ESET Nod32 Antivirus | Antispyware | Console d administration
Chercher :
Newsletter :  

Revues :
- Presse
- Presse FR
- Vidéos
- Twitter
- Secuobs




Abonnez vous � Nessus Professional Feed !

Sponsors :

Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- Commentaires


Revue Presse:
- Tous
- Francophone
- Par mot clé
- Par site
- Le tagwall


Top bi-hebdo:
- Ensemble
- Articles
- Revue
- Videos
- Twitter
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Twitter :
- Tous
- Par mot clé
- Par compte
- Le tagwall


Commentaires :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


Secumail :
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS/XML :
- Articles
- Brèves
- Commentaires
- Revue
- Revue FR
- Videos
- Twitter
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS SecuObs :
- sécurité
- exploit
- windows
- microsoft
- réseau
- attaque


RSS Revue :
- security
- microsoft
- windows
- hacker
- attack
- network


RSS Videos :
- vmware
- security
- virus
- biometric
- windows
- lockpicking


RSS Twitter :
- security
- linux
- botnet
- attack
- metasploit
- cisco


RSS Comments :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS OPML :
- Français
- International









Abonnez vous � Nessus Professional Feed !


Revue de presse francophone :
- La Loi Informatique et Libertés à bout de souffle
- Les PME recourent de plus en plus aux services hébergés, selon Microsoft
- Hausse de 78 pourcents des malwares en 2009, selon le rapport de sécurité G Data
- Le marché des mobiles en entreprise, extensible aux pays émergents
- L art de formater à bas niveau un utilisateur 2.0
- Cisco ASA, Secure Desktop Cross Site Scripting
- Des réseaux sociaux plus confidentiels via une gestion distribuée
- L art de formater à bas niveau un utilisateur 2.0, suite
- Un navigateur peut en cacher un autre
- Windows vulnérabilités du codec Indeo
- WordPad, Word exécution de code via Word 97
- Microsoft Project exécution de code
- Windows deux vulnérabilités d'ADFS
- L'Ecole Nationale de la Magistrature opte pour la virtualisation de son SI avec DataCore-VMware et un PRA, déjà testé et éprouvé
- YouTube - PowerLabs Railgun 3 100KJ Railgun Shots with metal armatures.

Dernier articles de SecuObs :
- rWeb v4: Une nouvelle version aux multiples innovations
- Une attaque contre l’algorithme A5/3
- Avis d’avalanche de 0days chez Intevydis
- Management de la sécurité de l’information et implémentation ISO 27001
- Preuve de concept pour contourner les restrictions d'accès DMA via l'exploitation d'une vulnérabilité d'Intel TXT
- Des millions de XSS dans les clicktags
- WPA Cracker un cluster en ligne de 400 CPU et un dictionnaire de 135 millions d'entrées pour casser, ou pas, WPA/WPA2-PSK en 20 minutes
- Le plug-in IDADWARF remporte le concours organisé par HexRays
- Les imprimantes réseau, toujours un maillon faible de la sécurité informatique
- Nessus 4.2, une nouvelle interface Web en Flash, des performances améliorées et l'analyse différentielle des rapports d'audit

Revue de presse internationale :
- NSA To Aid Google In Chinese State Sponsored Intrusion Investigation
- Sherffius The Moon
- Final Apache HTTP Server 1.3 Series Release
- What Third Parties Know About John Doe
- JoyPopGuideDlg.exe
- cpa_1.exe
- Bifrost virus Serverc.exe, eset Serials.exe
- endivide.exe
- Nook hitting brick mortar, Apple Store updating
- Political hacktivism and the exploitation of tragedies is on the rise
- Nl Notary puts clients passports online
- Woman worms into D.C. taxpayer accounts
- Za Hijacked IDs are fuelling spending sprees
- McAfee Labs Q4 Threat Report
- fipsForum v2.6 Remote Database Disclosure Vulnerability

Annuaire des videos
- TitanEngine 2 0 3 Python SDK
- When Web 2 0 Attacks
- Weld County Atlas E Missile Silo Site Tour
- Windows Vista 2008 7 SMB2 DOS flaw CVE 2009 3103
- Exploits Part 1 mov
- Installing Backtrack 4
- VMware Fusion 2 Beta Feature Demo
- How to Install Computer Memory in an Apple Mac Pro
- Metasploit Post Exploitation Meterpreter Script Prefetchtool
- Vsphere within VMware Workstation 7 Part 1
- GNU Radio with Audio Recognition
- HNNCast020510 News mov
- AVG 9 0 free edition review
- HACKTHEPLANET 4 ettercap 1 4
- HNNCast020510 Quickies mov

