Wednesday, July 6, 2016

On Sunday French capital football club Paris Saint Germain announced they signed two players — Polish defensive midfielder Grzegorz Krychowiak from Spanish club Sevilla FC on a five-year term and Belgian defender Thomas Meunier from Club Brugge KV on a four year deal, under the management of Unai Emery.

Defensive midfielder Kychowiak spent two seasons with Sevilla with Unai Emery playing 90 matches and won two back-to-back UEFA Europa League titles. He has played 38 international matches and played in the UEFA Euro 2016 quarter-finals where his team lost to Portugal on penalties.

After signing the contract agreement, Krychowiak said, “I am very proud to return to France and defend the colours of a club as ambitious as Paris Saint-Germain[…] The opportunity to continue working with Unai Emery was obviously a major factor in my decision.” ^{((fr))French language: ?C’est un sentiment de grande fierté qui m’anime à l’heure de revenir en France pour y porter le maillot d’un club aussi ambitieux que le Paris Saint-Germain[…] Continuer de travailler avec Unai Emery a évidemment compté dans mon choix.} Kychowiak played for Stade de Reims before joining Sevilla.

24-year-old defender Thomas Meunier played five years at Club Brugge and won the Belgian Pro League this season and Belgian Cup in 2015. Meunier was trained as a forward. Making his international debut in 2013, Meunier played with the national team in UEFA Euro 2016.

Meunier said, “I feel I am ready for the next step after five beautiful years in Brugge. PSG is a team that is well-know all over the world and I am proud to be transferred to such a big team. I want to thank everyone in Brugge for my beautiful time here: the fans, the players, the staff and the board” ^{((fr))French language: ?Après cinq belles années passées à Bruges, je me sens prêt pour franchir une étape. Le PSG est une équipe qui possède une réputation mondiale et je suis fier de pouvoir m’inscrire dans la lignée des joueurs du Club qui font le pas vers de grandes formations. Je veux remercier tout le monde à Bruges, des supporters aux joueurs, le staf, la direction, pour ces bons moments vécus à Bruges !}.

PSG previously signed French midfielder Hatem Ben Arfa.

Thursday, March 2, 2006

Last week, the Motion Picture Association of America (MPAA) announced it had launched seven lawsuits against operators of websites it claims had been “facilitating the distribution of copyright works”.

In its announcement, the MPAA said it had commenced legal action against the following BitTorrent tracking sites: isohunt.com, bthub.com, and torrentbox.com, which are all owned by the same person; torrentspy.com; niteshadow.com as well as ed2k site ed2k-it.com and Usenet search engines nzb-zone.com, binnews.com, and dvdrs.net.

Despite the announcement on its website and in the media, the MPAA has failed to notify the administrators of the sites involved directly. Joe from Binnews told Wikinews he only found out about the MPAA’s actions after reading it on several news sites. He said, “At first, I double read the article making sure we were not being punk’d. But then I was shocked that we had to read about it publicly first. As of today (February 25), we have yet to get anything (from the MPAA)”.

“Descds”, an administrator of dvdrs.net told Wikinews that the first he knew of the action being taken against the site was when he was approached by the press and users of his site. He said, “We haven’t been informed by the MPAA and quite frankly are outraged by the method they have adopted to file these lawsuits. In actual fact we would still be none the wiser had our members and members of the press not have contacted us.”

“When we found out about the filed lawsuit we was first worried (after all we are only a small site with limited funds), then shocked and finally outraged. Had the MPAA contacted us anytime in the sites history regards their concerns we would have happily worked with them to gain a resolve,” he said.

Descds also said that despite attempts to contact the MPAA he has received no response.

When asked by Wikinews how they felt about discovering the MPAA’s lawsuits both administrators said they would have appreciated being notified before the announcement was made public.

Binnews told Wikinews, “We do feel they should have notified first. We do not even have a confirmation this is for real.”

Dvdrs said, “We have stated many times had the MPAA personally contacted us we would have happily listened to their issues and acted accordingly. We are doing nothing wrong legally on our site and to be made look like an established piracy ring is an outrage. We have worked extremely hard on site to keep within international laws and they have publicly destroyed everything we have worked towards in the last two years. We are receiving negative PR and this is totally unacceptable.”

Wikinews has discovered that both Binnews and dvdrs.net have procedures in place for dealing with alleged copyright infringement under the US Digital Millennium Copyright Act. Despite this, both sites deny ever being contacted by any organisation with a “takedown” notice.

