New genre of artificial intelligence programs take computer hacking to another level

FILE PHOTO: Servers for data storage are seen at Advania's Thor Data Center in Hafnarfjordur, Iceland August 7, 2015. REUTERS/Sigtryggur Ari

By Joseph Menn

SAN FRANCISCO (Reuters) – The nightmare scenario for computer security – artificial intelligence programs that can learn how to evade even the best defenses – may already have arrived.

That warning from security researchers is driven home by a team from IBM Corp. who have used the artificial intelligence technique known as machine learning to build hacking programs that could slip past top-tier defensive measures. The group will unveil details of its experiment at the Black Hat security conference in Las Vegas on Wednesday.

State-of-the-art defenses generally rely on examining what the attack software is doing, rather than the more commonplace technique of analyzing software code for danger signs. But the new genre of AI-driven programs can be trained to stay dormant until they reach a very specific target, making them exceptionally hard to stop.

No one has yet boasted of catching any malicious software that clearly relied on machine learning or other variants of artificial intelligence, but that may just be because the attack programs are too good to be caught.

Researchers say that, at best, it’s only a matter of time. Free artificial intelligence building blocks for training programs are readily available from Alphabet Inc’s Google and others, and the ideas work all too well in practice.

“I absolutely do believe we’re going there,” said Jon DiMaggio, a senior threat analyst at cybersecurity firm Symantec Corp. “It’s going to make it a lot harder to detect.”

The most advanced nation-state hackers have already shown that they can build attack programs that activate only when they have reached a target. The best-known example is Stuxnet, which was deployed by U.S. and Israeli intelligence agencies against a uranium enrichment facility in Iran.

The IBM effort, named DeepLocker, showed that a similar level of precision can be available to those with far fewer resources than a national government.

In a demonstration using publicly available photos of a sample target, the team used a hacked version of video conferencing software that swung into action only when it detected the face of a target.

“We have a lot of reason to believe this is the next big thing,” said lead IBM researcher Marc Ph. Stoecklin. “This may have happened already, and we will see it two or three years from now.”

At a recent New York conference, Hackers on Planet Earth, defense researcher Kevin Hodges showed off an “entry-level” automated program he made with open-source training tools that tried multiple attack approaches in succession.

“We need to start looking at this stuff now,” said Hodges. “Whoever you personally consider evil is already working on this.”

(Reporting by Joseph Menn; Editing by Jonathan Weber and Susan Fenton)

Majority of Americans think social media platforms censor political views: Pew survey

FILE PHOTO: A young couple look at their phone as they sit on a hillside after sun set in El Paso, Texas, U.S., June 20, 2018. REUTERS/Mike Blake

By Angela Moon

NEW YORK (Reuters) – About seven out of ten Americans think social media platforms intentionally censor political viewpoints, the Pew Research Center found in a study released on Thursday.

The study comes amid an ongoing debate over the power of digital technology companies and the way they do business. Social media companies in particular, including Facebook Inc and Alphabet Inc’s Google, have recently come under scrutiny for failing to promptly tackle the problem of fake news as more Americans consume news on their platforms.

In the study of 4,594 U.S. adults, conducted between May 29 and June 11, roughly 72 percent of the respondents believed that social media platforms actively censored political views those companies found objectionable.

The perception that technology companies were politically biased and suppressed political speech was especially widespread among Republicans, the study showed.

About 85 percent of Republicans and Republican-leaning independents in the survey thought it was likely for social media sites to intentionally censor political viewpoints, with 54 percent saying it was “very” likely.

Sixty-four percent of Republicans also thought major technology companies as a whole supported the views of liberals over conservatives.

A majority of the respondents, or 51 percent, said technology companies should be regulated more than they are now, while only 9 percent said they should be regulated less.

(Reporting by Angela Moon; Editing by Bernadette Baum)

U.S. Senate advances bill to penalize websites for sex trafficking

People walk by the U.S. Capitol building in Washington, U.S., February 8, 2018. REUTERS/ Leah Millis

By Dustin Volz

WASHINGTON (Reuters) – The U.S. Senate voted 94-2 on Monday to advance legislation to make it easier to penalize operators of websites that facilitate online sex trafficking, setting up final passage of a bill as soon as Tuesday that would chip away at a bedrock legal shield for the technology industry.

The U.S. House of Representatives passed the legislation overwhelmingly last month. It is expected to be sent to and signed by President Donald Trump later this week.

The bill’s expected passage marks one of the most concrete actions in recent years from the U.S. Congress to tighten regulation of internet firms, which have drawn scrutiny from lawmakers in both parties over the past year because of an array of concerns regarding the size and influence of their platforms.

