Related News: eBay buries its own advisory to change passwords following database hack

One new article link has been added to our Related News page. Ars Technica published an article titled eBay buries its own advisory to change passwords following database hack.

eBay officials are taking flak for burying news of the password reset issued in response to a hack on the company’s corporate network that exposed sensitive data for millions of users.

More than seven hours after eBay published an advisory that was five clicks removed from end users, the company still made no mention of the breach, said to affect 145 million customers, in e-mails, on its front page, or when users log in to their accounts. The bare-bones post disclosed a breach in February or March that allowed attackers to make off with cryptographically protected passwords. It advised users to change their login credentials. The breach also exposed customers’ names, e-mail addresses, home addresses, phone numbers, and dates of birth in a human readable format.

Source: Ars Technica

Related News: Lawsuit alleges unauthorized publication of personal genetics data

One new article link has been added to our Related News page. Ars Technica published an article titled Lawsuit alleges unauthorized publication of personal genetics data.

On Tuesday, an Alaska man became the lead plaintiff in a proposed class-action lawsuit filed against the makers of Family Tree, a Texas-based DNA testing company.

In his suit, Michael Cole alleges that months after purchasing a Family Tree at-home genetics kit and joining a “project,” an online forum for people doing related research about their ancestors, “the results of his DNA tests were made publicly available on the Internet, and his sensitive information (including his full name, personal e-mail address, and unique DNA kit number) was also disclosed to third-party ancestry company RootsWeb (a subsidiary of Ancestry.com, a company that allows users to research their lineage).”

If approved as a class-action, the lawsuit would include Alaskans who had their DNA results shared by Family Tree without their consent. But it’s not clear exactly how many people that could potentially include. The filing charges Family Tree with being in violation of the Alaska Genetic Privacy Act and asks the court to award the plaintiffs $100,000 in damages plus attorney’s fees.

Source: Ars Technica

Related News: Online child porn victims lose at Supreme Court

One new article link has been added to our Related News page. Ars Technica published an article titled Online child porn victims lose at Supreme Court.

A deeply divided Supreme Court set limits Wednesday to how much monetary compensation child victims of online pornography may reap from those who viewed their images.

The 5-4 decision set aside a $3.4 million judgement awarded to a woman whose pictures of her being raped as a child were widely circulated online.

The court ruled that Doyle Randall Paroline, a Texas man who was prosecuted in the case, does not have to pay that large sum, which is the total amount of damages the victim’s lawyers say she deserved.

Source: Ars Technica

Related News: Facebook’s shot at WhatsApp data gets both companies an FTC complaint

One new article link has been added to our Related News page. Ars Technica published an article titled Facebook’s shot at WhatsApp data gets both companies an FTC complaint.

The Electronic Privacy Information Center and the Center for Digital Democracy have filed a complaint with the Federal Trade Commission against Facebook’s $16 billion acquisition of WhatsApp based on privacy concerns, according to a document released Thursday. EPIC and CDD’s problems with the acquisition center around the fact that WhatsApp staked its reputation on—that it’s a company keeping a reasonable distance from its customers’ data. Now that it will fall under the aegis of Facebook, its users stand to lose those privacy guarantees, even though WhatsApp told its users nothing would change.

Facebook draws legal complaints for treading outside the bounds of responsible data use on a fairly regular basis. There was Beacon, which posted users’ activity to third party sites without so much as a heads up. There were Sponsored Stories, which placed users’ photos and names alongside ads. There was the sudden unsolicited use of facial recognition. The list goes on with many new and interesting ways Facebook has found to use the information it’s collected, but it’s plain that given an opportunity, Facebook is more likely to ask forgiveness than permission.

Source: Ars Technica

Related News: Feds arrest “most hated man on the Internet” in revenge porn hacking case

One new article link has been added to our Related News page. Ars Technica published an article titled Feds arrest “most hated man on the Internet” in revenge porn hacking case.

As the founder of one of the first highly profitable sites to post nude photos of people against their will, 27-year-old Hunter Moore had already been branded the most hated man on the Internet. On Thursday, he was arrested on federal charges claiming that he paid a man to break into the e-mail accounts of hundreds of victims and steal sexually explicit images that later showed up on Moore’s notorious isanyoneup.com site.