When asked if Binnews ever received a takedown notice, Binnews replied, “Nope, we have never received a notice from anyone. My cell phone is tied to the site, we have proper DMCA guidelines on the site and no one has contacted us.”

When asked the same question, Dvdrs said, “No never. We would actively respond to any DMCA request quickly and efficiently. We fully support the law and would never try to evade anything within its scope. Had a DMCA been issued by any member, our site would have immediately deleted the offensive file.”

When asked how they would deal with a DMCA takedown notice, Binnews said, “We would act quite quickly. An email sent to the alert system is tied into all of “staff” members, my cell phone and my email.”

According to Dvdrs, they would be equally as compliant. “We would immediately delete the offending file on our server and conduct a thorough research into any files that may also be connected to the one mentioned. We would also respond to the request personally with a follow up email expressing our actions,” they said.

Wikinews asked the administrators if they thought their sites were any different to conventional search engines like Google and Yahoo. Binnews replied, “No, you can go to any search engine and find just about anything.”

Dvdrs also shares Binnews’ position telling Wikinews, “No. We index what is already readily available on commercial, tax paying, US based registered companies hard drives. All we are doing is pointing to files not on our network, much the same way google or any search bot operates. We do not host these files and without the premium paid service of third parties our marked up text based XML files are useless. We have never hosted illegal files and only offer information.”

Dvdrs has expressed that if the MPAA deems them illegal they should also target those who are actually hosting the files. Descds said, “We feel that should the MPAA deem us illegal then they must also target premium paid Usenet Providers who act as the transit for these files. Ironically both Easynews and Usenetserver offer both indexing and carrier for these files and yet have received no such lawsuits filed.”

“We also find it ironic still that Newzbin, creators, instigators and promoters of the NZB format and un-arguably the biggest Usenet Indexing site in the world have received no lawsuits filed. We feel that we are being rail roaded and are not at all happy about it.”

On the other hand, Binnews was surprised that the MPAA did not target ISPs and Usenet providers in the first instance. “Cut the head off and there is nothing for us to index and report on. If the ISPs acted in a proper manner and did what they are more than capable of, we would not be assisting people in combating piracy on their networks,” they said.

Despite being outraged with the MPAA and its actions, Descds said that despite being outside of US juristiction he is happy to assist the MPAA in anyway necessary. “We would like it known for the record that we are actively trying to reach a resolve regards this action by the MPAA. We have contacted them and said openly many times we would welcome their input and act accordingly. Should they feel that NZBS are illegal we will remove those sections immediately and await a legal judgement on their legality. DVDRS is not a pirate network and to call us such has insulted our member base.”

“I would also like it noted that although we host in the US i am actually a UK citizen who currently does not have to adhere to their communications and judgements. However, such is our resolve that I would happily comply should communication between us take place. We can offer little more to help this but hope that the MPAA retract their statement that we are an organised pirate network and restore our good name. Should the MPAA decide to not communicate with us and continue their legal actions we will instruct our attorneys and contact legal bodies like the EFF for help on this matter,” he added.

Binnews also had this to say of the MPAA’s lawsuit: “Binnews does not host any files, the claim that we read “BinNews.com offers files for over 3,000 movies” is 100% completely false. We do not host any files, never have and never will. We provide a legitimate service to copyright holders. No where on our site does it say, “join us, we can give you free movies.” We do not even have pre-made nzb files.”

A compilation of brief news reports for Monday, May 7, 2007.

A 30 meter section of a gas pipeline in Luka (near Kiev) in Ukraine has been destroyed by an explosion. Although supplies to Europe via this pipeline have stopped, Ukrainian Energy Minister Georgi E. Boyko said that supplies to Europe would not be affected.

“There are no changes in volumes of gas being transported,” Yuri Korolchuk said. “Volumes due to pass through the damaged section are being redirected through the Soyuz pipeline.”

Normal flows are reported in the Czech Republic, Hungary, Poland and Romania.

Sources

• “Blast damages pipeline in Ukraine” — Russia Today, May 8, 2007
• Natalya Zinets, Reuters. “Blast hits Ukraine gas pipeline” — The Scotsman, May 7, 2007

Copper prices are rising. Between record copper imports from China, and a mining strike in Peru, the prices have climbed to over $8100 (United States dollars) a tonne, for a gain of $575 dollars over the last week. However the upward trend is not new, it has been climbing for quite some time. In April 2003, the price of copper was under $2000 a tonne.

