Tag Archive: Internet


Scientists work to improve Internet capacity

Our taste for the Internet is insatiable – traffic is growing so fast that its transmission systems soon might be filled to capacity. But scientists are coping, finding ingenious ways to satisfy our deep bandwidth hunger.

Of course, they can’t accelerate the speed of light as it flies down the glass fibers of central networks carrying our Internet messages worldwide. The laws of nature limit that. Yet they can tap other characteristics of light to pack layers of information into each optical fiber in the network, so that far more data can flow simultaneously down those glass backbones.

Old systems used light that was either on or off – like flashlight signals – to send information along the fibers in the binary language of zeros and ones. But light is an electromagnetic wave, so it has a whole electrical field that scientists now are putting to work to add to the information on each wavelength.Alcatel-Lucent recently announced a system for telecommunications-service providers that takes advantage of both the polarization and phases of light to encode data. The system can more than double the capacity of a single fiber, said James Watt, head of the company’s optics division. Such a system, for example, can transmit more than twice the number of high-definition TV channels than now can be streamed concurrently.

The new equipment is part of a continued research drive to increase the capacity of each strand of optical fiber, said Keren Bergman, a professor of electrical engineering at Columbia University and head of its Lightwave Research Laboratory. “We are stuffing more information in the same space,” she said.

A fiber is no thicker than human hair, but can carry many wavelengths of laser light, with each wavelength adding to the bits transmitted per second. The bit rates now attainable are in the billions (gigabits) per second or even trillions (terabits) per second.

The need for core network improvement is pressing, said Stojan Radic, a professor of electrical engineering at the UC San Diego. “We are looking at a point soon where we cannot satisfy demand,” he said. “And if we don’t, it will be like going over a cliff.”

Demand is continually growing, somewhere below street level, as details of our e-mail, bank balances and national security zip along on light waves. And consumers can’t get enough video clips on YouTube, television shows on Hulu, and movies streamed to them by Netflix that they watch on their computers and TVs.

That’s just a fraction of the traffic. Add to it the many demands of cloud computing and countless mobile devices and information data bases, for example, and the totals become even harder to imagine.

Next-generation systems that can handle this future traffic jam are being developed by many companies, including Ciena in Linthicum, Md., and Infinera in Sunnyvale. Alcatel-Lucent says it has begun to sell equipment that transmits up to 88 channels of information, each operating at 100 gigabits a second, but it has not disclosed customer names.

The new equipment from Alcatel-Lucent is expected to reduce the cost per transmitted bit of information, compared with existing equipment, said Paul Louis Ross, a company spokesman. The systems are based in part on the work of the researcher Gabriel Charlet, a scientist at an Alcatel-Lucent Bell research facility in France, who last year sent data at a rate of 7.2 terabits a second over a single fiber more than 7,000 kilometers long.

All of those added gigabits take advantage of the complex way that light can be used to encode data. In the past, when only the intensity of light was used, the signals could transmit only one bit per time slot, said Govind Agrawal, a professor of optics at the University of Rochester.

By contrast, in the new system from Alcatel-Lucent, two binary digits or bits can be encoded by using four phases of light. And the polarized light can vibrate up and down or sideways. In this way, four bits of data can be transmitted per time slot instead of one, said Andrew Chraplyvy, a scientist and executive at the Bell Labs of Alcatel-Lucent in Crawford Hill, N.J., where fiber-optic research originated in the 1960s.

Scientists have long known how to use polarization and phases of light to encode information, said Chraplyvy, a winner of the Marconi Prize for his work in communications and information technology. “Although we could do it, we never needed to before, because the capacities we had were enough,” he said. “Now that capacity is running out.”

Adel Saleh, a program manager at the Defense Advanced Research Projects Agency, or Darpa, in Arlington, Va., agreed. “The traffic requirements on the Internet double every two years,” he said. “This is why we are struggling to keep up.”

Source:  The San Francisco Chronicle

Shocking: Apple Approves BitTorrent App For App Store

For those wondering why there are no BitTorrent-related apps in the App Store, it is because Apple notoriously bans all applications that have anything to do with BitTorrent. Apple argues that BitTorrent is often used to infringe copyrights and that such applications are a no-go for the App Store, forcing developers to go to outlets such as Cydia.

