Kaspersky to US: Check Our Source Code

Cybersecurity expert Eugene Kaspersky has volunteered to turn over his company's software source code to allay fears about possible ties with the Russian government, The Australian reported last week. Kaspersky made the offer public at CeBIT Australia.
Kaspersky to US: Check Our Source Code

Some U.S. officials have expressed concerns that Kaspersky Lab might have a close working relationship with the Russian government.

Kaspersky five years ago replaced a number of high-level managers with people who had ties to Russia's military or intelligence services, Bloomberg reported in 2015.

Some of them reportedly have provided data from the 400 million customers using Kaspersky's software to Russia's intelligence agency, the FSB.

Also, Kaspersky himself reportedly visits saunas with Russian officials on a regular basis.

Kaspersky studied at a university backed by the KGB -- the precursor of the FSB -- in the 1980s, according to reports, and he served as a software engineer with Soviet military intelligence before leaving for the private sector.

The heads of five U.S. intelligence agencies recently expressed suspicions regarding Kaspersky Lab to the U.S. Senate Select Committee on Intelligence, but they "don't have an option due to political reasons," Kaspersky suggested on Reddit.

"Recently, inaccurate statement and claims about Kaspersky Lab have circulated in public," the company said in a statement provided to TechNewsWorld by corporate communications manager Denise Bertrand.

"Eugene never worked for the Russian government," Kapersky Lab contended. "He grew up in the Soviet Union era when almost every education opportunity was sponsored by the government in some manner."

The university Kaspersky studied at "was sponsored by four state institutions, one of which was the KGB," Kaspersky Lab said. He was placed at a Russian Ministry of Defense scientific institute as a software engineer upon graduating, because "it was routine for university faculty to determine students' post-graduate positions."

Stirring a Hornet's Nest

Kaspersky did itself no favors with its all-out pursuit of hackers and malware authors linked to the U.S.

It has uncovered sophisticated malware or spyware connected to U.S. intelligence sources, including Stuxnet, Flame, Shamoon, and The Equation Group.

Kaspersky didn't seem to look equally hard for state-sponsored malware released by Russia, an acknowledged haven for cybercriminals.

Possibly because of that, and also because of the controversy surrounding Russia's possible meddling in the U.S. presidential elections, Kaspersky now is under the microscope.

The FBI is looking into Kaspersky's ties with the Russian government, as is the Senate.

Separately, the NSA and the UK's GCHQ reportedly have been trying to hack into Kaspersky for years.
Is Kaspersky Targeted Unfairly?

The NSA could be behind the latest scrutiny of Kaspersky Lab and its CEO.

"It's always dangerous to piss off three-letter agencies," said Rob Enderle, principal analyst at the Enderle Group.

"Doing so while operating out of Russia would be even more problematic," he told

However, the likelihood of Kaspersky maintaining a wall between its work with the FSB and Russian government, and its work with other clients is effectively zero," said Michael Jude, a program manager at Stratecast/Frost & Sullivan.

Like a John LeCarre Novel

The situation is "like a John LeCarre novel come to life," said Laura DiDio, principal analyst at ITIC.

"You're not going to be able to prove absolutely whether or not Kaspersky has ties to the Russian government, she told

"He has done all he can do -- offer to give the U.S. government his source code," she pointed out.

"The problem isn't whether Russia built a back door into the Kaspersky code, but that Russia may have copies of the source code," Jude told

"Regardless of whom Kaspersky turns his code over to, his reputation is shot," Jude said. "If it's Russia, the U.S. market is dead; if it's the U.S., then just about every non-U.S. market is dead."

How to protect yourself while on the Internet

When sending confidential information over the Internet, such as usernames, passwords, or credit card numbers, only send it securely. To verify this, look for a small lock in the bottom right corner of your browser window or next to the address bar (as shown below). If visible, this lock should also be in the locked position and not unlocked.

We also suggest making sure the URL begins with https, as shown above.

While the lock is in the locked position, data is encrypted, which helps anyone from understanding the data if it's intercepted. When no lock is visible or in the unlocked position, all information is plaintext and could be read if intercepted. If a web page is not secure, such as an online forum, use a password you wouldn't use with protected sites, such as your online banking website.

Use a safe password

Websites that store confidential data, such as an online bank site, need to use strong passwords. Also, it is highly recommended that you use a different password for each website that requires a login. If you need help remembering your passwords, consider using a password manager.