The metal market has been tending up due to growth in the Chinese industrial production. This trickles down to the local level, where the buying price at scrap yards is ever climbing, making scrap metal collection a more profitable endeavour for individual people using pick up trucks or other such vehicles to collect and cash in the scrap metal at metal buying yards. It can be collected via agreements with businesses, from the garbage, or, sometimes, by theft.

Copper prices fell today on the NYMEX commodity exchange from US$3.7545 per pound to US$3.7125 based on the July futures contract.

Sources

• “Copper up but crude oil down” — Financial Express, May 6, 2007
• Millie Munshi. “Metals Bubble Poised to Burst on Increasing Supplies” — Bloomberg L.P., May 7, 2007
• “Commodity Futures” — Bloomberg L.P., accessed May 7, 2007

One man was killed and another injured by an exploding backpack in the parking lot of the Luxor Hotel in Las Vegas, Nevada. The explosion happened at 4 a.m. PDT when the victim tried to remove a the object left on top of his car.

Agents from the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) are on the scene. Aerial images did not show any apparent damage.

“We believe the victim was the intended target of this,” Bill Cassell said, spokesperson for the Las Vegas Metropolitan Police Department. “This is being treated as a homicide in which the weapon used to cause death is a non-traditional weapon.”

Both of the victims worked at the Luxor.

Sources

• Associated Press. “1 dead, 1 hurt in Las Vegas parking lot blast” — MSNBC, May 7, 2007
• “Explosion kills man in Vegas outside Luxor hotel” — Reuters, May 7, 2007

Monday, January 8, 2007

Major city roads across North America are suffering from an early surge in potholes due to the dramatic freezes and thaws this month, some several feet across and inches deep. The potholes are caused by water seeping into cracks during warm weather, and pushing concrete apart when it freezes. Traffic erodes chunks of concrete from the cracks to form holes that continuously grow larger.

While car repair shops are experiencing a boom in business, city budgets are being hit with the costs of patching potholes. Thierry Larivée, an infrastructure spokesman in Montréal, Canada, says about 20 pothole patrols are working throughout the city. They are expected to continue work until at least Friday.

Craig Bryson, spokesman for the Road Commission for Oakland County in Michigan, United States, reports problems on unpaved roads as well. “The warmer weather is also playing havoc with gravel roads; the top layer of dirt thaws, but remains frozen about 10 inches below the surface. Surface water has no place to go. This creates a rutted, soupy road, especially in low-lying areas.”

Environment Canada meteorologist René Héroux attributes the unseasonable thaw to warm winds from the southwest. Environment Canada predicts a new cold front on Thursday.

A compilation of brief news reports for Thursday, December 4, 2008.

File:Imsdal 33cl.JPG

On December 2, the Toronto city council voted in favor of banning the sales and distribution of bottled water on city property. The council also agreed to provide public drinking fountains on their properties, as well as on a measure that would make shoppers pay at least five Canadian cents for plastic grocery bags and force business owners to offer reusable bags and carry-out containers.

“Toronto’s decision to ban the bottle and turn on the tap sends a clear message that bottled water’s 15 minutes are up,” said Polaris Institute’s campaign coordinator, Joe Cressy.

All of the city’s facilities should be following the water ban by 2011, while businesses will have to implement their bag fees by 2010. Toronto has become the largest city in the world to ban bottled water on government property.

Related news

• “Calls for bottled water bans grow in Canada” — Wikinews, August 23, 2008

Sources

• “Toronto Bans Bottled Water” — CNW Group, December 3, 2008
• “Toronto council approves plastic bag charge, bottle ban” — CBC News, December 3, 2008

On Tuesday, American actor, Patrick Swayze, who suffers from pancreatic cancer, denied reports that he was near death. American tabloid National Inquirer reported on November 28 that Swayze’s cancer had spread to his liver and that he was preparing for his death.

“The only thorn in my side being that many tabloids have been consistently reporting lies and false information about me and those close to me,” said Swayze in a statement to the press who also added that he knows he is in “the fight for his life,” but that it is a fight that he “is winning.”

“I’m one of the lucky few that responds well to treatment,” added Swayze.

Swayze has starred in over a dozen films, including the 1987 hit film Dirty Dancing.

