|
|
|
| Related Articles |
| Netgear RangeMax Wireless Router (Highbury, Price: £25) |
01 January 0001 |
| Performance Advantages When used with RangeMax client adapters delivers the longest range of any wireless technology on the market up to 500000 square feet of uninterrupted coverage Maintains video quality up to 10 times the effective speed when at long distances Improves performance of existing legacy 802.11b and 802.11g wireless devices up to 50 Five 10 100 (1 internet and 4 Lan) ports equipped with auto-sensing technology Data speed of up to 108 Mbps Privacy Parental Control Trusted user controls Time-based usage controls Web site logging Remote management Url content filtering Security Double Firewall Network Address Translation (Nat) to hide Pcs files from outside users Stateful Packet Inspection (Spi) firewall to deny outside requests for personal information Denial of Service (DoS) attack prevention Intrusion Detection and Prevention (Ids) Wired Equivalent Privacy (Wep) 64-bit128-bit encryption Wi-Fi Protected Access (Wpa Pre-Shared Key) Wireless Access Control (Ssid) to identify authorized wireless network devices Supports 2 Vpn pass-through tunnels (Ipsec L2TP Pptp) Exposed Host (Dmz) Mac address authentication |
| |
| NTT DoCoMo admits to crisis over subscriber losses |
01 November 2007 |
| A senior executive at NTT DoCoMo said on Thursday the Japanese mobile carrier is in crisis over subscriber losses in the last year.DoCoMo, which is No. 1 in Japan, has lost about 1 million subscribers in the last year since number portability was introduced allowing subscribers to switch carriers without losing their telephone number."We have a sense of crisis," said Kiyoyuki Tsujimura, executive vice president and managing director of the carrier's products and services division. "In some months we had a net decline in subscribers."Customers have been switching to KDDI's Au brand and Softbank Mobile. Au is well known for innovative and well-designed handsets while Softbank has been winning customers with low prices and Japan's first free mobile calls scheme.Despite the subscriber losses NTT DoCoMo isn't in danger of losing its top spot anytime soon. With 53 million subscribers at the end of September it had a 53 percent share of the market. But executives at the carrier are conscious that the days when they could rest on their laurels are gone.As part of a push to keep subscribers and appeal to new ones DoCoMo introduced 23 new cell phones on Thursday -- the largest launch it has ever staged. The complete overhaul of its handset range includes models that can warn of impending earthquakes, help with language translation and show TV programming.Among the new phones is the L705iX from South Korea's LG Electronics. The phone is notable because it supports 7.2Mbps HSDPA (high-speed downlink packet access) data transmission. DoCoMo plans to offer the service, which is double the speed of its current 3.6Mbps service, from April next year.Also next year DoCoMo will begin a severe weather and earthquake warning service using the cell broadcast service. Data from the meteorological agency will be broadcast to phones from cell towers. Included will be earthquake warnings that should flow from a new system introduced earlier this year that attempts to gives a heads-up to people in the few seconds between an earthquake striking and the strong shaking waves reaching people.The new translation service works in English, Japanese, and Chinese. Users say simple phrases into the phone, and the audio data is sent back to a translation server where it is processed and delivered back in text form.Well-known consumer electronics brand names are among the new lineup too. Panasonic and Sharp have labeled their new TV phones with the same brands they use in Japan for flat-panel TVs: Viera and Aquos. And Sony's new phone carries the Cybershot name and offers an impression 5-megapixel image quality.None of the handsets will be offered overseas but some features might make their way into the manufacturers' foreign models next year. Prices will depend on retailer discounts, incentives, and the length of service contract signed. |
| |
| IPT Lead Engineer |
23 October 2007 |
| IPT Lead Engineer
IP Telephony Engineer to manage a team of up to 10 engineers who are responsible for ensuring that client voice requirements are expedited. On a day to day basis the team are responsible for setting up client's voicemail, hunt groups, pickup groups and translation patterns. The role will include the management of the physical re-patching of Cat5e cabling to provide connectivity and various telephony software administration and programming.
Responsibilities & Required Experience:
•Manage the updating of patching records and maintain inventory of handsets, patch leads, extension leads etc
•Strong management experience. The candidate must have experience of interviewing skills, appraisals and developing career plans.
•Strong personality to work for a fast paced managed telecoms service organisation. Must be able to work to challenges and deadlines and be highly organised. The candidate must have experience of dealing with clients escalations.