When available always enable two-factor authentication

Two-factor authentication adds additional protection by requiring an additional step in verifying a login. Typically with two-factor authentication, after verifying your password, if the service does not recognize your computer, it sends your phone a text message with a verification code. If someone had your password but did not have your phone, even with a valid password, they cannot access your account.

Tip: Two-factor authentication should at the very least be enabled on your e-mail account. Most account passwords can be reset using the forgot password feature, which sends a new password or link to reset the password to the e-mail address on file. If anyone has access to your e-mail account, they could get the new password for your account.

E-mail is not encrypted

Never transmit confidential data over e-mail, such as passwords, credit card information, etc. E-mail is not encrypted and if intercepted by a third-party, it could be read.

Be aware of phishing scams

Familiarized yourself with phishing scams and techniques, which are used to trick you into divulging your account information. Online banking sites, Paypal, eBay, Amazon, and other popular sites that require logins are popular targets.

Use caution when accepting or agreeing to prompts

When prompted to install any program or add-on, make sure to read and understand the agreement before clicking on the Ok button. If you do not understand the agreement or feel it is not necessary to install the program, cancel or close the window.

Additionally, when installing any program, watch for any check box that asks if it's ok to install a third-party program, toolbar, etc. These are never required and often cause more issues than good. Leave these boxes unchecked.

Be cautious where you're logging in from

Business

Your place of work can install key loggers or use other methods of monitoring the computer while online. Someone who has access to this information could read these logs and gather usernames and passwords. Also, do not store any passwords in your browser if your computer is shared with other coworkers.

Wireless network

When on a wireless network, realize that all information being sent to and from your computer can be intercepted and read by someone nearby. Prevent this from happening by only logging onto a secure network using WEP or WPA (only use WEP if WPA is not available). If this is a home wireless network, make sure it is secure.

Friends house

Be concerned when logging into an account on a friend's computer. A computer or network you are not familiar with could intentionally or unintentionally log usernames and passwords. Finally, when logging into any site on a friend's computer, never save the password information on their browser.

Use an alternative browser

Older versions of Internet Explorer are notoriously insecure. If you are using Internet Explorer as your browser, consider an alternative browser such as Google Chrome or Mozilla Firefox. If you are running Windows 10 and want to continue to use a Microsoft browser, consider using Microsoft Edge instead of Internet Explorer.

Be aware of those around you

While at work, school, library, or anywhere that has people around who could look at the monitor, be cautious of anyone shoulder surfing. Someone could watch you type in your password, which would give them access to your account.

If you need information displayed on the screen to remain private, consider a privacy filter for the display.

Update Internet browser plugins

Often many attackers find security vulnerabilities through browser plugins, such as Adobe Flash. Make sure all installed Internet plug-ins are up-to-date.

Secure saved passwords

Make sure to store passwords and login information in a secure area. Never write login information on a sticky note or in a text file that is not encrypted.

 

To save your passwords, we recommend using a password manager, which stores all login information and securely encrypts and password protects that information.

When saving password information in a browser, it may be visible to anyone who has access to your Internet browser. For example, without a master password setup in Firefox, anyone can see all stored passwords.

Protect yourself against malware, spyware, and viruses

Protect your computer from viruses by installing an anti-virus program on the computer. If you do not want to install anti-virus protection and your computer is running a newer version of Windows, at least have Windows Defender running on the computer. Also, having a malware protection program on the computer, such as Malwarebytes, is also a good method of protecting your computer against malware and spyware.

Is the World Wide Web (WWW) the same as the internet?

Many people use the terms internet and World Wide Web interchangeably, but in fact the two terms are not synonymous. The internet and the web are two separate but related things. The World Wide Web is a way of accessing information over the medium of the internet. The web uses the HTTP protocol (hypertext transfer protocol), which is only one of the many “languages” spoken over the internet, to transmit data. Email, instant messaging, and uploading and downloading files are all things that you do on the internet but aren’t part of the HTTP protocol. The web utilizes special software called browsers to access web documents (more commonly known as web pages) that are linked to each other via hyperlinks. Web pages contain some or all of the following: text, images, audio, and video. If you walk into a car dealership and say “I want to buy a vehicle...” Well, a vehicle can be any number of things: a car, a van, a truck, an SUV, a motorcycle, maybe even a boat. “Vehicle” is a very general term. If you walk into a car dealership and say “I want to buy a car,” then you are being (somewhat) more specific and eliminating trucks, vans, SUVs, and so forth from your buying options. Think of the term “vehicle” as being similar to the internet. It’s a broad term that covers a lot. Think of “World Wide Web” as a term similar to car—it’s a bit more specific. While the vast majority of “vehicles” on the road are in fact cars, not all vehicles are cars. Similarly, while the vast majority of what you may do on the internet involves the World Wide Web, not everything on the internet is part of the web. 