Revue Twitter
- ShmooCon | Your iPhone's Dirty Little Security Secret - http://tinyurl.com/ylmagnc
- Sweden Probing Cisco, NASA Hacks - http://tinyurl.com/ykpy52j
- It is more about engineering vs. art than replacing people: Technology as a Substitute for the IT Security Pro http://ow.ly/15b9g
- Sweden to prosecute alleged Cisco, NASA hacker: http://tinyurl.com/ykpap6z
- RT @Paterva Maltego 3 beta blog - http://maltego.blogspot.com/ is online. See progress on Maltego 3 as it happens
- Python tools for pen testers - http://dirk-loss.de/python-tools.htm
- Java Decompiler - Yet another fast Java decompiler http://java.decompiler.free.fr
- conficker-usd-250000-reward : http://jumbiewatch.blogspot.com/2010/02/conficker-usd-250000-reward.html
- The RFID Record Player Is a Real World Cover Flow - RFID record ...: I like this idea by Matt Brown: He tags 45rpm... http://bit.ly/9CZZUw
- IMEC Showcases Dual-Gate-Based Organic RFID Chip with Record Performance: At today's International Solid State Cir... http://bit.ly/9pgwb5

Mini-Tagwall
Revue de presse : security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone

+ de mots clés pour la revue de presse

Annuaires des videos : vmware, security, virus, biometric, windows, lockpicking, password, metasploit, botnet, tutorial, crypt, attack, linux

+ de mots clés pour les videos

Revue Twitter : security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall

+ de mots clés pour la revue Twitter



Top bi-hebdo des articles de SecuObs
- Apprendre à parler Skype pour mieux le faire taire !
- WPA Cracker un cluster en ligne de 400 CPU et un dictionnaire de 135 millions d'entrées pour casser, ou pas, WPA/WPA2-PSK en 20 minutes
- rWeb v4: Une nouvelle version aux multiples innovations
- Les imprimantes réseau, toujours un maillon faible de la sécurité informatique
- Nessus 4.2, une nouvelle interface Web en Flash, des performances améliorées et l'analyse différentielle des rapports d'audit
- La sécurité des clés USB mise à mal par USBDUMPER
- Comment changer un mot de passe perdu pour un compte WINDOWS
- Management de la sécurité de l’information et implémentation ISO 27001
- Une attaque contre l’algorithme A5/3
- [Metasploit 2.x – Partie 1] Introduction et présentation

Top bi-hebdo de la revue de presse
- FREE Kaspersky Internet Security 2010 Activation Code Valid for 6 Months
- The Automation Labs Facebook security scare
- installer backtrack 4 [tuto]
- Nouveau dictionnaire WPA Livebox
- Dev Team Confirms iPhone 3.1.3 IPSW Jailbreak
- iWep PRO v1.0.8 Released
- BitDefender met à  disposition un outil de désinfection gratuit contre Zimuse
- New Cydia Repository and iWep PRO v1.0.9
- iWep PRO 1.1.0 Released
- Vente d outils d espionnage

Top bi-hebdo de l'annuaire des videos
- Install mod security on ubuntu 9.04
- Cain and Abel Network SNiffer Tutorial
- Howto Cain Abel Tutorial Passw rter auf LAN Partys zocken
- Exploit REALVNC 4.1.1 Saelyx
- Installing spoonwep and spoonwpa
- DNS Spoofing + Arp poisoning www.sitehackers.com.br
- Wireshark Tutorial Part 2
- How to create a SNORT rule and test it.
- install MacOSX Snow Leopard in Windows PC using Vmware Workstation as virtual machine
- Ch0ry Euro iPhone 3G 3GS 30 Hack WIFI key