•The candidate will be required to work out of hours and at weekends
•The candidate must be willing to travel.
**Candidates with any experience of Cisco products such as Call manager or Cisco Unified messaging will be looked upon favourably. The role requires a friendly, outgoing person who is an excellent communicator- you will need to be a skilled communicator, capable of engaging all levels of the business. |
| |
| The Monster.com mess |
24 August 2007 |
| (InfoWorld) - The last thing you need when you're unemployed is a bank account that's suddenly emptied. But that's exactly what some unwary users of employment search site Monster.com faced after identity thieves made off with the personal information of more than a million people looking for jobs.
This still-developing story has enough nooks and crannies to confuse a gumshoe, but some facts are clear: Monster's resume database was looted, and the personal information taken was used to forge convincing messages that deposited password-stealing Trojans and ransomware on users' PCs.
Calculated and ambitious, the attack is striking for how it blended several elements -- stolen credentials of legitimate users, phishing e-mails, Trojan horses, money mules and more -- into a slick assault. Here's what we know so far.
Was Monster.com hacked? No, as Symantec said immediately. Instead, the attackers accessed the resume database with legitimate usernames and passwords, probably stolen from professional recruiters and human resource personnel who use the "Monster for employers" section of the site to look for job candidates. But it wasn't until Thursday that Monster.com admitted as much. "By gaining unauthorized access to employer accounts, the software was obtaining job seeker contact information," a new alert said.
What was snatched from the database? Names, e-mail addresses, mailing addresses, phone numbers and resume IDs, said Symantec. Yesterday, Monster.com added that only about 5,000 of the people whose data was filched live outside the U.S. That squares with what Symantec's Amado Hidalgo said in an e-mail: The information-stealing Trojan was hard-coded to dig through only the "hiring.monster.com" and "recruiter.monster.com" domains, limiting their theft to the Monster USA site's database. "They only targeted the U.S. Monster site and not any other international Monster [Worldwide] Inc. sites, such as those in the U.K., Spain, etc.," said Hidalgo.
How was the information stolen? The Infostealer.Monstres Trojan runs batch searches by sending HTTP commands to the Monster Web site to navigate through folders, said Hidalgo. The malware then parses the output that appears in a pop-up window that holds the job seeker profiles that match the search criteria. Essentially, the Trojan worked as an automated search bot that located candidates, captured their contact information and sent it to a remote server controlled by the criminals. Symantec said that the server, though located in Russia, was hosted by a company out of Ukraine.
By using Infostealer.Monstres to do their harvesting, the attackers also covered their tracks -- the Trojan could be planted on any computer previously compromised, with the search seemingly originating with that computer's owner -- and could easily spread the work out among a number of IP addresses, probably to slip under any Monster radar potentially watching for unusually large numbers of search requests coming from any one location. (There is no evidence at the moment that Monster deploys such radar.)
How many people are affected? Initially, Symantec's researchers played it vague, saying only that "several hundred thousand" were at risk. Thursday, though, Monster said that it had found contact information on the hackers' server for about 1.3 million people who had posted resumes. The other number that's been bandied about -- 1.6 million -- represents the tally of contact entries Symantec counted on the server last week; a significant number of Monster users apparently post more than one resume.
How did the hackers manage to grab so many contract records without Monster.com noticing? That's a good question. Monster itself hinted at one explanation: automated searches like the ones Infostealer.Monstres ran aren't unusual. "Many of our customers use automatic or semiautomatic means to search our database," said Monster spokesman Steve Sylven last Sunday. "Moreover, many of our larger customers rely heavily on our database, and their use may be similar to programmatic or scripted access." Translation: The searches conducted by the bigger Monster customers are as bot-like as those run by the Trojan.
The thieves also probably relied on some standard tactics to avoid detection, including running the searches from innocent PCs and spreading out the work (see "How was the information stolen?" above). Spammers and malware spreaders use zombies to send junk mail and malware for the same reasons.
What did the criminals do with the Monster data once they had it? No one's arguing the facts: personal information purloined from the Monster resume database was used to create, then send, targeted phishing e-mails -- the term is "spear phishing" -- that spread other malicious software or recruited "money mules," the middlemen who transfer money from a phished bank account to a foreign bank account. It's the emphasis where Monster and Symantec part.
