Information freedom for open source users.

A privacy activist has filed a lawsuit targeting eight corporate users of Quantcast’s “zombie” Flash cookies, in addition to Quantcast itself. The suit alleges that MTV, ESPN, MySpace, Hulu, ABC, Scribd, and others used Quancast’s Flash-based cookies to recreate browser tracking cookies that users had taken the trouble to delete. “At issue is technology from Quantcast, also targeted in the lawsuit. Quantcast created Flash cookies that track users across the web, and used them to re-create traditional browser cookies that users deleted from their computers. These ‘zombie’ cookies came to light last year, after researchers at UC Berkeley documented deleted browser cookies returning to life. Quantcast quickly fixed the issue, calling it an unintended consequence of trying to measure web traffic accurately. … The lawsuit (PDF)… asks the court to find that the practice violated eavesdropping and hacking laws, and that the practice of secretly tracking users also violated state and federal fair trade laws. The lawsuit alleges a ‘pattern of covert online surveillance’ and seeks status as a class action lawsuit.”

Read more of this story at Slashdot.

littlekorea writes “Chatroulette, the strangely addictive online game in which users are connected via webcam and microphone to random strangers at the click of a button, has had enough of users exposing themselves to the unsuspecting public, among other disgraces. The founder of Chatroulette has announced the company has hired developers to collect IP addresses and take screenshots of those users breaking the rules.”

Read more of this story at Slashdot.

roseability writes “Facebook have quietly added the ability to delete you account. ‘Deactivate Account’, under Account Setting, has become ‘Deactivate or Delete Account’, and when checked it purports to permanently delete your account and all information you have shared. Facebook is actually willing to erase your data permanently? They must be counting on very few people doing so.” Mixed reports on this: perhaps this is a limited test?

Read more of this story at Slashdot.

We’ve covered Tor in LJ before (see Kyle Rankin’s “Browse the Web without a Trace“, January 2008), but that was some time ago, and this subject seems to be more timely with each passing day. Also, with Tor being at only 0.2.x status, it still qualifies as software in development, so I’m justified in featuring it this month. more>>

itwbennett writes “In a paper posted online this week, researchers from the University of Colorado at Boulder and McGill University outline three different types of attacks that could be launched against Chatroulette users. While the new research doesn’t expose any gaping privacy holes, it does show how the service could be misused by determined criminals. For example, the researchers were able to use IP-mapping services to get a general idea of users’ location (a public Web site, called Chatroulettemap.com already does this). Then by searching Facebook using information obtained in chats and comparing pictures, researchers were able to identify chatters. ‘Even in a city as big as Chicago, you can drill down and find the person you’re actually talking to,’ said Richard Han, an associate professor with the University of Colorado who co-authored the paper.”

Read more of this story at Slashdot.

Technology enthusiasts and the ranks of the curious have been trying for years to rescue the term “hacker” from its pejorative meaning. A new conference that will teach kids the wonders of hacking may be one sign that such efforts are paying off.

Ashe Tyrael writes “Earlier this week, Blizzard announced that they were going to be implementing changes in their official forums (for StarCraft II when it launched, and for WoW prior to Cataclysm) that would require users to post under their real names, as part of the Real
ID system. After perusing nearly 14,000 European and 50,000 US forum posts, the majority of which decried this move with various levels of vehemence, it looks like Blizzard has given in to the pressure. From the official statement: ‘We’ve been constantly monitoring the feedback you’ve given us, as well as internally discussing your concerns about the use of real names on our forums. As a result of those discussions, we’ve decided at this time that real names will not be required for posting on official Blizzard forums.’ Not that this doesn’t leave room for them to re-implement this at a later date, but that’s a pretty definite ‘no.’ It was clear they were going to take criticism, but the size of the backlash was impressive. It seems likely Blizzard simply wasn’t expecting that level of antipathy toward their new policy.

Read more of this story at Slashdot.

crimeandpunishment writes “Not only are Germany and Facebook not friends, they might end up opponents in a courtroom. Germany has begun legal action over privacy. A German data protection official accuses Facebook of illegally saving personal data of people who don’t use the site and haven’t given permission to access their private information. Germany, which has also launched an investigation into Google over its Street View mapping program, has some of the strictest privacy laws in the world.”

Read more of this story at Slashdot.

schlick writes with word that the Diaspora project (last mentioned here several weeks back) has an update with a demo and some screen shots. Diaspora’s goal: to provide social networking without the privacy invasion possibilities inherent in sites like Facebook.

