| 2nd February |
|
|
| So why do iPhone and iPod keep an unencrypted file detailing your location over the last year? And why do they back it up on your computer? Permalink
|
See article
from guardian.co.uk
See also
iPhone Tracker application for download from
petewarden.github.com
|
Security
researchers have discovered that Apple's iPhone keeps a record of where you go
-- and saves every detail of it to a secret file on the device which is then
copied to the owner's computer when the two are synchronised.
The file contains the latitude and longitude of the phone's
recorded coordinates along with a timestamp, meaning that anyone
who stole the phone or the computer could discover details about
the owner's movements using a simple program.
For some phones, there could be almost a year's worth of data
stored, as the recording of data seems to have started with
Apple's iOS 4 update to the phone's operating system, released
in June 2010.
Apple has made it possible for almost anybody -- a jealous
spouse, a private detective -- with access to your phone or
computer to get detailed information about where you've been,
said Pete Warden, one of the researchers.
Although mobile networks already record phones' locations, it
is only available to the police and other recognised
organisations following a court order under the Regulation of
Investigatory Power Act.
Warden and Allan have set up a web page which answers
questions about the file, and created a simple downloadable
application to let Apple users check for themselves what
location data the phone is retaining.
The Guardian has confirmed that 3G-enabled devices including
the iPad also retain the data and copy it to the owner's
computer.
|
| 31st January |
|
|
| US reveals awesome surveillance capabilities used to refuse entry to tourists over trivial jokey tweets Permalink
|
See
article from
dailymail.co.uk
|
Two British tourists were refused entry into the USA after
joking on Twitter that they were going to destroy America
and dig up Marilyn Monroe. Leigh Van Bryan was handcuffed
and kept under armed guard in a cell for 12 hours after landing
in Los Angeles with pal Emily Bunting.
The Department of Homeland Security flagged him as a
potential threat when he posted an excited tweet to his pals
about his forthcoming trip to Hollywood which read:
Free this week, for quick gossip/prep
before I go and destroy America?
Leigh was also quizzed about another tweet which quoted hit
US comedy Family Guy which read:
3 weeks today, we're totally in LA
pissed people off on Hollywood Blvd and diggin Marilyn
Monroe up!
After making their way through passport control at Los
Angeles International Airport (LAX). the pair were detained by
armed guards. Despite telling officials the term destroy
was British slang for party, they were held on suspicion
of planning to commit crimes. They were held in cells for
12 hours and then put on a plane back home. The couple must now
apply for a US visa should they ever want to travel to America
again.
The Department of Homeland Security (DHS) was recently
criticised over false accounts it set up on Twitter. These are
then used to scan networks for sensitive words and then
for tracking the people who use them. Online privacy group, the
Electronic Privacy Information Centre requested information on
the surveillance, but this was not forthcoming. However words
deemed as being sensitive by the DHS include: Illegal
immigrant, Outbreak, Drill, Strain, Virus, Recovery, Deaths,
Collapse, Human to animal, and Trojan.
|
| 22nd January |
|
|
| Yet more suffocating legislation to stop British people enjoying themselves and making money Permalink
|
See
article from
homeoffice.gov.uk
See also
consultation details from
homeoffice.gov.uk
See also
Consultation Document [pdf] from
homeoffice.gov.uk
|
A
public online consultation has been launched asking for views on the
implementation of two new powers designed to spoil people's fun and depress the
late night economy.
The measures, contained in the Police Reform and Social
Responsibility Act 2011 and due to be introduced in the autumn,
will empower local killjoys by:
- allowing local authorities to charge a levy for
late-night licences to contribute to the cost of extra
policing
- extending Early Morning Restriction Orders -- a power
that will allow licensing authorities to restrict the sale
of alcohol in all or part of their areas -- to any time
between midnight and 6am
The consultation asks whether some types of premises should
be exempted from the new measures, or eligible for a reduction
in the levy, if they are judged not to be major contributors to
the type alcohol-related crime and disorder that can blight
neighbourhoods. Such premises could be hotels, cinemas or
community venues.
Minister for Fun Prevention Lord Henley said:
Alcohol-related crime and disorder is a
problem for many of our communities. These new measures give
power back to local areas so they can respond to their
individual needs.
But we also recognise that some types of
premises that open late to serve alcohol do not contribute
to late night drinking problems and should not be unduly
penalised. That is why we are seeking views on whether they
should be exempt or see a reduction in fees.
We are keen to hear from anyone who is
affected by these new powers to help inform our plans to
ensure the premises we have proposed are the right ones.