“Because this category of applications is often used for the purpose of infringing third party rights. We have chosen to not publish this type of application to the App Store,” was Apple’s official explanation to the BitTorrent ban. However, we’ve now learned that those who are creative in the App submission process, can get through.

This week the BitTorrent based “IS Drive” App was approved by Apple and added to the App store. The application allows users of Imageshack’s torrent download service to control and add torrent downloads through a handy interface. In addition, the App shows screenshots of completed video downloads.

Although the audience for IS Drive is limited to premium Imageshack Torrent Drive users who also want to cough up $4.99 for the iPhone App, the approval is noteworthy because Apple has always banned everything related to BitTorrent. We are pretty sure that BitTorrent Inc. would have loved to release a free remote control App for uTorrent as well, but they decided to settle for an iPhone web interface instead.

“IS Drive”, formerly known as “Jack Torrents”

TorrentFreak spoke to the developer of IS Drive, which was previously available on Cydia under the name “Jack Torrents”, about his victory and the chances that the App is allowed to stay on the App store

“I’m on dangerous ground here, and I know that,” Derek Kepner said. “I’ll probably add a search feature where it’s up to the user to manually add the torrent site they want. The app will not be designed to easily break the law and I hope no one intends to do so. But if a user is determined to break the law, what business is that of mine or Apple’s? They could do the same in Safari anyway, right?”

Kepner wrote the App because he loves Imageshack’s Torrent Drive service, and found himself wanting to queue something up to his Torrent Drive account when he was out of the house. This is exactly what IS Drive is for, and it works seamlessly.

Before submitting it to the App Store, the application already gained an audience at the Cydia store for jailbroken iPhones. However, by using just the right wording and avoiding the evil ‘torrent’ stigma, Kepner got it approved by Apple as well.

“I always had the thought that if I didn’t call the app a “torrent client”, Apple would probably let it through the review process. After all, there is no real torrenting happening on the client side. It’s *not* a torrent client. It’s an ImageShack Drive client,” Kepner told us.

“Plus, I didn’t see any reason for the app to be rejected in Apple’s recently released guidelines. So, I was very careful with this release to not use the dirty word ‘torrent’, and I’ll continue to carefully add new features, so stay tuned.”

IS Drive is now available in the App store for $4.99 for all Imageshack torrenters.

Source: TorrentFreak

Mouseover Exploit Spreads Porn on Twitter

Twitter users who read and write using the twitter.com website got a nasty surprise this morning: a JavaScript exploit was causing their accounts to retweet spam and porn, just by dragging their cursor over a link (or in some cases, anywhere on the Twitter.com screen).

The security flaw allowed popups and websites (like porn) to load in your browser just by mousing over infected tweets. Some tweets were even coded in colorful blocks of text to entice users, according to Sophos, a security vendor who discovered the exploit. The problem was confined to Twitter.com’s old interface — not the new Twitter website that launched last week.

Update: Twitter says it has patched the exploit.

It seems as though at least most users who read and post with clients using the Twitter API were unaffected — that is, apart from reading a bunch of garbage, linky tweets and retweets from their friends. The mobile version of the website appears to be okay, too.

This reinforces my longstanding belief that web browsers’ only legitimate use on the desktop is for viewing and watching porn (including, naturally, technology-and-gadget porn, like what you find here at Wired.com –TC); client applications, whether on a personal computer or a mobile device, are ideally suited for consuming and exchanging information.

All I’m saying is, if you’re going to buggy, information-hungry websites called things like “twitter.com,” you deserve what you get. Although, on the other hand, employees who are allowed (or professionally compelled) to read Twitter now have a perfect excuse: “No, I wasn’t trying to look at porn at work. Must be another Twitter hack.” Let’s hope the next hack redirects users to fantasy football sites.

Source: Reuters

Facebook Adds Remote Log-Out Security Feature

Facebook on Thursday added a remote log-out feature that will allow users who accidentally left themselves logged in on a particular device to end those sessions from another location.

“Have you ever borrowed a friend’s phone to use Facebook and then forgotten to log out before you handed it back? Maybe you logged in from a public computer, but accidentally walked away with your Facebook session still active,” Facebook wrote in a blog post. “Now, you can see if you’re still logged in on other devices and immediately log out on those devices from one central control in your account.”