Read more of this story at Slashdot.

In the early hours of June 18 the Electronic Frontier Foundation and the Tor Project released a beta of a Firefox extension dubbed “HTTPS Everywhere” with the intention of providing encryption of user data when visiting certain sites. According to the official announcement, “HTTPS Everywhere” will provide SSL encryption to sites like Google Search, Wikipedia, Twitter and Identi.ca, and Facebook. more>>

crimeandpunishment writes “A lot of Facebook users going through divorces have learned a very costly lesson about their privacy settings. In fact, for many of them their Facebook pages helped lead to the divorce in the first place. More than 80% of the members of the American Academy of Matrimonial Lawyers say they’ve used or run into evidence gathered from Facebook and other social networking sites over the last five years — and some of them have some very entertaining stories to tell. ‘Facebook is the unrivaled leader for turning virtual reality into real-life divorce drama,’ said AAML’s president.”

Read more of this story at Slashdot.

Microsoft’s cavalier attitude toward privacy in the Windows Live Essentials applications has drawn the ire of many.

bennyboy64 writes “Barack Obama’s cyber-security coordinator has shown interest in an e-security code of practice developed in Australia that aims to quarantine Internet users infected by malware, also known as zombie computers. He reportedly said it would be a useful role model for the US to adopt. One suggestion within the code is to put infected users into a ‘walled garden,’ which limits Internet access to prevent further security problems until quarantined. Another is to throttle the speed of an infected users’ Internet connection until their computer fixed. The code is also being considered by other Asia-Pacific countries, ZDNet reports.”

Read more of this story at Slashdot.

An anonymous reader writes “Twitter has agreed to settle Federal Trade Commission charges that it deceived consumers and put their privacy at risk by failing to safeguard their personal information, marking the 30th case the FTC has brought targeting faulty data security, and the agency’s first such case against a social networking service. Under the terms of the settlement, Twitter will be barred for 20 years from misleading consumers about the extent to which it maintains and protects the security, privacy, and confidentiality of nonpublic consumer information, including the measures it takes to prevent authorized access to information and honor the privacy choices made by consumers.”

Read more of this story at Slashdot.

Twenty percent of applications on Android Market let third parties access private or sensitive information, according to a report from security vendor SMobile Systems.

m94mni writes “The European Parliament wants to monitor your Internet searches for child porn offenders, as previously reported. The declaration was adopted yesterday, and in an interview with the Swedish news outlet Europaportalen.se, the Italian MEP behind the declaration, Tiziano Motti, shares his views on the Internet and anonymity. In essence, Motti wants to completely eliminate anonymity on the Internet. ‘Each upload of text, images, or video clips must be traceable by the authorities’, says Motti. This is in line with the secretive UN initiative Q6/17, revealed two years ago.” The doublespeak here seems to go beyond the imprecision of automated translation.

Read more of this story at Slashdot.

megahurt writes “Location-based services are becoming more common, and the features they add to mobile devices can be useful and even fun. But the downside is that everyone who reads the posting will know the user isn’t home. On top of that, some services, such as Foursquare, can be linked to Twitter feeds. Peter Eckersley, senior staff technologist, says there are many situations in which the location data that is kept could be misused. Many of the providers of services say in their privacy policies they will give up the data in cases where it is subpoenaed. That isn’t always from law enforcement; sometimes the data can be used in civil lawsuits such as divorce cases.”

Read more of this story at Slashdot.

This hasn’t been AT&T‘s month. First, security researchers found a loophole in the company’s Website that could be used to reveal email addresses for tens of thousands of Apple iPad customers.

An anonymous reader writes “The BBC reports that armed police were called to a UK school earlier today after being advised of a potential threat by the FBI. The school stated that the FBI ‘raised the alarm after Internet scanning software picked up a suspicious combination of words,’ strongly implying that they are carrying out routine, automated surveillance of social networking sites. While in this case it does appear that there may have been a genuine threat, the story nonetheless raises significant privacy concerns.”

Read more of this story at Slashdot.

An anonymous reader writes “If you thought the Australian Government’s internet filter project was bad, think again. They have a new project — they are examining a policy that would require all internet service providers to log users’ web browsing history and email data such as who all emails were sent to and from. And that’s just the start. Telephone calls, mobile phone calls, even internet telephony. It’s all in there. Looks like 1984 was a pretty prophetic book.” Several readers also point to ZDNet’s coverage.

Read more of this story at Slashdot.