VoIP Ideal Platform For Controlling Botnets

Botnets and their masters can communicate with one other by calling into the same VoIP conference call and exchanging data using touch tones, researchers demonstrated at Defcon.

This gives the botmasters — whose top goals include remaining anonymous — the ability to issue orders from random payphones and disposable cellular phones, say researchers Itzik Kotler and Iftach Ian Amit of security and risk-assessment firm Security Art.

Using phones and the public phone networks eliminates one of the prime tools bot fighters have: taking down the domains of botnets’ command and control servers, the researchers say. If the botmaster isn’t using a command and control server, it can’t be taken down.

In fact, the botmaster can communicate with the zombie machines that make up the botnet without using the Internet at all if the zombies are within a corporate network. So even if a victim company’s VoIP network is segregated from the data network, there is still a connection to the outside world.

In addition to its stealth, the VoIP tactic employs technology that readily pierces corporate firewalls and uses only traffic that is difficult for data loss prevention software to peer into. The traffic is streamed audio, so data loss prevention scanners can’t recognize patterns of data they are supposed to filter, the researchers say.

The downsides of VoIP as a command channel are that it severely limits the number of zombie machines that can be contacted at once, and the rate at which stolen data can be sent out of a corporate network is limited by the phone system. But Kotler and Amit say the connections are plenty big to send commands in.

During their demo at the conference, the pair had an Asterisk open source IP PBX stand in as the corporate PBX. A virtual machine representing a zombie computer on a corporate network called via TCP/IP through the PBX and into a corporate conference call. A BlackBerry, representing the botmaster dialed in over the public phone network to the same conference call.

Read More…

India Wants To Monitor Twitter & Facebook

India’s Communications Ministry has received a request from the Home Ministry to monitor social networking websites such as Twitter and Facebook amid fears that the services are being used by terrorists to organize attacks.

The request suggests that the Indian government is trying to expand the scope of its online surveillance for national security purposes.

Telecommunications service providers in India provide facilities for lawful interception and monitoring of communications on their network, including communications from social networking websites such as Facebook and Twitter, in accordance with their license agreements, Milind Deora, the minister of state for communications and IT, told Parliament, according to the country’s Press Information Bureau.

But there are certain communications which are encrypted, Deora said Friday.

The government did not provide details of what encrypted data they would like to have access to. A spokesman for the home ministry said on Monday that additional
information can only be provided in Parliament while it is in session.

Under new rules to the country’s IT Act that came into force earlier this year, websites and service providers are required to provide government security agencies with information on private accounts, including passwords, on request without a court order.

Most companies, however, are not willing to share information with law enforcement agencies unless they have a court order.

Twitter states in its guidelines for law enforcement that “non-public information about Twitter users is not released unless we have received a subpoena, court order, or other valid legal process document.”

Read More…

Apple Tech Support Satisfaction Plummets

Apple customers are increasingly unhappy with the company’s technical support, which could affect the firm’s bottom line in the future, a researcher said today.

Although Apple continues to outperform rival computer makers Hewlett-Packard and Dell in overall customer satisfaction with technical support, in several areas Apple’s slippage over the last year is alarming, said Peter Leppik, CEO of Vocalabs, a Minneapolis-based company that surveys consumers after they’ve contacted customer or technical support.

“Apple is still definitely ahead of its competition, but what we are highlighting are deeper metrics that are showing negative trends,” said Leppik. “Customers are upset with the automated part of support calls to Apple, and that might be trickling into higher metrics.”

Those higher metrics Leppik referenced include the likelihood customers will return for another purchase in the future, or continue to recommend Apple products to friends and family.

In the past 12 months, consumers who said they were “very satisfied” with Apple’s technical support dropped 15 percentage points, from 73% at the mid-point of 2010 to 58% halfway through 2011, said Leppik.

The primary cause of the tumble was a turnabout in customers’ opinion of the automated section of their calls to Apple. In the last year, the percentage of those who said they were very satisfied with the quality of Apple’s automation fell 13 points to 24%. That’s a new low for Apple in Vocalabs surveys, and a whopping 28 points off the peak of 52% a year-and-a-half ago.

Read More….

Poor Get Online With Cloud Phone

Start up firm Movirtu has made plans to help 3 million or more people in poor countries use mobile services by giving them personal phone numbers, not phones.

