2015年12月28日 星期一

- We have talked not so easy to give up in the era of cutting-edge technology, Google Great God", and "Twitter" extensive network, give people the free exchange of important communication network shared! By our chivalrous Anonymous blog "AnonRogue" released the real and laster news to share!!- Regardless of race, regardless of class, regardless of the natural resources of religious freedom!- -我們已説過了不會這麽容易放棄的!在科技尖端時代,谷歌大神",推特"廣博網絡,給予人們自由交流的重要溝通分享博絡!由我們俠義匿名" AnonRogue "發佈的精彩分享!-

*- We have talked not so easy to give up in the era of cutting-edge technology, Google Great God", and "Twitter" extensive network, give people the free exchange of important communication network shared! By our chivalrous Anonymous blog "AnonRogue" released the real and laster news to share!!- Regardless of race, regardless of class, regardless of the natural resources of religious freedom!-
-我們已説過了不會這麽容易放棄的!在科技尖端時代,谷歌大神",推特"廣博網絡,給予人們自由交流的重要溝通分享博絡!由我們俠義匿名" AnonRogue "發佈的精彩分享!-




**Please use the Google god of high-tech translator to translate your national / local language ah ^^ -
**請各位使用谷歌大神的高科技翻譯器來翻譯你們的國家/地方的語言啊^^-
**지역 / 국가 언어 ^^ 번역 하이테크 번역기의 구글 하나님을 사용하십시오 -
**Se il vous plaît utiliser le dieu Google de traducteur de haute technologie pour traduire votre ah langue nationale / locale ^^-
**あなたの国内/地域言語ああ^^翻訳するハイテクトランスレータのGoogleの神を使用してください -
**Будь ласка, використовуйте бога Google високотехнологічного перекладача, щоб перевести свій національним / регіональним мовою ах ^^-
**กรุณาใช้พระเจ้าของ Google แปลที่มีเทคโนโลยีสูงในการแปล / ชาติภาษาท้องถิ่นของคุณอา ^^-
**Si prega di utilizzare il dio Google Traduttore di high-tech per tradurre il vostro / ah lingua locale nazionale ^^-
**Fadlan isticmaal ilaah Google ee turjumaan farsmada heerka sare ah loo turjumi / ka ah luuqada maxaliga ah ee qaranka ^^-
**Gunakan dewa Google penerjemah berteknologi tinggi untuk menerjemahkan nasional / ah bahasa lokal ^^-
**Por favor, utilice el dios Google Traductor de alta tecnología para traducir su / ah nacional idioma local ^^-
**आफ्नो राष्ट्रिय / स्थानीय भाषा आह ^^ अनुवाद गर्न उच्च-प्रविधी अनुवादक को गुगल देवता प्रयोग गर्नुहोस् -
**Bonvolu uzi la Google dio de alta-tech tradukisto por traduki vian nacian / lokan lingvon ah ^^-



 8 小時
Oracle settles FTC claim that it deceived consumers about Java updates (via News)


Oracle settles FTC claim that it deceived consumers about Java updates

1222.sdt-oracle

The Federal Trade Commission (FTC) is penalizing Oracle for leaving millions of computers vulnerable to hacking. As a result, Oracle will be required to give consumers an easy solution to uninstall insecure and older versions of its Java Standard Edition (Java SE) software.
According to the FTC, when Oracle acquired Java back in 2010, it was aware of significant security issues affecting older versions of Java SE. The vulnerabilities could be exploited by hackers through malware and phishing attacks that would give them access to consumers’ financial accounts and other personal information. The FTC alleges that Oracle deceived its customers about its Java security updates by saying Java SE and system updates would be secure in the latest security updates. Instead, the FTC said the updates only removed the latest version of Java SE, and failed to remove any earlier versions that might be installed on a consumer’s system. As a result, more than 850 million personal computers still contained insecure versions.
(Related: Latest version of Java SE 8 available for MIPS)
“When a company’s software is on hundreds of millions of computers, it is vital that its statements are true and its security updates actually provide security for the software,” said Jessica Rich, director of the FTC’s Bureau of Consumer Protection. “The FTC’s settlement requires Oracle to give Java users the tools and information they need to protect their computers.”
As part of an agreement, Oracle will have to notify consumers during the Java SE update process if they have any outdated versions of the software installed on their computer, notify them of the risk, and give them the option to uninstall it.

 

About Christina Mulligan

Christina is the Online & Social Media Editor of SD Times. She is a 2012 graduate of Stony Brook University’s School of Journalism, graduating with a Bachelor's degree in broadcast journalism and a concentration in public affairs. She has interned at WNET Metrofocus, WABC Eyewitness News and Newsday. Follow her on twitter at @MulliganSDTimes!


 ===



甲骨文結算FTC聲稱,它欺騙了消費者關於Java的更新

1222.sdt甲骨文

美國聯邦貿易委員會(FTC)的懲罰甲骨文離開數百萬台計算機容易受到黑客攻擊。其結果是,甲骨文將需要給消費者一個簡單的解決方案,以卸載它的Java標準版(Java SE)軟件的不安全和舊版本。
據美國聯邦貿易委員會,當甲骨文收購的Java早在2010年,它意識到影響老版本的Java SE顯著的安全問題。該漏洞可以通過惡意軟件的黑客和網絡釣魚攻擊,這將使他們獲得消費者的資金賬戶和其他個人信息被利用。聯邦貿易委員會稱,甲骨文說Java SE和系統更新將在最新的安全更新安全矇騙客戶有關它的Java安全更新。取而代之的是,美國聯邦貿易委員會說,僅更新刪除的Java SE的最新版本,並沒有刪除任何早期版本可能會在客戶的系統中安裝。其結果是,超過850萬台個人電腦仍然含有不安全的版本。
(相關閱讀:最新版本的Java SE 8可用於MIPS)
“當一個公司的軟件是數以億計的電腦,至關重要的是,其報告的真實,它的安全性更新,實際提供擔保的軟件,”傑西卡豐富,消費者保護FTC的局局長說。“FTC的和解要求甲骨文放棄Java的用戶,他們需要保護他們的計算機的工具和信息。”
作為協議的一部分,甲骨文將在Java SE的更新過程,通知消費者,如果他們有任何過時的版本在計算機上安裝的軟件,風險通知他們,並讓他們將其卸載的選項。

 

關於克里斯蒂娜·穆利根

克里斯蒂娜是SD時報網及社交媒體編輯器。她是2012年畢業於紐約州立石溪大學的新聞學院,擁有學士學位在廣播新聞和公共事務的濃度畢業。她在實習WNET Metrofocus,WABC目擊者新聞和新聞日報。按照她的Twitter @MulliganSDTimes!
 
  17小時
 

 US officials say the documents have helped deepen their understanding of a militant group whose skill in controlling the territory it has seized has surprised many.

Islamic State has set up departments to handle "war spoils," including slaves, and the exploitation of natural resources such as oil, creating the trappings of government that enable it to manage large swaths of Syria and Iraq and other areas.
The hierarchical bureaucracy, including petty rivalries between officials, and legal codes in the form of religious fatwas are detailed in a cache of documents seized by U.S. Special Operations Forces in a May raid in Syria that killed top IS financial official Abu Sayyaf. Reuters has reviewed some of the documents.

US officials say the documents have helped deepen their understanding of a militant group whose skill in controlling the territory it has seized has surprised many. They provide insight into how a once small insurgent group has developed a complex bureaucracy to manage revenue streams - from pillaged oil to stolen antiquities - and oversee subjugated populations.
"This really kind of brings it out. The level of bureaucratization, organization, the diwans, the committees," Brett McGurk, President Barack Obama's special envoy for the anti-IS coalition, told Reuters.
For example, one diwan, roughly equivalent to a government ministry, handles natural resources, including the exploitation of antiquities from ancient empires. Another processes "war spoils," including slaves.
"Islamic State is invested in the statehood and Caliphate image more so than any other jihadist enterprise. So a formal organization, besides being practical when you control so muc contiguous territory and major cities, also reinforces the statehood image," said Aymenn al-Tamimi, a fellow at the Middle East Forum think tank and an expert on IS's structure.

