<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#ffffff">
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style><head>
<style></style>
<title>OPLIN 4Cast</title>
<style>
.headerTop { background-color:#FFFFFF; border-top:0px solid #000000; border-bottom:1px solid #FFFFFF; text-align:center; }
.adminText { font-size:16px; color:#0000FF; line-height:200%; font-family:verdana; text-decoration:none; }
.headerBar { background-color:#FFFFFF; border-top:0px solid #333333; border-bottom:0px solid #FFFFFF; }
.title { font-size:20px; font-weight:bold; color:#000000; font-family:arial; line-height:110%; }
.subTitle { font-size:11px; font-weight:normal; color:#000000; font-style:italic; font-family:arial; }
.defaultText { font-size:12px; color:#000000; line-height:150%; font-family:trebuchet ms; }
.footerRow { background-color:#FFFFCC; border-top:0px solid #FFFFFF; }
.footerText { font-size:10px; color:#996600; line-height:100%; font-family:verdana; }
a { color:#0000FF; color:#0000FF; color:#0000FF; }
</style>
<table class="backgroundTable" width="100%" bgcolor="#ffffff"
cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td valign="top" align="left">
<table cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="border-top: 0px solid rgb(0, 0, 0);
border-bottom: 1px solid rgb(255, 255, 255);
background-color: rgb(255, 255, 255); text-align:
center;" align="center"><span style="font-size:
10px; color: rgb(96, 96, 96); line-height: 200%;
font-family: verdana; text-decoration: none;">Email
not
displaying correctly? <a
href="http://www.oplin.org/4cast/"
style="font-size: 10px; color: rgb(0, 0, 255);
line-height: 200%; font-family: verdana;
text-decoration: none;">View
it in your browser.</a></span></td>
</tr>
<tr>
<td style="border-top: 0px solid rgb(51, 51, 51);
border-bottom: 0px solid rgb(255, 255, 255);
background-color: rgb(255, 255, 255);">
<center><a href=""><img id="editableImg1"
src="cid:part1.00070307.01030007@oplin.org"
title="OPLIN" alt="OPLIN 4Cast" align="middle"
border="0"></a></center>
</td>
</tr>
</tbody>
</table>
<table style="width: 763px; height: 877px;"
bgcolor="#ffffff" cellpadding="20" cellspacing="0">
<tbody>
<tr>
<td style="font-size: 12px; color: rgb(0, 0, 0);
line-height: 150%; font-family: trebuchet ms;"
valign="top"
background="http://www.oplin.org/4cast/wp-content/themes/4cast/images/kubrickbgwide.jpg"
bgcolor="#ffffff">
<p><!-- Make sure you modify the 4Cast title in this section -->
<span style="font-size: 20px; font-weight: bold;
color: rgb(0, 0, 0); font-family: arial;
line-height: 110%;">OPLIN 4Cast #236: Security
forces endanger cloud security</span><br>
<!-- Make sure you modify the date of the 4Cast in this section -->
<span style="font-size: 11px; font-weight: normal;
color: rgb(102, 102, 102); font-style: italic;
font-family: arial;">June 29th, 2011</span></p>
<!-- Begin copy of Web Source here -->
<p style="text-align: justify; font-size: 16px;
font-family: arial; line-height: 110%;"><a
href="http://www.oplin.org/4cast/wp-content/uploads/2011/06/cloud_security2.png"><img
class="alignleft size-full wp-image-2011"
style="margin-right: 3px;" title="cloud
security"
src="cid:part2.03070206.04020202@oplin.org"
alt="" height="108" width="86"></a>A week ago
on Tuesday (June 21), the <a
href="http://www.fbi.gov/news/pressrel/press-releases/department-of-justice-disrupts-international-cybercrime-rings-distributing-scareware">FBI
raided</a> a data center in Virginia run by a
Swiss hosting company, DigitalOne. The FBI was
looking for evidence of international cyber crime
rings that have been distributing "scareware," a
false alert that appears on people's computers
telling them their security software must be
updated/repaired and then sends them to a link
that loads malware on their machine. This would
not have been particularly noteworthy, except that
the FBI took machines containing servers for
completely legitimate and legal businesses, and
thus had possession of data that should be
private. As a result, some people wonder about the
wisdom of putting their data in the "cloud," i.e.,
using servers hosted in large data centers.
</p>
<div> </div>
<ul style="text-align: left;">
<li style="text-align: justify; font-size: 16px;
font-family: arial; line-height: 110%;"><a
href="http://www.eweek.com/c/a/Midmarket/FBI-Busts-Two-Scareware-Fake-AV-Gangs-in-Global-Operation-187749/">FBI
busts two scareware, fake AV gangs in global
operation</a> (eWeek/Fahmida Y. Rashid) "The
FBI seized three racks of servers from the
hosting facility, causing several Websites and
services, including Curbed, Eater, Instapaper
and Pinboard, to go offline. 'The global reach
of the Internet makes every computer user in the
world a potential victim of cyber-crime,' said
U.S. Attorney B. Todd Jones of the District of
Minnesota. The FBI worked with police in Cyprus,
Germany, Latvia, Ukraine, France and Romania as
well as with Canada's Mounted Police and
London's Met Police."</li>
<li style="text-align: justify; font-size: 16px;
font-family: arial; line-height: 110%;"><a
href="http://bits.blogs.nytimes.com/2011/06/22/sites-rebuild-after-f-b-i-raid-on-data-center/">Sites
rebuild after F.B.I. raid on data center</a>
(New York Times/Verne G. Kopytoff) "The agents,
who were seeking the servers of a single client,
nevertheless seized three enclosures filled with
servers for 'tens of clients,' the company said.