Related news

• “Wikinews Shorts: November 28, 2008” — Wikinews, November 28, 2008

Sources

• “Swayze denies ‘deathbed’ rumours” — BBC News Online, December 3, 2008
• “Patrick Swayze denies reports he is near death” — Reuters, December 2, 2008

Monday, October 15, 2007

Sam Brownback is perplexed. The U.S. Senator from Kansas and Presidential candidate is a Republican whose politics—he is against marriage for gay people, he is against abortion, and he has a clean image in a party tainted by scandal—should speak favorably to the party’s base. But it has not. “I’m baffled by that myself,” Senator Brownback told Wikinews reporter David Shankbone. “We haven’t been able to raise money.”

A recent poll in Iowa has put him in eighth place, with 2% supporting his campaign. “If we don’t finish fourth or better in Iowa…we’ll pull out.”

Senator Brownback’s relationship with God infuses almost every answer you find below. Although he doesn’t feel “competent” to explain why God would dislike gays, he does feel strongly that allowing two men or two women to enter into the union of marriage will destroy it for heterosexuals. Pointing to the research of Stanley Kurtz at the Hoover Institution, Brownback asserts that Northern Europeans have “taken the sacredness out of the institution.”

In the interview, Senator Brownback discusses the tug-and-pull that befalls him when his constituents show up at his office and say, “Look, I’m a conservative, but we need this bridge, we need this subsidy, we need this hospital.” Brownback feels this spending system needs to be changed; however, when it comes to energy policy, Brownback is there for his constituents. David Shankbone asked the Kansas Senator, a supporter of cellulosic ethanol, why he doesn’t support the lowering of tariffs on sugar since sugar ethanol delivers 8 times the energy output of cellulosic ethanol. Brazil, in particular, has become energy independent because of its sugar ethanol program. It’s cheaper to produce, and there is vastly more bang for the buck in sugar fuel than in corn fuel; an entire country no longer needs to import oil because of it. Federal tariffs currently make sugar ethanol too expensive in the United States. “You’re going to kill the ethanol industry here just as it gets going,” was Senator Brownback’s response. However, there is a debate over whether the process to make corn ethanol uses more energy than the ethanol itself produces.

Below is David Shankbone’s interview with Senator Sam Brownback.

Tuesday, March 30, 2021

Ivory Search, a WordPress plugin with over 60,000 active installations was found Sunday to have a security vulnerability that would allow attackers to perform damaging actions on websites that use the plugin. The vulnerability, known as reflected cross-site scripting (XSS) allows the execution of malicious JavaScript code by an unauthenticated attacker due to the lack of proper validation of user input in the plugin. Ivory Search versions 4.6 and below were found to be vulnerable to this issue by Jinson Varghese Behanan, a security researcher who immediately contacted the plugin’s development team who released a patch on March 30, 2021, fixing the bug in version 4.6.1. As of April 4, only 35% of the websites using the plugin have updated to the latest version. Considering the security risk, it is highly recommended that all the websites update to the latest version of Ivory Search.

Based on a technical analysis of the changes made by the team at WPScan, a free WordPress vulnerability management service, the Search Forms page of the plugin had not properly sanitised the “tab” parameter before printing it out in the page, leading to reflected XSS when opening a maliciously=crafted URL as a high privilege user such as a WordPress admin or editor. In order to exploit this, the knowledge of a search form ID is required. Behanan reported no active exploitation has been traced thus far.

WordPress is a popular free content management system used by over 40% of the top 10 million websites on the internet. It has been one of the primary targets for attackers who have continued to exploit vulnerabilities found in third party plugins and themes to perform malicious actions. When applications are vulnerable to XSS, an attacker gains the ability to execute malicious JavaScript code which can lead to website redirection, theft of session cookies, website defacement, etc. As a result, XSS has been listed as one of the Open Web Application Security Project’s Top 10 vulnerabilities. With JavaScript being the most commonly used client-side scripting language, website developers have used it to control how a website interacts with the users visiting it.

A vulnerability like XSS arises when a developer fails to properly validate user input fields on the website. This enables an attacker to insert malicious JavaScript code into these fields which are then executed by the browser as legitimate code and thus allows the attacker to perform damaging actions. For example, an attacker can exploit the XSS vulnerability to steal a session cookie, the unique token a website uses to recognise a logged-in user’s identity as they browse from page to page. If an attacker gains access to a user’s session cookie for a particular website, they will be able to access the logged-in session of that user without requiring to enter the username and password. Similarly, XSS can be used to insert JavaScript code that redirects the website to a malicious page or insert forms into the website with the purpose of baiting end users to enter their username and password which will then get sent to the attacker.

[edit]