[iwar] News


From: Fred Cohen
From: fc@all.net
To: iwar@egroups.com

Sun, 6 Aug 2000 07:54:00 -0700 (PDT)


fc  Sun Aug  6 07:55:14 2000
Received: from 207.222.214.225
	by localhost with POP3 (fetchmail-5.1.0)
	for fc@localhost (single-drop); Sun, 06 Aug 2000 07:55:14 -0700 (PDT)
Received: by multi33.netcomi.com for fc
 (with Netcom Interactive pop3d (v1.21.1 1998/05/07) Sun Aug  6 14:55:07 2000)
X-From_: sentto-279987-474-965573644-fc=all.net@returns.onelist.com  Sun Aug  6 09:54:30 2000
Received: from mq.egroups.com (mq.egroups.com [208.50.144.79]) by multi33.netcomi.com (8.8.5/8.7.4) with SMTP id JAA26234 for ; Sun, 6 Aug 2000 09:54:30 -0500
X-eGroups-Return: sentto-279987-474-965573644-fc=all.net@returns.onelist.com
Received: from [10.1.10.38] by mq.egroups.com with NNFMP; 06 Aug 2000 14:54:06 -0000
Received: (qmail 27511 invoked from network); 6 Aug 2000 14:54:03 -0000
Received: from unknown (10.1.10.142) by m4.onelist.org with QMQP; 6 Aug 2000 14:54:03 -0000
Received: from unknown (HELO all.net) (24.1.84.100) by mta1 with SMTP; 6 Aug 2000 14:54:01 -0000
Received: (from fc@localhost) by all.net (8.9.3/8.7.3) id HAA28071 for iwar@onelist.com; Sun, 6 Aug 2000 07:54:01 -0700
Message-Id: <200008061454.HAA28071@all.net>
To: iwar@egroups.com
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen 
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe: 
Date: Sun, 6 Aug 2000 07:54:00 -0700 (PDT)
Reply-To: iwar@egroups.com
Subject: [iwar] News
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Naughton may get no time in prison
Government seeks probation, small fine, other constraints.
Patrick Naughton, the former Infoseek executive caught in
an FBI online sex sting operation, most likely will serve
no prison time. In a court filing, the government is asking
that Naughton, who will be sentenced Monday in federal court
in Los Angeles, receive five years probation, which includes
nine months of home detention. That means zero jail time.
It also asks that he continue to be prohibited from
``unapproved'' contact with children, receive counseling and
have no access to sexually-oriented chatrooms. Furthermore,
the government will ask him to pay a $20,000 fine, not the
maximum $250,000.
http://www.mercurycenter.com/svtech/news/top/docs/naught080400.htm

Canadian teen pleads innocent to hacking charges
A 16-year-old boy accused of paralyzing major Web sites,
including those of CNN, Yahoo and Amazon.com, has pleaded
innocent to charges that could land him in a teen detention
center for two years. The Montreal high school student, who
calls himself "Mafiaboy" on the Internet, had already faced
two mischief charges after CNN's Web site was crippled in
February. He now faces 60 new charges of hacking and mischief.
http://news.cnet.com/news/0-1005-200-2432177.html
http://www.mercurycenter.com/svtech/news/breaking/internet/docs/274781l.htm

Internet pitch snares New York suspect
Pueblo County Sheriff's Department officials said
Wednesday that Robert H. Dupes, 51, of New York City
traveled to Pueblo earlier this week to meet what he
thought would be a 30-year-old woman and her 13-year
old daughter. He thought he was going to have sex with
the two, based on Internet conversations in which he
had participated. But he actually had been "talking"
to a sheriff's deputy. So when he showed up a Pueblo
hotel Tuesday, he was arrested by members of the
Colorado Internet Crimes Against Children Task Force
and U.S. Customs agents.
http://www.chieftain.com/thursday/news/display.php3?article=8
http://www.colorado-springs.com/police/newsrelease/2000q3/0006-135.htm