What is the internet used for? 

A lot of different things! People use the internet to apply for jobs, play games, do research, watch movies, listen to music, go to school, stay in contact with friends, family, and co-workers, run a small business, buy or sell products, and much more. 

How do you connect to the internet? 

There are many different ways to connect to the internet from your personal computer. The most popular ways are listed below.  Dial-up: With a dial-up connection you can connect to the Internet via a telephone line and an internet service provider (ISP). This method is inexpensive, yet obsolete. It provides the user with the slowest overall connection speeds. However, it may suit the purposes of the occasional internet user without a need for a fast or consistent connection.  Broadband: Cable, DSL, and fiber optics are in this category. With a cable connection, the user must subscribe to a cable television/internet service. These connections offer speeds up to 70 times faster than dial-up. They also allow the user to stay connected to the internet at all times; the user need only open a browser window to access the internet, as there is no log-on process to complete. Like cable internet service, DSL offers much faster speeds than those available with dial-up modems. However, there are a wide range of speeds available from different providers. With DSL, normal telephone wires are used to combine usually separate voice and data lines, allowing users to connect to the internet and talk on the phone via the same telephone line. The newest technology, fiber optics, allows speed even greater than DSL or Cable. Fiber optic connections are more expensive than DSL and Broadband, and are not available in all areas (yet).  Wi-Fi: It’s even possible to connect to the internet wirelessly from home or while you are out and about. Wireless technology allows users to have mobile connections, accessing the web where and when they need to. Wi-Fi networks can be found at many businesses, restaurants, and other public areas (parks, schools, libraries) or a home connection can be set up through your ISP. These technologies vary in terms of connectivity, reliability, and cost, but they all allow users to connect whether they are at home, school, work, or on the road.

   

Opening up the browser One thing you will notice about the computer as you become more comfortable with it—there are usually at least three different ways to do everything. For example, on most computers there will be an icon on the desktop for your internet browser. Typically it will be the brand name of the browser, for example the icon will usually say “Internet Explorer.” By double clicking on this icon, your browser should automatically open up and take you to your home page. The home page is the first webpage that is displayed when you open your internet browser. If you don’t see the icon on the desktop for Internet Explorer, try clicking on the Start button on the lower left hand corner of the screen. Often right there on the start button menu you will see an option for Internet Explorer. A single click of the mouse will take you to the internet from here. Sometimes you might even have a little logo next to the Start button on your desktop taskbar. If you have IE on your computer, it will probably look like a lowercase blue “e” with a yellow ring around it. This is the logo for Internet Explorer, and clicking on it will open the browser. None of these options for opening up a browser are “right” or “wrong”—it’s just a matter of personal preference. They all take you to the same final destination! 

Basic parts of the browser 

When you open your browser window, no matter which browser you use, you will usually see several main parts: The address bar is where the web address of the page you are currently on is displayed. It’s the white bar at the very top of your page. If you want to go to a new website and know the Uniform Resource Locator (URL), or web address, of the site you'd like to go to, you can click in the address bar and type in the address, click the enter button on your keyboard, and go directly to that page. 

Whether you’re looking for a last-minute Christmas gift or just a little treat for yourself, you may be able to score a great deal this week on one of the best phones around: Sprint, Verizon and T-Mobile are each offering customers savings of up to $400 on a brand new Pixel.
While you can’t buy the Pixel at Sprint or T-Mobile, there are still deals to be had. Take an unlocked Pixel into either carrier’s stores and you will receive $240 in discounts on the Pixel and $325 on the Pixel XL, spread out over two years, a savings of $10 and $13.55 per month, respectively. While T-Mobile is advertising the offer to anyone, it seems that Sprint is being a little coy about it. As Android Police explains, you may have to jump through some customer representative hoops before the deal is applied.The catch is you need to be willing to stick with the same company for at least 24 months to get the full savings. The best deal we could find is at Verizon, Google’s exclusive partner for the Pixel. While you’ll get a slightly modified version of the phone—and have to rely on Big Red for updates—the carrier is offering a pretty sweet deal, selling the 32GB Pixel for just $10 a month and the $128GB model for $15 a month. If you’re looking to upgrade to the Pixel XL, it’ll run you $15 a month for the 32GB model and $20 a month for the 128GB one. That works out to about $400 in savings over the course of the contract.

