uTorrent Quietly Installs Cryptocurrency Miner, Users Complain

With well over 150 million active users a month uTorrent is by far the most used BitTorrent client around.

The application brings in revenue through in-app advertising and also presents users with “offers” to try out third-party software when installed or updated.

These offers are usually not placed on users’ machines without consent, but this week many users began complaining about a “rogue” offer being silently installed.

The complaints mention the Epic Scale tool, a piece of software that generates revenue through cryptocurrency mining. To do so, it uses the host computer’s CPU cycles.

Epic Scale is flagged by many anti-virus vendors. However, it has been included with uTorrent for several weeks already, without any significant complaints. However, starting this week many users reported that the software was installed without any notification.

“This is pure bloatware, just updated my uTorrent. There was no notification about the software it just installed,” Aiziag complains.

“Got this installed quietly when upgraded U-Torrent. When I arrived home this evening my PC was running at full tilt and practically blowing steam. I felt like it was going to catch fire,” Daniel adds.

The issue was also brought up at the uTorrent forums, but the initial thread was deleted by a moderator. Meanwhile, many more complaints started pouring in, mostly on the freefixer website.

“Just updated uTorrent and it didn’t tell me anything about that total f*cked up ‘Epic Scale’ trash, which constantly keeps popping up with ‘Could not connect to server’,” Simon writes.

“Noticed the laptop was ‘laggy’ and then I saw the mysterious E in the taskbar. Blamed the kids again but then I saw the Utorrent update comments and bingo, me too,” Ian notes.

Link (TorrentFreak)

Snowden Docs: New Zealand Spying On Friendly Neighboring Countries For The NSA

More Snowden docs have been released, covering the extent of GCSB’s (New Zealand’s intelligence agency) spying on supposedly “friendly” island nations. As is par for the course for intelligence programs, the documents show massive bulk collections of data and communications — all of which are immediately shared with the other members of the “Five Eyes” club.

Since 2009, the Government Communications Security Bureau intelligence base at Waihopai has moved to “full-take collection”, indiscriminately intercepting Asia-Pacific communications and providing them en masse to the NSA through the controversial NSA intelligence system XKeyscore, which is used to monitor emails and internet browsing habits.

This sort of spying — while apparently “normal,” in light of previously-released documents — indicates many governments enjoy spying for spying’s sake, rather than for the justifications they often offer in defense of untargeted surveillance.

The documents, provided by US whistleblower whistleblower Edward Snowden, reveal that most of the targets are not security threats to New Zealand, as has been suggested by the Government.

Instead, the GCSB directs its spying against a surprising array of New Zealand’s friends, trading partners and close Pacific neighbours. These countries’ communications are supplied directly to the NSA and other Five Eyes agencies with little New Zealand oversight or decision-making, as a contribution to US worldwide surveillance.

Link (Techdirt)

Canadian bloke refuses to hand over phone password, gets cuffed

A 38-year-old Canadian citizen has been arrested for refusing to hand over his smartphone’s password to border agents.

Alain Philippon, of Sainte-Anne-des-Plaines in Quebec, arrived at Halifax international airport in Canada from the Dominican Republic on Wednesday – and was selected by the Canada Border Services Agency for further screening.

In the course of that search he was asked to provide the password for his phone but refused. He was charged with “hindering or preventing border officers from performing their role,” according to CBC.

If found guilty, Philippon could face a fine of anywhere between CAN$1,000 and CAN$25,000 (US$19,900, £13,000) as well as a possible one-year jail sentence.

Philippon was released on bail, and is reportedly willing to challenge the decision when he heads to court on May 12. That challenge would create an interesting legal case in an area of increasing importance: digital “goods” and the right to privacy.

While border officials are given much broader search powers than other authorities, the issue of whether a Canadian border agent is entitled to demand access to the contents of Canadian’s private phone or laptop has not been tested in court.

The agents rely on a interpretation of the word “goods” from legislation written long before smartphones started storing huge amount of personal data. While there is no argument that border agents are entitled to search within people’s luggage, the question of what “inspection” refers to remains uncertain.

