RIM To Launch Music Service

BlackBerry maker Research In Motion is making plans to roll out its own music streaming service that will work across its mobile devices, according to people familiar with the plans.

The new service is likely part of an attempt by RIM to improve its BlackBerry Messenger service as it competes with the mobile media platform strengths of rival Apple Inc and Google Inc’s Android.

RIM is in late-stage negotiations with major labels, including Vivendi SA’s Universal Music Group, Sony Corp’s Sony Music, Warner Music Group and EMI Group. The new service is expected to be announced by Labor Day in the United States, September 5.

RIM has been enhancing its BlackBerry Messenger offering, popularly known as BBM, since announcing its “social platform” at last September’s DevCon event where it unveiled the PlayBook tablet computer.

A RIM spokeswoman declined comment on the report but said BBM is one of the largest mobile social networks in the world.

RIM’s BlackBerry smartphones have been hit by a sharply declining market share in the United States, even as the company has expanded sales in other parts of the world, partly because of BBM’s popularity.

Analyst Matthew Thornton at Avian Securities said he doubted the music service would attract new users but might help the company keep its existing BlackBerry customers interested.

“I just don’t think trying to replicate Apple is really going to change their situation near term,” he said.

“For RIM it’s going to be the new OS 7 product first and foremost … and then it’s about QNX and making that transition.”

RIM has just launched an updated operating system on three new touchscreen devices intended to catch up with the technical specifications of Android and other rivals. The company plans to launch the first BlackBerrys using the QNX software, used on its PlayBook tablet, early next year.

Read More….

Spam Is At A Two-Year High

Spam – particularly the kind with malicious attachments – is enjoying a growth spurt, reaching a two-year high overall, which includes the spike last fall just before the SpamIt operation folded its doors, a security firm says.

In fact spam traffic is about double what it was then, according to M86 Security Labs, which analyzes spam levels across selected domains.

“After multiple recent botnet takedowns, cybercriminal groups remain resilient clearly looking to build their botnets and distribute more fake AV in the process,” the company says in its blog. “It seems spammers have returned from a holiday break and are enthusiastically back to work.”

This report coincides with a report yesterday from Internet security company Commtouch, which says a spike in email-attached malware has just ended, but that further waves are expected.

M86 says in its blog that most of the spam is generated by the Cutwail botnet, and malicious spam accounted for 13% of the mix over the past week, which is unusually high, but even that spiked to 24% yesterday.

Read More…

Get Ready For Email-Malware Spree

A sizeable uptick in malicious email attachments is just subsiding, but if history is any indicator,several smaller spikes are about to follow that use even more deceptive tactics than their predecessors.

The recent surge, fueled in large part by a flood of fake messages from UPS, is similar to one observed at the end of March in that the messages urge recipients to open an attachment that releases the malware on victims’ machines, according to Internet security firm Commtouch.

The earlier wave used a wide range of package-delivery services as senders, including FedEx and DHL, but the latest outbreak employs a wider variety of messages such as, “Dear client, recipient’s address is wrong”, “Dear User, Delivery Confirmation: FAILED”, and “Dear Client, We are not able to delivery [sic] the postal package”, according to the Commtouch blog.

All the messages then instruct the recipient to open the attachment that contains the malware, claiming it is an invoice or a form that needs to be filled out. “This time we see differences in the style of the emails – there is far more variation in the automatically-generated subjects, body and attachment names. Last time all the attachments were “UPS.exe” – this time there are many variations,” says Avi Turiel, director of product marketing at Commtouch in an email.

The attackers will evaluate the success of the attack by finding out how many recipients activated the malware, “Based on the infections vs. malware sent out they will probably try and figure out what they could improve in the next attack,” he says.

Read More…

Sprint To Debut Cloud Services

Sprint will introduce cloud services to all sizes of businesses in the fourth quarter, a Sprint executive said on Wednesday.

A Sprint spokeswoman said more details would be announced at a later date, but confirmed the executive’s comments in an interview published Wednesday.

Paget Alves, head of Sprint business markets, said in the interview that Sprint’s offerings to businesses will include selling its network infrastructure as a service available on-demand.