Network Visibility: More than Just Simple Management

It seems like virtually everyone is aware of the need for greater network visibility these days, but there is very little guidance, other than from vendors selling products, as to what should be monitored, and how.

On a basic level, network visibility is about not only tracking the interplay of switches, routers and other devices, but drilling deep into network traffic and implementing deep packet inspection to glean a wealth of information regarding the carriage of enterprise data.

This offers a number of benefits beyond mere network management, says AGC Research analyst Robert Haim. Yes, it helps with resource planning and allocation, as well as fault resolution and service recovery, but it also goes a long way toward ensuring top application performance and customer satisfaction, not to mention improved security and access authorization. In addition, strong network visibility can help improve the effectiveness and extend the lifecycles of legacy monitoring systems, as well as the advanced analytics engines that are starting to leverage Big Data to optimize increasingly complex data flows.
 Indeed, from a vendor perspective, the race is on to provide the deepest levels of visibility on the block. Ixia recently expanded the capabilities of its CloudLens platform with the Virtual Packet Broker (vPB) to allow admins to peer into virtual network traffic across their private clouds. The system is intended to address the connectivity and dynamic workflow characteristics that arise with east-west, M2M traffic, particularly as volumes start to overwhelm traditional monitoring tools. The system provides data aggregation, filtering, dedupe and a host of other functions using a virtual appliance that can be deployed in conjunction with dynamic virtual networks.

Meanwhile, Brocade just added new visibility features to the SLX switch family to support the expanded Workflow Composer automation suite. The aim is to deliver broad network agility at all layers of the data center stack, allowing users to define the parameters of their networking environments and quickly adapt to new technologies and service models as they arise. Visibility is managed through the SLX Insight Architecture, which is embedded onto every switch and router in the network to provide rapid fault location and remediation. Some models like the SLX 9140 and 9240 also include a programmable ASIC that extends visibility from physical layers to virtual networks and workloads.

Different enterprises, and even different workloads, will have different needs when it comes to visibility, of course, but in general it should be implemented as a core networking function for both management and security purposes, says APCOM CEO Richard Rauch. A key element in the desire to peer directly into network traffic is the deployment of TAP (test access points) and SPAN (switch port analyzers) on all nodes. This provides full visibility in real time of both physical and virtual traffic and, provided the monitoring is kept out-of-band, ensures that data flows will not be impeded.

It might be tempting to think that too much visibility is just as bad as too little. But issues regarding data overload diminish once network management is placed on an automated footing. In fact, a steady flow of monitoring information is likely to prove vital in the near future as data environments learn to adapt and change to dynamic application requirements on the fly.



The old adage “you can’t monitor what you can’t see” is proving to be particularly accurate as network environments become more distributed and abstract, which is why the enterprise must deploy increasingly sophisticated technologies as their data footprints extend beyond the data center walls.

And since much of this distributed networking infrastructure is built and maintained by third-parties, the only way to know what’s really going on out there is to monitor traffic.

Canada declares ‘high-speed’ internet essential for quality of life

Canada has recognized the obvious and declared high-speed broadband internet access a “basic telecommunications service” that every citizen should be able to access. Previously, only landline telephone services had received this designation from the country’s national telecoms regulator, CRTC, and the change is supported by a government investment package of up to $750 million to wire up rural areas.

“The future of our economy, our prosperity and our society — indeed, the future of every citizen — requires us to set ambitious goals, and to get on with connecting all Canadians for the 21st century," said CRTC chair Jean-Pierre Blais at a news conference. “These goals are ambitious. They will not be easy to achieve and they will cost money. But we have no choice.”

As part of declaring broadband a “basic” or essential service, the CRTC has also set new goals for download and upload speeds. For fixed broadband services, all citizens should have the option of unlimited data with speeds of at least 50 megabits per second for downloads and 10 megabits per second for uploads — a tenfold increase of previous targets set in 2011. The goals for mobile coverage are less ambitious, and simply call for “access to the latest mobile wireless technology” in cities and major transport corridors.

The CRTC estimates that some two million Canadian households, or 18 percent of the population, do not currently have access to their desired speeds. The $750 million government fund will help to pay for infrastructure to remedy this. The money will be distributed over five years, with the CRTC expecting 90 percent of Canadians to access the new speeds by 2021.