An agent can inspect a phone or laptop from the outside, but should they be entitled to compel someone to provide access to its content and if so under what grounds?

Link (The Register)

WordPress Wins $25,000 From DMCA Takedown Abuser

Automattic, the company behind the popular WordPress blogging platform, has faced a dramatic increase in DMCA takedown notices in recent years.

Most requests are legitimate and indeed targeted at pirated content. However, there are also cases where the takedown process is clearly being abused.

To curb these fraudulent notices WordPress decided to take a stand in court, together with student journalist Oliver Hotham who had one of his articles on WordPress censored by a false takedown notice.

Hotham wrote an article about “Straight Pride UK” which included a comment he received from the organization’s press officer Nick Steiner. The latter didn’t like the article Hotham wrote, and after publication Steiner sent WordPress a takedown notice claiming that it infringed his copyrights.

WordPress and Hotham took the case to a California federal court where they asked to be compensated for the damage this abuse caused them.

The case is one of the rare instances where a service provider has taken action against DMCA abuse. The defendant, however, failed to respond in court which prompted WordPress to file a motion for default judgment.

The company argued that as an online service provider it faces overwhelming and crippling copyright liability if it fails to take down content. People such as Steiner abuse this weakness to censor critics or competitors.

“Steiner’s fraudulent takedown notice forced WordPress to take down Hotham’s post under threat of losing the protection of the DMCA safe harbor,” WordPress argued.

“Steiner did not do this to protect any legitimate intellectual property interest, but in an attempt to censor Hotham’s lawful expression critical of Straight Pride UK. He forced WordPress to delete perfectly lawful content from its website. As a result, WordPress has suffered damage to its reputation,” the company added.

After reviewing the case United States Magistrate Judge Joseph Spero wrote a report and recommendation in favor of WordPress and Hotham, and District Court Judge Phyllis Hamilton issued a default judgment this week.

“The court finds the report correct, well-reasoned and thorough, and adopts it in every respect,” Judge Hamilton writes.

“It is Ordered and Adjudged that defendant Nick Steiner pay damages in the amount of $960.00 for Hotham’s work and time, $1,860.00 for time spent by Automattic’s employees, and $22,264.00 for Automattic’s attorney’s fees, for a total award of $25,084.00.”

The case is mostly a symbolic win, but an important one. It should serve as a clear signal to other copyright holders that false DMCA takedown requests are not always left unpunished.

Link (TorrentFreak)

New Anti-Corruption Social Network In Russia Requires Numerous Personal Details To Join: What Could Possibly Go Wrong?

As the murder of the opposition politician Boris Nemtsov last week reminds us, the political situation in Russia is not just difficult, but extremely dangerous. Presumably hoping that technology might offer a relative safe way to cope with this situation, a Russian NGO has announced that it will be launching a nationwide social network dedicated to fighting bribery and corruption. You might expect that anonymity would be a crucial aspect, given the risks faced by those who choose to join. And yet, as this RT article explains, that’s not the case (via @prfnv):

the new project will have one major difference from existing social networks — a complete lack of anonymity. Membership will only be granted by invitation from existing members, and even when this condition is met, the institute that launches the project promises to open accounts only after verifying the identity of potential members in real life.

The users will have to provide a lot of details about themselves — from name and date of birth, to place of work, e-mail and phone numbers. The people launching the project say that this is a necessary measure to prevent attempted slander, which they see as the main danger threatening their network.

Link (Techdirt)

Suburban Express Changes Terms Of Service To Screw Sued College Students Out Of University-Provided Legal Aid

Dennis Toeppen of Suburban Express is still deploying his highly-peculiar brand of “customer service” — something that includes doxxing unhappy customers, suing unhappy customers, suingunhappy customers, suing unhappy customers and being arrested for “harassment through electronic communications.”