According to an indictment filed in federal court in Los Angeles, Moore paid $200 or more per week for images that he knew were obtained by illegally accessing the e-mail accounts. To cover his tracks, he used PayPal accounts that weren’t linked to his identity and at one point created new e-mail addresses and deleted data tied to past hack attacks. Moore’s arrangement with Charles “Gary” Evens, who is now 25, began at an unknown date and lasted until about May 2, 2012, prosecutors alleged in the 15-count charging document.

Source: Ars Technica

Related News: LG smart TV snooping extends to home networks, second blogger says

One new article link has been added to our Related News page. Ars Technica published an article titled LG smart TV snooping extends to home networks, second blogger says.

It’s not the premise of a sci-fi novel. Internet-connected TVs are watching you now.

A second blogger has published evidence that his LG-manufactured smart television is sharing sensitive user data with the Korea-based company in a post that offers support for the theory that the snooping isn’t isolated behavior that affects a small number of sets.

In addition to transmitting a list of shows being watched and the names of files contained on USB drives, the Internet-connected TV also sent the names of files shared on home or office networks, the blogger reported. He made the discovery after plugging the Wireshark packet-sniffing program into his home network and noticing that an LG TV—model number 42ls570, purchased in April—was transmitting file names that sounded vaguely familiar even though there was no USB drive plugged in.

Source: Ars Technica

Related News: Lawsuit alleging Gmail ads are “wiretapping” gets judge’s OK

One new article link has been added to our Related News page. Ars Technica published an article titled Lawsuit alleging Gmail ads are “wiretapping” gets judge’s OK.

It’s widely understood that the ads Google puts in Gmail are based on the content of e-mails. The millions of Gmail users presumably accept the company’s promise that “no humans read your e-mail.”

Despite that, a lawsuit claiming that Google’s practice violates pre-Internet anti-wiretapping laws will be going forward. Lawyers representing non-Gmail users of various stripes in a class-action lawsuit say their clients never agreed to have their e-mails intercepted and scanned by Google. They argue that Google’s “interception” of those e-mails violates federal anti-wiretapping laws and state privacy laws. And today, US District Judge Lucy Koh agreed with them, refusing to grant Google’s motion to dismiss the case.

Source: Ars Technica

Related News: Does Facebook have your payment details? It wants you to go buy stuff

One new article link has been added to our Related News page. Ars Technica published an article titled Does Facebook have your payment details? It wants you to go buy stuff.

On Thursday, Facebook confirmed to the Wall Street Journal that it plans on testing “a new payments product that would allow online shoppers to make purchases on mobile apps using their Facebook login information.”

Source: Ars Technica

Related News: Three Virginia teens face child porn charges in “sexting” trial

One new article link has been added to our Related News page. Ars Technica published an article titled Three Virginia teens face child porn charges in “sexting” trial.

On Thursday, three northern Virginia teen boys will head to trial to face child pornography charges stemming from sexting-style videos made on their cellphones. If found guilty, each faces up to 20 years in prison and the sex offender label.

Fairfax County Commonwealth’s attorney Ray Morrogh told the Washington Post that there needs to be a balance in these situations between labeling teens with sex charges and considering the impact on victims of the distributed image.

Source: Ars Technica

Related News: Celebrity credit reports posted by ID thieves taken from free website

One new article link has been added to our Related News page. Ars Technica published an article titled Celebrity credit reports posted by ID thieves taken from free website.

Statements issued by the other two credit agencies, TransUnion and Experian, reported similar compromises. TransUnion said perpetrators used “considerable amounts of information about the victims, including Social Security numbers and other sensitive, personal identifying information that enabled them to successfully impersonate the victims over the Internet in order to illegally and fraudulently access their credit reports.” For its part, Experian said “criminals accessed personal credential information through various outside sources, which provided them with sufficient information to illegally access a limited number of individual reports from some US credit reporting agencies.” Neither agency said how many individuals were compromised or confirmed that they were the same celebrities and political figures whose details were aired on the exposed.su.

Source: Ars Technica