Gregarius » BetaNews.Com » février 27, 2016

Canaux

108470 éléments (108470 non lus) dans 10 canaux

Actualités

01net. Actualités (48730 non lus)

Hoax

Top dix quotidien Sophos des canulars (65 non lus)

Logiciels

BetaNews.Com (34382 non lus)
Presence PC - Actualité Logiciels, jeux vidéos (3551 non lus)
LeMondeInformatique.fr : Actualités Applications (1133 non lus)

Sécurité

Actualités Sécurité Informatique (406 non lus)
Les Nouvelles.net : sécurité informatique. (1262 non lus)

Referencement

Secrets2moteurs (11793 non lus)
Referencement Google WebRankInfo (2255 non lus)
Abondance (4893 non lus)

BetaNews.Com (3 non lus)

History channel's Vault comes to Roku

Publié: février 27, 2016, 4:44pm CET par Alan Buckingham

The History channel is one of those networks that many people either love or hate. While it provides good incite into many things, it can also go a bit off the rails at times. On the whole though, it's a solid viewing choice much of the time.

History Vault promises to provide hundreds of hours of "curated" content to viewers and to do so commercial-free. Content is divided up by categories including world leaders, inside the presidency, ancient discoveries and more.

"If you’re not sure what to watch first, the experts at History Vault feature three popular collections on the home screen, followed by Editor’s Picks, Most Popular and Recently Added", the set-top box maker explains.

To get this latest offering head to the channel store and click on the "movies and TV" category. You'll get a free seven day trial. Once that's up, if you decide to keep it then it will set you back $4.99 per month, not bad providing new content continues to be added.
Tor Project says Google, CloudFlare and others are involved in dark web surveillance and disruption

Publié: février 27, 2016, 2:57pm CET par Mark Wilson

With privacy concerns and the threat of surveillance from the likes of the NSA, more and more people are turning to the dark web and Tor. The anonymous, encrypted network has become a haven for not just illegal activity, but also for those who simply don’t want what they do online to be tracked and traced.

But now the Tor Project has voiced concerns that CDN and DDoS protection service CloudFlare is monitoring Tor traffic by introducing CAPTCHAs and cookies. CloudFlare is not alone: similar accusations are levelled at Google and Yahoo which are described as 'larger surveillance companies'. Concerns about interference with Tor traffic have been raised by project administrators in a ticket entitled "Issues with corporate censorship and mass surveillance".

Following instances of malicious traffic originating from the Tor network, CloudFlare introduced CAPTCHAs to ensure that visits to certain sites were being instigated by humans. This has not only proved irritating, but also unreliable. CAPTCHAs have been found to frequently fail, and appear multiple times. But more concerning that it opens up the potential for users to be "tagged, tracked and potentially deanonymized".

In a post on the Tor Project website, user ioerror says:

There are companies - such as CloudFlare - which are effectively now Global Active Adversaries. Using CF as an example - they do not appear open to working together in open dialog, they actively make it nearly impossible to browse to certain websites, they collude with larger surveillance companies (like Google), their CAPTCHAs are awful, they block members of our community on social media rather than engaging with them and frankly, they run untrusted code in millions of browsers on the web for questionable security gains.

It would be great if they allowed GET requests - for example - such requests should not and generally do not modify server side content. They do not do this - this breaks the web in so many ways, it is incredible. Using wget with Tor on a website hosted by CF is... a disaster. Using Tor Browser with it - much the same. These requests should be idempotent according to spec, I believe.

I would like to find a solution with Cloudflare - but I'm unclear that the correct answer is to create a single cookie that is shared across all sessions - this effectively links all browsing for the web. When tied with Google, it seems like a basic analytics problem to enumerate users and most sites visited in a given session.

There are concerns about CloudFlare's apparent lack of transparency, although an employee for the company did get involved in the discussion. ioerror continues:

One way - I think - would be to create a warning page upon detection of a CF edge or captcha challenge. This could be similar to an SSL/TLS warning dialog - with an option for users to bypass, engage with their systems or an option to *contact them* or the *site's owners* or to hit a cached version, read only version of the website that is on archive.org, archive.is or other caching systems. That would ensure that *millions* of users would be able to engage with informed consent before they're tagged, tracked and potentially deanonymized. TBB can protect against some of this - of course - but when all your edge nodes are run by one organization that can see plaintext, ip addresses, identifiers and so on - the protection is reduced. It is an open research question how badly it is reduced but intuitively, I think there is a reduction in anonymity.

It would be great to find a solution that allows TBB users to use the web without changes on our end - where they can solve one captcha, if required - perhaps not even prompting for GET requests, for example. Though in any case - I think we have to consider that there is a giant amount of data at CF - and we should ensure that it does not harm end users. I believe CF would share this goal if we explain that we're all interested in protecting users - both those hosting and those using the websites.

There are no denials that the Tor network -- thanks largely to the anonymity it offers -- is used as a platform for launching attacks, hence the need for tools such as CloudFlare. As well as the privacy concerns associated with CloudFlare's traffic interception, Tor fans and administrators are also disappointed that this fact is being used as a reason for introducing measures that affect all users.

Ideas are currently being bounced around about how best to deal with what is happening, and one of the simpler suggestions that has been put forward is adding a warning that reads "Warning this site is under surveillance by CloudFlare" to sites that could compromise privacy.

Photo credit: scyther5 / Shutterstock
CudaText: a programmer’s editor that everyone can use

Publié: février 27, 2016, 8:57am CET par Mike Williams

You need a Notepad replacement, but web searches only get you overcomplicated programmer's editors aimed at people who think in regular expressions and actually want to use line numbers.

CudaText offers another way. It’s a cross-platform coding editor -- and a good one -- but it's not just for developers, anyone can see its advantages right away.

This starts with the program’s portability, making it convenient to use, and continues with the tabbed interface. Click File > Open, choose several documents and they'll each open in their own tab.

Right-clicking reveals a handy option to set a tab color. You can also organize tabs into groups, allowing you to view files side by side, or split a tab to (for example) display two independently scrolling windows on the same file.

Too complicated? You don’t have to get into that if you don’t want to, and there are other bonus features you’ll discover without any effort at all. Like when you first close and reopen the program, and find your last set of tabs are reloaded.

There’s solid RegEx support, but you don’t have to know anything about that: just press Ctrl+F, type your search text, press Enter and the first hit is highlighted. "Find First", "Find Next" and "Find Prev" buttons show you clearly what you can do next, and "Count All" and "Mark All" options are on hand if you need them.

Elsewhere, the Edit menu has a host of line and text processing options, to sort lines, trim spaces, cONVERT cASE and more.

It's not all what you’d call beginner-friendly. Clicking Options > Settings -- Default opens a default.json text file, for instance, rather than presenting some neat settings dialog.

Still, even some of these options are clear and easy to understand.

//Max count of commands which can "undo"
"undo_limit": 5000,

If you're a developer then you’ll appreciate the syntax highlighting and HTML/ CSS support (autocompletion, HTML color codes underline, picture viewing), code folding, code tree structure and more.

The program also provides a host of plugins to support features like code snippets, macros, a color picker and others, and there's even a simple module to help you develop new plugins of your own.

Overall, CudaText is a well-designed Notepad replacement, generally easy to learn and use, but also with some very powerful features for those who need them.

CudaText is an open-source application for Windows XP+, OS X and Linux.