Nothing has changed. Toeppen is still a lawsuit fan who believes negative reviewers or anyone who doesn’t fully appreciate how hard it is to run a shuttle bus service should be forced to pay $500 (at least) in “liquidated damages.” Now, he’s looking to pave himself a downhill slope for his future lawsuit filing. Techdirt reader Kionae sends over this article from the University of Illinois’ campus newspaper which contains a small detail that shows just how far Toeppen is willing to go to get his $500.

Suburban Express recently changed its “Terms & Conditions” so any legal action arising on the online transaction of tickets should take place in Ford County, roughly 30 miles north of Champaign.

In a statement on its website, the company said it chose Ford County “because of high availability of court dates, efficient court operation, excellent staff work ethic, low costs for both parties, easy parking, and other factors.”

This has nothing to do with “efficient court operations” and has everything to do with making it economically unfeasible for sued college students to fight back. Taking the action 30 miles away strips students of the following protection:

According to the Student Legal Services Operational Plan, Student Legal Services can only represent eligible students who have cases in or originating in Champaign County.

Toeppen’s change of venue is carefully calculated to extract the most money/misery from the situation. That situation, of course, is Toeppen’s inability to run a business and field criticism at the same time. In Toeppen’s defense, he’ll say he’s never wrong and it’s these spoiled brat students with overactive mouths who are to blame. (What? Did you think I was going to half-heartedly defend any aspect of Toeppen’s behavior?)

With students forced to pay for their own defense against Toeppen’s frivolous, vindictive lawsuits, the needle moves towards a higher default judgment rate. That’s what Toeppen wants, considering his legal arguments are mostly indefensible. This should see his lawsuit-filing rate approaching the stratospheric highs of 2012-13, a two-year span in which Suburban Express filed 126 lawsuits. Toeppen is misusing the judicial system. Hopefully, the judges there will recognize his venue-shifting for what it is and push cases back to the proper courts.

Link (Techdirt)

Comcast Blocks HBO Go From Working On Playstation 4, Won’t Coherently Explain Wh

About a year ago we noted how Comcast has a weird tendency to prevent its broadband users from being able to use HBO Go on some fairly standard technology, including incredibly common Roku hardware. For several years Roku users couldn’t use HBO Go if they had a Comcast connection, and for just as long Comcast refused to explain why. Every other broadband provider had no problem ensuring the back-end authentication (needed to confirm you have a traditional cable connection) worked, but not Comcast. When pressed, Comcast would only offer a generic statement saying yeah, it would try and get right on that:

“With every new website, device or player we authenticate, we need to work through technical integration and customer service which takes time and resources. Moving forward, we will continue to prioritize as we partner with various players.”

And the problem wasn’t just with Roku. When HBO Go on the Playstation 3 was released, it worked with every other TV-Everywhere compatible provider, but not Comcast. When customers complained in the Comcast forums, they were greeted with total silence. When customers called in to try and figure out why HBO Go wouldn’t work, they received a rotating crop of weird half answers or outright incorrect statements (it should arrive in 48 hours, don’t worry!).

Fast forward nearly a year since the HBO Go Playstation 3 launch, and Sony has now announced an HBO Go app for the Playstation 4 console. And guess what — when you go toactivate the app you’ll find it works with every major broadband ISP — except Comcast. Why? Comcast appears to have backed away from claims that the delay is due to technical or customer support issues, and is now telling forum visitors the hangup is related to an ambiguous business impasse:

“HBO Go availability on PS3 (and some other devices) are business decisions and deal with business terms that have not yet been agreed to between the parties. Thanks for your continued patience.”

Since every other ISP (including AT&T, Verizon, and Time Warner Cable) didn’t have a problem supporting the app, you have to assume Comcast specifically isn’t getting something from Sony or HBO it would like (read: enough money to make them feel comfortable about potentially cannibalizing traditional TV/HBO viewers). It’s a good example of how crafting net neutrality rules is only part of the conversation. It’s great to have rules, but they don’t mean much if bad or outright anti-competitive behavior can just be hidden behind half-answers and faux-technical nonsense for years on end without repercussion.

