<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><style>
<!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
h2
        {mso-style-priority:9;
        mso-style-link:"Heading 2 Char";
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:18.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma","sans-serif";}
span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Arial","sans-serif";
        color:windowtext;}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma","sans-serif";}
span.Heading2Char
        {mso-style-name:"Heading 2 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 2";
        font-family:"Times New Roman","serif";
        font-weight:bold;}
span.postcredit
        {mso-style-name:post_credit;}
.MsoChpDefault
        {mso-style-type:export-only;}
@page Section1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
        {page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple">
<div class="Section1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">An interesting article highlighting the need for proper data security measures<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><a href="http://torrentfreak.com/isp-attempts-to-block-file-sharing-ends-results-in-epic-failure-100614/">http://torrentfreak.com/isp-attempts-to-block-file-sharing-ends-results-in-epic-failure-100614/</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<h2>ISP Attempt To Block File-Sharing Ends in Epic Failure<o:p></o:p></h2>
<p class="MsoNormal"><span class="postcredit">Written by <a href="http://torrentfreak.com/author/enigmax/" title="Posts by enigmax">
enigmax</a> on June 14, 2010 </span> <o:p></o:p></p>
<p>In response to the country’s “3 strikes” Hadopi legislation, last week a French ISP began offering a service to block file-sharing on customer connections for ‘just’ 2 euros per month. It didn’t take long for awful vulnerabilities in the system to be found
which breached not only the privacy of subscribers, but exposed them to new security threats.<o:p></o:p></p>
<p>France’s big, bad, scary Hadopi legislation and the systematic tracing, monitoring, reporting and disconnecting of file-sharers is all but here, so it seems there’s no better time for other companies to start making money from it.<o:p></o:p></p>
<p>Last week saw French ISP Orange take the opportunity to start providing a service which, at least on the surface, is designed to put the minds of subscribers at rest. For a 2 euro per month payment, Orange is offering a service which “allows you to control
the activity of computers connected to your internet line, from downloading ‘illegally’ using peer-to-peer networks. You can protect up to three computers connected to the same internet line.”<o:p></o:p></p>
<p>The software, which is Windows-only, runs in the background and utilizes a blacklist maintained and updated by Orange. Precisely what is on that blacklist remains a secret.<o:p></o:p></p>
<p>“Our solution is intended primarily for parents who want to make sure their children do nothing illegal on P2P networks,” the company said in a statement to French media last week while adding that just because the software is running, it doesn’t mean that
users are fully protected against legal action under Hadopi.<o:p></o:p></p>
<p>History tells us that whenever a company gets involved in anti-piracy action, they leave themselves open to being probed. Several anti-piracy companies and groups have seen their systems examined and even hacked over the years, and Orange is no different.<o:p></o:p></p>
<p><a href="http://bluetouff.com/author/bluetouff/">Bluetouff</a> has documented his findings on the Orange system and they are pretty surprising.<o:p></o:p></p>
<p>Using WireShark to sniff the output of the software on his location network, Bluetouff was able to identify an IP address used by the software to obtain its updates.<o:p></o:p></p>
<p>“The software communicates with a remote server, a Java servlet actually located on the ip 195.146.235.67,” he explains.<o:p></o:p></p>
<p>Nothing too out of the ordinary there – except that all information is not only being transmitted in the clear but all information on that server
<a href="http://www.theinternets.fr/2010/06/13/actu-le-logiciel-anti-p2p-dorange-neglicence-caracterisee/">
is public</a> (via<br>
http://195.146.235.67/status), meaning that every user had their IP addresses exposed to the public. But it doesn’t stop there.<o:p></o:p></p>
<p><img border="0" width="475" height="288" id="_x0000_i1028" src="cid:image001.jpg@01CB0C93.2B8E6830" alt="OrangeHadopiServer"><o:p></o:p></p>
<p>Whoever set up the security on the server admin panel didn’t do a very good job. The username was set to ‘admin’ and the password set to ‘admin’ too. This morning that gaping hole was
<a href="http://www.theinternets.fr/2010/06/14/actu-logiciel-anti-p2p-dorange-le-servlet-est-nomme-hadopitechnical-servlet/">
still open</a>.<o:p></o:p></p>
<p><img border="0" width="475" height="172" id="_x0000_i1027" src="cid:image002.jpg@01CB0C93.2B8E6830" alt="OrangeHadopi"><o:p></o:p></p>
<p>TorrentFreak is informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your
safety without disrupting the important tasks that you perform”<o:p></o:p></p>
<p>“People don’t know whether to laugh or cry,” Astrid Girardeau from TheInternets.fr told TorrentFreak. “Because it is a new Hadopi fail. And because,
<a href="http://torrentfreak.com/?s=Christine+Albanel">Christine Albanel</a>, the ex-Minister of Culture, is now the executive of communication, for… Orange.”<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="600" nowrap="" style="width:450.0pt;background:#F5F2DD;padding:
