MPAA Releases University Spying Toolkit - Violates GPL
Tue Dec 4, 2007 6:31:11 AMThere is a new news item posted at »ASE Labs
»MPAA Releases University Spying Toolkit - Violates GPL
The MPAA has released, and then promptly taken down, a derivative of Xubuntu to perform spying on university networks. The software offered a view into the <a href="http://blog.washingtonpost.com/securityfix/2007/11/mpaa_university_toolkit_opens_1.html">university network in regards to file sharing</a>. They offered the ISO but not the source code. <a href="http://mjg59.livejournal.com/78590.html">One of the Ubuntu devs forced a takedown</a>. Nice one. IN YOUR FACE, MPAA.
Please add your comments below.
»MPAA Releases University Spying Toolkit - Violates GPL
The MPAA has released, and then promptly taken down, a derivative of Xubuntu to perform spying on university networks. The software offered a view into the <a href="http://blog.washingtonpost.com/securityfix/2007/11/mpaa_university_toolkit_opens_1.html">university network in regards to file sharing</a>. They offered the ISO but not the source code. <a href="http://mjg59.livejournal.com/78590.html">One of the Ubuntu devs forced a takedown</a>. Nice one. IN YOUR FACE, MPAA.
Quote
Unless a school using the tool has firewalls on the borders of its network designed to block unsolicited Internet traffic -- and a great many universities do not -- that Web server is going to be visible and accessible by anyone with a Web browser. But wait, you say: Wouldn't someone need to know the domain name or Internet address of the Web server that's running the toolkit? Yes. However, anyone familiar enough with the file-naming convention used by the toolkit could use Google to search for the server. But surely there are ways a network administrator might keep this information from being available to the entire Web, right? Yes. The toolkit allows an administrator to require a username and password for access to the Web server. The problem is that the person responsible for running the toolkit is never prompted to create a username and password. What's more, while Apache includes a feature that can record when an outsider views the site, that logging is turned off by default in the MPAA's University Toolkit.
Please add your comments below.
Page:
[1]
Quick Reply
Navigation
Latest News
- Kingston HyperX Cloud 2 Pro Gaming Headset Unboxing
- Synology DS415+ Unboxing
- D-Link DCS-5020L Wireless IP Pan/Tilt IP Camera
- Actiontec WiFi Powerline Network Extender Kit Unboxing
- Durovis Dive Unboxing
- Bass Egg Verb Unboxing
- Welcome to the new server
- Gmail Gets Optional Preview Pane
- HBO Go on Consoles
- HP Touchpad Update
Latest Articles
- D-Link Exo AC2600 Smart Mesh Wi-Fi Router DIR-2660-US
- HyperX Double Shot PBT Keys
- Avantree ANC032 Wireless Active Noise Cancelling Headphones
- ScharkSpark Beginner Drones
- HyperX Alloy FPS RGB Mechanical Gaming Keyboard
- D-Link DCS-8300LH Full HD 2-Way Audio Camera
- Contour Unimouse Wireless Ergonomic Mouse
- HyperX Cloud Alpha Pro Gaming Headset
- Linksys Wemo Smart Home Suite
- Fully Jarvis Adjustable Standing Desk
Latest Topics
- Hello
- Welcome to the new server at ASE Labs
- Evercool Royal NP-901 Notebook Cooler at ASE Labs
- HyperX Double Shot PBT Keys at ASE Labs
- Avantree ANC032 Wireless Active Noise Cancelling Headphones at ASE Labs
- ScharkSpark Beginner Drones at ASE Labs
- HyperX Alloy FPS RGB Mechanical Gaming Keyboard at ASE Labs
- D-Link DCS-8300LH Full HD 2-Way Audio Camera at ASE Labs
- Kingston SDX10V/128GB SDXC Memory at ASE Labs
- What are you listening to now?
- Antec Six Hundred v2 Gaming Case at HardwareLogic
- Sans Digital TR5UTP 5-Bay RAID Tower at HardwareLogic
- Crucial Ballistix Smart Tracer 6GB PC3-12800 BL3KIT25664ST1608OB at HardwareLogic
- Cooler Master Storm Enforcer Mid-Tower Gaming Case at HardwareLogic
- Arctic M571-L Gaming Laser Mouse at ASE Labs
- Contour Unimouse Wireless Ergonomic Mouse at ASE Labs
Press Release
- Huntkey Has Launched Its New Power Strips with USB Chargers on Amazon US
- Inspur Releases TensorFlow-Supported FPGA Compute Acceleration Engine TF2
- Hot Pepper Introduces Spicy New Smartphones in US Markets
- Sharp Introduces New Desktop Printers For The Advanced Office
- DJI Introduces Mavic 2 Pro And Mavic 2 Zoom: A New Era For Camera Drones
- DJI Introduces Mavic 2 Pro And Mavic 2 Zoom: A New Era For Camera Drones
- Fujifilm launches "instax SQUARE SQ6 Taylor Swift Edition", designed by instax global partner Taylor Swift
- Huawei nova 3 With Best-in-class AI Capabilities Goes on Sale Today
- Rand McNally Introduces Its Most Advanced Dashboard Camera
- =?UTF-8?Q?My_Size_to_Showcase_Its_MySizeId=E2=84=A2_Mobil?= =?UTF-8?Q?e_Measurement_Technology_at_CurvyCon_NYC?=
© 2010 Aron Schatz (ASE Publishing) [Queries: 19 (9 Cached)] [Rows: 383 Fetched: 78] [Page Generation time: 0.020195007324219]