Files

407 lines
26 KiB
Plaintext
Raw Permalink Normal View History

Episode: 1218
Title: HPR1218: TGTM Newscast for 2013/03/27 DeepGeek and Pokey
Source: https://hub.hackerpublicradio.org/ccdn.php?filename=/eps/hpr1218/hpr1218.mp3
Transcribed: 2025-10-17 21:52:26
---
You're listening to TGTM News, number 92, record for Wednesday, March the 27th, 2013.
You're listening to the Tech Only Hacker Public Radio Edition.
To get the full podcast, including political, commentary, and other controversial topics,
please visit www.toolgeektme.us.
Here are the vials statistics for this program.
Your feedback matters to me.
Please send your comments to dg at deepgeek.us.
The webpage for this program is at www.toolgeektme.us.
You can subscribe to me on Identica as the username DeepGeek.
Or you could follow me on Twitter.
My username there is dgtgTM.
As in deepgeek.toolgeektme.
Hello again, everybody.
This is Pokey with the Tech News Roundup.
From eff.org dated March 20th, 2013, by Peter Eckersley and Seth Schoen.
Defend the open web.
Keep DRM out of W3C standards.
There's a new front in the battle against digital rights management or DRM technologies.
These technologies, which supposedly exist to enforce copyright, have never done anything
to get creative people paid.
Instead, by designer by accident, their real effect is to interfere with the innovation,
fair use, competition, interoperability, and our right to own things.
That's why we were appalled to learn that there is a proposal currently before the World
Wide Web Consortium's HTML5 working group to build DRM into the next generation of core
web standards.
The proposal is called encrypted media extensions or EME.
Its adoption would be a calamitous development and must be stopped.
In the past two decades, there has been an ongoing struggle between two views of how internet
technology should work.
One philosophy has been that the web needs to be a universal ecosystem that is based
on open standards and fully implementable on equal terms by anyone, anywhere, without permission
or negotiation.
This is the technological tradition that gave us HTML and HTTP in the first place, and
epoch defining innovations like wikis, search engines, blogs, web mail, applications written
in JavaScript, repurposeable online maps, and 100 million specific websites that this
paragraph is too short to list.
The other view has been represented by corporations that have tried to seize control of the web
with their own proprietary extensions.
It has been represented by technologies like Adobe's Flash, Microsoft's, Silverlight,
and pushes by Apple, phone companies, and others towards highly restrictive new platforms.
These technologies are intended to be available from a single source or to require permissions
for new implementations.
Whenever these technologies have become popular, they have inflicted damage on the open ecosystems
around them.
Websites that depend on Flash or Silverlight typically can't be linked too properly,
can't be indexed, can't be translated by machine, can't be accessed by users with disabilities,
and work on all devices, and pose security and privacy risks to their users.
Platforms and devices that restrict their users inevitably prevent important innovations
and hamper marketplace competition.
The EME proposal suffers from many of these problems because it explicitly abdicates responsibility
on compatibility issues, and let websites require specific proprietary third-party software
or even special hardware and particular operating systems, all referred to under the generic
name, content decryption modules, or CDMs, and none of these specified by EME.
EMEs authors keep saying that what CMDs are and do and where they come from is totally
outside of the scope of EME, and that EME itself can't be thought of as DRM because not
all CMDs are DRM systems, yet if the client can't prove it's running the particular
proprietary thing the site demands and hence doesn't have an approved CDM, it can't render
the site's content.
Previously, this is exactly the reverse of the reason that the World Wide Web Consortium
exists in the first place.
WC3 is there to create comprehensible, publicly implementable standards that will guarantee
interoperability, not to facilitate an explosion of new, mutually incompatible software
and of sites and services that can only be accessed by particular devices or applications.
EME is a proposal to bring exactly that dysfunctional dynamic to HTML5, even risking a return to
the battle days before the web of deliberately limited interoperability.
Because it's clear that the open standards community is extremely suspicious of DRM and
its interoperability consequences, the proposal from Google, Microsoft, and Netflix claims
that, quote, no DRM is added into the HTML5 specification and, quote, by EME.
This is like saying, we're not vampires, but we are going to invite them into your house.
Proponents also seem to claim that the EME is not itself a DRM scheme, but specification
author Mark Watson admitted that, quote, certainly our interest is in cases that most people
would call DRM, end quote, and that implementations would inherently require secrets outside of
the specifications scope.