The “Account Security” section of your Account Settings page will now include a menu that displays “Most Recent Activity,” as well as “Also Active,” if your account is signed active in two or more locations.

Facebook will show log-in time, approximate location based on IP address, and browser and operating system. It will also show device name if you have enabled Facebook’s log-in notifications feature.

If you notice a location that is unauthorized or you know that the listed location is your friend’s cell phone or a public computer from which you forgot to log out, you can click the “end activity” link to the right of the listing to end that session.

“Control isn’t just about deciding what you share and with whom you share it; it’s also about being able to keep your Facebook login secure,” Facebook said.

Facebook said the service is now rolling out gradually to all of its 500 million members.

Google has had a similar remote log-out feature enabled in Gmail since 2008. Earlier this year, Google introduced a feature in Gmail that alerts you at sign-on if Google believes your account has been compromised.

Source: PC Magazine

Telcos told to share speedy Internet

Canada’s telecom carriers must share their expensive fibre-optic networks with wholesale resellers and provide to them the same Internet speeds that they do to their own retail customers, the CRTC has ruled.

The decision is a blow to Canada’s entrenched telcos, which had appealed an earlier version of the Canadian Radio-television and Telecommunication Commission’s decision to the federal cabinet, it may alter the expansion of advanced networks across the country and into rural areas.

“The cabinet’s decision was a message to the commission that they wanted investment, first and foremost,” Michael Hennessy, Telus Corp.’s senior vice-president for regulatory and government affairs, said Monday.

The CRTC decision, he said, is based on a “wrong” assumption that telcos will continue to invest despite having to share more advanced networks. Mr. Hennessy said that although this may be the case in cities, where telcos are building out Internet-based television (IPTV) to fight the cable companies, it will not be the case in rural areas, because returns on those investments are now even more uncertain.

Smaller Internet service providers (ISPs) applauded the CRTC’s reassertion of its original position, though some expressed concern about the telcos’ new ability to charge 10 per cent more than they did before. It is unclear how much money this will involve for the much smaller resellers.

“This was a good thing to a certain extent,” said Rocky Gaudrault, chief executive officer of TekSavvy Solutions Inc., a reseller based in Chatham, Ont. “As far as what comes next … it will be curious to see what the schematics of the pricing will be.”

In a dissenting opinion to Monday’s decision, commissioner Timothy Denton said it was a good ruling but does not go far enough. “The Commission has not seen fit to agree with the large carriers (cable and telephone) that the time has come to put an end to the leasing of parts of the networks owned by the large carriers, despite eloquent pleas by them to do so,” Mr. Denton wrote. “It has, by the same decision, not approved the means necessary for smaller ISPs to compete effectively.”

In the proceedings that led up to the decision, telcos argued that the current regulatory system favoured cable companies, because smaller ISPs preferred to hook into the phone company networks. The CRTC attempted to rectify this by ordering cable companies to make it easier for ISPs to share, but Rogers Communications Inc.’s senior vice-president for regulatory affairs, Ken Engelhart, said he is unclear what exactly the commission wants the cable companies to do.

Another appeal to cabinet is still possible. Telus said it is mulling further action and a spokesperson for Industry Minister Tony Clement said another review remains possible. “Because the decision by the CRTC can be reviewed by the Governor in Council, it would be inappropriate to comment further,” the spokesperson said in an e-mail message.

Source: The Globe And Mail

Microsoft’s IE9 look leaks to the Web

Thanks to Microsoft’s Russian subsidiary, the world now has a pretty good idea of what Internet Explorer 9 will look like.

The Russian folks were kind enough to briefly post an image and some details that had yet to be shared about the browser. And although they pulled it down, ZDNet blogger Mary Jo Foley captured the information and screenshot.

More than anything else, the screenshot shows a browser that attempts to offer a minimalistic user interface and leave as much room as possible for the Web sites. When combined with the browser’s hardware acceleration, the hope is to pave the way for Web sites that are as application-like as possible.

Microsoft declined to confirm the details Wednesday of what had been posted to its Russian site.

However, the look is consistent with what IE team member Ryan Gavin told CNET earlier this month about the planned appearance of IE9.

“The browser is the theater,” Gavin said in the interview. “We’re not the play.”