The documents also show how "meticulous and data-oriented" IS is in managing the oil and gas sector, although it is not a sophisticated operation, said Amos Hochstein, the State Department's top official for energy affairs.
US officials said the documents have helped the anti-IS coalition to pinpoint vulnerabilities. The United States and its allies have been using air strikes to degrade the group's oil infrastructure and target key officials.
The documents show the Islamic State is not immune to the rivalries and personality clashes that typify bureaucracies everywhere. A Nov. 21, 2014 letter from the Diwan of Natural Resources emphasizes that Abu Sayyaf is in charge of handling antiquities.
"The reason being is that he is very knowledgeable in this field and that Abu Jihad al-Tunisi is a simpleton who can't manage the division," it says.

KINDNESS AND CRUELTY
Reuters could not independently verify the authenticity of the documents it obtained, which represent a fraction of the material seized in the Syria raid. U.S. forces captured a huge amount of data in the form of computer hard drives, thumb drives, CDs, DVDs and papers.
Many of the seized documents are fatwas, or religious rulings, covering issues from rape of female prisoners and the treatment of slaves with minor children to when it is permissible for a son to steal from his father to fund travel to fight jihad, or holy war.
Reuters reported last week on a previously undisclosed ruling by the Islamic State's Research and Fatwa Committee that sanctions the harvesting of human organs. The fatwa raises concerns that the violent extremist group may be trafficking in body parts.
A booklet entitled "From Creator's Rulings on Capturing Prisoners and Enslavement," lays out rules on enslaving women seized from vanquished "infidels." The October 2014 document, reviewed by Reuters, attempts to ground the rules in Islamic law.
Citing sayings of the Prophet Mohammad, the booklet calls for both kindness and cruelty to captives by Islamic State fighters.

Enslaved women should not be separated from their children, it says, but elsewhere the rules allow Islamic State fighters to have sex with female slaves.
Middle East Forum's Tamimi said the fatwas are intended to bolster Islamic State's claim that it is a legitimate state.
The rules not only apply to captured territory in Iraq and Syria but also its self-declared provinces in Africa, the Sinai and South Asia. They cover even mundane issues.
In the documents, there is a ruling on proper procedure for filling out the personal details of prospective fighters: name, gender, and communications method - telephone, telegram, Skype or the mobile messaging service WhatsApp.

 ===

 美國官員說,文件都加深了他的能力在控制境內已查獲感到驚訝許多激進組織的理解。


伊斯蘭國家建立了部門辦理“戰爭戰利品”,包括奴隸,自然資源,如石油開採,造成政府的派頭,使它能夠處理敘利亞和伊拉克等地區的大片。
該層次的官僚機構,包括官員之間的小競爭,並在宗教教令的形式的法律規範進行了詳細的美國特種作戰部隊在突襲月在敘利亞殺害前繳獲的文​​件緩存是財務官阿布薩耶夫。路透社審查的一些文件。

美國官員說,文件都加深了他的能力在控制境內已查獲感到驚訝許多激進組織的理解。它們提供深入了解一個曾經的小叛亂集團已開發出複雜的官僚來管理的收入來源 - 從掠奪油被盜文物 - 和監督被壓制的群體。
“真的有種這帶來了出來。官僚化,組織,diwans,各委員會,水平”布雷特McGurk,總統奧巴馬的反IS聯盟,告訴路透特使。
例如,一個府,大約相當於一個政府部門,負責處理的天然資源,包括從古代帝國文物的開發利用。另一個進程“戰爭戰利品”,包括奴隸。

“伊斯蘭國是投資於建國和哈里發圖像更比任何其他聖戰的企業。因此,一個正式的組織,除了是實用的,當你控制這樣睦毗連的領土及國內各大城市,還加強了建州形象,”Aymenn人,塔米米說,一個老鄉在中東論壇智囊團和IS的結構方面的專家。
該文件還顯示了如何“一絲不苟,數據為本”是在管理石油和天然氣部門,雖然它不是一個複雜的操作,稱阿莫斯霍克斯坦,國務院的高級官員對能源事務。
美國官員說,這些文件有助於防IS聯盟查明漏洞。美國及其盟國一直在使用空中打擊,以降低集團的石油基礎設施和目標的重要官員。
該文件顯示,伊斯蘭國家也不能倖免於這是所謂官僚比比皆是競爭和性格不合。從自然資源府一2014年11月21日信中強調指出,阿布沙耶夫武裝是負責處理文物。
“的原因是,他是非常熟悉這個領域,而阿布·吉哈德AL-Tunisi是誰也無法管理部門的傻瓜,”它說。

善意和殘忍

路透社無法獨立核實它獲得的文件,它代表查獲在敘利亞的襲擊的材料的一小部分的真實性。美軍抓獲的電腦硬盤,U盤,CD,DVD和論文形成了一個巨大的數據量。
許多繳獲的文件都教令,或宗教裁決,涵蓋了從女囚犯的強姦和奴隸與未成年子女的待遇問題時,它是允許的一個兒子從父親那裡偷來資助旅行打聖戰,或神聖的戰爭。
路透社上週報導了先前未公開的裁決伊斯蘭國家的研究和法特瓦委員會人體器官,制裁的收穫。該教令引起關切的暴力極端組織可販賣的身體部位。
題目一本小冊子“從創作者的裁決對囚犯捕獲和奴役,”關於奴役的婦女從戰敗國繳獲勾畫出規則“異教徒”。在2014年10月的文件,路透社評論,嘗試地在伊斯蘭法的規則。
引用先知穆罕默德的說法,小冊子呼籲雙方善意和虐待俘虜的伊斯蘭國家的戰士。
被奴役的婦女不宜與子女分離,它說,但在其他地方的規則允許伊斯蘭國戰機發生性關係的女奴隸。

中東論壇的塔米米說,教令旨在加強伊斯蘭國家的要求,這是一個合法的狀態。
這些規則不僅適用於境內捕獲伊拉克和敘利亞也是其自稱的省份在非洲,西奈半島和南亞。它們涵蓋甚至日常問題。
在文件上有適當的程序作出裁決的填寫準戰士的個人信息:姓名,性別,以及通信方式 - 電話,電報,Skype公司或移動消息服務WhatsApp的。

 ===
 
 17 小時
Is There a Uighur Terrorist Build-Up Taking Place in Southeast Asia? (via )



Is There a Uighur Terrorist Build-Up Taking Place in Southeast Asia?

INDONESIA-CHINA-TRIAL-TERRORISM
Bay Ismoyo—AFP/Getty Images Ahmet Bozoglan, left, a member of China's Uighur minority, walks for his appearance at the North Jakarta District Court on terrorism charges on July 29, 2015, in Jakarta.

Indonesian antiterrorism chiefs say they have broken up a plot to attack officials, churches and other targets across Indonesia

 As if to underscore the increasingly borderless quality of jihadist insurrection, a suspected terrorist from China’s remote northwest was arrested last week in Indonesia after the country’s antiterrorism squad raided a house in Bekasi, on the outskirts of the capital, Jakarta.

During the Dec. 24 morning raid, the police also seized an explosive device in a car and a model of a government building at the house, along with bombmaking materials. It is believed that the suspect — a 35-year-old member of China’s Uighur ethnic minority named Alli — was being groomed to carry out a suicide bombing.
“He’s a Uighur who was learning Indonesian, and he was a [suicide bomber] in training,” police chief Badrodin Haiti told the Jakarta Globe news website.
Alli is the 11th terrorist suspect arrested by the antiterrorism squad after a series of raids in cities across Java just days before Christmas. According to the police, the crackdown, which started on Dec. 18 and was based on tips from the FBI and the Australian Federal Police, foiled a plot to attack several cities on the main islands of Java, Sumatra and Kalimantan.
Among the targets were senior police officers, high-ranking government officials, Christian churches and Shi‘ite mosques.
Alli, along with six of the terrorist suspects nabbed days earlier, is allegedly part of an ISIS-affiliated terrorist ring that is linked with Bahrun Naim — an Indonesian ex-terrorism convict who has gone to Syria to fight with the Islamic State of Iraq and Greater Syria. (The remaining four belong to another terrorist group, Jemaah Islamiyah, which is aligned with al-Qaeda.).