Sprint will also offer software, security apps and Internet hosting.

Verizon and AT&T offer similar services, and Alves was said that the carriers are “in a unique position because our business is centered around the cloud.”

Sprint plans to offer services that rely on the company’s own data center, unlike Verizon, which is using capacity from Terremark, which Verizon purchased for $1.4 billion in January.

Read More…

VoIP Ideal Platform For Controlling Botnets

Botnets and their masters can communicate with one other by calling into the same VoIP conference call and exchanging data using touch tones, researchers demonstrated at Defcon.

This gives the botmasters — whose top goals include remaining anonymous — the ability to issue orders from random payphones and disposable cellular phones, say researchers Itzik Kotler and Iftach Ian Amit of security and risk-assessment firm Security Art.

Using phones and the public phone networks eliminates one of the prime tools bot fighters have: taking down the domains of botnets’ command and control servers, the researchers say. If the botmaster isn’t using a command and control server, it can’t be taken down.

In fact, the botmaster can communicate with the zombie machines that make up the botnet without using the Internet at all if the zombies are within a corporate network. So even if a victim company’s VoIP network is segregated from the data network, there is still a connection to the outside world.

In addition to its stealth, the VoIP tactic employs technology that readily pierces corporate firewalls and uses only traffic that is difficult for data loss prevention software to peer into. The traffic is streamed audio, so data loss prevention scanners can’t recognize patterns of data they are supposed to filter, the researchers say.

The downsides of VoIP as a command channel are that it severely limits the number of zombie machines that can be contacted at once, and the rate at which stolen data can be sent out of a corporate network is limited by the phone system. But Kotler and Amit say the connections are plenty big to send commands in.

During their demo at the conference, the pair had an Asterisk open source IP PBX stand in as the corporate PBX. A virtual machine representing a zombie computer on a corporate network called via TCP/IP through the PBX and into a corporate conference call. A BlackBerry, representing the botmaster dialed in over the public phone network to the same conference call.

Read More…

India Wants To Monitor Twitter & Facebook

India’s Communications Ministry has received a request from the Home Ministry to monitor social networking websites such as Twitter and Facebook amid fears that the services are being used by terrorists to organize attacks.

The request suggests that the Indian government is trying to expand the scope of its online surveillance for national security purposes.

Telecommunications service providers in India provide facilities for lawful interception and monitoring of communications on their network, including communications from social networking websites such as Facebook and Twitter, in accordance with their license agreements, Milind Deora, the minister of state for communications and IT, told Parliament, according to the country’s Press Information Bureau.

But there are certain communications which are encrypted, Deora said Friday.

The government did not provide details of what encrypted data they would like to have access to. A spokesman for the home ministry said on Monday that additional
information can only be provided in Parliament while it is in session.

Under new rules to the country’s IT Act that came into force earlier this year, websites and service providers are required to provide government security agencies with information on private accounts, including passwords, on request without a court order.

Most companies, however, are not willing to share information with law enforcement agencies unless they have a court order.

Twitter states in its guidelines for law enforcement that “non-public information about Twitter users is not released unless we have received a subpoena, court order, or other valid legal process document.”

Read More…

Lightning Took Down Amazon, Microsoft Clouds

A lightning strike in Dublin on Sunday caused a power outage in data centers belonging to Amazon and Microsoft, causing the companies’ cloud services to go offline.

Lightning hit a transformer, sparking an explosion and fire which caused the power outage at 10:41 AM PDT, according to preliminary information, Amazon wrote on its Service Health Dashboard. Under normal circumstances, backup generators would seamlessly kick in, but the explosion also managed to disable some of those generators.

By 1:56 PM PDT, power to the majority of network devices had been restored, allowing Amazon to focus on bringing EC2 (Elastic Compute Cloud) instances and EBS (Elastic Block Storage) volumes back online. But progress was slower than expected, Amazon said a couple of hours later.

