Wednesday, 1 July 2015

Kim Dotcom Appeals to Reclaim ‘Mega Millions’ from U.S.

megauploadFollowing the 2012 raid on Megaupload and Kim Dotcom, U.S. and New Zealand authorities seized millions of dollars in cash and other property.

Claiming the assets were obtained through copyright and money laundering crimes, last July the U.S. government launched a separate civil action in which it asked the court to forfeit the bank accounts, cars and other seized possessions of the Megaupload defendants.

Megaupload’s defense heavily protested the request but was found to have no standing, as Dotcom and his colleagues were branded “fugitives”.

Earlier this year District Court Judge Liam O’Grady ordered a default judgment in favor of the U.S. Department of Justice (DOJ). As a result the contested assets, which are worth an estimated $67 million, now belong to the United States.

Today Kim Dotcom and his Megaupload co-defendants appealed this decision at the Fourth Circuit Court of Appeals. In their opening brief (pdf) Megaupload’s lawyers argue that the court denied the defendants’ basic rights and violated due process.

“The recent filing demonstrates again how the entire Megaupload case is build on quicksand. It’s a slap in the face of the DOJ and the Judge they picked for his Disney CV,” Dotcom tells TF in a comment.

In particular, the appeal filing points out that it was wrong to rely on the ‘fugitive disentitlement‘ doctrine, as Dotcom and his former colleagues were merely exercising their legal right to defend themselves.

“The Megaupload defendants were branded by the DOJ as ‘fugitives’ for lawfully fighting extradition in New Zealand,” Megaupload Appellate Counsel Michael Elkin notes.

“The district court’s denial of their basic rights to defend against asset forfeiture under a ‘fugitive disentitlement’ doctrine amounts to a violation of basic due process,” he adds.

Ira Rothken, Kim Dotcom’s Lead Global Counsel, emphasizes the injustice of the District Court decision and reiterates that his client has never even set a foot on U.S. soil.

“With our appeal today we are asking the Fourth Circuit to rule in favor of fairness, natural justice, and due process by stopping US efforts to take Kim Dotcom’s global assets for doing nothing more than lawfully opposing extradition to the United States—a country he has never been to,” he says.

According to Rothken the U.S. went after the millions in assets to obstruct other legal proceedings, including the extradition case which will be heard in New Zealand later this year.

“The DOJ in our view is trying to abuse the Fugitive Disentitlement Doctrine by modifying it into an offensive weapon of asset forfeiture to punish those who fight extradition under lawful treaties, and a provocation for international discord. Today we ask the Court of Appeals for justice.”

The 79-page opening brief concludes with a stark warning.

If the District Court decision is upheld it would give the government unprecedented power, allowing it to indict foreigners and grab their assets without looking into the merits of the case.

“That is not how our justice system works. The judgments below should be vacated and the case either dismissed or remanded for trial on the merits,” Megaupload’s lawyers conclude.

Dotcom is glad to see that the appeal is finally underway and points out that Megaupload was taken down by corrupt forces in the U.S. Government.

“They did not have the right to take billions of files from millions of Megaupload users offline. But a corrupt Senator (Chris Dodd), his best buddy (Joe Biden) and Biden’s sock puppet attorney at the DOJ (Neil MacBride) did it anyway,” Dotcom says.

Source: TorrentFreak, for the latest info on copyright, file-sharing, torrent sites and the best VPN services.

XE Market Analysis: Asia - Jul 01, 2015

The dollar extended gains on firm U.S. data today, especially with the ADP payrolls data portends upside risk at tomorrow's employment report. EUR-USD fell to a new two-day low at 1.1058, and USD-CAD to a 10-week high at 1.2570. USD-JPY clocked a two-day high at 123.14. EUR-USD traded lower despite news that Greece's Tsipras will accept most of the creditor demands, with Germany's Merkel saying that thee will be no more negotiations until after Sunday's referendum.



from RSS Feed http://ift.tt/1FRybLr
via IFTTT

The US housing market: midyear review

This is a good time to update my look at housing.  While housing leads the rest of the economy, interest rates lead housing.  Further, there can be a demographic boost or drag depending on the relative size of the generation entering prime home-buying years, roughly ages 25-35.

The order in which the housing market functions is:



from RSS Feed http://ift.tt/1HxbOSY
via IFTTT

VPN Providers Respond To Allegations of Data Leakage

vpn4lifeAs Internet users seek to bypass censorship, boost privacy and achieve a level of anonymity, VPN services have stepped in with commercial solutions to assist with these aims. The uptake among consumers has been impressive.

Reviews of VPN services are commonplace and usually base their ratings on price and speed. At TorrentFreak we examine many services annually, but with a focus on privacy issues instead.

