...
I've been built up and trusted
Broke down and busted
But they'll get theirs and we'll get ours
If we can just hold on...hold on
Years ago my heart was set to live
And I've been trying hard against strong odds
It gets so hard at time like this to hold on
But I'll fall if I don't fight
And at my side is God
And there ain't no one gonna turn me round
Ain't no one going to turn me round..."
"Won't you let me walk you home from school?
Won't you let me meet you at the pool?
Maybe Friday I can, get tickets for the dance,
And I'll take you, ooo ooo
Won't you tell your dad get off my back?
Tell him what we said 'bout "Paint It Black"
Rock and roll is here to stay,
Come inside now it's ok,
And I'll shake you, ooo ooo
Won't you tell me what you're thinking of?
Would you be an outlaw for my love?
If it's so then let me know,
If it's no then I can go,
I won't make you, ooo ooo"
The last song on Big Star's legendary album, Radio City, is a graceful country-folk ballad that has Alex Chilton alone with an acoustic guitar singing about a newfound love: "I'm in love with a girl/The finest girl in the world/I didn't know I could feel this way." After a power pop record filled with emotional and sexual frustration and angst that almost leads to misogyny, "I'm in Love With a Girl" serves as the calm after the storm, Chilton's high, shaky voice singing a wistful melody over a sparse guitar strum. He sounds as if he was taken by surprise by a love that crept up behind him, especially on the song's — and thus the album's — last three lines: "I didn't know about love/All that a man should do is true/I didn't think this could happen to me," the last of which rings out a capella, as if an apologetic explanation for the whole album.
In this town television shuts off at two
What can a lonely rock & roller do?
The bed's so big and the sheets are clean
and your girlfriend said that you were 19
The styrofoam icebucket is full of ice
Come up to my motel room and treat me nice
I don't wanna make no late night New York calls
and I don't wanna stare at them ugly grassmatt walls
chronologically I know you're young
but when you kissed me in the club you bit my tongue
I'll write a song for you, I'll put it on my next L.P
Come up to my motelroom and sleep with me
There's a Bible in the drawer, don't be afraid
I'll put up the sign to warn the cleanup maid
Yeah there's lots of soap end there's lots of towels
never mind the desk clerk's scowls
I buy you breakfast, they'll think you're my wife
Come up to my motel room and save my life
Actress Priyanka Chopra says she is going to be extremely nasty to the 13 cricketers participating in Khatron Ke Khiladi, the television show she is going to host.
Aishwarya Rai leaves Kareena Kapoor behind, In the world of glitz and glamour, the rat race is constantly on, even if the stars accept it or they don’t. The latest winner in such a race seems to be Aishwarya Rai Bachchan. Ash has apparently been offered.
After being in news for her alleged relationship with co-star Ranbir Kapoor, Bollywood’s pretty actress Katrina Kapoor has once again became tabloids bait, when reports started to circulate about her growing proximity with King Khan.
Minissha Lamba, the sizzling hot sexy babe of bollywood who plays lead in veteran filmmaker Shyam Benegal’s upcoming flick.
I was bored one day, so I decided to anthologize all of the songs my friend Dave Cawley had written and recorded over the years with Berserk and Garage Sale, as well as the unreleased demos he recorded with his ertswhile lyricist chum Tom Davis. The Berserk and Garage Sale tunage speaks for itself and is readily available on the Berserk (Go-Kart, 1994) and Pointless Summer (Beef Platter, 2000) CDs, but there are some real gems on the Davis recordings, which were recorded and engineered by Tom Davis and feature either Dave Cawley's solo songs or tunes for which Davis wrote the words and Dave composed the music, a la Elton John and Bernie Taupin.
Music-wise it's all Dave Cawley, with Dave doing all the singing and playing acoustic (sometimes 12-string) guitar. I never realized how good a guitar player Dave was until now, having previously only seen him play bass in Berserk and Garage Sale. (I remember Dave telling me once how a local guitar player saw him playing an acoustic guitar and exclaimed, "Wow, I didn't know you played guitar, too!" to which Dave replied, "Yes, bass players can actually play guitar - maybe crappy guitar, but a guitar's a guitar no matter how many strings!")
Dave's Garage Sale output, from 2000's Pointless Summer CD, is represented here by "Brentless" (a shout-out to former Berserk and Stress Magnets guitarist Brent Malkus), "She Makes Me Hard," "Forgive Me," and the instrumental "Song of Hope," the latter song usually performed live with a mock "Ballroom Blitz" intro. The lone Cawley song missing from the Garage Sale CD is "I Suppose," which turns up in demo form on The Dave Cawley Songbook - Volume 2...
Of the 18 originals here, nine are by Dave Cawley and nine are Cawley-Davis collaborations. Berserk fans take note, this is the only recorded version (unless Skizz has a live recording somewhere) of "Kumi Mizuno," Dave's homage to the comely Japanese film star (shown at left) who appeared in a number of Godzilla films (Godzilla Vs. Monster Zero, Godzilla Vs. the Sea Monster), as well as Matago (aka Attack of the Mushroom People), Frankenstein Conquers the World, and International Secret Police: Key of Keys (the spy movie that Woody Allen dubbed, re-edited, and re-released as What's Up, Tiger Lily?).
"She came to us from a world called Planet X/When I see her, you know it makes-a-me want to have sex," Dave sings, obviously wearing his heart on (or hard-on) his sleeve. I can understand his emotions. Kumi Mizuno (real name: Maya Igarashi) was pretty hot as villainess "Miss Namikawa" in that skin-tight space uniform in Monster Zero. No wonder director Ishiro Honda couldn't keep his hands off her (as shown at right). I only wish Dave had continued his Toho film star obsession with some more tunes, like maybe one called "Akiko Wakabayashi" (admittedly a hard name to create rhymes for!) in homage to the fetching star of Dagora - The Space Monster and You Only Live Twice.