The Senate vote to limit debate on the sex trafficking legislation came as Facebook endured withering scrutiny over its data protection practices after reports that political analytics firm Cambridge Analytica harvested the private data on more than 50 million Facebook users through inappropriate means.

Several major internet companies, including Facebook and Alphabet’s Google, have been reluctant in the past to support any congressional effort to dent what is known as Section 230 of the Communications Decency Act, a decades-old law that protects them from liability for the activities of their users.

But facing political pressure, the internet industry slowly warmed to a proposal that began to gain traction in the Senate last year.

The legislation is a result of years of law enforcement lobbying for a crackdown on the online classified site backpage.com, which is used for sex advertising.

It would make it easier for states and sex-trafficking victims to sue social media networks, advertisers and others that fail to keep exploitative material off their platforms.

Some critics have warned that the measure would weaken Section 230 in a way that would only serve to help established internet giants, which possess larger resources to police their content, and not adequately address the problem.

Republican Senator Rand Paul and Democratic Senator Ron Wyden cast the only no votes.

(Reporting by Dustin Volz; Editing by Peter Cooney)

U.S. House passes bill to penalize websites for sex trafficking US

FILE PHOTO - The U.S. Capitol Building is lit at sunset in Washington, U.S., December 20, 2016. REUTERS/Joshua Roberts

By Dustin Volz

WASHINGTON (Reuters) – The U.S. House of Representatives on Tuesday overwhelmingly passed legislation to make it easier to penalize operators of websites that facilitate online sex trafficking, chipping away at a bedrock legal shield for the technology industry.

The bill’s passage marks one of the most concrete actions in recent years from the U.S. Congress to tighten regulation of internet firms, which have drawn heavy scrutiny from lawmakers in both parties over the past year due to an array of concerns regarding the size and influence of their platforms.

The House passed the measure 388-25. It still needs to pass the U.S. Senate, where similar legislation has already gained substantial support, and then be signed by President Donald Trump before it can become law.

Speaker Paul Ryan, in a statement before the vote, said the bill would help “put an end to modern-day slavery here in the United States.”

The White House issued a statement generally supportive of the bill, but said the administration “remains concerned” about certain provisions that it hopes can be resolved in the final legislation.

Several major internet companies, including Alphabet Inc’s Google and Facebook Inc, had been reluctant to support any congressional effort to dent what is known as Section 230 of the Communications Decency Act, a decades-old law that protects them from liability for the activities of their users.

But facing political pressure, the internet industry slowly warmed to a proposal that gained traction in the Senate last year, and eventually endorsed it after it gained sizeable bipartisan support.

Republican Senator Rob Portman, a chief architect of the Senate proposal, said in a statement he supported the House’s similar version and called on the Senate to quickly pass it.

The legislation is a result of years of law-enforcement lobbying for a crackdown on the online classified site backpage.com, which is used for sex advertising.

It would make it easier for states and sex-trafficking victims to sue social media networks, advertisers and others that fail to keep exploitative material off their platforms.

Some critics warned that the House measure would weaken Section 230 in a way that would only serve to further help established internet giants, who possess larger resources to police their content, and not adequately address the problem.

“This bill will only prop up the entrenched players who are rapidly losing the public’s trust,” Democratic Senator Ron Wyden, an original author of Section 230, said. “The failure to understand the technological side effects of this bill – specifically that it will become harder to expose sex-traffickers, while hamstringing innovation – will be something that this Congress will regret.”

(Reporting by Dustin Volz; editing by Sandra Maler and Lisa Shumaker)

London attacker took steroids before deadly rampage, inquest told

Police officers and forensics investigators and police officers work on Westminster Bridge the morning after an attack by a man driving a car and weilding a knife left five people dead and dozens injured, in London, Britain, March 23, 2017.

LONDON (Reuters) – The man who mowed down pedestrians on London’s Westminster Bridge before killing a police officer outside Britain’s parliament last year had taken steroids beforehand, a London court heard on Monday.

Last March Khalid Masood, 52, killed four people on the bridge before, armed with two carving knives, he stabbed to death an unarmed police officer in the grounds of parliament. He was shot dead at the scene.

It was the first of five attacks on Britain last year which police blamed on terrorism.

A submission to a pre-inquest hearing into the fatalities at London’s Old Bailey Court said there was evidence that Masood had taken anabolic steroids in the hours or days before his death.