It's hard to maintain a pretense that EME is about anything but DRM.
The DRM proposals at the WC3 exist for a simple reason.
They are an attempt to appease Hollywood, which has been angry about the internet for almost
as long as the web has existed, and has always demanded that it be given elaborate technical
infrastructure to control how its audience's computer's function.
The perception is that Hollywood will never allow movies onto the web if it can't
and come for them with DRM restrictions.
But the threat that Hollywood could take its toys and go home is illusory.
Every film that Hollywood releases is already available for those who really want to pirate
a copy.
Which volumes of music are sold by iTunes, Amazon, Magnetune, and dozens of other sites
without the need for DRM?
Streaming services like Netflix and Spotify have succeeded because they are more convenient
than piratical alternatives, not because DRM does anything to enhance their economics.
The only logically coherent reason for Hollywood to demand DRM is that the movie studios want
veto controls over how mainstream technologies are designed.
Movie studios have used DRM to enforce arbitrary restrictions on products, including preventing
fast forwarding and implementing regional playback controls, and created complicated
and expensive, quote-unquote, compliance regimes for compliant technology companies that
give small consortia of media and big tech companies a veto right on innovation.
All too often, technology companies have raced against each other to build restrictive
tangleware that suits Hollywood's whims, selling out their users in the process.
But open web standards are an antidote to that dynamic, and it would be a terrible mistake
for the web community to leave the door open for Hollywood's gangrenous anti-technology
culture to interfere with W3C standards.
It would undermine the very purposes for which HTML5 exists, to build open ecosystem alternatives
to all the functionality that is missing in previous web standards without the problems
of device limitations, platform incompatibility, and non-transparency that were created by
platforms like Flash.
HTML5 was supposed to be better than Flash, and excluding DRM is exactly what would make
it better.
Take action to stop web DRM.
There are links to this story on the eff.org website.
If you do a search for the title of the story, defend open web, keep DRM out of W3C standards.
You'll find that, or you can look for the link in the show notes.
From Democracy Now, dated 319 2013, Hacker, who revealed AT&T security flaw, gets 3.5 years
in prison.
A hacker who leaked email addresses from an AT&T web server to a journalist in an effort
to expose the company's security vulnerabilities has been sentenced to 3.5 years in prison.
27-year-old Andrew Ornheimer, nicknamed Weave, found a flaw in AT&T's server in 2010 that
allowed him to gather 114,000 email addresses of iPad users.
He gave the information to the website Gawker, which posted a redacted version.
After a federal probe, Ornheimer was convicted of identity theft and conspiracy to access
a computer without authorization.
On top of the prison term, he has been ordered to undergo 3 years of supervised release
and pay more than $73,000 in restitution to AT&T.
He was charged under the controversial Computer Fraud and Abuse Act, the same law used
by federal prosecutors to target the late cyber activist Aaron Schwartz, who committed
suicide in January just weeks before his trial for downloading a trove of academic articles.
Last week, Reuters social media editor Matthew Keys was indicted under the same law.
Keys is accused of providing login information to the Hacker group anonymous that allowed
them to alter the text of a headline on the website of the Los Angeles Times.
Keys who is 26 could face up to 25 years in prison.
From TechDirt.com by Mike Maznick, dated Wednesday, March 20, 2013, MIT and Aaron Schwartz's
lawyers argue over releasing evidence.
From the who's hiding what department?
Last Friday, Aaron Schwartz's lawyers asked the court that had been overseeing his case
to lift a protective order on materials submitted during discovery, which Schwartz's
family and lawyers say will help to show how bogus the case against him was, and which
they've hinted will show how MIT went way too far in trying to help the prosecutors go
after Schwartz.
According to exchanges between Schwartz's lawyer, Elliott Peters and MIT staff, including
MIT President Rafael Rief, MIT has argued that such documents should not be revealed
because, A, it might violate the privacy of MIT employees, and B, because MIT never intended
the info to be public.
Peters discovered this after a reporter for the Wall Street Journal forwarded him the
following statement from MIT, quote, the decision to lift the protective order rests with
the judge who put it in place.
Schwartz provided by MIT and the Schwartz case included individual names and information
regarding MIT employees.
It is MIT policy and practice to protect employee privacy.
MIT provided the documents under the express understanding that they would be protected
from disclosure, which is the purpose of the protective order.
Given this, we are concerned about any public release of information about individual
MIT employees.
We will seek to protect their privacy.