Some of the funding for Bahrun’s terrorist ring allegedly came from an Indonesian migrant worker in Hong Kong. Tasmina, who is married to Zaenal, another would-be suicide bomber arrested in the West Java town of Tasikmalaya on Dec. 18, allegedly contributed $600 — more than a foreign domestic helper’s monthly wage in Hong Kong — to buy bombmaking materials, says Rakyan Adibrata, a Jakarta-based terrorism expert who advises the Indonesian parliament.
Alli, the Uighur suspect, is believed to have entered Indonesia via Batam, a small island off Singapore, about two months ago — along with two of his Uighur compatriots who remain at large. In Indonesia, he is accused of getting a fake ID card that said he was born in Pontianak, West Kalimantan. “He said he was a Pontianak Chinese, but his Indonesian language is very bad,” Rakyan tells TIME. “It’s difficult to interrogate him.”
 http://ti.me/1NJTRk7



Before entering Indonesia, the police believe, the Uighurs were in Thailand and Malaysia. A police source told the Jakarta Globe that Alli might have been linked to the Erawan Shrine bombing in Bangkok on Aug. 17. (Thai police have since ruled out that possibility.)
The Uighurs, from China’s northwestern region of Xinjiang, are Muslims who speak a Turkic language. They have long complained of repression and violence at the hands of the predominantly Chinese Han majority. Thousands have fled China in recent years, including to Southeast Asian countries like Thailand and Cambodia. The vast majority have no connection whatsoever to terrorism or Islamist extremism, instead claiming legitimate asylum. Their peaceful hope is to be allowed to go on to Turkey, but the Thai and Cambodian governments have instead deported them back to China, despite well-founded fears that the Uighurs will be persecuted on their return.

Alli wasn’t the first Uighur arrested in Indonesia. In September 2014, the police detained four Uighurs who attempted to meet Santoso — the leader of the Mujahideen of Eastern Indonesia, Indonesia’s most-wanted man and a jihadist who has pledged allegiance to ISIS — in Poso, Central Sulawesi, and to join his militant group. Like Alli, they too had been in Thailand, where they obtained fake Turkish passports, and later went to Malaysia before heading to Bandung, West Java. The four were sentenced to six years in jail by Indonesia’s courts in July this year and, at Beijing’s behest, were repatriated to China.
In early November, Indonesian security forces shot dead a Uighur called Farouk, also known as Magalasi, when they attacked Santoso’s militant group in a village in Central Sulawesi.

Indonesia hasn’t seen any mass-casualty terrorist attack to date since it cracked down on Jemaah Islamiyah, the jihadist group responsible for the Bali bombings in 2002 that killed 202 people. In the past five years, nearly all victims of terrorism in Indonesia have been police officers, who are blamed for the arrests and killings of jihadists.
Yet the rise of the social-media-savvy ISIS has sparked new interest. According to the Jakarta-based Institute of Policy Analysis for Conflict, more than 1,000 Indonesians have sworn allegiance to ISIS since June 2014. The country’s intelligence agency suggests 800 Indonesian citizens have joined ISIS in the Middle East, but police chief Badrodin disputes the figure, saying “only around 60 to 70.”

China itself has experienced a series of terrorism attacks, including mass-stabbing incidents in Kunming and Guangzhou train stations in 2014; bombing and knife attacks in Urumqi’s market and train station in 2014; and a suicide car crash in Beijing’s Tiananmen Square — all of which were blamed on the Uighurs.
The presence of Uighurs in Indonesia, thousands of kilometers away, shows “interesting dynamics,” terrorism expert Rakyan says. “Terrorism as ‘weapon for the weak’ is no longer characterized with a specific territory.”
 http://ti.me/1NJTRk7



 ===



是否有在東南亞維吾爾族​​恐怖積層發生?

印尼 - 中國審判恐怖主義
 艾哈邁德Bozoglan,離開中國的維吾爾族中的一員,走了他的出現在北雅加達地區法院對恐怖主義罪名在2015年7月29日,在雅加達。

印尼反恐負責人說,他們已經打破了一個陰謀襲擊印尼全國的官員,教堂和其他目標

 好像是為了強調聖戰起義的日益無國界的質量,從中國的西北邊陲一個可疑的恐怖分子上週逮捕了印尼後,該國的反恐小隊突擊搜查一所房子在勿加泗,在首都雅加達的郊區。

在12月24日早晨突襲,警方還繳獲爆炸裝置在汽車和政府大樓的模型在家裡,一起bombmaking材料。據認為,犯罪嫌疑人 - 命名為阿利中國的維吾爾少數民族的35歲的成員 - 正在扶植,開展自殺式炸彈襲擊。
“他是一個維吾爾族誰是學習印尼語,他是一個[自殺式炸彈襲擊者在訓練,”警察局長Badrodin海地告訴雅加達環球報新聞網站。

阿利是第11個恐怖分子嫌疑人被捕後的一系列襲擊的整個Java的城市聖誕節前幾天的反恐小分隊。據警方介紹,打假,始於12月18日,並根據來自聯邦調查局和澳大利亞聯邦警察的提示,挫敗陰謀襲擊爪哇,蘇門答臘和加里曼丹的主要島嶼的幾個城市。
其中目標是高級警官,高級政府官員,基督教教堂和清真寺什葉派。
阿利,隨著六恐怖嫌疑人抓獲天前的,據稱是與Bahrun奈姆鏈接的ISIS下屬的恐怖環的一部分 - 一個印尼前恐怖主義囚犯誰已經到敘利亞與伊拉克伊斯蘭國和打大敘利亞。(其餘四個屬於另一個恐怖組織,伊斯蘭祈禱團,它與基地組織保持一致。)
有的為Bahrun的恐怖環的資金據稱來自香港的印尼移民工人。Tasmina,誰娶了 Zaenal,另一種可能的自殺式炸彈襲擊12月18日被逮捕,在西爪哇城鎮打橫的,據稱貢獻了$ 600 - 超過外籍家庭傭工的月工資在香港 - 購買bombmaking材料,Rakyan說Adibrata,一個雅加達的反恐專家誰建議印尼議會。

阿利,維吾爾族犯罪嫌疑人,據信已經進入印度尼西亞的巴淡島,通過一個小島新加坡,大約兩個月前 - 連同他的兩個維吾爾族同胞誰仍然在逃。在印度尼西亞,他被指控得到一個假身份證的說,他出生在坤甸市,西加里曼丹的。“他說他是一個坤甸中國人,但他的印尼語很不好,”Rakyan告訴時間。“這是很難審問他。”

 http://ti.me/1NJTRk7


在進入印尼警方認為,維吾爾人是在泰國和馬來西亞。一名警方消息人士告訴雅加達環球的阿利可能被鏈接到四面 ​​佛轟炸曼谷8月17日(泰國警方已經因為排除了這種可能性。)
維吾爾人,來自中國西北新疆地區,是誰講突厥語的穆斯林。在中國主要是漢族的手中,他們一直抱怨鎮壓和暴力。數以千計的人在最近幾年逃離中國,包括向東南亞國家如泰國和柬埔寨。絕大多數有恐怖主義或伊斯蘭極端主義沒有任何聯繫,而不是聲稱合法庇護。他們的和平希望是被允許去土耳其,但泰國和柬埔寨政府已不是驅逐他們回到中國,儘管有充分理由擔心維吾爾人將在他們返回迫害。