250 Linux servers infected by denial-of-service program
Some 250 Linux servers were found to have been infected
with a hacking program used in denial of service (DOS)
attacks, raising serious security concerns with the popular
open source code servers. The Ministry of Information and
Communication (MIC) said yesterday that SECUi.COM, a local
communication security firm detected a hacking program
used in DOS attacks during a routine check on one of its
clients last Tuesday. The company was able to trace the
origin to a Linux server in a PC room in Kangnung,
Kangwon Province.
http://www.koreaherald.co.kr/news/2000/08/__10/20000801_1026.htm

New bug floods German cell networks
Russian anti-virus software developer Kapersky Lab has
announced the discovery of a bug capable of inundating
cell-phone networks with potentially harmful messages.
An author known as "HSH" has created the program --
dubbed "SMS-Flooder" -- which sends any number of short
message service (SMS) messages across German mobile
phone networks. While SMS-Flooder is limited thus far
to Germany and does no real damage, Kapersky Lab believes
it may be the first step towards creating a Trojan horse
for mobile phones.
http://www.zdnet.com/zdnn/stories/newsbursts/0,7407,2612018,00.html

China says provinces setting up Internet Police
At least 20 provinces and cities are moving to set up
special Internet police to ``administrate and maintain
order'' on China's fast-growing computer networks, the
official Xinhua news agency said on Saturday. China's
pioneer Internet police force, set up recently in the
eastern province of Anhui, has dealt with ``criminal
cases, such as cheating, property embezzlement and
pornography,'' it said. Anhui's Internet Police had
also publicised information about computer viruses and
worked to develop Internet filter programs for young
children.
http://www.mercurycenter.com/svtech/news/breaking/internet/docs/278114l.htm

FBI To Chair World's Internet Security Summit
The National Infrastructure Protection Center (NIPC), the
FBI's computer crime investigation organization, has
announced plans to chair the world's first summit on global
Internet security. Plans call for the summit to be hosted
by the World E-Commerce Forum (http://www.worldecom.org ),
which takes place for its second year in London, starting
its three-day run on Oct. 18. NIPC Director Michael Vatis
will be supported by a panel of permanent members of the
forum faculty. including the Organization for Economic
Cooperation and Development (OECD), which will be hosting
its own security meeting on October 5 and 6.
http://www.newsbytes.com/pubNews/00/153201.html

Apple subpoenas Yahoo in lawsuit
Apple has subpoenaed Yahoo to gather information for their
recent lawsuit. The order forces the Web site to turn over
records on a GeoCities member who Apple says leaked its trade
secrets. The GeoCities member Apple is interested in is known
on the Internet as "worker bee," according to a report on
News.com. Judge Gregory H. Ward of Santa Clara County Superior
Court signed an order that allows Apple to subpoena all
necessary records pertaining to this member. The subpoena
specifically asks for the name, address, telephone number,
Internet Protocol address and email address of the member.
http://www.maccentral.com/news/0008/03.apple.shtml
http://news.cnet.com/news/0-1006-200-2428889.html
http://news.cnet.com/news/0-1006-200-2427944.html
http://www.mercurycenter.com/svtech/news/breaking/merc/docs/063553.htm

E-commerce law may promote money laundering
Taking only three weeks to draft and two hours for House
approval, some detractors feel that Philippines' new
e-commerce law may not hold water. Spurred in part by the
recent LoveBug Virus and Philippines' rush to be viable
for e-commerce, the recently approved E-Commerce Law may
not have all the bases covered. While the new law was
embraced by information technology (IT) enthusiasts, an
advocate of the law warned of loopholes with serious
ramifications. The e-commerce law contains insertions
that may be dangerous to the local economy, Philippine
Internet commerce society founder Janette Toral says.
"Certain provisions in the law may encourage money
laundering and (fiscal) fraud," said Toral during an
e-commerce seminar held at the Cafe Laguna Garden
yesterday.
http://www.zdnetasia.com/news/dailynews/story/0,2000010021,20059972,00.htm