Working with a U.N.-affiliated initiative called Business Call to Action (BCtA), Movirtu will offer the numbers, which it calls mobile identities, through commercial carriers in developing countries in Africa and South Asia. People in those countries who typically borrow phones from others will be able to log into the carrier’s network and use their own prepaid minutes and bits of data. The service is called Cloud Phone, though it operates within a carrier’s own infrastructure rather than on the Internet as a classic cloud service would.

Having a personal mobile identity can save users money in two ways, according to Ramona Liberoff, executive vice president of marketing, strategy and planning at Movirtu. First, they can use mobile services without buying a phone, which is a luxury even at US$15 or $20 for people making $1 or $2 per day. Second, the cost of prepaid service from a carrier typically is less than what consumers in those countries pay someone to borrow a phone, she said.

Though it’s customary in many of these countries to lend a phone to someone in need, the borrower is also expected to pay the lender for the usage. The average savings from using regular prepaid service instead is estimated at about $60 per year, Liberoff said.

The service will help people to use mobile banking, insurance and farming assistance services as well as make phone calls, Liberoff said.

Some of these services currently can only be delivered to individuals and not to someone sharing a phone. Personal mobile identities could be a boon to NGOs (non-governmental organizations) that want to use mobile technology. “In many cases, there are great NGO programs that can’t reach 80 percent of their base,” because those people don’t have their own phones, Liberoff said.

Read More…

Accused Hacker Out On Bail In England

The accused ‘Topiary’, whose name is Jake Davis, was charged on Sunday and bailed by the courts yesterday. He was charged with five offences: Unauthorised access to a computer system, Encouraging or assisting offences, Conspiracy with others to carry out a Distributed Denial of Service Attack on the website of the Serious and Organised Crime Agency, Conspiracy to commit offences of Section 3 Computer Misuse Act 1990, and Conspiracy with others to commit offences of Section 3 Computer Misuse Act 1990 contrary to Section 1 of the Criminal Law Act 1977.

According to a report at the Guardian, his bail conditions are that Davis must wear an electronic tag, not access the internet, and not leave his house between 10pm and 7am.

Davis, who appeared outside court wearing sunglasses and holding a copy of “Free Radicals: The Secret Anarchy of Science” by Micheal Brooks and who allegedly authored the Rupert Murdoch is dead story that appeared on the hacked web site of the Sun newspaper, has already gained support on the internet in general and especially on Twitter.

Read More…

HP Exec Claims Evidence Was Falsified

HP has been accused of producing “false and fabricated” evidence against a former sales executive who the firm claims stole confidential information.

Adrian Jones, who was a sales executive at HP, left the firm to join Oracle in February 2011. HP claims that Jones nabbed a load of confidential information between 10 and 11 February using a removable hard drive. Jones told the court that the hard drive was used by HP for backup and was never in his possession, saying that HP and its outside counsel have confirmed these facts.

Jones’ current employer Oracle said that the accusations leveled at its employee are simply not true, with Deborah Hellinger, a spokeswoman for Oracle telling Bloomberg, “The central allegation in HP’s employment lawsuit against Adrian Jones has turned out to be complete fiction…. If they did it knowingly then HP and their lawyers should be sanctioned. If they did it mistakenly then they simply owe Mr Jones an apology.”

HP is said to have probed Jones’ relationship with a female subordinate, for whom Jones allegedly arranged a 94 per cent pay rise and expensed travel that had no business purpose.

Jones’ case mirrors that of former HP CEO Mark Hurd who left the company after similar expense discrepances were brought to light. Hurd, a close friend of Oracle CEO Larry Ellison, then joined Oracle as co-president within weeks of leaving his post at HP.

HP and Oracle have been going at it hammer and tongs in a largely public row over Oracle’s decision to dump support for Intel’s Itanium architecture. The two companies are in various other legal battles as well, with HP claiming that Oracle had gone from being a partner to a “bitter antagonist”. We assume the next lawsuit will claim that Oracle stole HP’s lunch money and beat it up behind the bike shed, or perhaps the other way around.

Read More….

Is Sprint’s Future Questionable?

Sprint Nextel Corp’s shares fell sharply on Thursday as heavy subscriber losses in the second quarter called into question the strategy and outlook of the No. 3 U.S. wireless company.