The new digital plan also touches on accessibility problems, with CRTC mandating that wireless service providers will have to offer platforms that address the needs of people with hearing or speech disabilities within six months. Blais said this timeline was necessary, as the country “can’t depend on market forces to address these issues.”

Apple’s new Support app is a one-stop shop for appointments and advice

Apple has launched its dedicated iOS support app in the US. An early version of the app was leaked back in 2015 and appeared in other markets earlier this year; now, though it’s available to download from the App Store.

The app is named Apple Support, and does, well, exactly what you’d expect. Once downloaded, you can use it find out information about your registered Apple products; browse guides and tutorials on subjects like iCloud and photo editing; and schedule repairs and appointments at local Apple stores. You can even message, call, or email staff straight from the app, as well as get guidance for common problems like forgotten Apple IDs or poor battery life. 

  it’s possible that Apple Support will take the place of the company’s Tips app. And by “possible” we mean “we very much hope so.” Tips was launched with iOS 8 but is probably ignored by most users. Too inconspicuous to attract the people who might need it; too banal to interest anyone else. Putting guides into an app with a definite function (booking Apple Store repairs) is a much better way to go.

Amazon’s Prime Video is now available in more than 200 countries

Amazon has officially launched its video-on-demand service Prime Video in more than 200 countries and territories around the world. The retailer suggested it would be doing so earlier this year, but the launch is now official, with Prime Video available at an introductory price of $2.99/€2.99 a month in numerous markets.

This subscription rate is good for half a year, after which the price rises to $5.99/€5.99 a month. The subscription is bundled in to Amazon Prime where available, and there’s also a free seven-day trial for those that want to test it out first. You see a full list of countries where Prime Video is available 

This means Amazon’s streaming service is now available in more countries than Netflix, which launched in 130 new markets earlier this year. In both cases, though, the big missing market is China — which keeps a tight control on its internet and of Western cultrual imports. Nevertheless, Chinese citizens are known to be big fans of pirated shows including House of Cards and Sherlock.

But while Amazon looks like it has the potential to reach more viewers, Netflix likely has the advantage in content. It’s not clear exactly which TV and films will be available in which countries, but Amazon says shows available around the world will include Mozart in the Jungle, Transparent, The Man in the High Castle, and The Grand Tour.

The latter is undoubtedly Prime Videos’ biggest draw at the moment, with the motoring show (a reboot of the BBC’s Top Gear in all but name) attracting more illegal downloads than even Game of Thrones. Amazon will be hoping it can convert at least some of those pirates into good, honest, subscribers, but it’ll need more than just one show to make Prime Video a success in its own right

You can now delete (almost) all trace of yourself from the web with a click of a button

The internet never forgets. What may have been an embarrassing Facebook photo eight years ago could be dredged up to affect future job prospects, or a tweet on your views about climate change could come back to haunt you when you’re formulating policy.

It is possible to go through and manually remove yourself from sites but this can be a time-consuming task. Swedish website Deseat.me allows people to erase their online footprint with the click of a button.

Designed by two Swedish programmers, Wille Dahlbo and Linus Unnebäck, the site says it helps you ‘clean up your existence’ by collecting all the accounts and deleting them.

READ MORE

• Evernote hacked, forces millions of users to reset their passwords

  

  Evernote hacked, forces millions of users to reset their passwords

  ---

  By PHILIPPA WARR

Users sign in with their Google account details and Deseat.me finds all the different online accounts they have, such as Facebook, LinkedIn and Evernote. The website then uses Google’s OAuth protocol to access all the data available before providing the customer with delete links for each of their accounts so they can get rid of all their online activity.

WHAT IS ment by GOOGLE'S OAUTH PROTOCOL?

OAuth is an open standard for authorisation, normally used as a way for internet users to log into third-party websites using their Microsoft, Google, Facebook (and so on) accounts without exposing their password.

It isn’t perfect, though. Deseat will only be able to find the accounts that are linked to a Gmail account – so any old accounts that were created using a different email address will not be cleared. And it isn’t possible to completely erase yourself online; any pictures or videos for instance that are available to see through a friend’s Facebook account will still be available even after you have deleted your own account from the site.

It may be slightly disconcerting to allow a website access to all your online accounts before allowing them to be wiped clean. However, the site claims “privacy and data security is something we regard as extremely important”. As Deseat.me uses the Google OAuth protocol, it means that it won’t have access to anyone’s login information, the only thing it finds are the accounts you want to delete.

