Catalin Cimpanu, reporting for BleepingComputer: The Tor Project has released a security update for the Tor Browser on Mac and Linux to fix a vulnerability that leaks users’ real IP addresses. The vulnerability was spotted by Filippo Cavallarin, CEO of We Are Segment, an Italian company specialized in cyber-security and ethical hacking. Cavallarin privately reported the issue — which he codenamed TorMoil — to the Tor Project last week. Tor Project developers worked with the Firefox team (Tor Browser is based on the Firefox browser) to release a fix. Today, the Tor team released version 7.0.9 to address the vulnerability. Tor Browser 7.0.9 is only available for Mac and Linux users. Tor Browser on Windows is not affected. Read more of this story at Slashdot.
Visit link:
TorMoil Vulnerability Leaks Real IP Address From Tor Browser Users; Security Update Released
An anonymous reader quotes a report from TorrentFreak: Two years ago, academic publisher Elsevier filed a complaint (PDF) against Sci-Hub and several related “pirate” sites. It accused the websites of making academic papers widely available to the public, without permission. While Sci-Hub is nothing like the average pirate site, it is just as illegal according to Elsevier’s legal team, who obtained a preliminary injunction from a New York District Court last fall. The injunction ordered Sci-Hub’s founder Alexandra Elbakyan to quit offering access to any Elsevier content. However, this didn’t happen. Instead of taking Sci-Hub down, the lawsuit achieved the opposite. Sci-Hub grew bigger and bigger up to a point where its users were downloading hundreds of thousands of papers per day. Although Elbakyan sent a letter to the court earlier, she opted not engage in the U.S. lawsuit any further. The same is true for her fellow defendants, associated with Libgen. As a result, Elsevier asked the court for a default judgment and a permanent injunction which were issued this week. Following a hearing on Wednesday, the Court awarded Elsevier $15, 000, 000 in damages, the maximum statutory amount for the 100 copyrighted works that were listed in the complaint. In addition, the injunction, through which Sci-Hub and LibGen lost several domain names, was made permanent. Read more of this story at Slashdot. 
An anonymous reader quotes a report from Bloomberg: Jeff Bezos has leapt past Amancio Ortega and Warren Buffett to become the world’s second-richest person. Bezos, 53, added $1.5 billion to his fortune as Amazon.com Inc. rose $18.32 on Wednesday, the day after the e-commerce giant said it plans to buy Dubai-based online retailer Souq.com. Bezos has a net worth of $75.6 billion on the Bloomberg Billionaires Index, $700 million more than Berkshire Hathaway Inc.’s Buffett and $1.3 billion above Ortega, the founder of Inditex S.A. and Europe’s richest person. Amazon’s founder has added $10.2 billion this year to his wealth and $7 billion since the global equities rally began following the election of Donald Trump as U.S. president on Nov. 8. The rise is the third biggest on the Bloomberg index in 2017, after Chinese parcel-delivery billionaire Wang Wei’s $18.4 billion gain and an $11.4 billion rise for Facebook Inc. founder Mark Zuckerberg. Read more of this story at Slashdot. 
An anonymous reader writes: Washington State has filed a lawsuit against Comcast to the sum of $100 million, accusing Comcast of “engaging in a pattern of deceptive practices.” It claims that Comcast’s documents reveal a pattern of illegally deceiving its own customers for profit. KOMO News reports: “The lawsuit (PDF) alleges more than 1.8 million individual violations of the Washington Consumer Protection Act. The Attorney General’s Office says 500, 000 Washington consumers were affected. The lawsuit also accuses Comcast of violating the Consumer Protection Act to all of its nearly 1.2 million Washington subscribers due to its deceptive ‘Comcast Guarantee, ‘ Ferguson said. The lawsuit accuses Comcast of misleading 500, 000 Washington consumers and deceiving them into paying at least $73 million in subscription fees over the last five years for what the attorney general says is a a near-worthless protection plan. Customers who sign up for Comcast’s Service Protection Plan pay a $4.99 monthly fee to avoid being charged if a Comcast technician visits their home. But the plan did not cover wiring inside a wall, the lawsuit says. The Attorney General Office says 75 percent of the time, customers who contacted Comcast were told the plan covered inside wiring. Customer service scripts, which the Attorney General’s Office said it obtained during its investigation, told Comcast representatives to say that the plan covers calls ‘related to inside wiring’ and ‘wiring inside your home.'” According to KOMO News, the lawsuit is seeking more than $73 million in restitution to pay back Service Protection Plan subscriber payments; full restitution for all service calls that applied an improper resolution code, estimated to be at least $1 million; removal of improper credit checks from the credit reports of more than 6, 000 customers; up to $2, 000 per violation of the Consumer Protection Act; and that Comcast clearly disclose the limitations of its Service Protection Plan in advertising and through its representatives, correct improper service codes that should not be chargeable and implement a compliance procedure for improper customer credit checks. Read more of this story at Slashdot. 
New submitter alzoron writes: After the failure of New York’s Fair Repair Act, independent third-party unauthorized Apple repair shops seem to be under attack. Louis Rossmann, owner of Rossman Repair Group, INC has uploaded a somewhat vague video alluding to his Youtube site, where he posts videos about repairing out of warranty repairs, possibly being shut down. Several sources (Reddit, Mac Kung Fu, 9to5Mac) have been speculating about this and whether or not Apple is behind this. Game Revolution reported on the video (Link is to cache version of the site since the report has since been removed), breaking down each section of the video. 6:52: Louis informs viewers that they can download YouTube videos. 7:41: Louis mentions that YouTube channels have a “finite lifespan, ” often because a large corporation has the power and money to shut them down. 8:42: Louis shares that he’s happy when he’s lived a difficult life so that he can be strong for the immense challenge that is ahead. 10:06: Louis shares that he is going to have to fight from his point onward. 11:22: Louis states that all his videos may soon be gone. 11:32: Louis mentions that his business may disappear. Given what Louis has mentioned, it’s apparent that Louis has been threatened by Apple likely for condemning its policies to a growing subscriber base, but also for showing users how to repair its hardware without going through Apple support. Read more of this story at Slashdot. 
An anonymous reader quotes this report from Bay Area Newsgroup: Legal action against Google by four UC Berkeley students has ballooned into two lawsuits by 890 U.S. college students and alumni alleging the firm harvested their data for commercial gain without their consent…making the same claim: that Google’s Apps for Education, which provided them with official university email accounts to use for school and personal communication, allowed Google until April 2014 to scan their emails without their consent for advertising purposes…. The suit by 710 students alleged that until April 2015, Google denied it was scanning students’ emails for advertising purposes and misled schools into believing the emails were private. The students’ lawyers say each student is seeking a maximum of $10, 000, while the U.S. District Court Judge Lucy Koh told the lawyer that “Our clerk’s office is really unhappy you are circumventing our [$400 per case] filing fees by adding 710 cases under one case number.” Read more of this story at Slashdot.