The Trouble With Facebook's Tor Link

The Trouble With Facebook's Tor Link

Facebook created a direct link to Tor to provide additional security, it said. However, cynics suspect it of having ulterior marketing motives, and security experts have discovered a number of holes. "Since there are existing policies that require the use of real names on Facebook, generating information on who is using Tor would not require much effort," noted Conjur VP Kevin O'Brien.

cebook recently announced that it was providing access directly over the Tor network.

Its purpose was to let users access Facebook without losing the cryptographic protections provided by the Tor cloud.

Facebook is providing an SSL certificate which cites its onion address. It will add onion address support for its mobile site later. The Tor link will work only in Tor-enabled browsers

Cheers and Tears

The initial response to Facebook's announcement was overwhelmingly positive. However, some responders expressed concern over the use of JavaScript.

That's "a huge no-no in Tor land," commented Daniel Hagan.

JavaScript "eliminates any security protections one might have had using Tor." Still, "I am very happy about this and sincerely thank you," wrote Gee Faunk.

"Does this serve any purpose at all other than to create a database of all the privacy-conscious users?" asked Tom Karpiniec.

Using Tor for anonymity "absolutely runs counter to FB's insistence that users only use their real names," pointed out Euell Ooluu. "What gives, FB, this is just more marketing BS, because I'll still be using my screen name"

The JavaScript Jig

JavaScript is a dynamic programming language commonly used as part of Web browsers and not to be confused with Java.

It is vulnerable to remote access attacks and often is targeted in cross-site scripting (XSS) attacks. Such attacks are a major security threat for agile environments, and are among the most common type of attacks against Web applications.

"Using a JavaScript front end is a step backwards," Kevin O'Brien, vice president and a cofounder of Conjur, told TechNewsWorld. "If anonymous access and security are concerns, why would [Facebook access] ever have made it out of code review?"

Half a Loaf...

Vulnerabilities repeatedly have been reported in SSL, the latest being the SSL 3.0 vulnerability and Poodle attack that last month spurred US-CERT to issue an alert.

And who can forget the Heartbleed bug that bedeviled OpenSSL?

Further, SSL certificates can be, and have been, forged.

SSL certs aren't used with Tor because of the risks associated with an untrustworthy certificate authority and spoofing, O'Brien pointed out.

Further, "SSL 3.0 has been obsolete since at least 1999," he said, suggesting that perhaps Facebook means to use Transport Layer Security instead, as "most companies ... refer to the two interchangeably."

Although SSL has weaknesses, "if done well, [it] can add a good degree of security against certain types of attack," Catherine Pearce, security consultant at Neohapsis, told TechNewsWorld. While SSL certs can be falsified, that "requires a higher grade of attacker than unencrypted or self-signed certificates do."

Tor and the Law

Law enforcement agencies contend criminals use the Tor network to hide their nefarious activities.

They point to the Silk Road online market, which deals in drugs and other criminal pursuits. It was cracked by the FBI in 2013 but quickly regrouped.

The FBI last year also took down Freedom Hosting, which provided turnkey Tor hidden service sites that used a ".onion" suffix to conceal their geographic location, and was known to host a number of child porn sites.

It's not as if law enforcement can't track Tor users -- it just has to keep an eye on who entered and exited the various Tor nodes.

"Since there are existing policies that require the use of real names on Facebook, generating information on who is using Tor would not require much effort," O'Brien observed. "If the JavaScript or certificate flow were being used as virtual fingerprints, it would be trivial to prove that a particular Facebook user was a Tor user."

However, "any technology that protects traffic is inherently dual use," Pearce said. "A society which removes the privacy of its citizens in the name of stopping abuses by criminals treads a dangerous path, which has led to tyranny."

Defining a Hero: Why It Matters That Apple's CEO Is Gay

Defining a Hero: Why It Matters That Apple's CEO Is Gay

Apple CEO Tim Cook has announced he is gay. Typically, when a CEO's personal life becomes a major issue, it is a bad thing.

I do think this will have an adverse impact on Apple's sales, but I also think it will have a beneficial impact on the world -- and after some soul searching, I applaud Cook's taking this action. I'll share my thoughts about why a CEO doing something both controversial and potentially heroic is a good thing.