Android 7.1.1 update brings GIFs, new emoji and Pixel features and more

few months after the release of Android 7.1, Google has announced an update to its Nougat software which provides Android users with new features from diverse emoji to app shortcuts.

Google has added updated support for its image keyboard, making it easy to find and send pictures or GIFs without having to leave the messaging app on Android.

READ MORE

• Gooligan malware attack hits one million Google accounts

  

  Gooligan malware attack hits one million Google accounts

  ---

  By MATTHEW REYNOLDS

This new feature will work inside Hangouts, Allo and the Messaging app and has been available in the Gboard iOS keyboard since earlier this year. It will now be available on more Android phones.

Android is also diversifying its emoji range to offer a wider selection of professions for women. Android owners can customise their messages and tweets with female farmers, chemists and coders in a variety of skin tones to make emoji more inclusive for everyone.

Facebook, Twitter, Microsoft, YouTube Launches Shared Terrorist Media Database

Facebook, Microsoft, Twitter and YouTube have launched a shared database of terrorist material uncovered on their networks, in a bid to speed up the removal of harmful content.

The joint statement comes one day after all four companies were publicly criticised by EU Justice Commissioner Vera Jourova for failing to adhere to a voluntary code of conduct signed in May, which stipulated they review and disable most “valid” notifications of hate speech within 24 hours.

The new statement appears to go one step further than the code of conduct, and is a public pledge for the companies to take down what it calls “the most extreme and egregious terrorist images and videos” in a more efficient manner. The statement does, however, maintain that the companies take "swift action" when "alerted" to content - so although the database itself is a proactive step, the approaches the tech giants use to tackle the problem in a largely passive way, have not changed.

READ MORE

• WIRED Awake: 10 must-read articles for December 6

  

  WIRED Awake: 10 must-read articles for December 6

  ---

  By WIRED

How will the database work effectively

From today, the four tech giants will each contribute to a shared database populated with media that has been assigned a hash, something akin to a digital fingerprint. This media will include “violent terrorist imagery or terrorist recruitment videos and images we have removed from our services”. The technique is already widely used by Google and others to categorise child abuse content online. Once a piece of media has been assigned this unique marker, that marker can be used to trawl through a network and seek out the matching piece of content in case it has been replicated elsewhere. A global database for child abuse content has been setup and Project Vic coordinates how that material is shared to help law enforcement across the globe.

The tech giants' statement makes it clear that none of the companies intend on either blindly deleting content once it is flagged, or immediately handing it over to governments, however. Each company will continue to use its own systems for identifying content and categorising it, referring to its own terms of service. It will then choose what content to share in the database: “content most likely to violate all of our respective companies’ content policies”.

READ MORE

• Names of terror suspects linked to the Madrid bombings leaked online by Europol officer

  

  Names of terror suspects linked to the Madrid bombings leaked online by Europol officer

  ---

  By AMELIA HEATHMAN

“No personally identifiable information will be shared, and matching content will not be automatically removed. Each company will continue to apply its own policies and definitions of terrorist content when deciding whether to remove content when a match to a shared hash is found. And each company will continue to apply its practice of transparency and review for any government requests, as well as retain its own appeal process for removal decisions and grievances.”

Essentially, the only thing that will change, is that the most serious terrorist content which is unquestionably destined for removal, and probably the government, will be more easily identified across all four services once it is identified across a single service. It’s likely, though, that this type of material would be the most easily identifiable anyway, as it will be the most obvious choice for users to flag up if they come across it.

Does the database go far enough fix these issues

Only focusing on “content most likely to violate all of our respective companies’ content policies”, is the smart, least problematic way to go. But the companies have proven in the past to differ on what they consider acceptable material, and have refused to remove content which governments have argued falls under the definition of illegal terrorist content.

Facebook famously allowed videos of beheadings to be shared on its service, but not breastfeeding photos. Earlier this year, it was revealed in court proceedings that both Twitter and YouTube refused requests from the British authorities to remove Anjem Choudary’s online posts after he was arrested for supporting ISIS.

All four companies tread a fine line when filtering content, and seem committed to following the letter of the law while allowing content that, although unpleasant, may not be illegal. Back in 2008 when Google refused a US senator’s plea to remove terrorist videos, Eric Schmidt explained it thus: “While we respect and understand his views, YouTube encourages free speech and defends everyone's right to express unpopular points of view. We believe YouTube is a richer and more relevant platform for users precisely because it hosts a diverse range of views, and rather than stifle debate, we allow our users to view all acceptable content and make up their own minds.”