Top bi-hebdo de la revue Twitter
- OMG. Booting BackTrack in printer device :Q___ -- http://tinyurl.com/y9xfhh6
- XSS/SQLi BARCODE CHEATSHEET: Fr PDC mailing list thought @rybolov @jack_mannino would b interested in. http://bit.ly/cWQoZi
- New Whitepaper: 6 mo of Botnets - Trends, Observations, and Geographical Links as HTTP CCs double http://bit.ly/axw4sS
- TTYtter 0.9.11 now avail in BackTrack4 Repository.
- NetBIOS spoofing: [link] http://bit.ly/9sVTRc
- RT: @RSnake Looks like my previous list made it into Nikto http://trac2.assembla.com/Nikto_2/ticket/119 w00t!
- RT @securityshell Your browser history can be sniffed with just 64 lines of Python (tested with Firefox 3.5.3 http://tinyurl.com/yl9vrlj
- JavaScript implementation of Shamir's Secure Secret Sharing scheme: http://tinyurl.com/ycszjj8 #security
- Google offering a Public DNS? wow why am i concerned about it? hmmm http://bit.ly/4ovCFI
- Another fake OpenSSH remote root exploit (source http://tinyurl.com/yhtugwc) - hexdump - http://tinyurl.com/ykejgfk

Top des articles les plus commentés
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Microsoft !Exploitable un nouvel outil gratuit pour aider les développeurs à évaluer automatiquement les risques
- Webshag, un outil d'audit de serveur web
- CAINE un Live[CD|USB] pour faciliter la recherche légale de preuves numériques de compromission
- Les navigateurs internet, des mini-systèmes d’exploitation hors de contrôle ?
- [Renforcement des fonctions de sécurité du noyau Linux – Partie 1] Présentation
- Nessus 4.0 placé sous le signe de la performance, de l'unification et de la personnalisation
- Microsoft Gazelle, mini-OS virtuel basé sur MashupOS pour une navigation Web sécurisée par isolation
- Yellowsn0w un utilitaire de déblocage SIM pour le firmware 2.2 des Iphone 3G
- [Hacking Hardware - Partie 1] - Introduction et présentation

Amendment 138 - Legalese for Progress, not political weakness
Les derniers commentaires publiés sur SecuObs (1-5):
- ESRT @netsparker @jeremiahg - Scanner Review Vendors begin responding: HP Web
- ESRT @dloss - Python tools for penetration testers
- ESRT @sagar38 @laramies @matalaz - Pyew A Python tool to analyze malware
- synspam 0.4.0-1
- sipwitch 0.7.0

Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]