“A more specialist pharmaceutical toxicologist … has been instructed to prepare a report addressing how steroid use may have affected Khalid Masood,” the submission by the inquiry’s lawyer Jonathan Hough said.

The hearing also heard from Gareth Patterson, a lawyer representing relatives of four of the victims, who lambasted tech firms over their stance on encryption and failing to remove radicalizing material from websites.

Patterson said families wanted answers about how Masood, who was known to the UK security service MI5, was radicalized and why shortly before his attack, he was able to share an extremist document via WhatsApp.

He said victims’ relatives could not understand “why it is that radicalizing material continues to be freely available on the internet”.

“We do not understand why it’s necessary for WhatsApp, Telegram and these sort of media applications to have end-to-end encryption,” he told the hearing at London’s Old Bailey court.

Patterson told Reuters following the hearing that he was “fed up” of prosecuting terrorism cases which featured encryption and particularly the WhatsApp messaging service.

“How many times do we have to have this?” he said.

The British government has been pressurizing companies to do more to remove extremist content and rein in encryption which they say allows terrorists and criminals to communicate without being monitored by police and spies, while also making it hard for the authorities to track them down.

However, it has met quiet resistance from tech leaders like Facebook, Google and Twitter and critics say ending encryption will weaken security for legitimate actions and open a back door for government snooping.

Samantha Leek, the British government’s lawyer, said the issues over encryption and radicalization were a matter of public policy and too wide for an inquest to consider.

Police say Masood had planned and carried out his attack alone, despite claims of responsibility from Islamic State, although a report in December confirmed he was known to MI5 for associating with extremists, particularly between 2010 and 2012, but not considered a threat.

Coroner Mark Lucraft said the inquest, which will begin in September, would seek to answer “obvious and understandable questions” the families might have.

(Reporting by Michael Holden; editing by Guy Faulconbridge)

In reversal, U.S. internet firms back bill to fight online sex trafficking

A computer keyboard is seen in Bucharest April 3, 2012.

By Dustin Volz

WASHINGTON (Reuters) – Major U.S. internet firms on Friday said they would support legislation to make it easier to penalize operators of websites that facilitate online sex trafficking, marking a sharp reversal for Silicon Valley on an issue long considered a top policy priority.

The decision to endorse a measure advancing in the U.S. Senate could clear the way for Congress to pass the first rewrite of a law adopted 21 years ago that is widely considered a bedrock legal shield for the internet industry.

Michael Beckerman, president of the Internet Association, said in a statement it supported a bipartisan proposal advancing in the U.S. Senate making it easier for states and sex-trafficking victims to sue social media networks, advertisers and others that fail to keep exploitative material off their platforms.

“Important changes made to (Stop Enabling Sex Traffickers Act) will grant victims the ability to secure the justice they deserve, allow internet platforms to continue their work combating human trafficking, and protect good actors in the ecosystem,” Beckerman said. His organization represents tech companies including Facebook, Amazon and Alphabet’s Google.

This week, the U.S. Senate Commerce Committee said it would vote next week on the bill authored by Republican Rob Portman and Democrat Richard Blumenthal.

The internet industry has fought such a change in the law for years, but now Washington is stepping up scrutiny on the sector on a range of policy issues after decades of hands-off regulation.

U.S. technology companies had long opposed any legislation seeking to amend Section 230 of the decades-old Communications Decency Act, arguing it is a bedrock legal protection for the internet that could thwart digital innovation and prompt endless litigation.

Bill negotiators agreed to make a handful of technical changes to the draft legislation, which Beckerman said helped earn support of the internet companies.

Those changes include clarity that criminal charges are based on violations of federal human trafficking law and that a standard for liability requires a website “knowingly” assisting of facilitating trafficking.

 

(Reporting by Dustin Volz; Editing by David Gregorio)

 

Social media executives to testify Nov. 1 about Russia and U.S. election

The Twitter application is seen on a phone screen August 3, 2017. REUTERS/Thomas White

WASHINGTON (Reuters) – Executives from Facebook Inc <FB.O>, Twitter Inc <TWTR.N> and Alphabet Inc’s <GOOGL.O> Google have been asked to testify about Russian meddling in the 2016 U.S. election before a House of Representatives panel on Nov. 1, a congressional aide said on Thursday.

Executives from the companies were already due to appear the same day before the Senate Intelligence Committee, which is also investigating Moscow’s alleged role in the election. .

But the aide said they had also been asked to offer testimony at a public hearing of the House Intelligence Committee.

Aides to the committee’s leaders declined comment. It is House Intelligence policy not to discuss the interview schedule.