The latest joint statement from Facebook, YouTube, Twitter and Microsoft, was careful to emphasise that the companies will still prioritise user privacy, and transparency around its own work. There are also plans to expand the database to “involve additional companies in the future”.

It’s well known social networks have been used to share terrorist propaganda, hate speech and even terrorist recruiting materials. Most recently, a Commons home affairs select committee claimed social networks were "consciously failing" to prevent their services being used as recruitment tools. The latest statement seems a reaction to this mounting pressure, particularly from within Europe.

The report concluded: "These companies are hiding behind their supranational legal status to pass the parcel of responsibility and refusing to act responsibly in case they damage their brands," the report said. If they continue to fail to tackle this issue and allow their platforms to become the 'Wild West' of the internet, then it will erode their reputation as responsible operators."

More ThaN 85 Million Dailymotion Accounts Have Been Hacked

Millions of accounts on the French video-sharing site Dailymotion have been hacked, with details including email addresses and usernames reportedly stolen.

An unknown hacker extracted 85.2 million unique email addresses and usernames from Dailymotion, according to LeakedSource. Around one-in-five accounts, about 18.3 million, had associated passwords. The passwords were hashed, meaning they were scrambled and so not easy to read, Dailymotion users are still at risk of phishing attacks.

Javvas Malik, security advocate at AlienVault told WIRED: “While it is too early to establish the why or how, of what happened, the attack against Dailymotion serves as a reminder that a company doesn’t need to hold financial information or any other form of overtly valuable data to be a target. Attackers will go after a company, particularly ones with large user bases for a variety of reasons.”

READ MORE

• Europe's 100 hottest startups 2012: Paris

  

  Europe's 100 hottest startups 2012: Paris

  ---

  By HUGO COX

Due to the amount of passwords taken in the hack, Malik warned that these passwords could be used as re-use attacks against other services, similar to the attacks against Camelot perpetrated by reused passwords.

Last week, Camelot was forced to suspend certain accounts after suspicious activity was spotted. It stressed that there had been “no unauthorised access to core National Lottery systems or any of our databases, which would affect National Lottery draws or payment of prizes".

If you’re concerned that your data has been accessed in the hack, you can check LeakedSource’s database to see if your details are included in those that had been taken.

Mark James, IT security specialist at ESET told WIRED that until it is made public what has been stolen, there is still a need to take action to protect your own data.

“Without further information about what was or was not stolen we won’t know the extent of the damage but needless to say more data being added to your already overflowing online profile floating around the web is not good for any of us.”

What you can do to protect your data

1. If you have used that same password for other accounts then change those immediately
2. Consider using a password manager for extra security if you’re not already using one
3. Be extra-alert to suspicious emails that could be spam or phishing attacks

1. Check and change your passwords on DailyMotion

Twitter mistakenly suspended its own CEO’s Twitter account

social media glitches have embarrassed two of the world’s premier social networks lately. Hot on the heels of Facebook briefly pronouncing its founder as dead, so today Dorsey — the visionary behind Twitter’s inception and driving force for its development — was suspended from the service he helped create for hours.

Former TechCrunch’er Drew Olanoff was among those to notice that @jack was no longer reachable:

So the CEO of Twitter is suspended. On Twitter. pic.twitter.com/XCC2MP4EDJ

— drew olanoff  (@yoda) November 23, 2016

Twitter recently dropped the hammer and suspended a number of ‘alt-right’ figures from using its service, and it appears that its own CEO was locked out for around two to three hours. Dorsey reprised his famous first tweet with a message explaining that there had been an “internal mistake”:

just setting up my twttr…again (account suspension was an internal mistake)

— jack (@jack) November 23, 2016

We’ve contacted Twitter for more details, but let’s hope whoever made the “mistake” is on the end of some Thanksgiving-inspired forgiveness and not looking for a new job. For those who believe Twitter could do a much better job managing abuse and protecting its users, even after 10 years online and much-needed recent reforms, this story is a fairly apt piece of symbolism.

Gong says it’s cracked news personalization

It seems like Ben-Bassat (who was previously an executive at Blizzard Entertainment and a board member at Wix) managed to win some of those investors over — he’s raised $3 million in seed funding from Bloomberg Beta, Sequoia Capital, Mangrove Capital Partners, Boldstart Ventures and various angels.