S'abonner au fil RSS global de la revue de presse



Amendment 138 - Legalese for Progress, not political weakness

Par La Quadrature du Net
Le [2009-11-04] à 13:14:58



Présentation : Tonight, a conciliation committee meeting will take place between the Council of the European Union and the European Parliament. Both institutions will try to resolve their year-long dispute over amendment 138 by considering a worthless compromise proposal. In the past days, some Members of the Parliament have been convinced to depart from the strong protection for the freedom of expression and communication granted by amendment 138. They bought the arguments put forward by the Council, as well as the Parliament's own legal services who conducted a biased analysis at the request of rapporteurs Catherine Trautmann and Alejo Vidal-Quadras. According to amendment 138 opponents, the European treaties do not allow the Parliament to require that Member States adapt their judicial system to better protect European citizens. However, case law seems to indicate that this is just an abusive argument aimed at concealing their political timidity. Amendment 138, provides that no restriction may be imposed on the fundamental rights and freedoms of end-users, without a prior ruling by the judicial authorities . Can the Community deal with judicial matters --------------------------------------------- In general, the European Community and therefore the Parliament - has no power regarding judicial affairs. By virtue of the Maastricht treaty, judicial affairs remain the direct competence of Member States, which may be required to consult the Parliament before agreeing on harmonizing measures regarding judicial cooperation and criminal matters. In the case of amendement 138, the Parliament's status of co-legislator on the Telecoms Package is based on article 95 EC that provides that measures related to the internal market should be subjected to the codecision procedure. However, the European Court of Justice have given the Community indirect competence in certain fields that are no part of its normal field of competence. Let's consider two examples In 2005, the ECJ had to decide whether the Community was competent to prescribe criminal penalties in order to enforce environmental norms adopted under article 175 EC. The Court ruled that the Community was competent in criminal matter when the application of effective, proportionate and dissuasive criminal penalties by the competent national authorities is an essential measure for combating serious environmental offences, from taking measures which relate to the criminal law of the Member States which it considers necessary in order to ensure that the rules which it lays down on environmental protection are fully effective. 1 Another case is even more closely related to amendment 138. In 2006, Germany challenged the directive on tobacco advertising before the ECJ. The German government argued that under article 95 EC, which was the legal basis for this directive as well, the Community was not competent to impose a ban on tobacco advertising to all Member States since such provision had been adopted to protect public health, which is not a direct competence of the Community. But the Court found that the contested articles of the directive do in fact have as their object the improvement of the conditions for the functioning of the internal market , and thus fell under article 95 EC. For the judges, the selection of that legal basis cannot be called into question by the fact that public health protection may have prompted the choices made by the Community legislature when adopting the directive 2. From these two examples, the assertion that under current Treaties the Parliament has no competence regarding the judicial order in Member States is at best abusive. In the view of such case law, the question that remains to determine the lawfulness of amendement 138 is whether it contributes to the well-functioning of the Internal market. Amendment 138 directly relates to the regulation of telecommunications by ensuring that users will not suffer from restrictions to their Internet access. It is located in Article 8.4 of the Framework directive that lists the different principles that national regulatory authorities should follow in order to promote the interests of EU citizens. Amendment 138 thereby protects consumers against commercial malpractices or abusive administrative sanctions. Its aim is simply to avoid discretionary restrictions of end-users' Internet access that could be unilaterally decided by telecoms operators or administrative authorities, in violation of general principles of Community law such as that of proportionality. It also provides a level playing field for Telecom operators who, in the absence of a strong protection of their consumers, would face different legal contexts depending on the country in which they operate. With such a disparity, some of them would be unfairly put at disadvantage as a result of the costs associated with repressive schemes like three-strikes policies. Another, more political argument is that when the Lisbon treaty enters into effect, the Parliament will be granted much more powers regarding civil rights and freedoms within the European Union. Indeed, as a consequence of article 81 and 82 of the TFEU3 as resulting from the modifying treaty, the Parliament will soon be on an equal footing with the Council with regard to judiciary affairs. Therefore, even if it there were doubts about the Parliament's competence to pass amendment 138, this will not be true much longer and it would be futile for the Council to undermine the Parliament's power for such a reason. There is no reason for the Council to cling to a competence that will soon be shared between both institutions. Can the Community require a prior ruling ----------------------------------------- It is true that the principle of a prior ruling by a judicial authority is not found in European treaties. However, General principles community law are comprised of the European Treaties, but also of the ECHR as well as the constitutional traditions common to the member States. The rights to a fair trial and a timely judicial review, protected by, respectively, article 6 ECHR and article 13 ECHR have long been recognized by the European Court of Justice4. But what is at stake with amendment 138 are not these procedural safeguards per se, but the idea that only a prior decision by a competent tribunal can ensure that restrictions to the fundamental freedom of expression protected by article 10 ECHR and now enabled by the free access to the Internet will be proportionate. In other words, what should be considered in this debate about the lawfulness of amendement 138 is not the traditional procedural safeguards i.e the rights to a fair trial and a timely judicial review , but whether general principles of Community law can justify that a prior judicial decision be required by the Community. Interestingly, the European Court of Human Rights have asserted that a prior judicial decision was needed to ensure the proportionality of administrative measures infringing on people's right to privacy, protected by article 8 ECHR. The European Court has condemned police forces' search powers where these could be exercised without the need for a judicial warrant and were seen as subject to restrictions appearing too lax and full of loopholes . The Court held that the police could decide upon the expediency, number, length and scale of searches and seizures and the interference with the applicant s right to respect for his private life could not be regarded as strictly proportionate to the legitimate aim of tackling tax evasion 5. In a 2002 ruling, the European Court of Justice has rendered a similar decision6. In the face of such case law, the idea that a prior decision by judicial authorities is nowhere to be found in European law is extremely dubious. If a prior decision is needed in the case of significant infringements on privacy, why should it go differently with the freedom of expression and communication Any restriction of end-users' Internet access is a deprivation of liberty. Even when they are not criminal sentences instituted by law, such restrictions undermine people's freedom of expression and communication7. These restrictions represent very severe measures, which should carry the most important safeguards, except in case of compelling public interest motives. In order to respect general principles of Community law, any such restrictions should be proportionate to the aim they pursue. A prior judgement is thus necessary to ensure that the restrictions are proportionate and legitimate, which is extremely complex to establish in the case of online activities. It follows that opponents to amendment 138 make a questionable interpretation of Community law. Such legal arguments seeks to hide the real motives on the part of big Member States, which would to be able to police the Net without interference of the judicial authorities. In fact, their opposition makes clear that the protections laid down by amendment 138 are highly necessary for the rule of Law to survive in the digital age. 1. 1. ECJ, Case C-176 03, Commission Vs. Council 13 September 2005 2. 2. ECJ, Case C-380 03, Germany Vs. Parliament and Council 12 December 2006 3. 3. Treaty on the functionning of the European Union http eur-lex.europa.eu LexUriServ LexUriServ.do uri OJ C 2008 115 0001 01 EN HTML 4. 4. See, for instance, ECJ, Case 222 84 M. Johnston Vs. Chief Constable of the Royal Ulster Constabulary 15 May 1986 5. 5. ECHR, n. 37971 97 Stés Colas Est and others Vs. France 16 july 2002 6. 6. ECJ, Case C-94 00 Roquette Frères Vs. Directeur Général de la DGCCRF 22 October 2002 7. 7. The right to protection of their privacy in the digital environment is also at stake here, especially because of the collateral damages that are inherent to any technical means that allow such restrictions, in a more or lesser extent