阿利並不是第一個維吾爾人被逮捕在印度尼西亞。在2014年9月,被警方拘留4維吾爾族誰試圖滿足桑托索-東印尼,印尼通緝的男子和一名聖戰的聖戰者誰已經宣誓效忠ISIS的領導者-波索,中蘇拉威西,並加入他的好戰組。像阿利,他們也一直在泰國,在那裡他們獲得假護照土耳其,後來又到馬來西亞前往萬隆,西爪哇之前。這四個被判處6年今年在監獄被印尼法院在七月,在北京的授意下,被遣返回中國。

11月初,印尼安全部隊開槍打死了一名維吾爾語稱法魯克,也被稱為Magalasi,當他們在蘇拉威西一個村莊襲擊了桑托索的激進組織。
印尼還沒有看到任何大規模傷亡的恐怖襲擊至今,因為它打擊伊斯蘭祈禱團,負責對巴厘島爆炸案,2002年,炸死202人的聖戰組。在過去的五年裡,恐怖主義在印尼幾乎所有的受害者都被警察,誰是指責為逮捕和聖戰分子殺害。
然而,社交媒體精明的ISIS的興起引發了新的興趣。根據政策分析的雅加達的學院衝突,自2014年6月該國的情報機構1000多個印尼已宣誓效忠ISIS 建議 800印度尼西亞公民中東加盟ISIS,但警察局長Badrodin糾紛的身影,他說 “只有大約60到70。”
中國本身也經歷了一系列恐怖襲擊,包括大規模刺傷的事件在昆明和廣州火車站於2014年; 轟炸和刀襲擊烏魯木齊的市場和火車站在2014年; 和自殺車禍在北京天安門廣場 - 所有這些都歸咎於維族人。
維吾爾人在印度尼西亞的存在,遠在千里之外,顯示“有趣的動態,”反恐專家Rakyan說。“恐怖主義”的武器為弱'不再特點與特定的領土。“
 http://ti.me/1NJTRk7


 ===


 18 小時


China passes controversial new anti-terror laws

  • 28 December 2015.
Armed police stand guard in the popular shopping and nightlife area of Sanlitun in Beijing on 26 December 2015.
 Armed police stood guard in the Sanlitun area of Beijing on 26 December in response to warnings of a possible terror threat

China has passed controversial new anti-terrorism laws, saying they are needed to combat growing threats.
The new laws, passed on Sunday by China's legislature, create a new anti-terror agency and security forces with significant powers.
Critics say the laws are too broad and can be used against dissidents and religious minorities.
China has blamed Muslim Uighur separatists from Xinjiang for several public attacks in recent years.
Last week several Western governments issued warnings for foreigners in Beijing's Sanlitun neighbourhood citing intelligence of a possible threat there.

Analysis - Stephen Evans, BBC News, Beijing

Image copyright AFP. This picture taken on 2 March 2014 shows Chinese mourners lighting candles at the scene of the terror attack at the main train station in Kunming, southwest China's Yunnan Province.
 One of the more prominent public attacks China has seen in recent years was the 1 March 2014 knife attack at a Kunming train station.

Under the new law, China will have a single counter-terrorism body which the country's public security ministry says "will be in charge of identifying terrorist activities and personnel, and coordinate nationwide anti-terrorist work".
The official Chinese media cited a knife attack which left 29 people dead at a train station in 2014 as giving greater urgency to the the legislation.
The attack by four assailants was widely attributed to a Uighur group, the mainly-Muslim minority in the western Xinjiang province.
The Chinese government is keen that the undoubtedly tough measures it takes there are viewed as "counter-terrorism" (similar to measures taken by Western countries) rather than as the oppression of an ethnic minority.
The law will also give the authorities greater rights to monitor private communications. Just like in other countries, the government says this will not infringe liberty.
Read more: Why is there tension between China and the Uighurs?

What are the new measures?

  • State media report that a new counter-terrorism agency and a national intelligence centre will be set up. Professional anti-terrorist forces will also be established
  • Telecommunications and internet providers will have to "provide technical support and assistance including decryption", and will be made to "prevent dissemination of information" on extremism
  • Police forces can now use weapons directly in "emergency circumstances" when facing attackers with guns or knives
  • The military can now also venture overseas on counter-terrorism operations
  • Disseminating information about terrorist activities is now banned, as is fabricating stories about fake terror incidents
  • Except for pre-approved news media outlets, nobody is allowed to report on a terror attack nor the authorities' response, online and offline
Police cars block off the roads leading into Tiananmen Square as smoke rises into the air after a vehicle crashed in front of Tiananmen Gate in Beijing on 28 October 2013. Authorities said Xinjiang separatists were behind an October 2013 incident where a car crashed near Tiananmen Gate in Beijing.

Human rights groups say the laws are too broad and sweeping, and could be used to crack down on dissidents as well as religious minorities.
Amnesty International said in March, while the laws were still being drafted, that they have no safeguard to prevent those practicing their religion or criticise the government from being "persecuted on broad charges related to 'terrorism' or 'extremism."
Human Rights Watch also said the laws are not in line with international standards, and pointed out that the new agencies would have "enormous discretionary powers".
Prominent Chinese dissident Hu Jia tweeted on Monday of the new laws: "What it is used for is not terrorism, but rather in the name of combating terrorism, it attacks all kinds of protests, particularly group and street protests. It creates all kinds of emergency situations where it can monitor and severely restrict citizens and groups."

What is China's defence?

This photo taken on 19 April 2015 shows Uighur men gathering outside for afternoon prayers at the Id Kah mosque in Kashgar, in China's western Xinjiang region
 The far western province of Xinjiang is home to a significant population of the Muslim Uighur community in China.

China has repeatedly said that it faces legitimate terror threats and that the laws are needed to combat them. It has also denied repressing Uighurs and other minorities.
Li Shouwei, a spokesman for China's legislature, told reporters on Sunday that the laws do not target any specific region, ethnicity or religion.
Chinese commentators have long accused the West of double standards, saying that the West has refused to acknowledge the public attacks as terrorism by characterising them as human rights conflicts.
But many of the public attacks, particularly those in Xinjiang, have been difficult for news media to independently verify as China severely restricts foreigners' travel into such areas and the flow of information during such incidents.
China has also said that its new laws would not impinge on internet freedom and intellectual property rights.

 ===


中國通過爭議的新反恐法

  • 2015年12月28日.
武警站崗三里屯在北京著名的購物和夜生活區在2015年12月26日。
 武警在北京三里屯地區的響應站崗12月26日的一個可能的恐怖威脅警告.

中國已經通過了有爭議的新的反恐法律,說他們是打擊日益增長的威脅需要。
新的法律,中國的立法機構上週日通過,創建一個新的反恐機構和安全部隊與顯著的權力。
批評人士說,法律過於寬泛,可以用來對付異議人士和宗教少數派。
中國指責穆斯林維吾爾分離主義從新疆近年來多次公開攻擊。
上週,一些西方國家政府發出了外國人在北京三里屯附近列舉了有可能威脅情報的警告。

分析斯蒂芬 - 埃文斯,英國廣播公司新聞,北京

這張照片2 2014年3月拍攝顯示中國在悼念者在主要火車站在昆明,中國西南的雲南省恐怖襲擊現場點燃蠟燭。
 一個比較突出的公開攻擊中國在最近幾年已經看到了在昆明火車站2014年3月1日持刀行凶的.

根據新的法律,中國將有一個反恐機構,國家公安部表示,“將負責查明恐怖活動和人員,並協調全國反恐工作”。
中國官方媒體援引持刀行凶留下29人死亡,在火車站在2014年的立法給予更大的緊迫性。
由四個襲擊者的襲擊被普遍歸因於維吾爾族組,在新疆西部省份主要是穆斯林的少數民族。
中國政府非常希望,它需要在那裡的無疑是強硬的措施被視為“反恐”(類似於採取西方國家的措施),而不是作為一個少數民族的壓迫。
該法律還賦予當局更大的權利來監控私人通訊。就像在其他國家一樣,政府說,這會不會侵犯人身自由。
了解更多:為什麼會出現中國和維吾爾人之間的緊張關係?

有哪些新的措施?

