Monday, 20 January 2014

EU admits Google fines are 'pocket money', urges data protection reforms

european-commission2-0909
Europe needs a much harsher regime to fine businesses that breach data protection laws, as recent penalties handed out to Google are nothing more than “pocket money” to the company.
EU justice commissioner Viviane Reding said plans to reform the data protection laws in Europe must be pushed through, otherwise firms will continue to ride roughshod over the laws as they exist.
She noted that while both French and Spanish authorities have fined Google, the amounts represent a tiny fraction of the company’s income.
“Taking Google's 2012 performance figures, the fine in France [€150,000] represents 0.0003 percent of its global turnover. Pocket money,” she said.
“Is it surprising to anyone that two whole years after the case emerged, it is still unclear whether Google will amend its privacy policy or not? People need to see that their rights are enforced in a meaningful way. If a company has broken the rules and failed to mend its ways, this should have serious consequences.”
Reding said under the new proposals Google would have faced a far harsher penalty that would make it think twice before ignoring data protection laws.
“Europeans need to get serious. And that is why our reform introduces stiff sanctions that can reach as much as two percent of the global annual turnover of a company. In the Google case, that would have meant a fine of €731 million ($1bn). A sum much harder to brush off.”
Reding added, though, that a stronger regime for data protection would not just be a fear tactic to scare businesses into shape, but it would also help provide them with a competitive edge over rivals.
"Our reform will thus not only open the market to companies, it will also help them to conquer this market by helping to build citizens' confidence. And what is more, strong data protection rules will also give companies with serious privacy policies a competitive edge," she said.
Data protection reforms within the EU have been debated for some time, but an agreement between nations has yet to be reached. The UK is concerned that overly proscriptive laws could damage the economy.
Proposals were meant to be in place by 2015 but that date might slip back if member states cannot agree.

NTP DDoS attack takes down League of Legends game servers

The network time protocol is an protocol which allows servers to request the network time from an specific server. In this case, Schneier explains how the NTP DDoS attack is used on taking down gaming networks like the League of Legends.

Q4 has started with a lot of bugs

A lot of League Of Legends users are complaining about network problems while they try to play a League of Legends match. League of Legends shut down the ranked matching system multiple times in the last days.
The NTP method first began to appear late last year. To bring down a server such as one running "League of Legends," the attackers trick NTP servers into thinking they've been queried by the "League of Legends" server.
The NTP servers, thinking they're responding to a legitimate query, message the "League of Legends" server, overloading it with as many as 100 gigabits per second (Gbps). That's large even for a DDoS attack.
In this way, one small request to an NTP server can generate an enormous response capable of taking down even high-capacity websites.