Monster has focused on the mule-recruiting angle or even depicted those e-mails as run-of-the-mill phishing. "The purpose of gathering this information appears to be sending email disguised as Monster in order to gain recipients' trust, and then attempting to convince users to engage in financial transactions," the company now says on its revised security alert. Only in passing does it also call out "or lure them into downloading malicious software."
That, however, is the prime use of the stolen information, said Symantec's Hidalgo, who traced connections between Infostealer.Monstres and at least two other Trojans. The first, Banker.c, watches for, steals, then transmits back to hacker HQ online banking log-in information for accounts at Bank of America and the German arm of Citibank. The second, Gpcoder.e, is "ransomware," a Trojan that encrypts files on the infected PC's hard drive, then informs its owner that the files will be unusable until a fee is paid. In Gpcoder.e's case, the ransom was $300.
What good does the other stolen information do the thieves? Two words: response rate. According to research conducted by an Indiana University team in 2005, people are much more likely to click or give up information if the message contains clues of legitimacy, as when the message appears to come from a close friend. In fact, 72 percent of the people in the study who received phishing mail from someone in their social network took the bait and divulged their log-on information, four and a half times the number in the control group.
Spear phishing, then, can be incredibly effective, at least from the criminals' point of view. By using the Monster resume data to target the recipient and flesh out the e-mail with the recipient's real name -- often usually difficult or impossible to guess from the e-mail address itself -- the crooks can expect more people to let down their guard and actually launch the attached file. (In the case of Gpcoder.e, the file posed as Monster Job Seeker Tool, fictitious software of course, but likely enough to get people to click; when they did, they installed the Trojan, not a job search assistant.)
So the goal of the attackers is...what? Bank account log-ons, clearly. Ransomware, though not uncommon, usually flops because someone -- often one or more security vendors -- cracks the encryption used to lock up the files and makes that public, eliminating the need to pay up.
Another clue that bank accounts are the endgame is the effort spent on recruiting money mules. The group wouldn't need mules unless it had, or anticipated having, access to bank accounts.
When did this start? We don't know, and so far, Monster has not talked about this. But one self-described Monster user claimed here to have received money-mule messages between June 3 and June 13, and had reported them to Monster. "Monster only said it was not from them and did not admit that they had let my information get away from them," said "Anonymous." Symantec first alerted Monster of its findings last Friday, Aug. 17, both the security company and Monster have said.
Evidence of the Gpcoder.e seeding -- using phony Monster messages touting a nonexistent tool -- goes back at least as far as early July, according to analysis by U.K.-based security company Prevx Ltd. It may have started days or even weeks before that.
Some reports, in fact, have claimed users started seeing phishing mail built atop the stolen personal information as early as February of this year.
What can Monster users do to protect themselves? For the 1.3 million whose resumes have been pillaged, it's too late; the horse has left the barn. Even so, some users decided to cancel their accounts as a way to block any future malware-based searches. "I can still search for jobs and submit my resume to postings, but employers/recruiters cannot find me in their searches," said a Chicago user identified as "Greg" in a comment on a Computerworld story that ran Thursday. "I certainly would encourage others to protect themselves and delete their Monster accounts as well."
Monster hasn't disabled batch or automated searches, or if it has, it's not said as much. (On Sunday, company spokesman Steve Sylven seemed to say that because large corporate customers of the service used automated searches, banning them would be out of the question.) It has, however, shut down the server that the gang was using to store its stolen data and presumably disabled the legitimate accounts used to access the database. (Symantec's Hidalgo said last week that his team had forwarded those accounts to Monster.) We say "presumably" because while we have asked Monster if those accounts have been closed, the company has not explicitly acknowledged doing so.
Other than that, the only advice being given by Monster or Symantec is the usual: Be suspicious of all unsolicited, unanticipated e-mail, run up-to-date antivirus software -- to stop Trojans such as Banker.c or Gpcoder.e at the door -- and refuse to give out personal information. |
| |
| When customer service is lost in translation |
29 May 2007 |
| In the Albert Brooks film Looking for Comedy in the Muslim World , an American comedian occupies a dingy office in India, and overhears a telephone receptionist cheerily responding to callers dialing everything ... |
| |
| Experts: Patent ruling could reopen Vonage case |
01 May 2007 |
| (InfoWorld) - Legal experts say that a ruling this week by the U.S. Supreme Court could give new life to Internet phone company Vonage's claims that it has been the victim of overly generous patent rulings.