  • 官方媒體報導,一個新的反恐機構和國家情報中心將成立。專業反恐部隊也將建立
  • 電信和互聯網服務供應商將不得不“提供技術支持和援助,包括解密”,並會作出極端主義“防止傳播信息”
  • 警察部隊現在可以在與槍或刀對著襲擊者使用的武器直接在“緊急情況”
  • 軍方現在還可以海外風險對反恐行動
  • 傳播有關恐怖活動的信息現在被禁止,因為是關於製造假恐怖事件的故事
  • 除了預先核准新聞媒體,沒有人被允許在一個恐怖襲擊,也不是政府的反應,在線和離線報告

為什麼法律爭議?

警車封鎖通往天安門廣場升起的煙霧進入車輛後墜毀在天安門前在北京2013年10月28日空氣中的道路。
 當局表示,新疆分裂主義分子是背後2013年10月的事件,其中一輛汽車在北京附近墜毀天安門城樓.

人權組織說,法律是過於寬泛和籠統,並可以用來打擊持不同政見者以及宗教少數。
國際特赦組織說,在三月份,而法律仍在起草的,他們沒有保障,以防止這些練習自己的宗教或禁止在批評政府“迫害就有關”恐怖主義“和”極端主義廣闊的費用。“
人權觀察還表示,法律是不符合國際標準,並指出,新機構將有“巨大的自由裁量權”。
中國著名異議人士胡佳在推特上週一的新法律:“它是幹什麼用的,是不是恐怖主義,而是打擊恐怖主義的名義,它攻擊各種抗議活動,特別是組和街頭抗議它創建各種。緊急情況下,它可以監測和嚴格限制公民和團體。“

什麼是中國國防?

這張照片2015年4月19日拍攝顯示維吾爾族男子為下午的祈禱在艾提尕爾清真寺喀什聚集外,在中國西部新疆地區
 新疆的偏遠的西部省是穆斯林維吾爾人社區在中國的顯著人口.

中國一再表示,它面臨著合法的恐怖威脅和打擊這些都需要法律。這也拒絕鎮壓維吾爾族和其他少數民族。
黎收巍發言人中國的立法機構,週日對記者表示,法律並沒有針對任何特定的地區,種族或宗教。
中國評論家長期指責雙重標準的西方,他說,西方國家拒絕通過表徵他們作為人權的衝突承認公眾攻擊的恐怖主義。
但許多市民的襲擊,特別是在新疆,都已經難以新聞媒體獨立核實為中國嚴重限制外國人進入旅遊等領域以及信息在此類事件的流動。
中國還表示,其新的法律將不會對互聯網自由和知識產權的侵犯。

 ===



 18小時
Iraqi commander says no progress yet in IS-held Ramadi (via )


 18小時


Suicide car bomb explodes near Kabul airport

Afghan security personnel are seen through the shattered windshield of a damaged car after a suicide car bomb attack near the Kabul airport in Kabul, Afghanistan, Monday, Dec. 28, 2015.

KABUL, Afghanistan -- A suicide car bomb attack killed at least one civilian Monday near the Kabul international airport, Afghan government officials said.
Another 13 civilians were wounded in the attack, Kabul Police Chief Gen. Abdul Rahman Rahimi told reporters at the blast site.
"As a result of the explosion one of our citizens was martyred and 13 others were wounded," said Rahimi. Early reports had only four civilians wounded.
The attack occurred near the eastern entrance of the airport, said Afghan Interior Ministry spokesman Sediq Sediqqi.
Several nearby shops, houses and vehicles were damaged as a result of the attack according to an AP photographer at the scene of the attack.
The Taliban claimed responsibility for the attack, and said the target was a convoy of foreign forces.
The attack came one week after another suicide attack carried out by the Taliban in which six U.S. soldiers were killed and two others along with an Afghan were wounded near Bagram Airfield, just north of Kabul. The troops were killed when an attacker rammed an explosives-laden motorcycle into their patrol in a village near the airfield.
Meanwhile, in the southern province of Kandahar, a woman distributing polio vaccinations to children was shot dead by unknown gunmen, said Samim Khpolwak, spokesman for the provincial governor.
A second polio worker was wounded in the incident, which took place in Kandahar city, the provincial capital, he said.
In southern Helmand province, a would-be suicide bomber was shot and killed before he was able to attack a police checkpoint, said Shah Mohmood Ashna, spokesman for the provincial police chief.

The incident happened in Gereshk district after the attacker was identified by police manning the checkpoint, he said.
Taliban militants have increased their attacks recently on Afghan government officials and security forces across the country.

 ===



在喀布爾附近機場的自殺式汽車炸彈爆炸



阿富汗安全人員通過受損汽車的自殺式汽車炸彈襲擊靠近喀布爾,阿富汗,星期一,2015年12月28號在喀布爾機場後,破碎的擋風玻璃看到。
美聯社.

阿富汗喀布爾 -自殺式汽車炸彈襲擊,造成至少一名平民週一喀布爾國際機場附近,阿富汗政府官員說。
另有13名平民在襲擊中受傷,喀布爾警察司令阿卜杜勒·拉赫曼·拉希米告訴記者,在爆炸現場。
“由於爆炸的結果,我們的公民一人犧牲,13人受傷,”拉希米說。早期的報告只有四個平民受傷。
這次襲擊發生在靠近機場的東面入口,稱阿富汗內政部發言人賽德克族Sediqqi。
一些附近的商店,房屋和車輛被損壞的據美聯社攝影師在襲擊現場襲擊的結果。
塔利班聲稱對這次襲擊負責,並表示目標是外國軍隊的一個車隊。
這次襲擊一周後塔利班進行了另一次自殺式襲擊中來到美國六個士兵被打死,另外兩人以及一名阿富汗被炸傷附近巴格拉姆機場,喀布爾以北。部隊被打死時,攻擊者撞炸藥載貨摩托車到他們巡邏在靠近機場的一個村莊。
同時,在坎大哈省南部,一名婦女分發小兒麻痺症疫苗接種的兒童被槍殺被不明槍手,說Samim Khpolwak,發言人刺史。

第二個小兒麻痺症工人被打傷的事件,這在坎大哈市發生了,在省城,他說。
在南部赫爾曼德省,一個想成為自殺式炸彈襲擊者被槍殺之前,他能攻擊一個警察檢查站,Shah說Mohmood Ashna,新聞發言人,省警察局長。
該事件發生在Gereshk區攻擊者被警察駐守檢查站鑑定後,他說。
塔利班武裝分子已經在全國各地的阿富汗政府官員和安全部隊最近加強了攻擊。

 ===


 12月27日



EU chiefs 'plan to bombard voters with propaganda'

Leave campaigners call for donations as they warn there is no limit on how much the European Commission could spend on pro-EU leaflets and advertising

 
9:30PM GMT 26 Dec 2015.

Voters face being bombarded with pro-Europe propaganda in the months leading up to the referendum as there is no limit on how much Brussels can spend on efforts to keep Britain in the European Union, campaigners have warned.
The European Commission has formed a task force in Brussels to oversee an “information” campaign in the run-up to the in/out referendum, which is expected to be held next year.

The referendum rules have been rigged so that pro-EU campaigners can hugely outspend the leave campaign
Matthew Elliott, Vote Leave
Now, campaigners calling for Britain to leave the EU fear that they will be out-gunned in the debate by pro-European political parties and the Commission in Brussels.
Because the Commission is based overseas, it is exempt from having to comply with the UK election laws that limit the amounts that the British campaigns will be able to spend on advertising and leaflets in the months leading up to the referendum.
Meeting of Heads of State or Government of the European Union at the EU headquarters in Brussels to discuss, among other issues, referendum in the UK, fight against terrorism and migrationMeeting of Heads of State or Government of the European Union at the EU headquarters in Brussels to discuss, among other issues, referendum in the UK, fight against terrorism and migration  Photo: Rex
The Vote Leave campaign has now called for public donations to help build up a “war chest” for its campaign to win support for Britain pulling out of the EU.
Brussels intervened with publicity activities in the referendum in Croatia in 2012, which led to the country joining the EU after voters backed membership, and in a referendum in Ireland on the Lisbon Treaty in 2009.

