Cyberlaw

All Chinese communications devices are primed for a complete ban in the U.S. and if Trump gets his way, this could happen before MWC in late February. One of the reasons for this hastened ban is the alleged violation of the Iran sanctions committed by Huawei chief financial officer Meng Wanzhou. The European Union is also considering a ban on Chinese phone makers.

Working with all major internet providers in the country, Russian authorities are planning an interesting - and quite disturbing - experiment that involves disconnecting all local users from the internet. The purpose of this experiment is to get feedback and maybe provide modifications to a law proposed back in December 2018.

A 13-count indictment has been announced against Huawei and the company’s CFO, Meng Wanzhou, mostly in relation to fraud. Two of the Chinese manufacturer’s affiliates, Huawei Device USA and Skycom Tech, have also been included in the charges. A separate 10-count indictment against the same firm was also unsealed, charging Huawei with theft of trade secrets among other things.

Notorious financier and philanthropist George Soros thinks that China's push in the AI field — which involves the plan to overtake the US by 2030 — is a severe threat to open societies. He also said that the social credit system "would give Xi Jinping total control over the people" if it became operational.

The Commission nationale de l'informatique et des libertés (CNIL) has imposed a fine of €50 million (~US$56.8 million) on Google for violating the General Data Protection Regulation (GDPR). The huge penalty has been justified by the regulatory body based on the severity of the violations, Google’s popularity with French users, and the fact that the infringements were ongoing.

YouTube has amended its policies in regard to content that depicts dangerous challenges and pranks. Videos that encourage or show activities that could lead to physical harm, make people think they are in danger, or show pranks that could be upsetting to children, have all been banned. The recent popularity of the so-called “Bird Box Challenge” is believed to have been a contributing factor to the updated policy.

Although the game itself is free, Fortnite also features virtual coins that can be used to purchase various in-game items. Scammers use stolen credit cards to buy V-bucks and then sell them for good rates to legitimate players. Just as expected, these transactions are being done via the Dark Web.

A recent study by Privacy International found that at least 20 Android apps with install bases in excess of 10 million users automatically send user data to Facebook within one second of opening. This data is sent without user knowledge or user consent and ranges from innocuous to personal. This practice obviously raises some questions of legality, although it is difficult to say who is to blame for the violation of user privacy.

Reuters has reported that President Donald Trump might issue an executive order that would effectively ban US companies from using telecommunications hardware from either Huawei or ZTE. Both Chinese companies have faced accusations of sanction-breaking and national concerns over privacy and the possibility of being utilized for state-sponsored espionage. ZTE recently paid a huge fine of US$1.4 billion for not complying with US trade restrictions.

Microsoft has issued a patch to fix a day-zero security flaw in Internet Explorer that affected a myriad of versions and systems. The flaw, which affected IE's scripting engine and how it handles memory, could allow attackers to break into a targeted system and assume full control. Attackers could then view and edit data, install programs, and create administrator accounts. Google alerted Microsoft to the vulnerability earlier this month.

Yesterday, NASA revealed that a possible compromise of its servers where personally identifiable information was stored has been under investigation since October 23. The servers have been secured since then, but NASA and its cybersecurity partners are still working on determining all the details of the data exfiltration.

More than a decade after its founding, Tumblr has finally reached a critical point and has decided to turn into "a better, more positive" version of itself by banning adult content, including nudity (with some exceptions). The new guidelines will be enforced starting today, but the affected pages will not disappear overnight.

A list of the 100 worst passwords of 2018 has been published online, and “123456” and “password” have taken the top two spots. These howlers are closely followed by the equally poor “123456789,” “12345678,” and “12345.” The annual list of the most-used worst passwords is compiled by SplashData, the company that created the SplashID and TeamsID password managers.

Despite winning a victory against Apple earlier this week, Qualcomm is continuing to pressure the iPhone manufacturer in China. Qualcomm is petitioning Chinese courts to expand the ban of iPhone sales to include the iPhone XR, Xs, and Xs Max. However, Apple is claiming that these devices should not be included in the initial ban as they run iOS 12. Chinese courts have yet to make a decision.

Sources involved in the investigation of the Marriott/Starwood data breach have revealed that Chinese hackers are believed to be behind the incident. Marriott International announced at the end of November that 500 million customer records had been affected by the hacking activity, which apparently had been ongoing since 2014. Information was taken from the Starwood guest reservation database.

A recent software update to a Google+ API left some data of 52.5 million users exposed and available to app developers. The data included rudimentary user information, including names and birth dates. As a response, Google has moved up Google+'s kill date from August 2019 to April 2019, four months sooner than previously announced.

Huawei’s Chief Financial Officer, Meng Wanzhou, has been granted bail at a hearing in a court in Canada on Tuesday (December 11). The executive’s bail has been set at CA$10 million (~US$7.5 million) and she has had to give up her Chinese and Hong Kong passports. In a possible act of retaliation, Chinese officials have detained a Canadian citizen.