I'll close with my product of the week: the Alienware 13 laptop

Problem CEOs

CEOs often run into trouble when their personal life takes center stage. Steve Jobs was particularly aware of that, which is why you didn't really hear much about his interests or private life. When on camera or in front of a reporter, he forced the reporter to talk about the product.

One photographer was told that if he didn't actually take the picture Steve Jobs wanted, with the new iPod in front of his face, then Jobs would leave and the guy could get someone else for the cover. It became one of the most famous Apple covers ever.

Jobs understood that any ink focused on anything else didn't move product, and he was focused like a laser on moving product.

Carly Fiorina struggled with folks who wanted to talk about being the first woman CEO of a major company, and she too felt it was a waste of time. Just fighting that fight became a huge distraction for her and HP, and it led to some really hard feelings between HP and key reporters at the time.

She then focused on politics and things went sideways -- ironically, her political career was pretty short-lived as well.

Eric Schmidt over at Google has an infamous open marriage and a foot-in-mouth problem that would make Joe Biden proud. He is no longer CEO, though, and as chairman he has simply become a traveling embarrassment that Google seems to ignore these days. About the time his proclivities became visible also was about the time the board thought Google would be better off with someone else running it.

In the end, it doesn't matter what it is -- politics, marital infidelity (which is far more common in Silicon Valley than folks realize), sex or sexual orientation. When it becomes news, it can become a distraction, and the fourth quarter is a really bad time for a company like Apple to have another distraction.

Human Tolerance

Apple does have an incredibly powerful brand, however, and it is very popular with some very intolerant demographics. By going public at this time, Tim Cook is forcing an interesting choice: Become more tolerant, or lose the ability to be proud of a product that most Apple fans are connected to very tightly.

While I have little doubt some may choose to stay intolerant -- many, if not most, likely will begin looking at the whole issue of sexual orientation a bit differently, and by the end of the quarter, they may give up their intolerance in order to continue to enjoy their beloved Apple product.

This suggests that some percentage of folks who are currently intolerant of gays -- and given Apple's reach, that could be a big percentage -- may moderate their positions and move the tolerance needle significantly as a result. I expect many have a tighter and more consistent relationship with their iPhone than they have with their minister, and that will force some interesting changes in behavior.

So, while I think Apple likely will take some kind of an economic hit for Tim Cook's move, I expect intolerance actually will take a bigger hit. While I think that in general, CEOs shouldn't do things like this, I have to admit that in this instance, Cook's action does qualify as heroic.

I also think it's good for the human race, which could use a bit less intolerance. In the end, I wish more CEOs would put people ahead of product, because it would make the world a better place -- and for this reason, I applaud Cook's decision.

Wrapping Up: Doing What's Right

Often, when CEOs' personal lives come into tight focus, it is because they are doing something wrong -- like insider trading or having a company-paid mistress. However, from time to time, CEOs come into focus because they are doing something right -- like stepping up to fight cancer, injustice, or as Bill Gates does, getting clean water and medicine to developing countries.

By focusing on the idea of greater tolerance, Tim Cook is doing something positive, and I think this kind of behavior should be encouraged.

The question to noodle on, and this takes me back to why most successful CEOs keep their personal lives under wraps, is this: Regardless of whether you agree with me about Cook, do you feel the same way about Chick-fil-A CEO Dan Cathy who came out with a strong anti-gay position? He also felt he was doing the right thing.

For me, it comes back to tolerance, which I think leads to a happier life, a better workplace and a stronger race, so I can support Cook and not Cathy, while not feeling hypocritical -- but it is an interesting question to ponder, especially as we enter the Christmas season.

I've never thought of the Apple brand in connection to tolerance, but that changed for me last week, and I can't help but think that's a good thing.

Product of the Week: The Alienware 13 Laptop

Thirteen inches is the perfect size for a notebook computer, and I'm a fan of gaming, so naturally I'm attracted to a gaming laptop that has a 13-inch screen. Alienware makes a really unique laptop, and the Alienware 13 is no exception.

Starting at just under US$1,000, this is about as thin and light as you can get in something that is truly powerful. [*Correction - November 4, 2014]

It has a graphics amplifier option, which works kind of like a dock on steroids. It adds a fully featured desktop gaming graphics card to the mix when you are at your desk, giving you a no-compromise gaming experience without forcing you to have a second PC for gaming.