0cm 0cm 0cm 0cm">
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="5" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td width="420" style="width:315.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Damien Atkinson-Buck</span></b><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><br>
Member of Academic Staff (Secondary)</span><o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="415" style="width:311.25pt">
<tbody>
<tr>
<td width="158" style="width:118.5pt;padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="20" style="width:15.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:
"Arial","sans-serif"">p:</span></b><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">+61 3 9490 3848</span><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="20" style="width:15.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:
"Arial","sans-serif"">f:</span></b><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">+61 3 9490 3490</span><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td width="20" style="width:15.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:
"Arial","sans-serif"">e:</span></b><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><a href="mailto:damien.atkinson-buck@ivanhoe.com.au"><span style="font-size:10.0pt;color:blue">damien.atkinson-buck@ivanhoe.com.au</span></a></span><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="20" style="width:15.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:
"Arial","sans-serif"">w:</span></b><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><a href="http://myivanhoe.net"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue">http://myivanhoe.net</span></a><span style="font-size:
12.0pt"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" align="right" style="text-align:right"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">The Ridgeway Campus</span></b><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><br>
PO Box 91 The Ridgeway<br>
Ivanhoe Victoria<br>
3079 Australia</span><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td width="600" style="width:450.0pt;padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td width="424" style="width:318.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><!--[if gte vml 1]><v:group id="_x0000_s1026"
style='position:absolute;margin-left:0;margin-top:.75pt;width:313.5pt;
height:94.5pt;z-index:1;mso-position-horizontal-relative:char;
mso-position-vertical-relative:line' coordorigin=",15" coordsize="6270,1890">
<v:rect id="_x0000_s1027" href="http://myivanhoe.net/" target="_blank"
style='position:absolute;top:390;width:6270;height:1515' o:button="t"
filled="f" stroked="f">
<v:fill o:detectmouseclick="t" />
</v:rect><v:rect id="_x0000_s1028" href="http://www.roundsquare.org/"
target="_blank" style='position:absolute;left:3150;top:15;width:375;
height:375' o:button="t" filled="f" stroked="f">
<v:fill o:detectmouseclick="t" />
</v:rect><v:rect id="_x0000_s1029" href="http://www.ibo.org/"
target="_blank" style='position:absolute;left:2655;top:15;width:480;
height:390' o:button="t" filled="f" stroked="f">
<v:fill o:detectmouseclick="t" />
</v:rect><w:anchorlock/>
</v:group><![endif]--><![if !vml]><span style="mso-ignore:vglayout;
position:absolute;z-index:1;margin-left:0px;margin-top:1px;width:418px;
height:126px"><map name="MicrosoftOfficeMap0"><area shape="Rect" coords="177, 0, 209, 26" href="http://www.ibo.org/" target="_blank"><area shape="Rect" coords="210, 0, 235, 25" href="http://www.roundsquare.org/" target="_blank"><area shape="Rect" coords="0, 25, 418, 126" href="http://myivanhoe.net/" target="_blank"></map><img border="0" width="418" height="126" src="cid:image003.png@01CB0C93.2B8E6830" usemap="#MicrosoftOfficeMap0" v:shapes="_x0000_s1026 _x0000_s1027 _x0000_s1028 _x0000_s1029"></span><![endif]><a href="http://myivanhoe.net/"><span style="color:blue;text-decoration:
none"><img border="0" width="422" height="130" id="Picture_x0020_1" src="cid:image004.gif@01CB0C93.2B8E6830" alt="cid:image002.gif@01CA7CC2.074C48E0"></span></a><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" align="right" style="text-align:right"><a href="http://myivanhoe.net/"><span style="color:blue;text-decoration:
none"><img border="0" width="178" height="130" id="Picture_x0020_2" src="cid:image005.gif@01CB0C93.2B8E6830" alt="cid:image003.gif@01CA7CC2.074C48E0"></span></a><span style="font-size:12.0pt"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US"> <o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm"></td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<br>
<br>
<br>
Privacy, Virus and Copyright Warning<br>
<br>
The information contained in this electronic message (e-mail), and any files transmitted with it:<br>
<br>
* is intended for the named recipients only. If you have received this in error, please advise the sender and delete it and any copies immediately;<br>
* Any personal information in this email must be used in accordance with the Privacy Act 1988 and this always applies even if it has been sent to you in error.<br>
* represents the views of the sender and does not necessarily represent the views or formal advice of Ivanhoe Grammar School;<br>
* may be subject to Copyright, so no further use should be made of it without the author's permission.<br>
<br>
The School does not represent or warrant that the email or any files attached do not contain errors or are free from computer viruses or other defects nor does it accept responsibility for any loss or damage resulting directly or indirectly from the use of
the email or any attached files.
</body>
</html>