In a ruling in the case KSR International Co. vs. Teleflex Inc., released Monday, the Supreme Court clarified its thinking on patents and overturned lower court decisions that had set a high bar for invalidating new patents on the grounds that they were "obvious" combinations of preexisting inventions.
Though the case in question addressed a patent for an "adjustable pedal assembly with electronic throttle control," the ruling was widely interpreted as a major shift in patent law, which had been liberally applied in recent years to cover everything from counting pages in books to setting flat rates for wireless phone service.
In perhaps the first of many challenges under the new ruling, Internet phone company Vonage filed on Tuesday to have a patent lawsuit filed against it by Verizon retried in light of the ruling.
Legal experts contacted by InfoWorld said that the company could have a strong case given the Court's new position on patent obviousness.
"The Supreme Court basically said the court of appeals and federal circuit were applying too tough a standard to prove obviousness and that the standard to proving obviousness should be easier, especially where you're talking about combinations of known things," said Dan Ravicher, legal director at the Software Freedom Foundation, which filed a brief in the KSR-Teleflex case.
"The court was saying that the patent system had gone too far. That it was out of whack, and they wanted to reduce the speed down to a safe level," he said.
While the specifics of the Supreme Court ruling in the case are complex, the new ruling in the KSR case sets a higher bar for issuing new patents, said Rachel Krevans a senior intellectual property litigation partner at Morrison & Foerster in San Francisco.
"In a nutshell, the ruling says that you can't get a patent on an idea unless it's really new," she said.
That's an especially tough question in fields like high tech and electronics, where almost every invention is built upon the work of others. The question often comes down to whether an invention is "new enough," she said.
In recent years, patent examiners and the courts relied heavily on the presence of so-called "prior art," or a specific, existing patent that could teach a skilled practitioner enough about what he or she was trying to patent to make the idea itself "obvious."
But those kinds of cases were rare and made it difficult to invalidate patents that were granted. The new ruling makes it easier for both patent examiners and the courts to look across different examples of prior art and conclude that, all told, the new idea is "obvious," according to Krevans.
"The emphasis is on 'could someone do this and have the results be surprising,'" she said.
Vonage is hoping that the new standard casts doubts on Verizon patents for name translation and wireless technology that it was found guilty of infringing upon.
The company said the patents should be retried by the U.S. District Court in light of the Supreme Court ruling. Eric Rabe, a spokesman for Verizon, dismissed that argument.
"The KSR case is not related to our patent suit against Vonage. They're entirely different issues," he said.
Rabe declined to speculate on whether the new guidance from the Supreme Court could weaken his company's patents, but Krevans and others said that the impact of the KSR ruling will be felt right away.
"I have a trial starting in a patent case in three weeks, and I spent the morning with my team ripping up jury instructions and writing new ones," she said. Moreover, the instructions that are being written are entirely new.
The ruling could also open the door to wholesale reexaminations of existing patent grants, she said. "The grounds for reexamination of a patent are that there's a substantial new issue affecting patentability," she noted. The KSR ruling could create such grounds, allowing prior art for patents to be considered in light of the court's recent declaration about "obviousness" rather than the old standard.
In the end, it will take time to work out what the KSR ruling means, said computer science Professor Lee Hollaar of the University of Utah, who filed a brief to the Supreme Court in the case. And that makes predicting the ruling's impact on the Verizon-Vonage case difficult.
Still, Vonage would have to prove that there was prior art for Verizon's patents that is relevant under the new guidance but ignored previously.
"All the decision did was say, 'You can't be so rigid as to say that there has to be a specific teaching of a combination of technology,' and that's quite reasonable," Hollaar said.
Taken together with a ruling in May, 2006 in favor of online auction firm eBay that made it harder for patent holders to get immediate injunctions against infringing products, the Supreme Court is raising the legal bar of what constitutes a "new invention," legal experts agree.
"The theme in these cases is that the Supreme Court is very focused on inventions that are new combinations of components and elements that were known. And, in the Supreme Court's view, there is a pretty high bar for those inventions to be novel." Krevans said.ADVERTISEMENTIBM Information On Demand 2006Industrial Industry Leaders, please join us at IBM's premier information management global event, IBM Information On Demand 2006, October 15-20, Anaheim, CA. More IBM business and technical solutions content in one place than ever before! Select from over 800 sessions. Register today! |
| |
| More evidence of U.S. as malware capital |
26 March 2007 |
| (InfoWorld) - Contrary to beliefs that overseas crime networks and unemployed computer programmers in Eastern Europe remain the leading sources of virus code on the Internet, new research supports the growing perception that the United States is producing greater volumes of malware code than any other region of the planet.