The browser appears to go as far as to allow people to pin certain sites to the desktop and open them in their own windows without any clear indication that they are using IE at all. According to Foley’s Bing translation of the Russian site, there will be certain sites that are “recognized” or “protected” and can be pinned to the taskbar and launched with their own icons.

Microsoft plans to release a beta of the browser at a September 15 event in San Francisco, although this latest leak clearly steals some of the thunder. Up to now, Microsoft had offered several technical previews of the underlying engine, but had yet to show or talk in detail about how the browser would look.

The invitations for the event do mention “the beauty of the Web” and “unlocking the native Web.”

Until now, though, the focus had been on several key features of the browser’s engine, including the hardware acceleration capabilities, improved JavaScript engine, and broader support for HTML5 and other standards. Microsoft first showed those features at the Mix10 event in March in Las Vegas, though it had talked about hardware acceleration as far back as last November’s Professional Developer Conference.

The details on the Russian site reveal a browser that borrows much from Windows 7, including the ability to tear off browser tabs and have them “snap” to a particular part of the screen, similar to the way documents and applications already do in the latest version of Windows.

There is also a unified search and address bar, something already seen in Google’s Chrome. However, having learned from criticism of Google–as well as its own considerable issues with regulators–I’m hearing that Microsoft will make the choice of whether to let the bar suggest sites as you type a completely opt-in affair.

Source: CNET

Is Wi-Fi Making You Sick?

Scientists have told us for years that Wi-Fi is safe. But concerned parents can be tough nuts to crack.

Despite years of research and public education, some parents in Canada are blaming their children’s illnesses on the wireless Internet routers installed in their schools, and they’re calling for the setups to be removed.

“Six months ago, parents started noticing their kids had chronic headaches, dizziness, insomnia, rashes and other neurological and cardiac symptoms when their kids came home from school,” said Rodney Palmer, who has two children, 5 and 9 years old, in the Simcoe County school district in Ontario.

He told the Toronto Sun that symptoms started to appear last year when the school board installed wireless networking hardware throughout its schools. Palmer said concerned parents found the microwave signals in classrooms to be four times stronger than signals at the base of a cellphone tower — though that amount was 600 times less than what the government considers a harmful limit.

And that explains why scientists worldwide continue to roll their eyes.

“As far as I’m aware, there is no evidence that any kind of radio frequency radiation (including cellphone towers, cellphones themselves,and also including Wi-Fi) cause any negative health effects,” said Michael First, a professor of clinical psychiatry at Columbia University in New York City and editor of the DSM-IV, the diagnostic bible for psychologists.

Noting that concerns about electromagnetic radiation have centered on brain tumors, he said, “I believe that all of the studies done to look into this are negative.”

The World Health Organization agrees, noting that the range of radiation exposure from Wi-Fi routers is between 0.002 percent and 2 percent of recommended maximum levels — less than people receive from televisions and FM radios. (Oddly, cordless home phones, which use the same 2.4-GHz frequency, have avoided the same kind of public scrutiny.)

Schools have increasingly installed Wi-Fi networks to aid learning and boost Internet use in classrooms. But worries over microwave radiation continue to fuel a debate over the safety of regular exposure, especially in children.

Susan Clarke, a former research consultant to the Harvard School of Public Health who studies radio-frequency’s bioeffects and was invited to speak to the parents in Simcoe County last week, is not as sure as her colleagues that the radiation is harmless.

“A child’s brain absorbs this radiation maximally,” she told the parents, according to reports. “Children also absorb microwave radiation more readily than adults because they have thinner skulls.”

Clarke reportedly told the parents she believes that such exposure can cause a slew of neurological and cardiac symptoms, including the ones Palmer described.

The Harvard School of Public Health could not confirm Palmer’s findings, nor would it comment on similar findings. And the overwhelming majority of scientists say that evidence of Wi-Fi’s harmful effects remains anecdotal at best, and is often disproved.

Numerous studies over the years have supported the safety of low-level radiation from devices like cellphones –  a recent 30 year study in Sweden could not confirm that they were a hazard — and Wi-Fi routers are even further removed from the body, lessening their impact.

Researchers have shown that those who claim to be “sensitive” to electromagnetic radiation have difficulty determining its presence. One study found that symptoms correlated with those who had been informed of radiation, whether or not radiation sources were actually active — hinting that it could be psychological.