This accessory adds not only graphics performance but also more USB ports, so you don't have to be plugging and unplugging a bunch of things when you come and go.

It has an optional high-resolution display -- unusual for a laptop computer. At 2560x1440 pixels, it is stunning to look at and in the 4K or Quad HD class.

It has large copper heat sinks to move the heat out of the box so you don't get heat throttling while gaming at home or on the road.

As with all Alienware laptops, you can change the LED lighting surrounding the system to any color that strikes your fancy.

For speakers, it has Klipsch-branded units tied to a Sound Blaster system for amazing sound out of something this small (though I expect most of us will still choose to use headphones).

The Alienware 13 is worthy of gaming lust, and I expect to see the guys on Big Bang Theory, who use Alienware laptops almost exclusively, soon shift to this one. Because it isn't short of amazing, the Alienware 13 is my product of the week.

*ECT News Network editor's note - November 4, 2014: Our original published version of this column incorrectly placed the price of the Alienware 13 as "starting at just under US$2,000." Its base price actually is $999.

iOS 8 adoption rate inches up to 52 percent

iOS 8 adoption rate inches up to 52 percent

iOS 8 adoption continues to creep up, though it's not setting any speed records.

Updating the stats on its App Store Distribution page on Tuesday, Apple revealed that iOS 8 adoption is up to 52 percent, with iOS 7 at 42 percent and older versions collectively at 5 percent. The numbers show adoption rates as of Monday.

What kind of gains do the new figures reveal for Apple's latest mobile OS? On September 22, Apple showed iOS 8 with a 46 percent share, iOS 7 with 49 percent and older versions with 5 percent. So the growth in iOS 8 adoption continues but at a leisurely pace.

The percentages on the App Store Distribution page specifically reveal the number of devices that visit the App Store on a given date. So they don't provide a full picture of iOS 8 adoption but at least offer the measurement officially recorded by Apple.

Apple's latest stats also jibe with those from mobile analytics firm Mixpanel. As of early Wednesday, Mixpanel's numbers showed iOS 8 with nearly 54 percent adoption rate, iOS 7 with almost 43 percent and the rest of the pack with more than 3 percent. Mixpanel's data is based on its analysis of mobile app usage, specifically the number of devices using the thousands of apps that it monitors.





Data from fellow mobile analytics firm Fiksu showed a slightly lower adoption rate for iOS 8. As of Monday, Fiksu's figures cited iOS 8 with a 48.5 percent share and iOS 7 with 43 percent.

The numbers reported by Apple and the mobile analytics firms don't distinguish between people who upgrade their existing devices to iOS 8 and those who buy new iPhones and iPads already equipped with the new version. So it's difficult to gauge how many users are running iOS 8 because they want to and how many are running it because it's already on their new device.

Whatever its exact adoption rate, iOS 8 has been slower to pick up steam compared with iOS 7 last year. And the reason may partly be that the new version got off to a buggy start.

Released on September 17, iOS 8 was beset with a number of technical bugs that prompted Apple to launch iOS 8.0.1 a week later. But 8.0.1 was saddled with other problems as users quickly started complaining that they could no longer connect to cellular networks or use the Touch ID fingerprint sensor.

In response, Apple pulled the new update and rushed out iOS 8.0.2. That version seemed to address most of the issues, though some users still cited specific issues, such as Bluetooth connectivity failures.

Apple finally released iOS 8.1 on October 20. The latest version fixed glitches concerning Bluetooth connectivity, Wi-Fi performance, videos in Safari, and screen rotation. Some users continue to report problems with the new version, according to blog site Gizmodo, specifically battery drain, Wi-Fi slowdowns, and Safari performance. But overall, iOS 8.1 seems to have corrected most of the bugs that hampered the earlier versions.

iOS 8.1 also introduced new features, including support for Apple Pay, the company's new mobile payment service. iPhone users can also now send and receive text messages from their iPads and Macs. And Apple even brought back the "beloved camera roll," as Apple software head Craig Federighi described it.

Based on the initial glitches with iOS 8, iPhone and iPad users may still be reluctant to upgrade from iOS 7. But with the more stable and feature-filled iOS 8.1 now out, the adoption rate could start to pick up more steam.