Now a team of researchers from universities in London and Rome have published a paper titled A Glance through the VPN Looking Glass: IPv6 Leakage and DNS Hijacking in Commercial VPN clients. (pdf) after investigating 14 popular services on the market today.

“Our findings confirm the criticality of the current situation: many of these providers leak all, or a critical part of the user traffic in mildly adversarial environments. The reasons for these failings are diverse, not least the poorly defined, poorly explored nature of VPN usage, requirements and threat models,” the researchers write.

While noting that all providers are able to successfully send data through an encrypted tunnel, the paper claims that problems arise during the second stage of the VPN client’s operation: traffic redirection.

“The problem stems from the fact that routing tables are a resource that is concurrently managed by the operating system, which is unaware of the security requirements of the VPN client,” the researchers write.

This means that changes to the routing table (whether they are malicious or accidental) could result in traffic circumventing the VPN tunnel and leaking to other interfaces.

IPv6 VPN Traffic Leakage

“The vulnerability is driven by the fact that, whereas all VPN clients manipulate the IPv4 routing table, they tend to ignore the IPv6 routing table. No rules are added to redirect IPv6 traffic into the tunnel. This can result in all IPv6 traffic bypassing the VPN’s virtual interface,” the researchers explain.

vpn-1

As illustrated by the chart above, the paper claims that all desktop clients (except for those provided by Private Internet Access, Mullvad and VyprVPN) leaked “the entirety” of IPv6 traffic, while all providers except Astrill were vulnerable to IPv6 DNS hijacking attacks.

The paper was covered yesterday by The Register with the scary-sounding title “VPNs are so insecure you might as well wear a KICK ME sign” but without any input from the providers in question. We decided to contact a few of them for their take on the paper.

PureVPN told TF that they “take the security of our customers very seriously and thus, a dedicated team has been assigned to look into the matter.” Other providers had already received advanced notice of the paper.

“At least for AirVPN the paper is outdated,” AirVPN told TorrentFreak.

“We think that the researchers, who kindly sent the paper to us many months in advance and were warned about that, had no time to fix [the paper] before publication. There is nothing to worry about for AirVPN.”

“Current topology allows us to have the same IP address for VPN DNS server and VPN gateway, solving the vulnerability at its roots, months before the publication of the paper.”

TorGuard also knew of the whitepaper and have been working to address the issues it raises. The company adds that while The Register’s “the sky is falling” coverage of yesterday is “deceptive”, the study does illustrate the need for providers to stay vigilant. Specifically, TorGuard says that it has launched a new IPv6 leak prevention feature on Windows, Mac and Linux.

“Today we have released a new feature that will address this issue by giving users the option of capturing ALL IPv6 traffic and forcing it through the OpenVPN tunnel. During our testing this method proved highly effective in blocking potential IPv6 leaks, even in circumstances when these services were active or in use on the client’s machine,” the company reports.

On the DNS hijacking issue, TorGuard provides the following detail.

“It is important to note that the potential for this exploit only exists (in theory) if you are connected to a compromised WiFi network in which the attacker has gained full control of the router. If that is the case, DNS hijacking is only the beginning of one’s worries,” TorGuard notes.

“During our own testing of TorGuard’s OpenVPN app, we were unable to reproduce this when using private DNS servers because any DNS queries can only be accessed from within the tunnel itself.”

Noting that they released IPv6 Leak Protection in October 2013, leading VPN provider Private Internet Access told TorrentFreak that they feel the paper is lacking.

“While the article purported to be an unbiased and intricate look into the security offered by consumer VPN services, it was greatly flawed since the inputs or observations made by the researchers were inaccurate,” PIA said.

“While a scientific theory or scientific test can be proven by a logical formula or algorithm, if the observed or collected data is incorrect, the conclusion will be in error as well.”

PIA criticizes the report on a number of fronts, including incorrect claims about its DNS resolver.

“Contrary to the report, we have our own private DNS daemon running on the Choopa network. Additionally, the DNS server that is reported, while it is a real DNS resolver, is not the actual DNS that your system will use when connected to the VPN,” the company explains.

“Your DNS requests are handled by a local DNS resolver running on the VPN gateway you are connected to. This can be easily verified through a site like ipleak.net. Additionally… we do not allow our DNS servers to report IPv6 (AAAA records) results. We’re very serious about security and privacy.”

Finally, in a comprehensive response (now published here) in which it notes that its Windows client is safe, PIA commends the researchers for documenting the DNS hijacking method but criticizes how it was presented to the VPN community.

“The DNS Hijacking that the author describes [..] is something that has recently been brought to light by these researchers and we commend them on their discovery. Proper reporting routines would have been great, however. Shamefully, this is improper security disclosure,” PIA adds.

