BBC新闻 – 联合国机构 ‘黑客攻击’ 调查

A group of hackers has posted more than 100 email addresses and login details which it claimed to have extracted from the United Nations.

Many of the emails involved appear to belong to members of the United Nations Development Programme (UNDP).

The group, which identified itself as Teampoison, attacked the UN’s behaviour and called it a “欺诈”.

A spokeswoman for the UNDP said the agency believedan old server which contains old datahad been targeted.

The UNDP found [的] compromised server and took it offline,” said Sausan Ghosheh.

通过 BBC新闻 – 联合国机构 ‘黑客攻击’ 调查.

视频: 您的Andr​​oid手机正在秘密录制你所做的一切

 

If you have any decently modern Android phone, everything you do is being recorded by hidden software lurking inside. It even circumvents web encryption and grabs everything—including your passwords and 谷歌 queries.

更坏: it’s the handset manufacturers and the carriers who—in the name ofmaking your user experience better—install this software without any way for you to opt-out. This video, recorded by 25-year-old Android developer Trevor Eckhart, shows how it works. This is bad. Really bad.

Fast forward to 9:00 for the damning sequence.

The spying software is developed by a company called 运营商的智商. In their site, the company says they arethe only embedded analytics company to support millions of devices simultaneously, we give Wireless Carriers and Handset Manufacturers unprecedented insight into their customersmobile experience.

It seems like a good goal and, indeed, most manufacturers and carriers agree: according to Eckhart, the spyware is included in most Android phones out there. 运营商的智商 software is also included in 黑莓诺基亚 智能手机, so it probably works exactly the same in those smartphones as well. It doesn’t even matter if your telephone was purchased free of carrier contracts. As Eckhart shows in this video, it’s always there.

The problem is that it does a lot more than log anonymous generic data. It grabs everything.

阅读更多: http://gizmodo.com/5863849/your-android-phone-is-secretly-recording-everything-you-do

相关文章

Enhanced by Zemanta

巴林公司寻求 $1 亿指称铝业贿赂赔偿 | Law.com

隶属于美铝公司和亿万富翁商人控制的公司支付 $9.5 结果巴林官员和多缴原料与巴林控股公司高管的受贿万元, 在法庭文件中说,中东公司.

周一晚在匹兹堡联邦法院递交申诉铝巴林BSC先前所描述的在一个更普遍的细节指控 2008 诉讼. 该公司, 称为为阿尔巴, 说是买贵了 $420 从原材料万元 1997 到 2009 并希望 $1 亿美元的赔偿金.

投诉亿万富翁, 维克多Dahdaleh, 至少赚 $13.5 万元,为他促成氧化铝交易的非法佣金.

dahdaleh, 加拿大和英国的双重国籍, 否认不法行为,因为他被逮捕上个月,英国严重欺诈办公室有关一些澳大利亚氧化铝出货量的受贿指控 2001 和 2005. 他的律师在诉讼中, 迈克尔·费尔德山Svetkey, 评论的电话并没有立即返回.

美铝呼吁投诉的 “索偿错落有致的” 来自空泛的指控, 猜测和推论.

阿尔巴说,在新的申诉之间 1969 和 1989 购买氧化铝, 所需的原材料,使铝, 从美铝公司. 没有事件和没有Dahdaleh或他的公司作为中间商. 但由于 1990, 美铝与美铝世界氧化铝插入 “dahdaleh,或Dahdaleh国有空壳公司” 将方程, 该诉讼称.

从那时起, dahdaleh贿赂巴林或阿尔巴官员的,以确保金属公司将继续授予美铝的氧化铝供应合同; 多付氧化铝; 美铝和割让股权, 这仍然未能购买控股权益在阿尔巴, 该诉讼称.

官司争辩漏斗通过由Dahdaleh所有犯下涉嫌诈骗的空壳公司的贿赂,并多付的.

通过 巴林公司寻求 $1 亿指称铝业贿赂赔偿.

从非缔约方获取ESI的披露 | 纽约法律杂志

It must be hard to be a computer network professional. You’re responsible to maintain security, you have little or no control over what people send and receive from the computers you maintain, and you may be the only person with the technical knowledge and access to identify the source and availability of electronically stored information. I imagine these folks hate subpoenas, especially if they have nothing to do with their employer’s business.

In Tener v. Cremer,[脚注 1] the plaintiff sought to compel a non-party, 纽约大学, to respond to a subpoena that might enable the plaintiff to identify the source of a posting onVitals.com,” an internet opinion website that advertises itself as the placewhere doctors are examined.This appears to be one of many internet sites that solicit opinions that others may use in making consumer decisions, and the plaintiff in Tener was a board certified physician who wanted to sue the author of allegedly defamatory remarks.