APPLE SECRET

Apple supplier asks court to keep bankruptcy plan secret

MANCHESTER: GT Advanced Technologies Inc has revealed it intends to wind down sapphire production, cutting short its once-promising bid to supply the scratch-resistant material for Apple Inc's iPhones and other mobile devices.

Scant information has emerged since GT Advanced filed unexpectedly for bankruptcy, wiping out most of its market value and triggering speculation as to what may have soured its Apple relationship and torpedoed its prospects.

At the first public hearing since Monday's filing, lawyers for GT Advanced argued it could not reveal why it sought bankruptcy and asked a court to keep crucial documents sealed, a highly unusual move that may keep investors in the dark for now about its financial implosion.

A lawyer for the company said a confidentiality agreement prevented it from revealing its Chapter 11 game plan. The company told the US Bankruptcy Court it was barred from disclosures because it was "tied up in knots" by that pact.

Apple, which zealously guards the secrecy of its product pipeline, has been known in general to place strict confidentiality requirements on its many suppliers.

Industry insiders and Wall Street analysts have speculated that GT Advanced's woes may have arisen from its half-billion dollar sapphire-supply deal, under which Apple helped bankroll a manufacturing plant in Mesa, Arizona, on the condition that GT hit certain operational targets.

Under terms of the deal, Apple would provide a total prepayment of about $578 million to help install furnaces and other gear in the factory, which would be owned by Apple and slated to employ more than 700. Apple would then be paid back over five years starting 2015.

Some analysts have speculated that GT Advanced may have had trouble hitting its targets. A source familiar with the situation has said that Apple tried to help the supplier meet those milestones.

The request to keep documents secret underscores the highly unusual nature of the case, starting with a bankruptcy filing that caught everyone from Wall Street to Apple itself off guard.

Lawyer Luc Despins of Paul Hastings told US bankruptcy Judge Henry Boroff the confidentiality agreement prevented GT Advanced from disclosing the cause of its bankruptcy, or its turnaround plan.

GT Advanced acknowledged its request to seal might be unprecedented but said it risked damages of $50 million per violation of the agreement.

The judge ended the two-hour public hearing by retreating to his chambers for a private meeting with GT Advanced and lawyers for Apple and the US Trustee, a Department of Justice official who acts as a watchdog in bankruptcy cases.

Boroff later ruled that GT Advanced should provide any reasonable information requested as part of the case, "except that in the event that any such information relates to the details of the debtors' business relationship with Apple."

In such cases, the information must be disclosed to Apple's lawyers at least three days beforehand, during which time the iPhone maker can move to block such disclosure, Boroff wrote in the ruling.

A Russian doll
Despins said at the close of Thursday's hearing that GT Advanced's sealing request was complex.

"It's like a Russian doll. You open the first one and there are four more in there," he said.

But Ann Marie Dirsa, a lawyer from the Office of the US Trustee, criticized the lack of disclosure by GT Advanced.

"The record is insufficient for the court to find what the court needs to find."

A hearing was scheduled for October 15 in Springfield, Massachusetts, to consider a motion to wind down the company's sapphire manufacturing facilities. The motion has not yet been publicly filed with the court.

On Tuesday, the Office of the US Trustee will form a committee of unsecured creditors that will play a key role in working with the company to draft a reorganization plan. Boroff said he expected that GT Advanced would only have to provide creditors sensitive information if they signed a confidentiality agreement.

A Pennsylvania shareholder, Adam Levy, filed a proposed class action against the company's officers and directors alleging the management provided false and misleading information regarding last year's stock and bonds offerings.

The lawsuit also named as defendants the underwriters of those securities - Morgan Stanley, Goldman Sachs Group Inc and Canaccord Genuity Inc.

GOLD SMARTPHONES

Goldgenie: The company behind gold-plated smartphones

Weeks before Apple Inc unveiled its latest iPhone, a British company was advertising a gold-plated version on its website.

"We have some good sources. They gave us an idea of what the phone would look like," said Laban Roomes, founder of Goldgenie, which has sold more than 2,500 gold-plated handsets in the month since the iPhone 6 and 6 Plus were launched.

Now, the privately-owned company has developed a way to add a 24-carat gold veneer to Samsung phones for the first time. This should help it to double revenue to about 20 million pounds ($32 million) next year, Roomes told Reuters in an interview.

"We hope we can cover both angles by doing two of the best-selling phones in the history of phones," he said.

