ScentCone and other readers let us know about an indictment just unsealed in federal court for stealing 130 million credit cards and other data useful in identity theft, or just plain money theft. The breaches were at payment processor Heartland (accounting for the bulk of the 130M), Hannaford, 7-11, and two unnamed "national retailers." Interestingly, the focus of the indictment, Albert "Segvec" Gonzalez, is currently awaiting trial for masterminding the TJX break-in, which until Heartland counted as the largest credit-card theft ever. The indictment cites SQL injection attacks as the entry vector. Two unnamed Russia-based conspirators were also indicted. Securosis has analysis of the security implications of the breach ("These appear to be preventable attacks using common security controls. It's possible some advanced techniques were used, but I doubt it") and the attackers' methodology.

An anonymous reader writes "Four days ago, deputies from the Maricopa County Sheriff's Office in Arizona conducted a raid against the county government building hosting computers for a law enforcement database. After threatening to arrest county employees who would stop them, the officers proceeded to secure the room and promptly changed passwords on many of the servers. In a hearing on Friday, a Superior Court judge threatened to hold members of the Sheriff's Office in contempt if they did not reveal the passwords by next Wednesday. Following this, the Sheriff's Office claimed to be conducting an investigation against other Superior Court judges. Courts have asked for passwords before, but never under conditions like this."

Barence writes "The UK Pirate Party wants to reform copyright and patent laws, abolish the surveillance state and increase our freedom of speech, and it's just been recognized as a political party. In this interview with PC Pro, UK Pirate Party leader Andrew Robinson explains how he's planning to shake up the political landscape. 'What we really want to do is raise awareness, so that the other parties say "bloody hell, they've got seven million votes this time out," or one million votes, or enough votes to make them care and seriously think about these issues.'"

Jaeden Stormes writes "We just started getting word of a new browser hijack from our sales force. 'Some site called Bing?' they said. Sure enough, since the patches last night, their IE6 and IE7 installations are now routing all NXDOMAINs to Bing. Try it out — put in something like www.DoNotHijackMe.com." We've had mixed results here confirming this: one report that up-to-date IE8 behaves as described. Others tried installing all offered updates to systems running IE6 and IE7 and got no hijacking.
Update: 08/11 23:24 GMT by KD : Readers are reporting that it's not Bing that comes up for a nonexistent domain, it's the user's default search engine (noting that at least one Microsoft update in the past changed the default to Bing). There may be nothing new here.

TheSync writes "The Guardian reports that BSkyB will launch Europe's first 3D TV service in 2010. You will need the Sky+ HD set-top box, and a '3D ready' TV set (glasses-based stereoscopic system such as LCD shutter glasses or polarized glasses). Note that the first 3D TV service was from Nippon BS Broadcasting BS11 for use with Hyundai 3D sets."

suraj.sun sends in this excerpt from CNet: "One of the most recognizable brands in the history of illegal downloading is due to officially resurface, perhaps as early as next week, sources close to the company told CNET News. Only this time the name Kazaa will be part of a legal music service. Altnet and parent company Brilliant Digital Entertainment attached the Kazaa brand to a subscription service that will offer songs and ringtones from all four of the major recording companies. For the past few months, a beta version has been available. The company tried recently to ratchet up expectations with a series of vague, and what some considered misguided, press releases. The site will open with over 1 million tracks." The NYTimes has a related story about how the music industry is trying to convert casual pirates by offering more convenient new services.

NewYorkCountryLawyer writes "Well the price went up from $9250 per song file to $80,000 per song file, as the jury awarded the RIAA statutory damages of $1,920,000.00 for infringement of 24 MP3s, in Capitol Records v. Thomas-Rasset. In this trial, although the defendant had an expert witness of her own, she never called him to testify, and her attorneys never challenged the technical evidence offered by the RIAA's MediaSentry and Doug Jacobson. Also, neither the special verdict form nor the jury instructions spelled out what the elements of a 'distribution' are, or what needed to be established by the plaintiffs in order to recover statutory — as opposed to actual — damages. No doubt there will now have to be a third trial, and no doubt the unreasonableness of the verdict will lend support to those arguing that the RIAA's statutory damages theory is unconstitutional." Update: 06/19 01:39 GMT by T : Lots more detail at Ars Technica, too.