Robert Bradley, director of consumer and clinical radiation protection at Health Canada, noted that “if you look at the body of science, we’re confident that there is no demonstrable health effect or effects from wireless technology.”

The British Health Protection Authority has stated that Wi-Fi equipment emits only a fraction of the signal of common cellphones. “When we conducted measurements in schools, typical exposures from Wi-Fi are around 20 millionths of the international guideline levels of exposure to radiation. As a comparison, a child on a mobile phone receives up to 50 percent of guideline levels.”

But despite mountains of strong evidence proving otherwise, questions about the safety of regular exposure to electromagnetic fields won’t go away.

Last year, British DJ Steve Miller gained notoriety for his claims of Wi-Fi allergies, saying he got severe headaches and dizziness whenever he came close to a wireless signal. Miller later admitted his claims were a publicity stunt.

Public concerns have even pushed Sweden to recognize the ailment as an official disability. But American scientists will take no such action, First said. The official bible of illness, the DSM-IV, is being updated to the DSM-V, but Wi-Fi allergies won’t make the cut, he told FoxNews.com.

“Changes are made based on solid scientific evidence. Certainly there is no good scientific evidence supporting the notion of electromagmetic-radiation-induced cognitive dysfunction,” First said.

Some schools are nonetheless ignoring the scientists and preemptively banning new network installations.

Lakehead University in Thunder Bay, Ontario, outlawed Wi-Fi throughout its campus in 2006, when school president Fred Gilbert likened Wi-Fi radiation to second-hand smoke and asbestos.

“We’re just finding out now what some of those impacts are,” he said at the time. A school policy banning wireless networking remains in place today.

John Dance, superintendent of education for the Simcoe County District School board, is taking a more measured approach. Acknowledging the benefits of wireless networking, he said he was wary of taking drastic action. “Nobody’s ever given medical documentation to say that somebody is sick because of this,” he said. As of now, the board has denied requests to shut down the network.

But for Rodney Palmer, waiting isn’t an option. Tired of exposing his children to what he describes as an “experiment,” the worried father says he is looking into finding alternative schools.

Source: Fox News

The internet’s next-generation addressing scheme is so radically different from the current one that its adoption is likely to cause severe security headaches for those who adopt it, a researcher said last week.

With reserves of older addresses almost exhausted, the roll-out of the new scheme — known as IPv6 or Internet Protocol version 6 — is imminent. And yet, the radical overhaul still isn’t ready for prime time — in large part because IT professionals haven’t worked out a large number of security threats facing those who rely on it to route traffic over the net.

“It is extremely important for hackers to get in here fast because IPv6 is a security nightmare,” Sam Bowne, an instructor in the Computer Networking and Information Technology Department at the City College of San Francisco, said on day one of the Defcon hacker conference in Las Vegas. “We’re coming into a time of crisis and no one is ready.”

Chief among the threats is the issue of incompatible firewalls, intrusion-prevention devices, and other security appliances, Bowne said. That means many people who deploy IPv6 are forced to turn the security devices off, creating a dangerous environment that could make it easier for attackers to penetrate network fortresses.

What’s more, internet addresses that use the new protocol by default contain a 64-bit string that’s generated by a computer’s MAC, or Media Access Control, address. The use of the so-called extended unique identifier means that people who want to remain anonymous online will have to take precautions that aren’t necessary under today’s IPv4 system.

“It means that everything you send or receive is labeled with your real MAC address and therefore if you were to do something naughty, like download copyrighted material, they would know who you are much better than they do if all they have is an IP version 4 address,” Bowne said.

Some operating systems, including Windows Vista and Windows 7, have privacy settings turned on by default that cause the string to be randomly generated. While this setting helps preserve anonymity, it also has the potential to break many end-to-end communications, so it may not always be available, Bowne warned. Many organizations require the use of the extended unique identifier so they can keep tabs on their employees’ internet usage, he added.

To be sure, IPv6 offers many features, including a method for easier end-to-end encryption, that should make networking more secure.