Sprint had spent heavily to promote its service and better compete against larger carriers Verizon Wireless and AT&T Inc. But that strategy backfired as profit margins eroded and customer losses persisted.

The weak results overshadowed Sprint’s announcement of a $9 billion network contract with start-up LightSquared, and sent the stock tumbling to its lowest point since February before recovering a little to close down 16 percent.

Investors questioned whether Sprint would be able to meet its 2011 targets after such a disappointing showing.

“Their cost of doing business went up dramatically,” said Piper Jaffray analyst Christopher Larsen. “People have less confidence they can meet expectations.”

Sprint’s operating profit margin of 16.3 percent was well below the average Wall Street estimate of around 19 percent as the company had changed its product rebate terms in an effort to combat Verizon Wireless’ sale of the Apple Inc iPhone, and an iPhone discount at AT&T.

But the bet did not pay off as Sprint still saw defections of 101,000 net subscribers — also known as post-paid customers — compared with analysts’ expectation for losses of 15,000.

Read More…

Alibaba Debuts Smartphone Running Its Cloud OS

Alibaba Group unveiled its first self-developed mobile operating system and smartphone on Thursday in a bid to capture a slice of China’s burgeoning mobile Internet market.

The cloud computing-based operating system, Aliyun, will run the K-Touch Cloud Smartphone, to be launched at the end of July in 10 colors, said Wang Jian, president of Alibaba Cloud Computing, a unit of Alibaba Group.

A tablet PC running the Aliyun OS, which is based on a customized Android system, will also be launched in China by the end of the year, Wang told reporters after a presentation in Beijing.

Handset manufacturer Tianyu will manufacture the K-Touch as well as the tablet, Wang said.

“Mobile users want a more open and convenient mobile OS, one that allows them to truly enjoy all that the Internet has to offer, right in the palm of their hand, and the cloud OS, with its use of cloud-based applications, will provide that,” said.

The Aliyun operating system will feature cloud services such as email, Internet search and support for web-based applications. Users will not be required to download or install applications onto their mobile devices, Wang said.

Alibaba Cloud plans to integrate the operating system with other devices including mobile phones with larger screens and tablet computers in the coming months.

Wang said the company was looking to launch tablet computers running Aliyun by the end of the year.

The company is currently in talks with Qualcomm Inc to develop a lower-end chipset optimized to run Aliyun OS in lower-end mobile phones, Wang said. The K-Touch phones use a high-end chipset from Nvidia Corp for crisp display of intricate games.

Read More…

Google Rewrites Web Pages For Speed

Google has created a hosted service that analyzes Web pages, rewrites their code to make them perform better and serves them up from Google servers.

To use the Page Speed Service, Web publishers must sign up and point their site’s DNS entry to Google. The service grabs the site’s content, optimizes it for speed and delivers the pages to end users.

Visitors will continue to access a site in the same way as before but could see speed enhancements of 25% to 60%, according to Google.

The service is currently being offered free to a limited number of hand-selected webmasters. Google will announce pricing and other details later. Webmasters can sign up to receive information.

Read More…

RIM Cuts 11% Of Workforce

BlackBerry maker Research In Motion Ltd plans to slash approximately 11 percent of its workforce to curb costs as it struggles to compete against Apple Inc and Google Inc.

The announcement of 2,000 job cuts on Monday came a month after the Canadian company acknowledged that it would reduce headcount for the first time in a decade.

One analyst said the job cuts were slightly deeper than expected but were key to RIM’s recovery from a slump triggered by product delays and intense competition from Apple’s iPad and iPhone as well as devices powered by Google’s Android software.

RIM’s U.S.-listed stock, already near multi-year lows, was down as much as 2 percent before the market opened. It was trading down 1.8 percent at $27.40 on the Nasdaq
just before the open.

“This is not totally unexpected. I think the size of (the cuts) is a little bit bigger than what they were intimating before,” said Jefferies & Co analyst Peter Misek. “I think this is obviously realigning the cost structure to a new growth, or sales, reality.”

RIM said one-time charges from the job cuts were not included in its outlook for the second quarter or for the full year, and it would explain the financial impact of the cuts when it reports second quarter results on September 15.

Read More…

« Previous Page — Next Page »