AddThis Social Bookmark Widget



Les derniers articles du site "La Quadrature du Net" :

- Ask what the next European Commission will do for our Freedoms
- ACTA, U.S Democracy and the Global Knowledge Economy
- Paquet télécom  une occasion manquée pour les droits des citoyens
- Setting the record straight on Net neutrality and infrastructure investment
- Telecoms Package A Missed Opportunity for Citizen's Rights
- La Neutralité du Net et l'investissement dans les réseaux
- Nouvelle entorse à la neutralité du Net en Europe Il est temps de légiférer
- One more breach to Net neutrality in Europe Time to legislate
- La Commission européenne fait état d'une vision dogmatique du copyright
- Dogmatic IPR enforcement fails to address the challenges of the Internet-based creative economy




S'abonner au fil RSS global de la revue de presse

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]



Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail





Les derniers commentaires publiés sur SecuObs (6-25):
- Airdrop-ng Release
- GuruPlug, the next generation of SheevaPlug
- Anomos 0.9 Released Public Tracker Up and Running
- ESRT @IBMFedCyber - DECT crypto cracked academically
- Responder Professional 2.0, a Windows physical memory and automated malware a
- ESRT @Marsmensch @hdmoore - Metasploit supports owning insecure IIS WebDAV
- Added a small hack to ronin-ext, Ronin::Autoload: autoloads missing constants
- ESRT @proactivedefend - Iptables Limits Connections Per IP
- ESRT @EdiStrosar @spendergrsec - Linux 2618+ infoleak exploit added to Enligh
- ESRT @SecMailLists - Full Disclosure: XSS vulnerability in NEW orkut
- ESRT @helpnetsecurity @lbhuston - Zero-day vulnerabilities on the market
- ESRT @agar38 @achillean @theprez98 - SHODAN for Penetration Testers slides fr
- Video : ESRT @secdocs - Using OpenBSC for fuzzing of GSM handsets
- ESRT @helpnetsecurity - Configure Netfilter Shorewall 4.4.7 RC2 released
- PS3 hypervisor exploit reproduced
- Mozilla Removes Two Malicious Firefox Add-Ons
- Wrapping insecure web apps with Apache
- Oracle Patches Critical WebLogic Flaw
- Directory traversal as a reconnaissance tool
- Video : Scanning with the NetChk Configure NIST Policy


SecuToolBox :

Mini-Tagwall des articles publiés sur SecuObs :

Archives Failles Secunia :
- SA38414 Fedora update for gmime22
- SA38429 Debian update for squid and squid3
- SA38461 Ubuntu update for kernel
- SA38476 F5 Products TCP Implementation Denial of Service
- SA38377 Fedora update for dokuwiki

Archives Mailing Full Disclosure :
- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e).
- Re: Full-disclosure about jit and dep+aslr
- Re: Full-disclosure about jit and dep+aslr
- Re: Full-disclosure about jit and dep+aslr
- Re: Full-disclosure about jit and dep+aslr

Archives Mailing Bugtraq :
- CORELAN-10-010 - GeFest Web HomeServer v1.0 Remote Directory Traversal Vulnerability
- DSECRG-09-065 TVUPlayer PlayerOcx.ocx ActiveX - Insecure method
- mongoose Space Character Remote File Disclosure Vulnerability
- Suspected SpamVulnerability in Tagcloud for DataLife Engine
- Re: Multiple vulnerabilities in XAMPP (advisory #7)
- Re: Samba Remote Zero-Day Exploit

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :

Mini-Tagwall des Tweets de la revue Twitter :