“We’ve got a lot of benefits and we’ve taken a lot of the learning from a security perspective from IPv4 and implemented a lot of new security features into IPv6,” said Joe Klein, a subject matter expert with the North American IPv6 task force, who was also attending Defcon. “The problem with it is we’re in a transition period and that’s going to take anywhere from five to 10 years to fully implement it and start to provide end-to-end encryption.”

The new protocol, because it hasn’t been tested as widely as IPv4, is also likely to suffer from vulnerabilities resulting from buffer overflows and similar bugs, he said. The flaws will likely be worked out as it gains wide acceptance, but that will also take years, he added.

Bowne and Klein aren’t the only people warning of growing pains in the net’s addressing system. This recent submission to the Full-disclosure list claims Google’s Gmail service is also having trouble adapting to the scheme.

Bowne — who teaches classes in ethical hacking, network defense, and Windows 7 — also outlined several attacks that exploit unique characteristics of IPv6 to wreak havoc on networks. Packet amplification attacks place a 0 in the routing header of each packet, causing them to travel in a looped path. Ping-pong exploits take advantage of the wealth of /64 subnets available in the protocol, allowing attackers to send packets from one non-existent connection to another. The result is an endless series of “ICMP unreachable” error messages. As a result, networks are flooded with garbage data.

The transition to IPv6 is necessary to deal with the growing exhaustion of IPv4 addresses. The older protocol, which is based on a 32-bit addressing system, yields about 4 billion unique numbers, fewer than the 7 billion humans who populate the planet. At the current usage rate, the allocation of free addresses could be used up by June of next year, according to some estimates. IPv6, by contrast, is a 128-bit scheme that allows for over 3.4×1038 addresses, which ought to keep the world going for quite some time.

Source: The Register

The attack, thought up by hacker Samy Kamkar, exploits shortcomings in many routers to find out a key identification number.

It uses this number and widely available net tools to find out where a router is located.

Demonstrating the attack, Mr Kamkar located one router to within nine metres of its real world position.

Many people go online via a router and typically only the computer directly connected to the device can interrogate it for ID information.

However, Mr Kamkar found a way to booby-trap a webpage via a browser so the request for the ID information looks like it is coming from the PC on which that page is being viewed.

He then coupled the ID information, known as a MAC address, with a geo-location feature of the Firefox web browser. This interrogates a Google database created when its cars were carrying out surveys for its Street View service.

This database links Mac addresses of routers with GPS co-ordinates to help locate them. During the demonstration, Mr Kamkar showed how straightforward it was to use the attack to identify someone’s location to within a few metres.

“This is geo-location gone terrible,” said Mr Kamkar during his presentation. “Privacy is dead, people. I’m sorry.”

Mikko Hypponen, senior researcher at security firm F Secure, attended the presentation and said it was “very interesting research”.

“The thought that someone, somewhere on the net can find where you are is pretty creepy,” he said.

“Scenarios where an attack like this would be used would be stalking or targeted attacks against an individual,” he added.

“The fact that databases like Google Streetview’s Mac-to-Location database or the Skyhook database can be used in these attacks just underlines how much responsibility companies that collect such data have to safeguard it correctly,” said Mr Hypponen.

Mr Kamkar detailed the attack during a presentation at the Black Hat hacker conference. In 2005, Mr Kamkar created a worm that exploited security failings in web browsers to garner more than one million “friends” on the MySpace social network in one day.

Prosecuted for the hack, Mr Kamkar was given three years’ probation, did 90 days of community service and paid damages. He was also banned from using the net for personal purposes for an undisclosed amount of time.

A newly discovered vulnerability in the software that runs Apple Inc’s iPad and iPhone could allow hackers to remotely enslave the popular mobile devices, a security firm warned on Tuesday.

The flaw, which affects Apple’s iOS that also runs the iPod touch, could allow hackers “to take complete control of a vulnerable device,” French security firm Vupen reported on its website.

Company spokeswoman Natalie Harrison said the company was aware of the report.

“We’re investigating,” she said.

The vulnerability in iOS is the latest in a series of security bugs identified in mobile devices over the past week. Security experts at a hacking conference last week pointed out several vulnerabilities in Google Inc’s operating system for mobile phones and tablet PCs.

Vupen said attackers would need to trick a user into visiting a malicious website planted with a tainted PDF document before infecting an iPad tablet of iPhone smartphone.

Source: Reuters / Yahoo!