Matthew Elliott, chief executive of the Vote Leave group, said there was nothing to stop the European Commission sending direct mail to every voter in the UK in an attempt to scare the public into voting to stay in the EU.
“The referendum rules have been rigged so that pro-EU campaigners can hugely outspend the leave campaign,” he said. "All UK-based campaigners will have spending limits placed on them. The only organisation exempt from these rules will be the EU itself.
"UK voters can expect to hear a barrage of pro-EU propaganda from ‘eurocrats’ during the referendum."
He added: "We need to amass a war-chest as quickly as possible if we are going to compete. I would urge anyone who wants to take back control from the EU to get behind the Vote Leave campaign as quickly as possible.”

The warning came after David Cameron received a potential boost in his attempt to renegotiate the terms of Britain’s EU membership.
The Prime Minister has promised to overhaul the contract between Britain and Brussels, with reforms to cut immigration, protect the economy, make Europe more competitive and give parliament more power to stop unwanted EU directives.
His plan to ban European migrants from receiving in-work benefits until they have lived and paid taxes in Britain for four years has been vetoed by other EU leaders, amid fierce opposition in eastern European countries.
Germany's Chancellor Angela Merkel
However, there are reports that the French and German governments are willing to offer Mr Cameron a limited three-year ban as a compromise, which British officials are said to be keen to accept.

The Prime Minister is aiming to reach a final deal on his renegotiation package with EU leaders at a summit in February, paving the way for a referendum later in 2016.
However, the Ukip MP, Douglas Carswell, suggested that the possible deal on benefits curbs had been "choreographed" by Number 10 and Brussels to make Mr Cameron appear to have won a significant prize through his negotiations.

 ===


歐盟酋長“計劃轟炸選民宣傳”

休假活動人士號召捐款,因為他們警告有歐盟委員會可能會花多少錢在支持歐盟的傳單和廣告沒有限制

 資深政治記者
9:30 PM北京時間2015年12月26日.
 選民面臨被轟炸親歐洲的宣傳,導致對公投因為有多少布魯塞爾可以努力使英國在歐盟斥資沒有限制的幾個月裡,活動人士警告說。
歐盟委員會已經形成了在布魯塞爾一個特別​​工作組,以監督“信息”活動,在運行到輸入/輸出全民公決,預計將於明年舉行。
公投規則已被做了手腳,使親歐盟的活動家能巨大更多花費勝出休假活動
馬修·埃利奧特,投票休假
現在,活動家呼籲英國離開歐盟擔心他們會出開槍的辯論親歐洲的政黨和委員會在布魯塞爾舉行。
由於該委員會的海外基礎, 這是免除其遵守英國大選的法律限制的金額,英國的運動就能把錢花在廣告和傳單在導致全民投票的月份。
會議的國家或歐盟政府首腦在歐盟總部布魯塞爾,討論,除其他事項外,公民在英國,打擊恐怖主義和移民 會議的國家或歐盟政府首腦在歐盟總部布魯塞爾,討論,除其他事項外,公民在英國,打擊恐怖主義和遷移 照片:雷克斯
表決離開這場競選已經呼籲市民捐款​​,以幫助建立一個“戰爭基金”為它的競選贏得英國退出歐盟的支持。
布魯塞爾,2012年與干預宣傳活動在克羅地亞的公投,這導致該國選民支持會員後加入歐盟,並在里斯本條約在愛爾蘭全民公決於2009年。
馬修·埃利奧特的投票離開集團的首席執行官,說有什麼可以阻止歐盟委員會發送直郵到英國每一個選民,企圖嚇唬公眾投票將繼續留在歐盟。
“公民投票規則已經做了手腳,使親歐盟的活動家能巨大更多花費勝出的休假活動,”他說。 “全英國的活動家將放置在他們的消費限額,唯一​​的組織不受這些規則將是歐盟本身。
“英國選民們可以期待聽到公投中支持歐盟的由”歐盟官員“的宣傳攻勢。”
他補充說:“我們需要積累一戰,胸部盡可能快地,如果我們要競爭,我呼籲任何人誰想要收回控制權從歐盟得到背後的投票離開競選盡快。”

該警告是繼大衛·卡梅倫收到了他的企圖重新談判英國的歐盟成員資格的條款的潛在推動作用。
總理已承諾全面改革英國和布魯塞爾之間的合同,以改革為動力削減移民,保護經濟,使歐洲更具競爭力,並給予議會更多權力,以阻止不需要的歐盟指令。
他的計劃從直到他們居住在英國的四年上繳稅收已否決了其他歐盟領導人,在激烈的反對在東歐國家接受在職津貼禁止歐洲移民。
德國總理默克爾
不過,也有報導稱,法國和德國政府願意提供卡梅倫在有限的為期三年的禁令作為一種妥協,這是說的英國官員熱衷於接受。
總理的目標是要達到他的重新談判封裝,歐盟領導人最終交易在二月份的峰會,在2016年鋪平了道路全民公決之後。
然而,UKIP MP,道格拉斯·卡斯韋爾,建議,關於利益限制措施可能這筆交易已經“編舞”,由10號和布魯塞爾作出卡梅倫似乎通過他的談判已經贏得了顯著獎。

 ===
 12月27日
David Cameron Tells Flooding Victims He'll Do 'Whatever Is Needed,' Despite… (via )
 Huffpost UK

David Cameron Tells Flooding Victims He'll Do 'Whatever Is Needed,' Despite Cutting Flood Defence Spending In 2011

Posted:
 
David Cameron's pledge to send more troops to "do whatever is needed" to help flooding victims has not convinced people with memories long enough to recall flood defence spending was cut four years ago.
Thousands of people are fleeing their homes after "unprecedented" levels of rain caused rivers to burst their banks and left homes under water in York, Leeds and Manchester.
Cameron chaired a conference call on Sunday morning of the Government's emergency Cobra committee as ministers worked to tackle the problem, while the Government has vowed to review flood defences as the army was mobilised this morning to help emergency services.

Cameron said: "I've just chaired a Cobra meeting on the unprecedented flooding. Huge thanks to the emergency services and military for doing so much.
"Also my sympathy for those affected at this time of year. More troops are being deployed as part of a plan to do whatever is needed."
But in 2011, the Coalition Government announced it would spend 8% less on flood defences - £540 million - over the next four years compared with the previous four years.
"It's the nature of flood and coastal defence investment that there are always more projects than national budgets can afford at any one time," Environment Minister Richard Benyon said at the time.
Defence projects in Leeds and York - which are now seeing floods - were among those put on hold.
People pointed this out after Cameron's pledge to do "whatever" was needed.






Heavy rain on Christmas Day and Boxing Day saw rivers burst their banks and flood parts of Lancashire and Yorkshire, hitting homes and major roads.
Around 400 soldiers are already helping people in Yorkshire, Lancashire and Cumbria and another 500 are on the way to help.