According to security hardware maker Finjan's latest Web Security Trends Report -- which analyzes data collected by the San Jose-based firm over the first three months of 2007 -- more than 80 percent of the Web sites it found to be distributing malicious code were hosted on servers located in the U.S.
Although Finjan officials concede that much of the malware distributed by those sites may indeed be written and controlled by hackers operating outside of the U.S., the results indicate that efforts by legislators and law enforcement officials to crack down on illegal computing activity in the nation may not yet be succeeding.
According to the Q1 Finjan report, published on March 26, the United Kingdom ranked second in the list of countries hosting infected sites, accounting for roughly 10 percent, followed by Canada, Germany, and Italy. Noticeably absent from the top of the rankings are Russia and China, which have been widely perceived in recent years as leading sources of malware worldwide.
Finjan'sresults jibe with rival Symantec's latest Internet Security Threat Report -- released earlier this month -- which also maintains that attacks are increasingly emanating from sources in the United States. Symantec's research, which focused on all types of threats, not just Web-based attacks, reported that the U.S. is the source of about 31 percent of all malware and phishing schemes.
The reason why so many threats are coming from sites hosted in the U.S. and other relatively wealthy nations -- most of which have stricter laws in place to combat such efforts than their developing neighbors -- is simple, said Yuval Ben-Itzhak, chief technology officer at Finjan.
No matter what region the code writers live in, he said, attackers are flocking to markets where the most money is changing hands to carry out their crimeware schemes, and increasingly doing so by hijacking legitimate URLs to pass out their work.
"If you look back at many reports over the last few years, the perception has been that the malware is coming from Russia and other areas where laws are fewer and harder to enforce, but when we analyzed the live end-user content, we realized that a vast majority of malware was coming from servers in the U.S. where there are advanced laws and practices," Ben-Itzhak said.
The upside of the issue is that security researchers can take action when they find malware URLs that are based in the U.S. by reporting them to authorities and applying pressure to the companies hosting the sites to take them offline.
For the most part, the malware delivery pages are supported by cheap hosting companies that don't appear to closely monitor their behavior, Ben-Itzhak said. But an even more alarming trend is the high number of attacks being passed along to end-users via seemingly legitimate sites.
In many of those cases, the attacks are being served up as advertisements that site operators may not even recognize as malware sources, making the situation even harder to fight.
"It's very clear that a lot of malware is coming from advertisements, and it's difficult to track where the code is originating because of the layers of ad systems, aggregators and agents that work together to create and distribute this content," Ben-Itzhak said. "There are so many third parties pushing ads to these sites, and there is no official process among these parties for seeking out the bad code."
A high-profile example of this type of attack was being distributed on a banner ad posted to social networking site MySpace.com in July 2006, which specifically attempted to use a security flaw in Microsoft Windows to infect Web surfers with spyware.
Finjan’sreport indicates a trend of new efforts to spread malware using Web pages that have been filtered by automatic translation services, which are typically used by people to read content written in foreign languages.
Because the translation services don't scan for threats, and are often distributed in cooperation with known sources such as news sites or search engines, attackers can use the systems to sneak infected links through to end-users without tipping off security applications that look for unknown content.
"The translation service sends a link that looks fine but the malware is still in there," Ben-Itzhak said. "This is another reason why people need real-time dynamic scanning for protection, because it's so hard to tell what you might actually be looking at these days." |
| |
| [NSFW] eBay trashes English language in sex doll shocker |
09 February 2007 |
| Boasts '100% honorable person's entire meat skin nature'
NSFW Foreigners looking to offload products on eBay UK would do well to think twice before availing themselves of the tat bazaar's translation service.… |
| |
| Transfer firm revs up premier service |
28 November 2007 |
| Firm to offer upgraded service in Portugal and Tunisia |
| |
| COUNCIL OF EUROPE DECORATES 3 TURKISH DEPUTIES WITH HIGH SERVICE MEDAL &
HONORARY MEMBERSHIP |
01 January 0001 |
| ESKISEHIR (A.A) - The Council of Europe has decorated three
Turkish deputies with high service medal and honorary membership. |
| |
 |
|
|
|