An anonymous reader writes "Johan Van den Brande has developed a Twitter client for the Commodore 64, allowing 140-character messages to be posted directly from this TV-connected 1982 home computer. This YouTube video shows how the Twitter client is — slowly! — loaded from a 5.25" floppy disk, how the latest Twitter messages are downloaded and shown on the TV screen, and how this tweet is posted. All that is needed is a C64, a TV, and a C64 Ethernet card. The Twitter client is implemented with the Contiki operating system, which otherwise is used for connecting tiny embedded systems to the Internet."

Hugh Pickens writes "The Register reports that a longtime Wikipedia admin has been caught offering to edit the online encyclopedia in exchange for cash. Someone noticed a post to an online job marketplace where he was advertising his services: 'Besides technical writing, I also am an accomplished senior Wikipedia administrator with several featured articles to my name,' read the post, which has since been changed. 'If you need a good profile on Wikipedia, I can help you out there too through my rich experience.' Wikipedia promptly opened a discussion page to try to reach consensus on the community view of 'paid editing.' So far opinion seems to be divided between those who say it's ok as long as full disclosure is made and 'edits are compliant with WP:NPOV, WP:RS, WP:BLP, WP:N,' and others who believe that paid editing automatically creates a conflict of interest. Back in 2006, Wikipedia co-founder Jimmy Wales shot down a company known as MyWikiBiz, which promised that you could 'author your legacy on the Internet.' The company subsequently had to reinvent itself with no reference to Wikipedia. 'It is not ok with me that anyone ever set up a service selling their services as a Wikipedia editor, administrator, bureaucrat, etc., I will personally block any cases that I am shown,' wrote Wales."

dasButcher writes "Hackers are claiming to own T-Mobile USA's servers and to have access to the cellular phone carrier's operations, finance and subscriber data." (Here's the seclists.org post of the claimed breach.)

Norsefire writes "A Japanese University is giving away iPhones to its students to use the phones' GPS functionality to catch students who skip classes. The University claims students currently fake attendance by having other students answer for them during rollcall, they also said that while this can be abused by giving other students the phone, they are much less likely to do this due to the personal information, such as email, a phone generally contains."

jamie found this visualization of air travel, which might be usable in some sort of proxy for the spread of flu virus (to choose a random application). Jer Thorp, an artist and educator from Vancouver, Canada (and a former geneticist), searched Twitter for the phrase "Just landed in" and obtained lat/lon coordinates for both the indicated airport and the Twitter user's home location, as recorded in their Twitter profile. He then produced videos of multi-hour stretches of air travel that had been latent in the Twitter information stream.

Narcissus writes to tell us that the European Parliament is planning a vote in the Industry, Transport, Energy (ITRE) committee that could reintroduce amendment 138 (currently amendment 46) which deals with safeguards to user rights on the internet and graduated response schemes. There are several online campaigns trying to drive awareness and action already but there is limited time to act. "The Council may propose a compromise version of amendment 138/46 that is completely neutralized, or that may even become the opposite of the original by allowing the 'three strikes' scheme instead of preventing it. According to the latest negotiations, am.138/46 wouldn't anymore be an article (that must be transposed by Member States in their law) but a mere recital that has just indicative value. It is urgent to contact the members of the ITRE committee to advise them to reject compromise with the Council that failed to respect the intent of the original amendment. The best would be once again to approve the amendment."

wiryd writes "A new ICANN proposal would allow applications for almost any TLD. From the article: 'Tourists might find information about the Liberty Bell, for example, at a site ending in .philly. A rapper might apply for a Web address ending in .hiphop. "Whatever is open to the imagination can be applied for," says Paul Levins, ICANN's vice president of corporate affairs. "It could translate into one of the largest marketing and branding opportunities in history."'"