Scenic Selfie Station

I feel like Americans were fed a lot of bullshit about American ingenuity and Thomas Edison when they were kids, which produced a generation of adults who view every mundane inconvenience as an opportunity to invent and market a revolutionary problem-solving gadget. In the course of solving some such minor problem, the semblance of reality and practicality fades away as the relentless capitalist logic of the inventor drives him towards the craziest possible solution. He then shits his product onto Kickstarter, where it floats up to the intake of Your Kickstarter Sucks, itself an bizarre invention created to solve the problem of Kickstarters not being made fun of enough.

Ryan wanted to get a picture of himself with his fiancé at Staples Center, but his arms were too short to take a selfie (I am not making this up; watch the video). They were forced to ask a stranger to take a photo, but the stranger’s photo came out bad and Ryan was too shy to ask him to take another. There’s got to be a better way! Well now there is:

The product will be a stationary stand much like the old telescope viewers that still exist at various national monuments. It will stand roughly 4 and 1/2 feet tall. It will have a small camera like those included on an Android or iPhone 6. There will be a touchscreen on the opposite side of the camera for customer’s to log into one of their social media platforms. It will also have a ten second countdown that beeps as those desiring a picture will have that time to pose with their friends for the perfect picture. After the picture is taken, it will be automatically posted onto whatever social media platform the customer has logged into.

Smartphones enable people to take high quality photographs anywhere they want, but what we really need is a $10,000 stationary apparatus mounted in front of Staples Center to save souvenir-craved sports fans the trouble and shame of asking a stranger to take a photograph of them. The best part is it’s totally free to use and funded by nothing more intrusive than corporate logos plastered on your photos:

So… Long story short, we will be offering companies to have their logos included on the customer’s pictures which are taken and then posted on social media and…BOOM! All of the sudden, instead of harassing our social media walls with advertisements that are scrolled through. Companies will now have their logos included on pictures of our friends at beautiful destinations across the nation and eventually globe! Thus using both word of mouth advertising while letting the people be the sole marketers. 

Link (Your Kickstarter Sucks)

.SO Registry Bans More “KickassTorrents” Domains

With millions of unique visitors per day KickassTorrents has become a prime target for copyright holders, many of whom would like to see the site taken offline.

Among other tactics, copyright holders ask domain name registries to suspend pirate site domain names. For a long time the Somalian .so TLD appeared to be a relatively safe haven, but this changed last month when the Kickass.so domain was “banned.”

Initially the action appeared to be an isolated incident, but the .SO registry wasn’t done with the Kickass brand yet.

A few days ago the .SO registry targeted a new round of “Kickass” related domains. Kikass.so, Kickas.so, Kickasstorrent.so, Kickasstorrents.so, Kickasstorrent.so, Kickassmovies.so and Kickassmovie.so were all added to the ban list.

Interestingly, none of the domains were affiliated with the notorious torrent site. Kickassmovies.so, for example, was a relatively low traffic streaming site that simply used the Kickass brand to gain traffic.

Link (TorrentFreak)

The Tsarnaev Trial and the Blind Spots in ‘Countering Violent Extremism’

On April 19, 2013, as Dzhokhar Tsarnaev lay bleeding from gunshot wounds in a suburban Boston backyard, he scrawled a note that contained the following message:

“The US Government is killing our innocent civilians but most of you already know that….I don’t like killing innocent people it is forbidden in Islam but due to said [unintelligible] it is allowed…Stop killing our innocent people and we will stop.”

This message mirrored comments Tsarnaev would later give to investigators, in which he cited grievances over American wars in Afghanistan and Iraq as his motivation for the 2013 bombing of the Boston Marathon.

In his trial, which begins today, more details are expected to emerge about how he went from a popular college student to an alleged homegrown terrorist.

Widely described as a “self-radicalized” terrorist, Tsarnaev now serves as a prime example of the type of individual targeted by Countering Violent Extremist (CVE) programs. Yet in fact, Tsarnaev’s life trajectory leading up to the bombing does not resemble the “path to radicalization” identified in CVE frameworks — raising questions about the capacity of these programs to intervene effectively to preempt terrorism.

Link (The Intercept)