So what’s Gong doing that’s different? Ben-Bassat classified previous attempts to deliver personalized news into two buckets. First, there are the social networks themselves, which he said were “not built for news” — which is one of the reasons why they’re struggling to fight back against fake news and clickbait.

Second, there are apps that try to identify your interests, then use semantic analysis to determine which articles will be relevant to you — an approach that Ben-Bassat described as “very cold.”

Ben-Bassat said his team at Gong is combining the two approaches, looking at how stories spread across social media and combining that with the behavior of individual readers, creating what it calls the HackRank algorithm. The goal is to predict which story will be interesting to you, even before it’s become a huge story on other sites.

Another Spectacle-selling Snapbot pops up at Brentwood Country Mart in LA

Snapchat now has not one, but two Spectacle-selling Snapbots deployed at the same time. The second dropped Wednesday morning at 10 AM ET (7 AM PT) at a spot near Santa Monica at the Brentwood Country Mart in Los Angeles.

The Brentwood Country Mart is a shopping and for spot in L.A.’s Brentwood district, which actually hosts a petting zoo, too. This is the third time a Snapbot has dropped in the Los Angeles area, which makes sense given that Snap, Inc. is based there and it’s the perfect place to sell a gadget that’s trying to be more of a fashion statement and hype acquisition than an early adopter lure for nerds.

Though the new spot doesn’t appear to be a permanent one, like the location in NYC next to the Central Park Apple Store, which is set to run through New Year’s and restocks at least once daily. So, if you’re in the area and still want some Specs, head down early and expect a line.

SocialBooks turns your social media into a lasting memento of your horrific year

The service is called MySocialBook and it’s quite simple. You feed it your social media accounts and it automatically generates a multi-page book, dedicating a few pages to each month. I ran a book for 2015 and I got to see my pointless gripings, baby photos, and inane comments in living color in a very nicely printed paperback book. It’s a really nice product – you feel like you’re seeing little snippets of your year – and the design is clever and clear. The books start at $11 for softcover and $13 for hardcover.

While I’m obviously not the right audience for this product it was nice thumbing through the pages to see my photos with my favorite people and the fun cover featured my happy daughter. Like a baby book, MySocialBook is probably not something you reach for every day but it will be fun to see photos and comments from 2015 when you’re old and gray or I suppose that’s the hope.

Luckily the algorithm only picks out popular posts in your social media feed and it seems to have some smarts when it comes to photo selection. I didn’t see many duds when I was thumbing through the book. Although I’m still on the fence whether or not my social media is important at all, MySocialBook definitely adds a little bit of import to an otherwise maudlin part of my online life. The product ships six days after creation which means it could be a nice holiday gift for a favorite Facebooker in your life. Further, a physical book of your social media content can remind you that you are alive.

CNN buys Casey Neistat’s Beme app, brings the YouTuber in-house

CNN has acquired Beme, the social app co-founded by YouTuber Casey Neistat. As part of the deal, Neistat will lead the Beme team as a new standalone media sub-brand operating under CNN’s umbrella as executive producer, and all 11 members of the Beme team will join the ranks of the news network, according to Variety.

Beme’s had an interesting history, with a founding vision of providing a means for users to share quick, short clips of video without edits, as a means of bridging the gap between live streaming and more polished YouTube-style creator production. Neistat discussed Beme’s founding vision and financial state on state at Disrupt New York 2016, where he noted that he didn’t actually pay himself a salary as a way of mitigating burn rate for the startup.

The social app actually launched in summer of 2015, but despite early success claims including half a million downloads and one million videos uploaded within its first few days of availability, things went quiet about the app following its debut – so much so that Neistat even posted an explainer video on YouTube a year after launch explaining “what the hell happened” to the app. This preceded a May relaunch as the app exited beta with many bug fixes and functional adjustments in tow.

Beme still never really found its footing, at least not with anywhere near the success of comparable social video apps like Snapchat or Musical.ly. Still, CNN is acquiring it with the intent of investing in the team (hiring producers, developers and content creators) and the product in order to create a new brand focused on a millennial audience, according to Variety.

This isn’t the first time CNN has looked to acquisition as a means to try to help it supplement its approach to digital media; the news giant previously acquired Flipboard competitor Zite in 2011, before ultimately flipping the digital pub to Flipboard itself in 2014.

Neistat had previously announced he would be ending his long-running daily vlog to focus on other projects, and now it’s clear he was talking about this tie-up with CNN.