Will Crypto Feast on Carnivore?
Do you encrypt your email before you send it? Probably not.
Most electronic mail traverses the Internet as unscrambled,
easy-to-read packets of text. Should it be intercepted and
pieced together by reasonably skilled interlopers, your
message is theirs for the reading. The average Internet user
hasn't exactly seemed alarmed by that possibility, however.
"The story (goes) that only criminals are going to use
encryption, because they're the only ones that care," said
Marcelo Halpern, a partner with information technology and
e-commerce law firm Gordon & Glickson.
http://www.wired.com/news/technology/0%2C1282%2C37915%2C00.html

Telecom experts gear up for new administration
A presidential advisory committee responsible for monitoring
the security of the national telecommunications system has
established a task force to help bring the next administration
up to speed on critical infrastructure protection issues after
the November elections. The National Security Telecommunications
Advisory Committee, made up of 30 senior corporate leaders
representing major sectors of the telecommunications industry,
last month established an Administration Transition Task Force,
a spokeswoman for NSTAC said.
http://www.fcw.com/fcw/articles/2000/0731/web-nstac-08-03-00.asp

Excite@Home IP flaw exposed
Excite@Home -- an Internet service run in Australia by
Cable & Wireless Optus -- has warned it will take action
against anybody who attempts utilise an IP vulnerability
that allows a single user to block up to 127 IP addresses,
effectively shutting people out of the service. The company
has admitted the problem but denies that there is any
security risk to subscribers computer systems.
http://www.zdnet.com.au/zdnn/stories/zdnn_display/au0004627.html

Netscape to kill SmartDownload feature
America Online Inc.'s unit Netscape Communications Corp.,
plans to remove a feature in its SmartDownload product that
has irked some users enough to file a lawsuit, a spokesman
said Friday. The feature at issue is on Netscape's
SmartDownload product, which is used to download files. A
class action lawsuit filed by a New Jersey photographer in
July alleged the feature could be used for the surveillance
of file transfers between Web sites and Internet users. The
suit sought at least $10,000 in damage per person.
http://www.zdnet.com/zdnn/stories/news/0,4586,2612026,00.html

Does the Net need a 'red-light district'?
Zoning rules and regulations like the ones used to carve
up cities could soon be making their way onto the Internet.
The idea, presented here Friday to a commission exploring
the Child Online Protection Act (COPA), would create a
"red-light district" for porn sites and a so-called "green"
area for sites appropriate for children. But instead of
drawing lines on a map as cities do, the Internet would rely
on domain names like .kids and .xxx, or set aside a block of
unused IP addresses that new sites would be assigned
according to content.
http://www.zdnet.com/zdnn/stories/news/0,4586,2612074,00.html

A government office on sexy sites?
Librarian Jean Armour Polly was able to find what she wanted
when searching for filtering software to put on her school's
computers. But she never found what she really needed. There
were hundreds of different types of software she could use to
block sexually explicit Web pages from her Syracuse, N.Y.,
area students. But every product review seemed biased or based
on anecdotal evidence. Wouldn't it be great, Polly thought, if
there were a central -- perhaps government-operated -- testing
laboratory that could review software for educators and librarians.
http://www.zdnet.com/zdnn/stories/news/0,4586,2611649,00.html

Porn site veterans vow to clean house
The king and queen of Internet porn -- Dannie Ashe and Andrew
Edmond -- have decided that their realms are pretty seamy.
They say e-mail hucksters and thousands of money-hungry porn
sites are making everything from bestiality to kiddy porn
available to anyone, including children. Now Ashe and Edmond
are trying to clean up the industry before regulators do it
for them, they told a panel of commissioners here that will
be helping Congress rewrite the nation's child pornography
laws in October.
http://www.zdnet.com/zdnn/stories/news/0,4586,2611865,00.html

Online Porn Panel Chairman Pleads For Donations
Without substantial donations from high-tech companies and
others in the Internet community, the panel charged with
protecting children from "harmful" material online might
not be able to complete its report to Congress, panel
Chairman Don Telage told Newsbytes today. "We really need
some companies to step up to the line and donate," Telage
said, adding that he would repay all corporate donations
if and when Congress approves funding for the Child Online
Protection Act (COPA) Commission.
http://www.newsbytes.com/pubNews/00/153229.html