 ===
 HUFFPOST英國

卡梅倫告訴洪水的受害者,他會做“無論是必要的,”儘管切割洪水國防開支2011

 |

發布時間:

卡梅倫承諾增兵“做任何需要的”幫助水災災民不相信人的記憶足夠長的時間來回憶洪水國防開支被削減四年前。
成千上萬的人都在雨後的“史無前例”的水平逃離家園造成河流約克,利茲和曼徹斯特爆水下的銀行,離開家園。
卡梅倫主持了政府的緊急眼鏡蛇委員會星期天早上的電話會議,部長們努力解決這個問題,而政府已發誓要檢討防洪作為軍隊今天上午出動,協助緊急服務。
卡梅倫說:“我剛剛主持了眼鏡蛇會議上空前的洪災巨大的感謝給緊急服務和軍隊做了許多事。
“我也同情那些受影響,在每年的這個時候,更多的部隊被部署為一個計劃做任何需要的一部分。”
但在2011年,聯合政府宣布,將花費更少的8%,對防洪 - 5.4億£ -在未來四年與前四年相比。
“這是洪水和沿海防禦的投資總是有更多的項目比國家預算可以負擔得起在任一時刻的性質,”環境部長理查德·Benyon當時說。
國防項目在利茲和約克 - 這是現在看到的洪水 - 是在那些暫時擱置。
人們指出了這一點,卡梅隆的承諾做“無所謂”需要之後。
 
 

在聖誕節和節禮日普降暴雨看到河流決堤和蘭開夏郡和約克郡的洪水部分,擊中房屋和主要道路。
大約400名士兵已經幫助人們在約克郡,蘭開夏郡和坎布里亞郡,另外500人在途中幫助。

 ===


  12月27日
VIDEO: Shoppers' panic after 'machete' incident (via )

 12月27日
Two Palestinians shot dead after stabbing Israeli soldier: army (via )

 12月27日

 12月27日
Juniper's VPN security hole is proof that govt backdoors are bonkers (via News)

Juniper's VPN security hole is proof that govt backdoors are bonkers

If you let in the Feds, you'll let in anyone

  Iain Thomson.

Juniper's security nightmare gets worse and worse as experts comb the ScreenOS firmware in its old NetScreen firewalls.
Just before the weekend, the networking biz admitted there had been "unauthorized" changes to its software, allowing hackers to commandeer equipment and decrypt VPN traffic.
In response, Rapid7 reverse engineered the code, and found a hardwired password that allows anyone to log into the boxes as an administrator via SSH or Telnet.
Now an analysis of NetScreen's encryption algorithms by Matthew Green, Ralf-Philipp Weinmann, and others, has found another major problem.
"For the past several years, it appears that Juniper NetScreen devices have incorporated a potentially backdoored random number generator, based on the NSA's Dual EC DRBG algorithm," wrote Green, a cryptographer at Johns Hopkins University in Maryland, US.
"At some point in 2012, the NetScreen code was further subverted by some unknown party, so that the very same backdoor could be used to eavesdrop on NetScreen connections. While this alteration was not authorized by Juniper, it's important to note that the attacker made no major code changes to the encryption mechanism – they only changed parameters."

The Dual EC DRBG random number generator was championed by the NSA, although researchers who studied the spec found that data encrypted using the generator could be decoded by clever eavesdroppers.
ScreenOS uses the Dual EC DRBG in its VPN technology, but as a secondary mechanism: it's used to prime a fast 3DES-based number generator called ANSI X9.17, which is secure enough to kill off any cryptographic weaknesses introduced by Dual EC. Phew, right? Bullet dodged, huh?
No. In Juniper's case there's a problem. The encrypted communications can still be decoded using just 30 or so bytes of raw Dual EC output. And, lo, conveniently, there's a bug in ScreenOS that will cause the firmware to leak that very sequence of numbers, undermining the security of the system.
Also, worryingly, ScreenOS does not use Dual EC with the special constant Q defined by the US government – it uses its own value.
Armed with those 30 bytes of seed data, and knowledge of Juniper's weird Dual EC parameters, eavesdroppers can decrypt intercepted VPN traffic.

Now it gets really spy-tastic

Said eavesdroppers were probably involved in introducing one of the vulnerabilities in the first place. Whoever tampered with some builds of ScreenOS changed just the value of Q. No other code was slipped in; just a new constant. Knowing that value, and how to exploit it with the data leak bug, was all a snoop needed.
In other words, someone saw the data leak bug, and knew that if they controlled Q, they could crack encrypted VPN channels.
"To sum up, some hacker or group of hackers noticed an existing backdoor in the Juniper software, which may have been intentional or unintentional – you be the judge," wrote Green.

"They then piggybacked on top of it to build a backdoor of their own, something they were able to do because all of the hard work had already been done for them," the assistant professor added.
"The end result was a period in which someone – maybe a foreign government – was able to decrypt Juniper traffic in the US and around the world."
Green points out that this is a classic example of why backdoors are a bad idea all round. It's something politicians and law enforcement officials may want to ponder the next time they call for mandatory government access to encrypted communications.
If they are going to build backdoors into encryption, such as by fiddling with the mathematics or sliding in convenient bugs, someone else is going to find the way in. ®

 ===


Juniper網絡公司的VPN安全漏洞證明,官立後門是瘋狂

如果你讓聯邦​​調查局,你讓任何人

  伊恩·湯姆森.

瞻博網絡的安全噩夢變得越來越壞的專家梳理Scr​​eenOS操作系統,老了的NetScreen防火牆。
就在上週末之前,網絡BIZ 承認曾有過“擅自”改變其軟件,使黑客控制用戶設備和解密VPN數據流量。
對此,Rapid7 逆向工程中的代碼,並發現了一個硬連線的密碼,允許任何人登錄進框,通過SSH和Telnet的管理員。
現在分析的NetScreen的加密算法由馬修·格林,拉爾夫-菲利普商Weinmann,和其他人,已經發現了另一個重大問題。
“在過去的幾年裡,似乎瞻博網絡NetScreen設備已經將潛在的後門隨機數生成器的基礎上,國家安全局的雙重EC DRBG算法,寫道:”綠色,一個密碼約翰霍普金斯大學在美國馬里蘭州。
“在2012年的某個時刻,則NetScreen代碼進一步用一些未知方顛覆,使得非常相同的後門可用於竊聽的NetScreen連接。雖然這種改變不是由杜松授權,值得注意的是,攻擊者作出重要沒有大的代碼更改加密機制 - 他們只更改的參數“。
在雙EC DRBG隨機數生成器是倡導由美國國家安全局,儘管研究人員誰研究規範發現,使用生成加密的數據可以通過巧妙的竊聽解碼。

ScreenOS使用雙EC DRBG在VPN技術,但作為一個次要的機制:它是用來被稱為ANSI X9.17黃金快速3DES為基礎的數字生成器,它的安全性足以殺死由雙EC引起的任何加密的弱點。唷,對吧?子彈躲閃,是吧?
號在瞻博網絡的情況下,有一個問題。加密的通信仍然可以使用只有30左右字節的原始雙EC輸出的解碼。,不料,方便,有ScreenOS中的一個錯誤,這將導致固件洩漏的數字是非常序列,破壞了系統的安全性。
另外,令人擔憂的是,ScreenOS不使用雙EC與美國政府定義的特殊常量Q - 它使用自己的價值。
有了這30個字節的種子數據,而Juniper的怪異雙EC參數的知識,竊聽者可以解密截獲的VPN流量。

現在,它變得非常間諜tastic

說,竊聽者很可能參與了引入擺在首位的漏洞之一。誰篡改了一些建立的ScreenOS中改變只是問:沒有其他代碼下滑的價值; 只是一個新的常數。明知價值,以及如何與數據洩露漏洞利用它,一切都探聽需要。
換句話說,有人看到了數據洩露問題,並知道如果他們控制Q,他們可以破解加密的VPN通道。

“綜上所述,一些黑客黑客或組注意到現有的後門,在瞻博網絡的軟件,這可能是有意或無意的 - 你是法官,寫道:”格林。
“然後,他們捎帶在它上面建立自己的後門,這是他們能夠做到,因為所有的辛勤工作已經做了他們,”助理教授補充說。
“最終的結果是一個時期,有人 - 可能是外國政府 - 能解密在美國和世界各地的瞻博網絡交通”
格林指出,這就是為什麼後門是個壞主意,全方位的一個典型例子。這件事情的政治家和執法官員可能希望下一次,他們呼籲政府強制訪問加密的通信思考。
如果他們要建立後門進入加密技術,如通過擺弄數學或方便的錯誤滑動,別人會找到的方式。®

 ===

  12月27日


Hello Kitty hacked with the data of 3.3m users making its way online

by | Dec 21, 2015.Hello Kitty hacked with the data of 3.3m users making its way online

The database for the site sanriotown.com, the official online community for Hello Kitty and other characters from Japanese kawaii character maker Sanrio Co. Ltd. has been hacked with the account details of 3.3 million users making its way online.
The database was discovered by Chris Vickery, the same researcher who exposed the MacKeeper and Hzone data breaches.
According to Salted Hash, the records exposed include first and last names, birthday, gender, country of origin, email addresses, unsalted SHA-1 password hashes, password hint questions, their corresponding answers, and other data points that appear to be website related.
The main Sanrio site also offers an e-commerce shop that sells (unsurprisingly) Hello Kitty merchandise, but it’s not clear from the report as to whether financial data was included in the database.
Data from other related sites was also included in the database including the user details for the sites hellokitty.com; hellokitty.com.sg; hellokitty.com.my; hellokitty.in.th; and mymelody.com.
In addition, two Sanrio backup servers were also discovered online.
The report notes that Sanrio, as well as the ISP being used to host the database itself, have been notified of the breach but as of the time of writing neither have commented publicly.