The Vitals.com posting was anonymous,[FOOTNOTE 2] but the plaintiff had learned of an Internet Protocol (IP) 地址[FOOTNOTE 3] associated with the offending message. This IP address did not identify the author’s computer, but did lead to the server for the entire computer network maintained by NYU. Relying on this clue, the plaintiff subpoenaed the university, seeking to identify all persons using the NYU server who had accessed the internet on the date of the offensive posting, and to identify which of those computers had connected to the Vitals.com site.

It apparently was not easy for the university to comply with the plaintiff’s requests. Although only NYU personnel could obtain access to the system, 的 “network address translation portalused by NYU essentially acted as a switchboard, and through this “门户网站,” many thousands of persons had access to outside websites. When NYU did not produce information satisfactory to the plaintiff, she moved to hold the university in contempt of court.

The university responded with an affidavit by its chief information security officer, who noted that the date of the allegedly offending comment was nearly a full year prior to the service of the subpoena, and that computers used to visit outside websites are identified in the NYU system only by a ” … text file that is automatically written over every 30 days.

通过 从非缔约方获取ESI的披露.

在云中的E -发现并不是那么简单,如你所想 – 福布斯

While organizations are utilizing cloud-based solutions more and more, eDiscovery from those solutions often remains an afterthought. 在许多情况下, there is little consideration of how information in the cloud will be placed on legal hold, or how it will be accessed, reviewed and produced in response to litigation or regulatory requests. While there seems to be a widespread assumption that information in the cloud is at an organization’s fingertips at all times with the touch of a search button, that is not necessarily the case.

A large majority of respondents to our “The Cloud and eDiscovery” survey are using cloud-based solutions, ranging from hosted email archiving to popular applications like Salesforce.com and QuickBooks. Companies are knowingly or unknowingly storing discoverable information assets in the cloud. But the real question they should be asking is, “Do we have a plan in place for eDiscovery should the need arise?“

eDiscovery Plan

Overwhelmingly, the answer is no. 只有 16% of respondents indicate that an eDiscovery plan is in place for cloud-based information management solutions. 诚然, 只能 26% actually responded that they do not have an eDiscovery plan in place, but what is truly scary is the 58% who don’t even know if a plan exists. This means that many organizations, when they face an investigation or litigation, will be left scrambling in a reactive firefight to collect information from the cloud. That will inevitably lead to higher costs and more difficulty making informed legal decisions quickly.

Any organization utilizing cloud-based solutions to store information needs to have eDiscovery plans for each one of those solutions. Such plans need to define access protocols, service-level agreements for how quickly information can be produced, documentation for chain of custody and any kind of advanced functionality (克, content analytics for Early Case Assessment) that will be included.

通过 在云中的E -发现并不是那么简单,如你所想 – 福布斯.

联邦法官命令谷歌, Facebook来“德指数” 700 域名

In a move likely to send counterfeit product sites scrambling for new homes on the Internet, a federal judge has ordered in favor of a fashion company seeking to protect the brand.

Announced earlier today out of Nevada, Judge Kent Dawson ordered that luxury goods designer Chanel now has the legal right to seize domain names of over 700 sites that are attempting to sell counterfeit Chanel products. These domain names can be taken over by Chanel and transferred to domain registrar GoDaddy. All pages would then be redirected to an online notice of the seizure.  The federal judge also ordered that all search engines and social networks “de-index” the sites in question. Sites specifically named in the ruling include Google, 兵, 雅虎, 注册Facebook!, Twitter and Google+. None of the site owners have the right to contest the removal of the domain from search engines or contest the transfer of ownership until after the domains are seized.

通过 联邦法官命令谷歌, Facebook来“德指数” 700 域名.

锡里如何可以使协作移动 – 电信 – 统一通信/通讯 – “信息

What might a voice-activated collaboration client do? Siri’s current ability to make calendar entries, send text messages, and take dictation hint at the possibilities. 例如, the standard way of sharing comments is Facebook’s wall metaphora comment stream threaded beneath an anchor topic. In the context of enterprise collaboration, the topic is likely to be a PowerPoint deck or meeting agenda. While it’s possible, although rarely pleasant, to read heavily formatted content like a slide deck on a smartphone, typing a comment is onerous, even with a client optimized for the smartphone’s small display. Wouldn’t it be nice to dictate your thoughts instead?

当然, this text-to-speech example just hints at what innovative developers might do with a cloud-based speech-recognition engine. Siri already understands context, in that prior requests inform subsequent answers. AskFind me the nearest Mexican restaurant,” and Siri replies with a list based on your current location. Follow up with “在, make that pizza,” and Siri remembers both the context (restaurants) and location. Imagine if this same logical power could be applied to any application. Say you’re a sales rep and your manager has shared a spreadsheet with regional sales estimates. If you have updated figures for your territory, instead of hunting and pecking changes on the tiny touchscreen keyboard, wouldn’t it be nice to say, “Siri, change the sales estimate for the Northwest region from 750,000 to 900,000and have the update applied, along with a comment field indicating who made the change? 同样, when reviewing a project manager’s task schedule on the road from your phone, wouldn’t it be nice to update it with a simple voice command? “Siri, change the completion date for software pilot testing to Feb. 9.”