Some U.S. lawmakers, increasingly alarmed about evidence that hackers used the internet to spread fake news and otherwise influence last year’s election, have been pushing for more information about social networks in particular.

The Senate and House intelligence committees are two of the main congressional panels probing allegations that Russia sought to interfere in the U.S. election to boost Republican President Donald Trump’s chances at winning the White House, and possible collusion between Trump associates and Russia.

Moscow denies any such activity, and Trump has repeatedly dismissed allegations of collusion.

Facebook confirmed that company officials would testify. Google and Twitter did not immediately respond to requests for comment.

(Reporting by Patricia Zengerle; Editing by Tom Brown)

Facebook, Google, Twitter asked to testify on Russian meddling

The Twitter application is seen on a phone screen August 3, 2017. REUTERS/Thomas White

By Dustin Volz and Patricia Zengerle

WASHINGTON (Reuters) – Executives from Facebook, Alphabet Inc’s Google and Twitter have been asked to testify to the U.S. Congress in coming weeks as lawmakers probe Russia’s alleged interference in the 2016 U.S. election, committee sources said on Wednesday.

A Senate aide said executives from the three firms had been asked by the Senate Intelligence Committee to appear at a public hearing on Nov. 1.

The leaders of the House of Representatives Intelligence Committee said the panel would hold an open hearing next month with representatives from unnamed technology companies in an effort to “better understand how Russia used online tools and platforms to sow discord in and influence our election.”

Representatives for Facebook and Google confirmed they had received invitations from the Senate committee but did not say whether the companies would attend. Twitter did not immediately respond to requests for comment.

The House panel did not immediately identify any companies, but a committee source said lawmakers expected to hear from the same three firms the Senate had asked to testify.

The requests are the latest move by congressional investigators to gain information from internet companies as they probe the extent of Moscow’s alleged efforts to disrupt last year’s U.S. election. Lawmakers in both parties have grown increasingly concerned that social networks may have played a key role in Russia’s influence operation.

Facebook revealed this month that suspected Russian trolls purchased more than $100,000 worth of divisive ads on its platform during the 2016 election cycle, a revelation that has prompted calls from some Democrats for new disclosure rules for online political ads.

On Wednesday, Trump attacked Facebook in a tweet and suggested the world’s largest social network had colluded with other media outlets that opposed him. The president has been skeptical of the conclusions of U.S. intelligence agencies that Russia interfered in the election and has denied his campaign colluded with Moscow.

The salvo prompted a lengthy rebuke from Facebook Chief Executive Mark Zuckerberg, who said both Trump and liberals were upset about ideas and content on Facebook during the campaign.

“That’s what running a platform for all ideas looks like,” Zuckerberg wrote on his personal Facebook page.

Other internet firms besides Facebook are also facing rising scrutiny over how Russia may have leveraged their platforms. Twitter is expected to privately brief the Senate panel on Thursday.

Republican Senator James Lankford, who has received classified information about Russia’s interference as a member of the Senate Intelligence Committee, said on Wednesday that the country’s attempts to sow discord in U.S. domestic affairs had not abated.

Russian internet trolls over the weekend fueled the debate ignited by Trump over whether NFL players should have the right to kneel during the national anthem, Lankford said.

Also on Wednesday, the Daily Beast, citing unnamed sources, reported that a Facebook group named “United Muslims of America” was a fake account linked to the Russian government and that it was used to push false claims about U.S. politicians, including Democratic presidential candidate Hillary Clinton.

The group bought Facebook ads to reach targeted audiences, promoting political rallies aimed at Muslims, the website reported.

The Senate and House intelligence committees are two of the main congressional panels probing allegations that Russia sought to interfere in the U.S. election to boost Trump’s chances at winning the White House, and possible collusion between Trump associates and Russia.

(Reporting by Patricia Zengerle and Dustin Volz, additional reporting by Paresh Dave; Editing by Peter Cooney and Andrew Hay)

Russia causing cyber mayhem, should face retaliation: ex-UK spy chief

The director of Britain's GCHQ Robert Hannigan delivers a speech at Government Communications Headquarters in Cheltenham, November 17, 2015.

By Michael Holden

LONDON (Reuters) – Russia is causing cyberspace mayhem and should face retaliation if it continues to undermine democratic institutions in the West, the former head of Britain’s GCHQ spy agency said on Monday.

Russia denies allegations from governments and intelligence services that it is behind a growing number of cyber attacks on commercial and political targets around the world, including the hackings of recent U.S. and French presidential election campaigns.