Goldgenie gets about half of its revenue from the sale of Apple products, online and through approved resellers. Its 64GB iPhone 6 sells for a little over $4,200, or more than five times the price of the phone's regular equivalent.

The company lists several celebrities and sports stars among its clients. Demand is also strong in the Gulf states — a limited edition iPhone features the national crest of countries such as the United Arab Emirates and Saudi Arabia.

Goldgenie is not without competition. US-based Brikk LLC plans this month to release a gold-plated iPhone 6 with a price tag of $4,995, while London-based Gold & Co's versions — costing upward of $5,000 — went on sale on Sept. 21.

What caught the eye was Goldgenie's early release of images. Roomes said the company published details of the iPhone 6 four weeks before its official launch on Sept. 9. Reuters reporters saw the images on the website two weeks prior to the unveiling.

"We copied Apple and created hype long before it was launched," said Roomes. "We were able to get a set amount of stock a few days after the actual phone was launched in the UK."

Dragon's den
Roomes started his business in the 1990s, borrowing cash from an ex-girlfriend to buy a portable gold-plating machine that he carried door-to-door in search of customers. His big break was a deal to gold-plate emblems for Toyota Motor Corp's Lexus cars — something Goldgenie still does today.

An appearance on the BBC reality television show Dragons' Den, where budding entrepreneurs pitch ideas to a panel of investors, raised his profile. He convinced panelist James Caan to invest 60,000 pounds, an investment later returned tenfold.

The company works with Apple technicians to dismantle iPhones before using chemicals to strip an anodized layer from the back of the casing. The casing is then polished, treated and plated with gold, rose gold or platinum.

Roomes said Goldgenie's technology gives it an edge over competitors when it comes to gold-plating Samsung Electronics Co Ltd's Galaxy Alpha phone — also released last month — and the Galaxy S6, which is expected to launch next year.

"Samsung phones are plastic," he said. "Usually, people put a plate on metal or conductive surfaces. We've developed a technique that allows us to plate on plastic."

A gold-plated Galaxy Alpha, like the iPhone 6, is priced at slightly over $4,000. The regular Galaxy Alpha retails at $613 in the United States.

Android L Release Date

Android L Release Date: Early Launch of Google's New Software Hinted, Could Come with Nexus 9



Amid speculations on the release date of Google's upcoming new software Android L, it's been tipped that the firmware could be launched earlier than expected. It could come as early as 15 October though not confirmed. Android Police's founder Artem Russakovskii posted on Google+ that "Next Wednesday, the 15th, should be a HUGE day. Here are the maybes that I'm expecting around then: Nexus 9 (Volantis), Android L, Android Wear 2.0, Android TV," giving a hint that the new software could come soon.  However, the post has a disclaimer that reads: "I don't feel very confident in the above info, but it was suggested that October 15th is the magical date for all these. I wouldn't trust it just yet without further confirmations." Google hasn't revealed the release date of Android L though it was announced at its I/O Conference 2014 a few months ago. The firmware is expected to be launched with either the Nexus 9 or the Nexus 6 aka Nexus X. Developer Paul O'Brien tweeted that the HTC Nexus 9 tablet could be released on 24 October, hinting that Android L could come with it. However, the software could also come with the Nexus 6 aka Nexus X, which is expected to be announced on 31 October. Meanwhile, Android Authority has also reported that the final version of Android L would not officially be available until 1 November, hinting that it could come after the launch of Google's upcoming devices. However, nothing is confirmed as of now though it is very likely to be release soon. It may be mentioned that Android L is one of the most-hyped software Google has launched so far, as it is considered to be the search giant's biggest update to its mobile platform till date with a redesigned interface and fluid animations. It is expected to be compatible with 64-bit processors and have improved battery life. The new software is expected to be made available for update to a series of smartphones like Nexus 4, Nexus 5, Nexus 7, Nexus 10, HTC One, HTC One (M8), Moto G (2nd generation Moto X too likely to get), Samsung Galaxy S5, Galaxy Note 4 and the latest smartphones from LG. Google Nexus devices might get the firmware update as soon as it is launched while owners of other Android phones might have to wait up to 90 days to get the update. - See more at: http://www.indianexplore.in/2014/10/android-l-release-date-early-launch-of.html#sthash.bpnp4hiu.dpuf