Saturday, December 16, 2017

NSA data collection ruled illegal by privacy oversight board

An independent US government privacy board has ruled the National Security Agency's (NSA) surveillance through mass collection of citizens' web and phone data is illegal and should be shut down. The recommendation by the Privacy and Civil Liberties Ov...

New backdoor worm found attacking websites running Apache Tomcat

Tomdep harnesses strength of servers to wage powerful denial-of-service attacks.    

House intel bill adds $75 million to NSA budget to stop...

Senate version also adds money to NSA's budget to stop "insider threat."    

Apple ITC win will kick Samsung phones off market—unless Obama steps...

Obama stopped an exclusion order for Apple, but will Samsung get the same favor?    

D-Link Releases IP Surveillance Camera With Wireless 11ac Support

The DCS-2136L includes the D-ViewCam management software for expanded surveillance options, allowing users to manage up to 32 network cameras. Network solutions provider D-Link Systems, which specializes in small- and midsize-business (SMB) products, announced the DCS-2136L, which the company is billing as the world’s first IP surveillance camera with wireless 11ac support for longer range and greater bandwidth availability. The mydlink-enabled day and night camera with wireless N connectivity offers small-business owners networking and viewing capabilities, including a white light LED for color night vision viewing in complete darkness.

The technology allows the camera to show images in complete darkness while remaining in color mode, and the visible white light LED serves as a warning sign that the camera is on, and often results in intruders looking directly at the camera. The DCS-2136L includes the company’s D-ViewCam management software for expanded surveillance options, allowing users to manage up to 32 network cameras, set email alert notifications, create recording schedules and use motion detection to record directly to a hard drive.

The camera will be available in late 2013 throughout D-Link’s network of channel partners, including value-added resellers (VARs) and distributors. Additional camera features include WiFi Protected Setup (WPS) for three-step installation, built-in passive infrared sensor (PIR) for enhanced motion detection, two-way audio with built-in microphone and speaker, a microSD Card (SDHC) slot for local storage HD resolution with 1280x720 HD (1 megapixel), H.264, MPEG-4 and Motion JPEG compression, and support for the Open Network Video Interface Forum (ONVIF), a global and open industry forum with the goal to facilitate the development and use of a global open standard for the interface of physical IP-based security products. "With the demand for residential and SMB wireless surveillance steadily increasing, D-Link is moving the market forward with the first IP camera to support the new Wireless 11ac standard," Vance Kozik, director of marketing for IP surveillance for D-Link, said in a statement. "Whether you are looking for an entry-level, DIY camera or a high end professional enterprise solution, D-Link is dedicated to providing the best, most advanced IP surveillance solutions to its customers." Featuring mydlink support, the DCS-2136L offers user-friendly installation and integration into an existing network with the mydlink portal to view streaming video from a PC, notebook, iPhone, iPad, or Android mobile devices, as well as enhanced remote capabilities via the mydlink+ and free mydlink Lite app. Both apps offer access to camera feeds from anywhere and a host of updated features for expanded remote control, including motion detection settings, pinch-to-zoom viewing, day/night viewing options, drag-and-drop reordering of devices, two-way audio, remote pan and tilt of live video, and the ability to configure recording schedules and override options, however, the company noted mydlink application capabilities vary depending on the camera model. A mydlink-enabled cloud camera or cloud router device needs to be registered with mydlink in order to use the service. Once the device is physically plugged in and connected to the network it can be configured from the setup wizard on a Windows PC or Mac.

A free mydlink account can be created during the setup process, or the device can be added to an existing account. Once activated, the mydlink account is accessible from a Web browser on any Internet-connected computer.

Microsoft’s copyright bots ask Google to hide Microsoft.com links

Office 2007 Wikipedia page and an open source project also alleged "infringers."    

Intel kills off McAfee Security brand

Intel takes branding ownership of McAfee's computer security suite and severs founder John McAfee's name from the security software that has borne it for more than 20 years. January 6, 2014 8:37 PM PST McAfee Mobile Security is about to get a ne...

Snowden considers returning to the US, and the “permanent record”

In a rare Q&A session, former NSA contractor talks about the future of spying.

Security suites jockey for position on Windows 8.1

The first security suite tests are in on Windows 8.1, and the picture remains mediocre for most of them. Still, almost all of them improved on Windows 8.1's default security. January 22, 2014 2:35 PM PST (Credit: CNET) Independent security testi...

CipherCloud Acquires CloudUp for Data Loss Prevention Technology

The acquisition brings enhanced cloud data security technology to CipherCloud. Cloud security vendor CipherCloud announced today that is has acquired privately held stealth startup CloudUp Networks. Financial terms of the deal are not being publicly disclosed. With the acquisition of CloudUp, CipherCloud gains enhanced data loss prevention (DLP) capabilities that provide improved security to cloud users. DLP technology tags and monitors content for access, restricting the ability of data to leave an organization without authorization. CloudUp is an early-stage company with a product that is still in beta, Paige Leidig, senior vice president and chief marketing officer at CipherCloud, told eWEEK. Pravin Kothari, CEO of CipherCloud, added that the CloudUp technology fits in with his company's overall vision for discovering, protecting and monitoring sensitive data in cloud environments.

He explained that the CloudUp piece will provide enhanced data tagging for important content, like credit card numbers.

He also stressed that the CloudUp technology will complement the existing CipherCloud portfolio. With the deal being formally announced today, Kothari expects that the CloudUp technology will be integrated into the CipherCloud product suite in the next 30 to 90 days. From an engineering perspective, the integration shouldn't be too difficult, Debabrata Dash, chief scientist and architect at CipherCloud, told eWEEK. CloudUp's technology is all Java-based, as is CipherCloud's, noted Dash. From a development tooling perspective, CloudUp uses an Eclipse-based Integrated Development Environment (IDE), which is also what CipherCloud's existing development teams use. CipherCloud already was providing its users with cloud security and some DLP-type capabilities. Kothari said that he had to make a buy-versus-build decision when it came to advanced DLP, and he decided to buy. While it might take three months to integrate the CloudUp technology, Kothari said it would have taken his company 12 months to build something similar on its own.

As such, the time to market is accelerated, which is a good thing given the increasing demand for cloud security technologies. In light of the recent series of disclosures from U.S. National Security Agency (NSA) whistleblower Edward Snowden about the government's ability to intercept cloud data, the need for data encryption in the cloud is very clear. In October of 2013, CipherCloud expanded its encrypted data features with a searchable strong encryption offering. Kothari noted that the CloudUp technology will also impact CipherCloud encryption features. "This will make our encryption solution much smarter," Kothari said. When it comes to determining what types of data should be protected by DLP, CipherCloud has both automated and manual processes. Kothari said that the existing solution already provides a degree of automated discovery of sensitive data types that might be compliance issues for specifications like the Payment Card Industry Data Security Standard (PCI-DSS) or the Health Insurance Portability and Accountability Act (HIPAA).

According to Kothari, the CloudUp technology will complement CipherCloud's existing compliance data protection tools. The new CloudUp technology joins CipherCloud during a period of rapid growth. Leidig said that CipherCloud is experiencing exponential growth and now has more than 2 million users, with customers in 15 countries. Leidig expects that over the course of 2014 the pace of growth will continue. Sean Michael Kerner is a senior editor at eWEEK and InternetNews.com. Follow him on Twitter @TechJournalist.

E-book purchasers could get up to $3.06 per book in price-fixing...

Settlements from five publishers trickle down to the masses.