Supermicro has published a letter to its customers to explicitly state that no evidence of tampering was discovered in its hardware during a recent thorough internal review. An article from Bloomberg claimed that Supermicro products had been compromised by Chinese spy chips, which had then affected servers used by companies like Amazon and Apple.

The Fuzhou Intermediate People's Court in China has granted preliminary injunctions against the import, sale, and offers for sale of various older Apple iPhone models in the country. The Court granted the injunction against Apple as it found that it infringed on two Qualcomm patents. This is being seen as a big win for Qualcomm, which has been at loggerheads with Apple over various patent infringement issues for a long time.

Huawei’s Chief Financial Officer, Meng Wanzhou, has appeared in court in Canada today. The high-level executive was at the Supreme Court of British Columbia for her bail hearing where she listened to the reasons behind her recent arrest. American officials want Meng to be extradited to the US to face charges of offenses relating to fraud.

A spokesperson for the Canadian Department of Justice has confirmed the arrest of Meng Wanzhou, the current Chief Financial Officer and Deputy Chairwoman of Huawei Technologies. It’s believed Meng was detained by Canadian authorities for possible extradition to the US. Meng Wanzhou, also known as Sabrina Meng, is the daughter of Huawei’s founder and president, Ren Zhengfei.

Bitcoin has closed at a price of US$3,964.89 today, keeping the well-known digital currency under the US$4,000 mark. Its value actually dropped to a low of US$3,505 on November 25 but has managed to gain a little over the last few days. However, a market analyst for IG Group has stated that the virtual currency is coming close to a crucial “capitulation moment.”

Dell has published a press release that will be of some concern to customers that use its network. The company suffered from a recent cyber attack, and although the attempted hack was apparently “detected and disrupted” it is possible that some information was stolen. The attack targeted names, emails, and hashed passwords; credit card details were not extracted.

Nine people and two companies in South Korea have been charged with selling Samsung technology to a Chinese rival. It is believed bendable OLED technology, which is expected to be incorporated in the South Korean company’s upcoming foldable smartphone, was included in the criminal exchange. The Chinese company that received the information has not been named.

DriveSavers, one of the world's leading data recovery companies, now offers a service for unlocking smartphones and tablets that have a locked passcode, including iPhones and iPads. DriveSavers claims to be the only company that offers this level of device unlocking and data recovery outside of law enforcement, but the service costs a staggering US$3900.

A group known for Nintendo Switch piracy has obtained and distributed a full file dump of Super Smash Bros. Ultimate, set to release in two weeks on December 7th. While early game leaks are not uncommon, a leak this far in advance is quite unusual, especially a leak of a game as hotly anticipated as Super Smash Bros. Ultimate.

Apple will appear before the U.S. Supreme Court today to argue that a lawsuit brought against it is invalid. Apple claims that the lawsuit, which alleges that the iOS App Store creates a monopoly for the company, could only be brought by app developers, not the end users. If Apple is successful, then the case will be dismissed. Otherwise, Apple could be taken to court for potentially monopolistic practices.

The UK Parliament has seized important internal Facebook documents from an executive of the software start-up Six4Three. The unprecedented move is believed to be partly in response for Mark Zuckerberg’s failure to stand before British politicians and answer questions in regard to the Cambridge Analytica scandal. Facebook is also facing accusations that employees knew about privacy policy loopholes and assisted in exploiting them.

In a report published by the Irish Data Protection Commissioner (DPC), it was revealed that LinkedIn has been using 18 million non-user emails to generate targeted ads on Facebook. It was also shown that LinkedIn has been using the personal data of its users to automatically build professional networks.

According to malware researcher Lukas Stefanko, Google Play users have installed a number of driving game apps that are actually malware. The 13 affected apps, which all come from the same developer, had been downloaded and installed over half a million times before Google pulled them from its store. Two of the apps had actually been trending, offering greater visibility to users.

Two men have been jailed in England for their parts in the hacking of TalkTalk in 2015, which cost the British telecoms company an estimated £77 million (~ US$98.5 million). TalkTalk has already been fined £400,000 (~ US$512,000) for having inadequate security procedures.

Chinese officials, citing "massive evidence," have accused Samsung, Micron, and SK Hynix of colluding and fixing the price of DRAM. If the allegations are true, the three largest DRAM manufacturers in the world would be directly responsible for the massive price increase for DRAM over the past few years. This isn't the first time these three companies have been accused of price-fixing. Back in 2005, all three pled guilty to similar charges levied by the US Department of Justice.

Tumblr's disappearance from Apple's App Store finally has an official reason: what was first simply described as "an issue" was, in fact, child pornography that slipped through the filters — enough of it to make the app vanish. This is not the first time Tumblr has run into pornography-related problems — most likely not the last time, either.

Another industry may soon be replaced by robots - IBM's Watson AI scripted a 60-second commercial for luxury car brand Lexus. Watson was fed 15 years worth of award-winning commercials and was able to outline and script the basis of the commercial. After a bit of editing by IBM researchers, Oscar-winning director Kevin Macdonald shot the commercial after being convinced by the "melodrama of the story."