High-power PC sales restrictions eased
The White House is further relaxing export restrictions on
high-speed business computers, allowing U.S. companies to
sell even more powerful machines to both military and
civilian customers in about 50 countries, including China
and Russia. The computer industry had lobbied hard for the
change, which was announced Thursday night. The industry
feared tight export restrictions would limit sales of
computers using the fastest microprocessors on the horizon.
The change will double the speed of computers allowed to be
sold without prior government approval to about 50 "Tier
Three" countries, including China, Russia, India, Pakistan
and Vietnam. The Clinton administration also decided to
abandon the distinction between selling to civilian and
military customers in those countries.
http://www.zdnet.com/zdnn/stories/news/0,4586,2611897,00.html

Law Firm's Suit Calls Colorado Man Cybersquatter
A Colorado man has been hit with yet another lawsuit for
maintaining a Web site with a domain name that matches
that of a prominent law firm but bears content the suit
says is defamatory. Ropes & Gray, one of Boston's oldest
and most well respected law firms, filed a lawsuit in US
District Court seeking control of the domain name -
www.ropesandgray.com - and $100,000. The firm alleges that
Brian Wick of Denver registered a domain name using
Ropes & Gray and more than 90 other domains using other
law firms' names. The suit names Wick and his company,
American Distribution Systems Inc. The law firm uses
www.ropesgray.com.
http://www.newsbytes.com/pubNews/00/153217.html

They know where you're shopping
Online credit card verification companies record every
transaction to help search for fraud. But what about
privacy? Chris Hughes was surprised when Internet merchant
PayPal rejected his credit card last week, but was even
more surprised when he found out why. PayPal's credit card
verification service, Cybersource Corp., indicated Hughes
was a high risk because he had used 10 different credit
cards at various Internet sites during the past several
months. The rejection didn't bother Hughes nearly as much
as the notion that a company he had never heard of seemed
to know an awful lot about his personal purchasing habits.
http://www.msnbc.com/news/441058.asp

The antidote to e-snoops
Last week, I offered a half-hearted defense of the FBI's
notorious Carnivore program, the one that can scan millions
of e-mail messages in pursuit of terrorists, dope dealers,
and sellers of illegal cable TV boxes. It seems to me that
the technology isn't that dangerous if it's hedged about
with strong legal safeguards.
http://www.boston.com/dailyglobe2/216/business/The_antidote_to_e_snoops+.shtml

Is Big Brother a Big Bother?
New technology makes it easy to spy on employees. But ask
yourself which you'd rather have: a compliant police state
or a productive enterprise? A friend of mine refuses to
answer her e-mail at work. She's read about employees
getting fired for inappropriate e-mail use at companies
including, but not limited to, the St. Louis-based stock
brokerage of Edward Jones and America's newspaper of record,
The New York Times. It's not that she has any plans to send
off inappropriate e-mail or get caught in a web of company
secrets being routed to competitors. No, for her the horror
stories are daunting enough. She's not willing to risk being
innocently drawn into something that could cost her her job.
So e-mails to her go unanswered, compromising her workplace
productivity. If she needs to follow up, she'll make a phone
call or walk to the sender's office.
http://www.darwinmag.com/read/080100/order.html

Privacy Plan Likely to Kick Off Debate
The goal of the plan announced by President Clinton's chief
of staff, John Podesta, sounded admirable: to overhaul the
nation's privacy laws, harmonizing a patchwork of inconsistent
rules and extending to e-mail and mobile phone messages the
same strict safeguards against government snooping that now
apply to telephone calls. But in the fine print of Podesta's
speech was a detail that some privacy advocates found alarming:
a rollback of the tight privacy protections that many believe
currently apply to Internet communications over cable modems
and networks.
(NY Times article, free registration required)
http://www.nytimes.com/library/tech/00/08/cyber/cyberlaw/04law.html

---------------------------------------------------------------------

------------------
http://all.net/