At the same time, MIT is eager to share important facts about the actions in the Aaron Schwartz
matter with the public.
Professor Howe Abelson has been charged by President Rafael Rief with conducting an analysis
that will be made public in the coming weeks, end quote.
Peters quite reasonably found this statement to be absurd, especially the part about MIT
claiming that it provided documents in the belief that they would be kept secret.
As Peters noted in response, this was obviously untrue.
Quote, this statement is an insult to my intelligence.
The documents were provided to the government before any protective order was entered and
directly contrary to this statement with the express understanding that they would be
used in a criminal prosecution, which would lead to a public trial.
At which time, the documents would be offered into evidence and the witnesses would testify
in public.
MIT never could have expected these materials not to become public, and I find this statement
to be shockingly misleading and insincere.
And quote, around this same time, the congressional investigation into Schwartz's prosecution required
the same information.
Given that, Schwartz's legal team met with the DOJ to discuss releasing the documents
currently under protective order, they agreed to redact certain personal information, phone
numbers, emails, home addresses, social security numbers, birthdays, as well as the names
of four people who were questioned during the investigation, but who, quote, were not actively
involved in either the government's or any institution's investigation and, quote, into
Schwartz.
However, where the conversations broke down was overredacting the names and info of
just about everyone else, law enforcement, MIT employees, and JSTOR employees.
Schwartz's lawyer argues that this information should be public, and if the case had gone
forward, would have been public.
Criminal proceedings in our nation's courts are presumptively public.
As described above, the circumstances in this case have changed dramatically, perhaps
most obviously, with Mr. Schwartz's death.
There is no longer a case to prosecute, and thus no danger that disclosure will impede
a fair trial.
Mr. Schwartz's tragic death has also led to an increase in public interest in both the
details of the investigation and prosecution and the reasonableness of prosecutions under
the CFAA, generally.
In its discussions with Mr. Schwartz's counsel about modifying the protective order, the
government has not to date asserted any reliance interest based on the protective order.
Even if it were to assert such an interest, any government reliance on the protective
order's terms is tempered by the fact that it is a blanket order and therefore inherently
over-inclusive.
As the district explained in Boulger, modifications of such a blanket order is not unusual, ID
at 54.
As a result, the only interest left to be balanced against the significant public interest
in access to unredacted documents is the alleged privacy interest of the government employees
and third-party individuals named in the discovery materials.
For the reasons discussed below, those interests are minimal and are overcome by the public interest
in the disclosure of these documents.
The further note that hiding the names of those actually responsible will make the congressional
investigation into what happened much more difficult.
Second, the information was provided initially without any expectation that this info would
be kept private, so to ask for it to be kept private now makes little sense.
In fact, they note that most of the people named, who the government and MIT wish to redact,
or likely potential witnesses, had the trial been able to move forward.
Consequently, MIT and J. Store cannot now claim any reliance interest on behalf of their
employees and the continued privacy of their emails.
At the time, they produced the emails that issued to the government.
They further point out that most of the names in question are already public and highlight
press accounts and previous releases of documents in the case that specifically name, quote,
MIT employees Dave Newman, Paul Acosta, Ellen Duranzo, and Walpert, Mike Hallsale, and Mark
Silas, and J. Store employee Brian Larson, identifies their positions and quotes their email
communications and quote, given that this is already public, it seems odd to further seek
to redact their participation.
The argument in the other direction is that the attention this case has received means
that the names of such folks might lead to threats, but Schwartz's lawyers say that
there has been no evidence presented of any threat to MIT or J. Store employees.
And even if there was, that wouldn't necessitate blocking out info on all such employees.
Separately, his lawyers point out that redacting law enforcement officials' names makes even
less sense given that they are public employees.
Days after this motion was filed, MIT, quote, unquote, responded by agreeing to release
the documents itself, but with those same redactions requested by the DOJ.
MIT President Reef has tried to spin this as being, quote,
in the spirit of openness balanced with responsibility.
End quote.
Of course, that doesn't make much sense.
The DOJ has already agreed that this is the same level of information should be released.
So MIT isn't doing anything here other than make it appear falsely, as if it was making
some concession towards openness.
On top of that, MIT has said it will not release this info until its overall investigation
is over.
Not surprisingly, Schwartz's family is not particularly impressed by all of this.