Natural-language control of computer systems is not new; it’s been a staple of science fiction since Star Trek. But Siri, with its merging of client-side language processing and server-side meaning interpretation, has raised the bar on what’s possible. While talking to a laptop, with its expansive keyboard, never made much sense, talking to your phone couldn’t be more natural. Instead of having conversations with friends or colleagues, let’s just have a conversation with the device itself. Siri ushers in the era in which speech recognition doesn’t let devices just take dictation but actually engage in conversationtell it what we want, react to the response, and modify our requestand use speech as a software UI.

The future of smartphone collaboration lies in vocal, not tactile, interaction. Siri blazes the trail.

通过 锡里如何可以使协作移动 – 电信 – 统一通信/通讯 – “信息.

通过伙伴关系展开你的电子发现的数据采集服务

Global EDD Group - Data Collection & Digital Investigation Services

全球预产集团 - 数据收集 & 数字调查服务

创建或维护数据收集和数字调查小组是为各种规模的组织的主要投资. 除了此行的服务需要专门的硬件和软件的初始成本是持续的劳动力成本,训练有素的专家,从事与每个项目相关的技术任务. 虽然客户可能的需求数据采集处理和托管协议的支持服务, 它往往可能没有良好的商业意识,投资在一个或大或全职的数据收集和数字调查队,因为它可以对经营预算的负担. 作为一种有价值的替代, 全球的EDD集团提供数据采集和数字调查服务外包的分包商, 使行业的厂商提供的服务,有竞争力的价格点,而不会失去控制的客户管理或收集后的服务. 很简单, 从全球的EDD集团的技术人员提供的首选合作伙伴计划通过在你的方向代表您服务.

从全球的EDD集团的首选合作伙伴计划

全球的EDD集团的合作伙伴,致力于提供他们的客户与服务提供商和律师事务所的最优质的发现和文件管理服务. 首选的合作伙伴计划 (3P) 使服务提供商和企业无缝地扩展他们的服务和地理足迹套件结合, 指或倒卖全球的EDD集团服务.

与全球的EDD集团合作的优势:

♦广阔的经验与复合纸 & 电子发现项目
♦驱动,以超出最终客户的期望
♦在亚洲的设施, 欧洲 & 北美
♦流动收集 & 加工单位
♦高级外语服务
♦保留客户端的合作伙伴 / 项目管理的角色

的3P的好处:

♦极具竞争力的平价 & 散装定价模型
♦慷慨的折扣 & 委员会超过行业平均水平
♦严格没有竞争 / 没有征集政策
♦增加利润率
♦利用国际战略联盟

联系我们以了解更多关于全球的EDD集团的首选合作伙伴计划.

Enhanced by Zemanta

浩浩荡荡反海外腐败法“是否需要充满了渴望? – 法律博客 – 华尔街日报

五年后数十亿美元的罚款, 外国腐败行为法“的执法没有冷却的迹象. 但也有许多美国公司认为,美国. 政府是伸展的方式,损害了美国的反贿赂法. 业务.

在这个故事在今天的“日刊, 我们来看看一个广泛的讨论如何执行立法, 刺激了很大一部分的中美. 商会的努力修改 1977 法律.

司法部官员拒绝FCPA的立法变化的需要,说法律的强有力的执法, 达到外交和中美. 公司, 有助于创造一个公平竞争的商业交易领域,从方程,消除腐败。,但支持修订“反海外腐败法”的商会和律师说,仍然有很大的混乱什么是合法的,哪些是不.

该法律禁止公司向外国官员行贿, 但商会希望他们背后的国家所有权或控制的公司的雇员是否符合这样的清晰度. 司法部已采取扩张性的看法, 争论, 例如, 几乎每一位员工的一家制药公司在国营保健系统遇到可被视为外国官员.

通过 浩浩荡荡反海外腐败法“是否需要充满了渴望? – 法律博客 – 华尔街日报.

UPS钓鱼诈骗目标网络星期一购物

As soon as you hitconfirm purchase,” the anticipation begins: when will your package arrive?

Preying on the emtionally charged experience, hackers know many of you will throw caution to the wind and click into an email that says “UPS package not delivered.”

This latest email scam has been mutating and progressing since early November, according to antispam vendor Cloudmark, with reports spiking over Thanksgiving weekend.

“We’ve seen a number of variants in this campaign (some with attachments, some with no attachments and bad links), all of them personalized to the recipient, and sent from an ever-changing list of fake UPS employees or the generic ‘UPS Customer Services,“” Cloudmark wrote in a blog post.

The from address is faked so that it appears to come from the domain ups.com.  Many of the images are copied from legitimate UPS emails and many of the links go to the legitimate UPS site. 不过, clicking on the call-to-action link that saysTrack your shipment nowwill take the unsuspecting consumer to a website that can infect the computer with a virus.

通过 UPS钓鱼诈骗目标网络星期一购物.