The British regulator Ofcom has announced that it has fined EE and Virgin Media £6.3 million (~ US$8.035 million) and £7 million (~ US$8.928 million) respectively. The regulator has fined the two companies principally for overcharging early-exit fees to hundreds of thousands of customers and for not explaining contractual terms clearly enough.

In a paper presented at a biometric securities conference, a research team from NYU showed off a new algorithm for cracking fingerprint readers. The system, named "DeepMasterPrints," operates in similar fashion to a dictionary attack for passwords. DeepMasterPrints uses a library of fingerprint images and permutes them until it finds a match.

Nintendo has won $12 million in a settlement with LoveRoms.com and LoveRETRO.co, two ROM distribution sites it sued this past summer. The couple that operated the two sites admitted that they participated in copyright infringement and agreed to the $12 million judgement against them. While it's unlikely the couple will have to pay the full judgement, this ruling will surely send a message to other ROM sites that distribute ROMs of Nintendo games.

CloudFlare has released a new app that will route your Android device's internet traffic through its local services, effectively changing your phone's DNS. While this may be a boon for privacy advocates that bemoan the lack of DNS server choice in Android 8.1 (and below), there are a few caveats. The biggest is that the app acts as a VPN, preventing users from accessing any other VPN at the same time.

In a deal struck with Apple to begin selling the newest Apple products, Amazon has announced it will ban unauthorized third-party sellers from listing or selling Apple products through Amazon. While sellers can become an authorized Apple reseller, the qualifications are far out of reach for most small businesses. This move will inevitably kill many small businesses and Apple resellers that rely on Amazon as a storefront.

After failing to fulfill a contract with Snapchat's PR firm, PR Consultants (PRC), Instagram influencer and actor Luka Sabbat is being sued by PRC for $90,000. Sabbat signed a contract with PRC to promote Snapchat's Spectacles v2 with some Instagram posts and real-world appearances, but he failed to fulfill the terms of the contract.

Google's latest iteration of the reCAPTCHA system, reCAPTCHA v3, is now available to website administrators and webmasters. reCAPTCHA v3 runs in the background, tracking user behavior and assigning a risk score based on that behavior. Administrators can use this score to assign thresholds requiring further authentication if needed, allowing the bot-battling system to run unobtrusively for most users.

In a recent study concerning children and media consumption, researchers discovered that the majority of apps targeted at children 5 years of age and younger contained advertising. Some of these ads were not clearly marked, were difficult to close, or contained disturbing imagery. Additionally, some of the ads pushed the user to make purchases, a clear violation of the FTC's rules regarding ads used in children's media.

Google launched a new grant initiative today, seeking to fund teams that want to develop "AI for social good." Dubbed the AI Impact Challenge, the initiative will award $25 million across multiple teams that qualify based on the scalability, feasibility, and impact their project can have.

Twitter might remove the red heart-shaped Like button soon as per reports by The Telegraph. According to the report, the decision to remove the Like button is to foster a healthier climate for debate. Twitterati, on the other hand, aren't too happy with the proposal.

Gab, a social media alternative to the likes of Facebook and Twitter, has come under fire yet again for posts from its users. This time, anti-Semitic posts from the Pittsburgh shooter, who shot and killed 11 people in a synagogue yesterday, prompted PayPal to ban Gab from its payment services and platform.

A list of proposed rules put out by the U.S. Copyright Office would make jailbreaking devices like smartphones and smart speakers completely legal, if adopted. Jailbreaking, or circumventing DRM, is currently in a legally grey area. If these rules are implemented, then people could create their own tools to jailbreak a device for repair purposes. However, jailbreaking tools could not be distributed under these rules.

Web service provider Yahoo has agreed to pay out US$50 million in damages in response to the huge data breaches the company suffered from in 2013 and 2014. Once the settlement has been legally approved, Yahoo accountholders affected by the breaches will be able to make financial claims against the company and gain free access to a credit-monitoring service.

Supermicro has sent out a letter to its customers to reassure them that the tech company will be carrying out a thorough internal review of its hardware in regard to allegations made by a Bloomberg article. The news item argued that products from Supermicro had been compromised by tiny spy chips, supposedly planted by Chinese intelligence officers.

The European Union (EU) has been planning legislation to curb the at-least perceived tax-dodging practices of big tech firms with bases within the union. It involves taxing revenues from online ads at the per-EU point of target. This, as politicians such as Bruno Le Maire assert, will ensure that companies such as Apple pay a more proportionate tax burden.

DuckDuckGo is quickly becoming a popular alternative to Google's increasingly invasive search engine. The privacy-focused search tool just announced hitting 30 million searches a day. While this is a far cry from the 3.5+ billion searches Google enjoys, it marks a 50% growth for DuckDuckGo, positioning the search engine for rapid growth without relying on tracking users.