Why the fight between Apple and the FBI is just getting started

Washington Post - Technology News

The Justice Department has called off a high-profile legal battle with Apple after it was able to unlock an iPhone used by one of the San Bernardino, Calif., shooters without the company's help. But rather than resolve the fight, this latest development is likely to motivate Apple and other companies to strengthen the security of their devices even more and force the government to keep up with any new security measures, technology executives and security analysts said. "They're in an arms race," said Matthew Blaze, a cryptography researcher and professor at the University of Pennsylvania. "The FBI is trying to find new ways in, and Apple is trying to find new ways to defend against that." Apple isn't the only company that is aiming to install greater encryption around products, making intrusions by hackers and government investigators alike much more difficult.

U.S. lawmakers introduce bill to criminalize 'revenge porn'

The Japan Times

WASHINGTON – Lawmakers in the U.S. House of Representatives introduced long-stalled legislation on Thursday that would make it a federal crime to share sexually explicit material of a person online without the subject's consent. The "Intimate Privacy Protection Act" is an effort several years in the making to combat the rise in recent years of "revenge porn," images that are shared on the internet in order to extort or humiliate someone. The practice disproportionately affects women. "These acts of bullying have ruined careers, families, and even led to suicide," Rep. Jackie Speier, a California Democrat and lead author of the bill, said in a statement. The legislation would allow fines and up to five years in prison for posting online or distributing sexually explicit photos or videos with "reckless disregard" for the consent of the subject.

U.S. DOT issues Federal guidance to the automotive industry for improving motor vehicle cybersecurity


WASHINGTON – The U.S. Department of Transportation's National Highway Traffic Safety Administration (NHTSA) is taking a proactive safety approach to protect vehicles from malicious cyber-attacks and unauthorized access by releasing proposed guidance for improving motor vehicle cybersecurity. "Cybersecurity is a safety issue, and a top priority at the Department," said U.S. Transportation Secretary Anthony Foxx. "Our intention with today's guidance is to provide best practices to help protect against breaches and other security failures that can put motor vehicle safety at risk." The proposed cybersecurity guidance focuses on layered solutions to ensure vehicle systems are designed to take appropriate and safe actions, even when an attack is successful. The guidance recommends risk-based prioritized identification and protection of critical vehicle controls and consumers' personal data.

Inauguration-protest arrests lead to Facebook data prosecution


If you attend a protest in Washington, D.C., nowadays, better plan on leaving your cellphone at home. That is, unless you want police to confiscate it, mine it for incriminating information and then gather even more data from their BFF -- Facebook. At least one person arrested during protests on Inauguration Day got an email from Facebook's Law Enforcement Response Team alerting them that investigators wanted access to their data. Another received a Facebook data subpoena. The email was basically a countdown to when Facebook inevitably handed that data over to D.C. police.

Man suspected of stealing 100 million LinkedIn users' information is arrested in Prague

Los Angeles Times

Czech authorities have arrested a man U.S. officials and LinkedIn believe stole personal information about millions of users of the social network for professionals. Yevgeniy Nikulin, identified by law enforcement officials Wednesday as a Russian citizen, was arrested at a Prague hotel Oct. 5 on charges stemming from the 2012 data breach. The theft didn't come to light until this spring, when a hacker claimed to have more than 100 million LinkedIn login names and passwords, or about a quarter of the Mountain View, Calif., company's user base. LinkedIn confirmed the breach in May and reset passwords of affected users. The company cooperated with the FBI to track down the suspect, saying Wednesday that it was thankful for the FBI's efforts "to locate and capture the parties believed to be responsible for this criminal activity."