Asked if the Russian authorities were a threat to the democratic process, Robert Hannigan, who stepped down as head of the UK’s intelligence service in March, said: “Yes … There is a disproportionate amount of mayhem in cyberspace coming from Russia from state activity.”

In his first interview since leaving GCHQ, Hannigan told BBC radio that it was positive that French President Emmanuel Macron and German Chancellor Angela Merkel had publicly “called this out recently”.

Standing alongside Russian President Vladimir Putin in May, Macron said state-funded Russian news outlets had sought to destabilize his campaign while the head of Germany’s domestic intelligence agency said last week it was expecting Russia to try to influence the German election in September.

“Ultimately people will have to push back against Russian state activity and show that it’s unacceptable,” he said.

“It doesn’t have to be by cyber retaliation, but it may be that is necessary at some time in the future. It may be sanctions and other measures, just to put down some red lines and say that this behavior is unacceptable.”

Hannigan also said it would be a mistake to force social media companies to allow intelligence agencies to access services protected by encryption through so-called “back door” access.

“The best you can do with end-to-end encryption is work with companies in a cooperative way to find ways around it frankly,” he said. He said such “back doors” would weaken systems.

Hannigan also said governments should wait to see how a global working group on tackling online extremism established by Facebook, Google’s YouTube, Twitter and Microsoft performed before seeking new laws.

“Legislation is a blunt last resort because frankly extremism is very difficult to define in law and you could spend all your time in court arguing about whether a particular video crosses the line or not,” he said.

Last month, Germany approved a plan to fine social media networks up to 50 million euros ($57 million) if they failed to remove hateful postings promptly. Britain has also mooted bringing in possible sanctions for tech firms that failed to remove extremist content.

 

 

(Editing by Raissa Kasolowsky)

 

Google to push for law enforcement to have more access to overseas data

FILE PHOTO: A Google logo is seen in a store in Los Angeles, California, U.S., March 24, 2017. REUTERS/Lucy Nicholson/File Photo

By Dustin Volz

WASHINGTON (Reuters) – Alphabet Inc’s <GOOGL.O> Google will press U.S. lawmakers on Thursday to update laws on how governments access customer data stored on servers located in other countries, hoping to address a mounting concern for both law enforcement officials and Silicon Valley.

The push comes amid growing legal uncertainty, both in the United States and across the globe, about how technology firms must comply with government requests for foreign-held data. That has raised alarm that criminal and terrorism investigations are being hindered by outdated laws that make the current process for sharing information slow and burdensome.

Kent Walker, Google’s senior vice president and general counsel, will announce the company’s framework during a speech in Washington, D.C., at the Heritage Foundation, a conservative think tank that wields influence in the Trump White House and Republican-controlled Congress.

The speech urges Congress to update a decades-old electronic communications law and follows similar efforts by Microsoft Corp <MSFT.O>.

Both companies had previously objected in court to U.S. law enforcement efforts to use domestic search warrants for data held overseas because the practice could erode user privacy. But the tech industry and privacy advocates have also admitted the current rules for appropriate cross-border data requests are untenable.

The Mountain View, California-based company calls for allowing countries that commit to baseline privacy, human rights and due process principles to directly request data from U.S. providers without the need to consult the U.S. government as an intermediary. It is intended to be reciprocal.

Countries that do not adhere to the standards, such as an oppressive regime, would not be eligible.

Google did not detail specific baseline principles in its framework.

“This couldn’t be a more urgent set of issues,” Walker said in an interview, noting that recent acts of terrorism in Europe underscored the need to move quickly.

Current agreements that allow law enforcement access to data stored overseas, known as mutual legal assistance treaties, involve a formal diplomatic request for data and require the host country obtain a warrant on behalf of the requesting country. That can often take several months.

In January, a divided federal appeals court refused to reconsider its decision from last year that said the U.S. government could not force Microsoft or other companies to hand over customer data stored abroad under a domestic warrant.

The U.S. Justice Department has until midnight on Friday to appeal that decision to the Supreme Court. It did not respond to a request for comment.

U.S. judges have ruled against Google in similar recent cases, however, elevating the potential for Supreme Court review.

Companies, privacy advocates and judges themselves have urged Congress to address the problem rather than leave it to courts.

Google will also ask Congress to codify warrant requirements for data requests that involve content, such as the actual message found within an email.

Chris Calabrese, vice president of policy at the Center for Democracy & Technology, said Google’s framework was “broadly correct” but urged caution about the process for letting countries make direct requests to providers.

“We need to make sure the people in the club are the right people,” he said.

(Reporting by Dustin Volz; Editing by Lisa Shumaker)