In a statement provided to us by Schwartz's girlfriend, Taryn Steinbrickner-Cuffman,
notes that this is misleading not just because MIT isn't doing anything new here, but also
in that this isn't MIT's decision at all, quote,
I welcome President Reef's commitment to transparency.
However, this announcement is misleading.
MIT does not get to decide in what form the evidence is released publicly.
The judge does.
MIT has already given this evidence to the courts, at which point it gave up proprietary
control over the evidence.
President Reef's decision simply foreshadows the inevitability that the judge will release
at least this much of the evidence.
It sets a low bar, but does not decide the matter.
The redacted documents MIT is releasing only tell one part of the story.
Huge amounts of information would still be hidden beneath the protective order.
Information that MIT's investigators themselves will not have access to unless the protective
order is lifted.
If MIT is really committed to transparency and having a full complete investigation, they
need to join the call with Aaron's lawyers to lift the protective order, end quote.
Similarly, Aaron Schwartz's father, Robert Schwartz, noted that this is not a concession
by MIT, and that MIT already gave up its rights to these documents, so trying to control
how they are disseminated makes little sense.
Quote, it is not a change in MIT's position.
MIT could have no expectation of privacy or security since the evidence was given to
the government with the understanding that it was evidence in a public trial, end quote,
said Robert Schwartz, Aaron's father, quote, they understood when they gave these documents
to the government that they had no right to privacy or security.
MIT should release all internal communications related to this case, whether or not they
were provided to the government, including all internal communications they had related
to how they handled it, and decided not to ask the government to drop the case, end quote.
Steinbrickner Kaufman also pointed out that quote, if MIT wishes to protect these people's
privacy, MIT should not have become involved in the criminal trial to begin with.
They made a calculated decision, not to nip this case in the butt.
They don't get to avoid the consequences now after Aaron's death, end quote.
For links to many of the filings and communications in this case, please see tecturt.com, there'll
be a link in the show notes.
On torrentfreak.com, by Andy, dated March 18, 2013, RapidShare prepares to mass-delete
free user data over five gigabytes.
RapidShare has announced a business model change that is causing panic among its non-premium
users.
After offering unlimited storage space to customers using its free service, the Swiss
Base File Hostar is about to implement tough new limits.
This Wednesday, all free customers will be limited to just five gigabytes of free storage
if they choose not to pay for a premium account.
All excess files still hosted will be deleted forever April 3rd.
In today's super-connected world, we no longer have to store data solely on our desktop
machines.
We can now dump it into the cloud and access it seamlessly from any of our devices no
matter where we are.
It's convenience on a grand scale, but one that brings new concerns on the flip side,
a lack of control over our own data.
In the wake of the mega upload fiasco, today we bring news of another event with the potential
to chip away further still at internet users confidence in remote storage.
RapidShare is one of the best-known brands in the file sharing space.
In recent times, the company has gone to extreme lengths to update its image and has undertaken
a number of business model modifications in order to turn its back on the people who
might use its services to infringe copyright.
Nevertheless, the service has remained popular, not least because it offers unlimited
storage space to both free and paid users.
As a result, many people choose RapidShare to host their personal backups.
However, the company has delivered a surprise announcement that will largely put an end to
the unlimited free party.
This is how it works.
If you have a free account at RapidShare with currently unlimited storage, from this Wednesday,
you will only be allowed to store a total of five gigabytes.
If you do nothing, then all your files stored at RapidShare over the five gigabyte limit
will be deleted on April 3rd.
Just to be crystal clear, if you currently have twenty gigabytes of files, fifteen gigabytes
will be deleted.
Quote, if you exceed your storage space limit, you will receive a warning email that files
will be deleted and, quote, RapidShare warns.
Quote, if you don't add storage space within the next twenty-four hours or delete some
of your files, we will delete files.
This happens at midnight twenty-four hundred hours CET and, quote, however, if free users
want to, quote, add storage space and, quote, i.e. give RapidShare some money, they can
keep their files.
For 9.99 euros for thirty days, or 99.99 euros per year, users can have two hundred fifty
gigabytes of storage space.
The five hundred gigabyte storage account costs you nineteen point ninety-nine euros per
thirty days, or one hundred ninety-nine point ninety-nine per year.
So what happens when users want to store more than five hundred gigabytes?
Tornfreak was told that a user asked RapidShare how much it would cost to host around two
terabytes of file and was given a price of a hundred twenty euros, one hundred fifty
five dollars per month.
For less money, anyone can buy a real live hard drive, not just once, but every single
month.