While non-IPv6 users have nothing to fear, all users looking for a simply fix can disable IPv6 by following instructions for Windows, Linux and Mac.

Source: TorrentFreak, for the latest info on copyright, file-sharing, torrent sites and the best VPN services.

XE Market Analysis: North America - Jul 01, 2015

The euro popped higher on news that Greek PM Tsipras is prepared to accept bailout conditions, but subsequently gave back most of those gains, leaving EUR-USD near net unchanged in the low 1.11s. The forex market seem more wary than stock markets, as the pan-Europe STOXX 600 equity index was showing a 1.6% gain in the early PM session. German Finance Minister Schaeuble still took tough line on Greece, saying the letter from Tsipras that accepted most of the bailout conditions lacks clarity and that Greece's proposals still aren't a basis for serious measures.



from RSS Feed http://ift.tt/1NwzFAq
via IFTTT

Google Scolds MPAA’s “Cozy” Anti-Piracy Lobby in Court

googlepopLate last year leaked documents from the Sony hack revealed that the MPAA helped Mississippi Attorney General Jim Hood to revive SOPA-like censorship efforts in the United States.

In a retaliatory move Google sued the Attorney General, hoping to find out more about the secret plan. The company also demanded internal communication from the MPAA and its lawfirm Jenner & Block.

After the Hollywood group and its lawyers refused to provide all information Google asked for, a separate legal battle began with both sides using rather strong language to state their case.

The MPAA accused Google of facilitating piracy and objected to a request to transfer the case to Mississippi, where the underlying case was started. According to the movie industry group and its lawyers they are merely bystanders who want to resolve the matter in a Washington court.

This week Google responded to the MPAA opposition with a scathing reply, which outs the cozy relationship between the MPAA and the Attorney General’s office.

“Their rhetoric does not match reality,” Google responds (pdf) to the request not to transfer the case. “The MPAA and Jenner are no strangers to Mississippi.”

“The Subpoenaed Parties sought out Mississippi when they co-opted the state’s Attorney General for their anti-Google campaign. Documents withheld by the MPAA until last week reveal a stunning level of involvement in Mississippi’s affairs.”

According to Google it’s clear that the MPAA and its law firm were in “intimate contact” with the Attorney General, offered monetary donations, hosted fundraisers and also helped him to draft legal paperwork.

“According to the Subpoenaed Parties, they are strangers to Mississippi. But documents produced last week by the MPAA tell a very different story. The Subpoenaed Parties and their representatives made repeated visits to AG Hood’s office in Mississippi to guide his anti-Google work.”

“Even when they weren’t physically at AG Hood’s office, they may as well have been, getting together with him in Denver and Santa Monica and holding a fundraising dinner for him in New Orleans.”

And there is more. The emails the MPAA recently produced also reveal “remarkably cozy and constant communications” between the MPAA and the Attorney General’s office.

In one email the MPAA’s Brian Cohen greeted one of Hood’s staffers with “Hello my favorite” offering to share pictures of his vacation in New Zealand via Dropbox. In another email discussing a meeting with the AG’s staff, MPAA’s Cohen writes “OMG we spent 3 hours.”

favorite

According to Google the examples above clearly show that there’s a rather close relationship between the MPAA’s lobbyists and the Attorney General.

“This pattern of sustained, intimate contact is hardly the mark of a party that merely ‘communicated with Attorney General Hood’ ‘previously,’ as the MPAA characterizes itself.”

Throwing in a movie reference, Google further notes that transferring the case would be in line with Rule 45, which ties the subpoena to the Mississippi case.

“But it is not merely the Subpoenaed Parties’ starring role in the underlying events that warrants transfer of Google’s Motions to Compel to Judge Wingate in Mississippi; all of the Rule 45 factors support it as well,” Google notes.

The reply continues adding more support and arguments to transfer the case, using more strong language, and the sarcastic-aggressive tone continues throughout.

If we hadn’t seen enough evidence already, the filing makes it clear that the MPAA and Google are not on speaking terms, to say the least. And with the Attorney General case just getting started, things may get even worse.

Source: TorrentFreak, for the latest info on copyright, file-sharing, torrent sites and the best VPN services.

XE Market Analysis: Europe - Jul 01, 2015

EUR-USD has come under pressure in early Europe trade, dipping to 1.1122, though still shy of the 1.1112 low seen yesterday. Greece defaulted on its IMF repayment and markets will remain on tenterhooks as policymaker wranglings continue. French finance minister Sapin said that the goal is achieve a Greek accord before Sunday's referendum "if possible," but most won't believe it until they see it. There are also expectations for a decent U.S. payrolls report tomorrow, which should maintain a downside in EUR-USD.



from RSS Feed http://ift.tt/1R3BET6
via IFTTT