“We know many of you are anxiously waiting for your instances and volumes to become available, and we want to give you more detail on why the recovery of the remaining instances and volumes is taking so long,” the company wrote at 11:04 PM PDT. “Due to the scale of the power disruption, a large number of EBS servers lost power and require manual operations before volumes can be restored … While many volumes will be restored over the next several hours, we anticipate that it will take 24-48 hours until the process is completed.”

Read More…

Apple Tech Support Satisfaction Plummets

Apple customers are increasingly unhappy with the company’s technical support, which could affect the firm’s bottom line in the future, a researcher said today.

Although Apple continues to outperform rival computer makers Hewlett-Packard and Dell in overall customer satisfaction with technical support, in several areas Apple’s slippage over the last year is alarming, said Peter Leppik, CEO of Vocalabs, a Minneapolis-based company that surveys consumers after they’ve contacted customer or technical support.

“Apple is still definitely ahead of its competition, but what we are highlighting are deeper metrics that are showing negative trends,” said Leppik. “Customers are upset with the automated part of support calls to Apple, and that might be trickling into higher metrics.”

Those higher metrics Leppik referenced include the likelihood customers will return for another purchase in the future, or continue to recommend Apple products to friends and family.

In the past 12 months, consumers who said they were “very satisfied” with Apple’s technical support dropped 15 percentage points, from 73% at the mid-point of 2010 to 58% halfway through 2011, said Leppik.

The primary cause of the tumble was a turnabout in customers’ opinion of the automated section of their calls to Apple. In the last year, the percentage of those who said they were very satisfied with the quality of Apple’s automation fell 13 points to 24%. That’s a new low for Apple in Vocalabs surveys, and a whopping 28 points off the peak of 52% a year-and-a-half ago.

Read More….

ISPs Close Internet Gap

Broadband speeds on average are within 80 percent of what major Internet service providers advertise, an appreciable increase from two years ago, according to a government study.

The Federal Communications Commission studied cable, DSL and fiber-to-the-home services at 13 top U.S. broadband providers.

The FCC found Verizon Communications Inc’s fiber network was best at meeting or exceeding advertised maximum download speeds, while Cablevision Systems Corp came in last place.

Overall, the numbers were a big boost from 2009, when data indicated download speeds were often about half of Internet service providers’ (ISP) maximum advertised speeds.

“Most major ISPs are providing service close to what they’re advertising. This represents a significant improvement over the findings from two years ago when we first shined a light on this issue,” FCC Chairman Julius Genachowski said, unveiling the study’s findings at a Best Buy Co store in the District of Columbia.

During peak consumer usage hours when networks are busiest, actual download speeds varied from 114 percent to 54 percent of advertised speed among the different ISPs, the FCC said.

The complete findings of the report, its raw data and an FCC-prepared guide for consumers will be made available online. The FCC says the data will help consumers decide which Internet speed, service and provider best meet their needs.

“This report pretty well dispels the myth … that there’s a huge gap between advertised and actual speeds, and in fact we do pretty well here in the United States,” said Richard Bennett, a senior fellow at the Information Technology and Innovation Foundation.

Not everyone was impressed with the study’s findings.

Read More….

Accused Hacker Out On Bail In England

The accused ‘Topiary’, whose name is Jake Davis, was charged on Sunday and bailed by the courts yesterday. He was charged with five offences: Unauthorised access to a computer system, Encouraging or assisting offences, Conspiracy with others to carry out a Distributed Denial of Service Attack on the website of the Serious and Organised Crime Agency, Conspiracy to commit offences of Section 3 Computer Misuse Act 1990, and Conspiracy with others to commit offences of Section 3 Computer Misuse Act 1990 contrary to Section 1 of the Criminal Law Act 1977.

According to a report at the Guardian, his bail conditions are that Davis must wear an electronic tag, not access the internet, and not leave his house between 10pm and 7am.

Davis, who appeared outside court wearing sunglasses and holding a copy of “Free Radicals: The Secret Anarchy of Science” by Micheal Brooks and who allegedly authored the Rupert Murdoch is dead story that appeared on the hacked web site of the Sun newspaper, has already gained support on the internet in general and especially on Twitter.

Read More…

« Previous Page — Next Page »