While RapidShare is, of course, free to change its business model whenever it pleases,
doing so on such short notice is a real wake-up call.
The announcement of the new model was issued on March 12 and customers initially thought
they only had until March 20 to pay up or have all files over five gigabyte limit deleted
the next day.
RapidShare have since confirmed an extension to April 3.
It's also worth noting that free users may only personally download five gigabytes of
data each day, so anyone with a large amount of files stored on RapidShare needs to get
a move on in order to retrieve them all before the deadline.
Needless to say, some paying customers are also unhappy with the changes and have been
asking RapidShare for refunds.
The company is processing those, but reportedly charging an administration fee of fifteen
euros.
RapidShare has adjusted its business model several times in the last few months and each
time the changes appear to have resulted in less traffic for the site, the latest tactic
isn't likely to reverse the trend.
At the time of publication, RapidShare had not responded to torrent freaks request
for comment.
Please see the link on the website to torrentfreak.com for some related links in a chart showing
just how drastically torrent freak has affected its own business plan in the last couple of
months.
A couple years even.
From techdirt.com by Mike Maznick dated Wednesday March 20, 2013.
Will people trust Google's new notekeeping service after reader shutdown?
From the Not Sure I Will department.
Interesting bit of timing here, as Google has announced a new service called Google Keep,
which is a way of taking and keeping track of personal notes for your own use.
It's basically an ever note competitor.
I use a variety of Google products and normally this might not interest me, but I'm seriously
having doubts about bothering following the abrupt shutdown of Google reader.
Is it worth trusting data to a service that might be killed abruptly?
It seems fairly bizarre to violate users' trust so much, and then days later ask for it
right back.
Obviously, this doesn't apply to all services, but something that may become integral to the
way someone works is something that people need to have confidence will remain in business
for a while.
In the past, people assumed that Google products would stay around because it's Google, and
Google is so big.
But with their recent actions, they've now definitely raised serious questions, and
a quick look around Twitter shows that I'm not alone in asking the question.
Almost everyone talking about this new service is asking why should we trust it not to be
shut down?
Google may have thought they were just killing off one product, but the ripple effects
from shutting down Google reader continue to spread.
Please see the links in the show notes detector.com for some links to some more related articles
if you have interest in this.
Other items in the news, to read these stories, follow the links in the show notes.
Free speech activists oppose Iceland's proposed online pornography ban.
Staffed and produced by the TGTM News Team, editorial selection by DeepGeek, views of the
story authors reflect their own opinions and not necessarily those of TGTM News or its
readers.
News from TechDirt.com, eventatimes.org, magiMcNeil.wordpress.com, and olgov.com, used under
arranged permission.
News from torrentfreak.com, and DFF.org, used under permission of the Creative Commons
by Attribution License.
News from Democracy Now, used under permission of the Creative Commons by Attribution
Non-Commercial No-Driivatives License.
News sources retain their respective copyrights.
Thank you once again for listening to Talk Geek To Me News.
On behalf of myself and the rest of the Talk Geek To Me staff, please have a good day.
Thank you for listening to this episode of Talk Geek To Me.
Here are the vials statistics for this program.
Your feedback matters to me.
Please send your comments to DG at deepgeek.us.
The webpage for this program is at www.talkgeektoMe.us.
You can subscribe to me on Identica as the username DeepGeek, or you could follow me
on Twitter.
My username there is DGTGM, as in DeepGeek Talk Geek To Me.
This episode of Talk Geek To Me is licensed under the Creative Commons Attribution
share like 3.0 on Port License.
This license allows commercial reuse of the work, as well as allowing you to modify
the work, so long as you share a like the same rights you have received under this license.
Thank you for listening to this episode of Talk Geek To Me.
You have been listening to Hacker Public Radio at Hacker Public Radio, DOS Arc.
We are a community podcast network that releases shows every weekday Monday through Friday.
Today's show, like all our shows, was contributed by a HBR listener by yourself.
If you ever consider recording a podcast, then visit our website to find out how easy
it really is.
Hacker Public Radio was founded by the Digital.Pound and the Infonomicom Computer Club.
HBR is funded by the binary revolution at binref.com, all binref projects are crowd-sponsored
by Linner Pages.
From shared hosting to custom private clouds, go to LinnerPages.com for all your hosting
needs.
On list otherwise stasis, today's show is released under a creative comments, attribution,
share a like, lead us our license.