Targeting kids

The Hello Kitty hack follows a recent and much-publicized hack of kids smart toy maker VTech in November and may be indicative of a shift by bad actors to disturbingly targeting children whereas previously they have primarily targeted services frequented by adults.
Why the sudden shift to targeting kids is unclear at this stage and given that there’s little background on where the data is available or who had obtained it in this case we simply don’t know; this compares at least to the VTech hack where the hacker actually spoke about why it was wrong, saying at the time:
“Frankly, it makes me sick that I was able to get all this stuff,…VTech should have the book thrown at them.
The same applies for Sanrio and Hello Kitty: while it’s never good that any company is hacked, there should be some level of moral responsibility for a company that caters to kids to be doubly sure that the data they gather on children remains as secure as is technologically possible, and the fact that this data is in the wild now would suggest that Sanrio is at least partially to blame by failing to prevent the hack to begin with.


Duncan Riley

Duncan Riley

Duncan Riley is a senior writer at SiliconANGLE covering Startups, Bitcoin, and the Internet of Things.

Duncan is a co-founder of VC funded media company B5Media and founder of news site The Inquisitr, and was a senior writer at TechCrunch in its earlier days.

Tips? Press releases? Intersting startup? email: duncan@nichenet.com.au or contact Duncan on Twitter @duncanriley

 ===

 

凱蒂貓與3.3米用戶的數據砍死做它的方式在線

| 2015年12月21日.凱蒂貓與3.3米用戶的數據砍死做它的方式在線

該網站sanriotown.com的數據庫,官網上社區凱蒂貓和日本卡哇伊的人物製造商三麗鷗株式會社其他字符被黑有330萬用戶在網上做它的方式帳戶詳細信息。
該數據庫被發現由克里斯·維克里,誰暴露了MacKeeper和Hzone數據洩露相同的研究員。
鹽漬哈希, 暴露了記錄包括,似乎是網站相關的姓氏和名字,生日,性別,籍貫,電子郵件地址,無鹽SHA-1密碼哈希,密碼提示問題,其相應的答案,其他的數據點。
三麗鷗的主要網站還提供了一個電子商務商店,銷售(不出所料)凱蒂貓商品,但它不是從報告中可以清楚的財務數據是否被列入數據庫。
從其他相關網站的數據也被列入其中包括用戶信息的網站hellokitty.com數據庫; hellokitty.com.sg; hellokitty.com.my; hellokitty.in.th; 和mymelody.com。
此外,兩個三麗鷗備份服務器也被網上發現。
報告指出,三麗鷗,還有ISP被用來承載數據庫本身,已經被告知違約,但由於沒有書面的時候都談到公開。

針對孩子

凱蒂貓黑客遵循孩子的智能玩具製造商最近的和非常公開的黑客偉易達在十一月和可能表明一個轉變不良行為者令人不安的針對兒童而以前他們主要是針對成年人經常光顧的服務。
為什麼突然轉向針對孩子目前還不清楚在這個階段,因為有在那裡的數據是可用的,或誰曾在此情況下,我們根本不知道它獲得一些背景; 與此相比,至少到偉易達黑客那裡的黑客實際上談到為什麼這是錯的,當時他說:
“坦白地說,這讓我感到噁心,我能得到這一切的東西,...偉易達應該有這本書在他們身上。
這同樣適用於三麗鷗和凱蒂貓:雖然這是從來沒有很好的,任何公司被黑客攻擊,應該有一個 公司,迎合了孩子們倍加肯定道德責任一定程度上,他們聚集在兒童中的數據仍然是安全的,因為是技術上可行,而事實上,這個數據是在野外,現在會建議三麗鷗 至少部分由沒能阻止開始與黑客惹的禍。


鄧肯·萊利

鄧肯·萊利

鄧肯·萊利是SiliconANGLE資深作家涵蓋初創公司,比特幣,和物聯網。鄧肯是風險投資資助的媒體公司B5Media的共同創始人新聞網站的Inquisitr的創始人,並且是在TechCrunch的在它的前面幾天的資深撰稿人。提示?新聞稿?野趣啟動?電子郵件:duncan@nichenet.com.au或在Twitter上@duncanriley聯繫鄧肯
 ===
 



 The free sky and the Internet is open, regardless of the field,
Regardless of race, regardless of class, regardless of the natural resources of religious freedom!
Only violations of human rights, contrary to righteousness, moral decay,
Arrogant bandit will monitor prison, torture dissidents!

God gave peeople to the first mammal, the five kinds of senses so that people know how to think,
Check, read, follow, literate, distinguish right and wrong, the limbs are balancing the body to learn to stand,
It extends the spine to stand steady, walking, showing the characteristics of human beings with dignity!

Let us without scruples "self-censorship" and "retrogression" of corrupt dictatorship!

In the release the evil dictator, uncivilized feudal autocratic corrupt incompetence of the Communist Party of deprivation of human rights of all evil impeccable behavior!
Anonymous is a lofty standing in authoritarian regimes opposite of violence!
Anonymous never forgive "treachery" and "deprivation, physical abuse and even vicious means people thought of!
Anonymous is vast and Huge! Anonymous always stand beside the people,
We believe in justice, We believe that the truth will always prevail over evil!

Melody.Blog Sincerely Yours~

===

自由的天空因特網是開放而且不分領域,
不分種族,不分階級,不分宗教的自然自由資源!
只有踐踏人權,違背公義,道德淪喪,
狂妄自大的共匪才會監控囚牢,虐待異見人士!

上天賜予人們為哺乳動物之首,5種感官使人們懂得思考,
查證,閱讀,仿效,識文斷字,分辨是非,四肢是平衡人體學習站立,
脊椎延伸人們站立稳定,步行,展現人類是有尊嚴的特性!

讓我們不用顧忌"自我審查"和"倒退"的腐化墮落專制政權!

在發佈邪惡的獨裁者,封建社會的不文明專制腐敗無能的共產黨剝奪人權的所有罪惡昭著行為!
匿名是崇高的在站立於獨裁,暴力政權的對立面!
匿名是不會原諒"背信棄義",和"剝奪,虐待人們的身體以至思想的兇狠手段!
匿名是廣大的!匿名總是站在人們的身旁,
令我們相信公義,相信真理永遠戰勝邪惡!

Melody.Blog真誠敬上~

 ===

 *- We have talked not so easy to give up in the era of cutting-edge technology, Google Great God", and "Twitter" extensive network, give people the free exchange of important communication network shared! By our chivalrous Anonymous blog "AnonRogue" released the real and laster news to share!!- Regardless of race, regardless of class, regardless of the natural resources of religious freedom!-
-我們已説過了不會這麽容易放棄的!在科技尖端時代,谷歌大神",推特"廣博網絡,給予人們自由交流的重要溝通分享博絡!由我們俠義匿名" AnonRogue "發佈的精彩分享!-

 http://melodyanony-anti-global-authoritarian.blogspot.com/2015/12/we-have-talked-not-so-easy-to-give-up.html
 ===Melody.Blog===FOLLOW   FOLLOW===>/

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!





沒有留言:

張貼留言