Sergej Ostroumow, DigitalOne's chief executive,
declined to name the client that was the target
of the investigation. He said he did not know
the reason for the raid. In an e-mail on
Wednesday, Mr. Ostroumow said he was working to
restore his company's Web site, which was also
taken offline by the raid, but added that 'we
have e-mail and the hope that we will receive
all servers back very soon.'"</li>
<li style="text-align: justify; font-size: 16px;
font-family: arial; line-height: 110%;"><a
href="http://blog.instapaper.com/post/6830514157">The
FBI stole an Instapaper server in an unrelated
raid</a> (Instapaper Blog/Marco Arment)
"Possibly most importantly, though, the FBI is
now presumably in possession of a complete copy
of the Instapaper database as it stood on
Tuesday morning, including the complete list of
users and any non-deleted bookmarks. [...]
Instapaper stores only salted SHA-1 hashes of
passwords, so those are relatively safe. But
email addresses are stored in the clear, as is
the saved content of each bookmark saved by the
bookmarklet."</li>
<li style="text-align: justify; font-size: 16px;
font-family: arial; line-height: 110%;"><a
href="http://www.tgdaily.com/security-features/56793-fbi-seizes-servers-in-brute-force-raid">FBI
seizes servers in brute force raid</a> (TG
Daily/Trent Nouveau) "While most Americans
probably don't really care about a few downed
sites, the brute force raid executed by the Feds
surely doesn't bode well for the future. One
can't help but wonder what comes next: mass
Gmail seizures, Amazon cloud server
confiscations, or perhaps entire data centers
carted off in FBI trucks? Clearly, U.S. law
enforcement officials must learn how to minimize
'collateral damage' to neutral civilian
infrastructure during cyber-related raids."</li>
</ul>
<div style="text-align: left;"> </div>
<p style="text-align: left; font-size: 20px;
font-family: arial; line-height: 110%;"><small><strong><em>Bounty
fact:</em></strong></small><br>
</p>
<div style="text-align: justify; font-size: 16px;
font-family: arial; line-height: 110%;">Microsoft
has been offering a $250,000 bounty since early
2009 for information leading to the arrest and
conviction of those responsible for launching the
sophisticated Conflicker worm, which was
apparently the delivery mechanism for this
scareware.
</div>
<div style="text-align: left;"> </div>
<!-- End paste of web source here --> </td>
</tr>
<tr>
<td style="" solid="" background-color:="" rgb(255,=""
255,="" 255);="" >="" valign="top" width="760"
background="http://www.oplin.org/4cast/wp-content/themes/4cast/images/kubrickbgwide.jpg"><span
style="font-size: 10px; color: rgb(96, 96, 96);
line-height: 100%; font-family: verdana;">
<hr><!-- Begin standard subscription verbiage -->
<div style="text-align: justify;">The <strong><em>OPLIN
4cast</em></strong>
is a weekly compilation of
recent headlines, topics, and trends that could
impact public
libraries. You can subscribe to it in a variety
of ways, such as: <br>
</div>
<div style="text-align: left;"> </div>
<ul>
<li style="text-align: justify;"><strong>RSS
feed.</strong>
You
can receive the OPLIN 4cast
via RSS feed by subscribing to the following
URL:
<a class="moz-txt-link-freetext" href="http://www.oplin.org/4cast/index.php/?feed=rss2">http://www.oplin.org/4cast/index.php/?feed=rss2</a>.
</li>
<li style="text-align: justify;"><strong>Live
Bookmark.</strong>
If you're using the Firefox
web browser, you can go to the 4cast website
(<a class="moz-txt-link-freetext" href="http://www.oplin.org/4cast/">http://www.oplin.org/4cast/</a>) and click on the
orange "radio wave" icon
on the right side of the address bar. In
Internet Explorer 7, click on
the same icon to view or subscribe to the
4cast RSS feed. </li>
<li style="text-align: justify;"><strong>E-mail.</strong>
You
can have the OPLIN 4cast
delivered via e-mail (a'la OPLINlist and
OPLINtech) by subscribing to
the 4cast mailing list at
<a class="moz-txt-link-freetext" href="http://mail.oplin.org/mailman/listinfo/OPLIN4cast">http://mail.oplin.org/mailman/listinfo/OPLIN4cast</a>.
</li>
</ul>
</span> </td>
</tr>
<tr>
<td style="border-top: 0px solid rgb(255, 255, 255);
background-color: rgb(255, 255, 204);" valign="top"
width="760"
background="http://www.oplin.org/4cast/wp-content/themes/4cast/images/kubrickfooter.jpg">
<br>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</body>
</html>