.

Internet service provider (ISP) Karoo, based in Hull, has changed its policy of suspending the service of users suspected of copyright violations.

The about face was made following a BBC story outlining the firm's practice.

Karoo issued a statement on Friday, saying that it has been "exceeding the expectations of copyright owners".

The firm will now adopt a "three strikes" rule, in which suspected file-sharers will receive three written warnings before action is taken.

"We have always taken a firm line on the alleged abuse of our internet connections," said Nick Thompson, director of consumer and publishing services, in the statement.

"However, we continually review our policies and procedures to reflect own customers' changing needs and evolving use of the internet.

"It is evident that we have been exceeding the expectations of copyright owners, the media and internet users. So, we have changed our policy to move in more line with the industry standard approach."

'Totally unfair'

Karoo - the only ISP in the area, which has no BT lines - long held a policy of suspending service of suspected file-sharers. In order to get their service restored, customers had to sign a document promising not to repeat the offence.

The firm's approach is more aligned with many other ISPs' approaches to suspected file sharers, mirroring the "three strikes" rule that the music industry itself has called for.

Andrea Robinson, a Karoo customer from Willerby, told the BBC that a day after her service was cut off, she received a letter from the firm claiming that she had been using the peer-to-peer file-sharing service BitTorrent to download the film Terminator Salvation.
BBC
Read Entire Article

The denial-of-service attacks launched on Web sites in South Korea and the United States earlier this month appear to have come from a master server in the United Kingdom, according to security researchers in Vietnam.

The master server controls all of the eight command and control servers involved in the series of distributed denial-of-service attacks that started on the July 4 weekend, security firm Bkis said in a blog posting on its Web site on Monday. Bkis said it gained control of two of the servers.

The Vietnamese firm estimated the number of compromised PCs involved in the attacks to be around 167,000 in 74 countries.

Botnet expert Joe Stewart of SecureWorks told CNET News that that number sounded high. Security experts had been estimating that there were 50,000 infected PCs in the botnet.

The attacks targeted dozens of government and commercial sites in the U.S. and South Korea, causing temporary outages at many of them.

Code on the compromised PCs was set to erase or overwrite data late last week but researchers in the U.S. were not aware of any reports of that happening.

Cyber security is a real issue, as evidenced by the virus behind July 4 cyber attacks that hobbled government and business websites in the United States and South Korea. It originated from Internet provider addresses in 16 countries and targeted, among others, the White House and the New York Stock Exchange.

Unfortunately, the Obama administration has chosen to combat it in a move that runs counter to its pledge to be transparent. The administration reportedly is proceeding with a Bush-era plan to use the National Security Agency to screen government computer traffic on private-sector networks. AT&T is slated to be the likely test site. This classified pilot program, dubbed "Einstein 3," is developed but not yet rolled out. It takes two offenders from President Bush's contentious secret surveillance program and puts them in charge of scrutinizing all Internet traffic going to or from federal government agencies.

Power sockets can be used to eavesdrop on what people type on a computer.
Security researchers found that poor shielding on some keyboard cables means useful data can be leaked about each character typed.

By analysing the information leaking onto power circuits, the researchers could see what a target was typing.

The attack has been demonstrated to work at a distance of up to 15m, but refinement may mean it could work over much longer distances.

Hotel attack

"Our goal is to show that information leaks in the most unexpected ways and can be retrieved," wrote Andrea Barisani and Daniele Bianco, of security firm Inverse Path, in a paper describing their work.

The research focused on the cables used to connect PS/2 keyboards to desktop PCs.

Usefully, said the pair, the six wires inside a PS/2 cable are typically "close to each other and poorly shielded". This means that information travelling along the data wire, when a key is pressed, leaks onto the earth (ground in the US) wire in the same cable.

The earth wire, via the PC's power unit, ultimately connects to the plug in the power socket, and from there information leaks out onto the circuit supplying electricity to a room.

Even better, said the researchers, data travels along PS/2 cables one bit at a time and uses a clock speed far lower than any other PC component. Both these qualities make it easy to pick out voltage changes caused by key presses.

A digital oscilloscope was used to gather data about voltage changes on a power line and filters were used to remove those caused by anything other than the keyboard.

"The PS/2 signal square wave is preserved with good quality... and can be decoded back to the original keystroke information," wrote the pair in a paper describing their work.

They demonstrated it working over distances of 1, 5, 10 and 15m from a target, far enough to suggest it could work in a hotel or office.

"The test performed in the laboratory represent a worst case scenario for this type of measurement, which along with acceptable results emphasizes the feasibility of the attack on normal conditions," they added.

The pair said their research was "work in progress" and expect the equipment to get more sensitive as it is refined.

The attack is due to be demonstrated at the Black Hat conference that takes place in Las Vegas from 25-30 July.

BBC

A determined propaganda blitz is well underway as the government sets the stage for the passage of Cybersecurity Act of 2009, introduced in the Senate earlier this year. If passed, it will allow Obama to shut down the internet and private networks. The legislation also calls for the government to have the authority to demand security data from private networks without regard to any provision of law, regulation, rule or policy restricting such access. In other words, the bill allows the government to impose authoritarian control over electronic communications.
featured stories Blitz of Cyber Attacks as Rockefeller Bill Approaches

Earlier today, the corporate media reported on a “powerful attack that overwhelmed computers at U.S. and South Korean government agencies,” allegedly launched by North Korea. “South Korean intelligence officials believe the attacks were carried out by North Korea or pro-Pyongyang forces,” the Associated Press reported.