The public, licensing authorities, the licensed trade and
police are all encouraged to contribute their views.
The consultation runs until 10 April 2012.
|
| 15th January |
|
|
| Council sets up entry system to control and snoop on visitors to residential homes Permalink
|
See article
from bigbrotherwatch.org.uk
|
After
Newham in London, Aberdeen Council has introduced a video system that gives
council staff first sight of every visitor to residential properties.
Previously the video entry system connected the person at the door
with the property they were trying to enter, and the person inside was
able to see a video image of the person outside and, if they wished,
remotely open the door.
Aberdeen Council has now written to residents informing them that
they are going to change the system so it is a council operator who
controls access, and gets to see who is visiting you. The letter reads:
When a non-resident calls your flat from the
entrance, the call would be diverted to a centralised control room,
where we will also monitor the current CCTV cameras in your building
24 hours a day. A member of staff from the control room would
contact you directly and ask if you agreed to the non-resident being
allowed access to the building.
Why should a council official be able to see the visitors to your
flat before you do? It's no business who you have into your own property
and the last thing residents need is a council official scrutinising
everyone they invite round for a cup of tea.
Following the intervention of Big Brother Watch, the council
has confirmed that residents who do not wish their visitors to be seen
by a council official in the control room will be able to opt-out
of the system.
|
| 14th January |
|
|
| Revealing what smart meters get to know about electricity users Permalink
|
See article
from theregister.co.uk
See also
article from
nakedsecurity.sophos.com
|
Researchers
have found that so called smart electricity meters can be used to determine
what TV programmes people are watching.
German researchers have been looking over meters from the company Discovergy.
They found that the fluctuating brightness levels of a film or TV show when
displayed on a plasma-screen or LCD TV created fluctuating power-consumption
levels. This creates a power/consumption signature for a film that might be
determined from the readings obtained by Discovergy's technology.
The researchers also found that Discovergy apparently allowed
information gathered by its smart meters to travel over an insecure link
to its servers. The information -- which could be intercepted --
apparently could be interpreted to reveal not only whether or not users
happened to be at home and consuming electricity at the time.
This was revealed during a presentation by researchers Dario
Carluccio and Stephan Brinkhaus at the 28th Chaos Computing Congress
(28c3) hacker conference in Berlin late last month.
During the talk, entitled, Smart Hacking for Privacy, the
researchers explained that they came across numerous security and
privacy-related issues after signing up with the smart electricity meter
service supplied by Discovergy.
Because Discovergy's website's SSL certificate was misconfigured, the
meters failed to send data over a secure, encrypted link - contrary to
claims Discovergy made at the time before the presentation. This meant
that confidential electricity consumption data was sent in clear text.
In addition, the researchers discovered that a complete historical
record of users' meter usage was easily obtained from Discovergy's
servers via an interface designed to provide access to usage for only
the last three months. The meters supplied by the firm log power usage
in two-second intervals. This fine-grained data was enough not only to
determine what appliances a user was using over a period of time --
thanks to the power signature of particular devices -- but even which
film they were watching.
The researchers concluded that the two-second frequency of power
readings was unnecessary for Discovergy's stated goals. One has to ask
why the sample rate was fast enough to determine customers viewing
habits and what devices they are using and why a complete history of
such information is being kept.
|
| 9th January |
|
|
| Travel insurance companies wriggle out of paying up due to minor changes in health Permalink
|
See article
from dailymail.co.uk
|
Travel
insurers have been blasted by consumer watchdogs after record numbers of
complaints by Britons who felt cheated by medical get-out clauses.
An investigation by Which? has accused insurers of changing terms after
the policies are sold, often leaving British travellers without any cover.
A survey of 1,876 members found that nearly a third who told their travel
insurance provider about a medical condition after they took out the policy
had to pay a higher premium or had their cover removed.
Which? Travel says insurers include ongoing medical warranties in
policies that they say allow them to change the terms after the policy is
bought.
The report found cases of people who had their medical cover removed even
though their doctor said they were fit to travel, and were left travelling
with no insurance. Some then lost all medical cover because of a new minor
illness.
But the magazine says the Financial Ombudsman Service ruled eight years
ago that it was generally not fair and reasonable for insurers to exclude
from cover medical conditions that arose between the start of the policy and
the start of the trip. It said this would be reasonable only if the change
was so fundamental that the risk that was being insured became completely
different.
Which? Travel said: The FOS is now receiving more complaints about the
issue than ever before -- about 40-50 complaints every month -- up from
about 20 a month three years ago. There is also concern within the insurance
industry about the clauses.
|
|
|