Some Victims of Online Hacking Edge Into the Light


Steve Ruark for The New York Times


Alan Paller of the SANS Institute said recently hacked companies were seeking safety in numbers.







SAN FRANCISCO — Hackers have hit thousands of American corporations in the last few years, but few companies ever publicly admit it. Most treat online attacks as a dirty secret best kept from customers, shareholders and competitors, lest the disclosure sink their stock price and tarnish them as hapless.




Rarely have companies broken that silence, usually when the attack is reported by someone else. But in the last few weeks more companies have stepped forward. Twitter, Facebook and Apple have all announced that they were attacked by sophisticated cybercriminals. The New York Times revealed its experience with hackers in a front-page article last month.


The admissions reflect the new way some companies are calculating the risks and benefits of going public. While companies once feared shareholder lawsuits and the ire of the Chinese government, some can’t help noticing that those that make the disclosures are lauded, as Google was, for their bravery. Some fear the embarrassment of being unable to fend off hackers who may still be in high school.


But as hacking revelations become more common, the threat of looking foolish fades and more companies are seizing the opportunity to take the leap in a crowd.


“There is a ‘hide in the noise’ effect right now,” said Alan Paller, director of research at the SANS Institute, a nonprofit security research and education organization. “This is a particularly good time to get out the fact that you got hacked, because if you are one of many, it discounts the starkness of the announcement.”


In 2010, when Google alerted some users of Gmail — political activists, mostly — that it appeared Chinese hackers were trying to read their mail, such disclosures were a rarity. In its announcement, Google said that it was one of many — two dozen — companies that had been targeted by the same group. Google said it was making the announcement, in part, to encourage other companies to open up about the problem.


But of that group, only Intel and Adobe Systems reluctantly stepped forward, and neither provided much detail.


Twitter admitted that it had been hacked this month. Facebook and Apple followed suit two weeks later. Within hours after The Times published its account, The Wall Street Journal chimed in with a report that it, too, had been attacked by what it believed to be Chinese hackers. The Washington Post followed.


Not everyone took advantage of the cover. Bloomberg, for example, has repeatedly denied that its systems were also breached by Chinese hackers, despite several sources that confirmed that its computers were infected with malware.


Computer security experts estimate that more than a thousand companies have been attacked recently. In 2011, security researchers at McAfee unearthed a vast online espionage campaign, called Operation Shady Rat, that found more than 70 organizations had been hit over a five-year period, many in the United States.


“I am convinced that every company in every conceivable industry with significant size and valuable intellectual property and trade secrets has been compromised (or will be shortly) with the great majority of the victims rarely discovering the intrusion or its impact,” Dmitri Alperovitch, then McAfee’s vice president for threat research, wrote in his findings.


“In fact,” said Mr. Alperovitch, now the chief technology officer at Crowdstrike, a security start-up, “I divide the entire set of Fortune Global 2000 firms into two categories: those that know they’ve been compromised and those that don’t yet know.”


Of that group, there are still few admissions. A majority of companies that have at one time or another been the subject of news reports of online attacks refuse to confirm them. The list includes the International Olympic Committee, Exxon Mobil, Baker Hughes, Royal Dutch Shell, BP, ConocoPhillips, Chesapeake Energy, the British energy giant BG Group, the steel maker ArcelorMittal and Coca-Cola.


David E. Sanger contributed reporting from Washington.



Read More..

DealBook: Court Gives Investor an Edge in a Lawsuit Against Apple

7:47 p.m. | Updated

In the battle between Apple and the hedge fund manager David Einhorn, score a point for the billionaire who is taking up the mantle of shareholder advocate.

A federal judge said on Tuesday that he was leaning toward Mr. Einhorn’s contention that Apple had violated securities regulations by bundling several shareholder proposals into one matter.

A lawsuit by Mr. Einhorn’s Greenlight Capital, filed this month in Federal District Court in Manhattan, argues that Apple improperly grouped a vote to eliminate the company’s ability to issue preferred stock at will with other initiatives that Mr. Einhorn supports.

While the judge overseeing the case, Richard J. Sullivan, did not immediately grant Mr. Einhorn’s request for a halt to the vote, he said that the facts of the case favored the investor’s interpretation.

“I think success on the merits lies with Greenlight,” Judge Sullivan said at the end of a nearly two-hour hearing. Earlier in the hearing, he implied that he believed Securities and Exchange Commission rules prohibited the bundling of disparate shareholder initiatives.

Spokesmen for Greenlight and Apple declined to comment after the hearing.

Though a small point in the skirmish between Apple and Mr. Einhorn, the judge’s comments may provide some ballast to the hedge fund manager’s call to other investors. Mr. Einhorn’s bigger goal is to persuade Apple to return some of its $137 billion cash trove to shareholders.

He has asked Apple to issue preferred shares, which would pay out billions of dollars in dividends over time. His lawsuit revolves around the technology giant’s proposal to eliminate “blank check” preferred shares that the company can issue without a shareholder vote. He argues that the company improperly bundled the plan with two other corporate governance changes that he supports.

Apple has said that it will consider Mr. Einhorn’s request, but that it has no plans to amend the shareholder proposal.

Judge Sullivan is expected to decide within days whether to grant a preliminary injunction, given the Feb. 27 cutoff for voting on Apple’s shareholder proposals.

A lawyer for Mr. Einhorn, Mitchell P. Hurley of the firm Akin Gump, argued during Tuesday’s hearing that his client would suffer “irreparable harm” if the vote were allowed to proceed, because he would be forced to vote against two matters he would ordinarily support.

During questioning, however, Judge Sullivan expressed skepticism about the need to take immediate action.

A lawyer for Apple, George Riley of O’Melveny & Myers, said in court that if shareholders approved the disputed initiative, the company would wait for the judge to rule before adopting the new measures in its corporate charter.

Judge Sullivan also questioned why Mr. Einhorn had waited so long to act. He filed suit on Feb. 6, over a month after Apple first disclosed its shareholder proxy.

Read More..

The New Old Age Blog: The Reluctant Caregiver

Now and then, I refer to the people that caregivers tend to as “loved ones.” And whenever I do, a woman in Southern California tells me, I set her teeth on edge.

She visits her mother-in-law, runs errands, helps with the paperwork — all tasks she has shouldered with a grim sense of duty.  She doesn’t have much affection for this increasingly frail 90something or enjoy her company; her efforts bring no emotional reward. Her husband, an only child, feels nearly as detached. His mother wasn’t abusive, a completely different scenario, but they were never very close.

Ms. A., as I’ll call her because her mother-in-law reads The Times on her computer, feels miserable about this. “She says she appreciates us, she’s counting on us. She thanks us,” Ms. A. said of her non-loved one. “It makes me feel worse, because I feel guilty.”

She has performed many services for her mother-in-law, who lives in a retirement community, “but I really didn’t want to. I know how grudging it was.”

Call her the Reluctant Caregiver. She and her husband didn’t invite his parents to follow them to the small city where they settled to take jobs. The elders did anyway, and as long as they stayed healthy and active, both couples maintained their own lives. Now that her mother-in-law is widowed and needy, Ms. A feels trapped.

Ashamed, too. She knows lots of adult children work much harder at caregiving yet see it as a privilege. For her, it is mere drudgery. “I don’t feel there’s anybody I can say that to,” she told me — except a friend in Phoenix and, anonymously, to us.

The friend, therapist Randy Weiss, has served as both a reluctant caregiver to her mother, who died very recently at 86, and a willing caregiver to her childless aunt, living in an assisted living dementia unit at 82. Spending time with each of them made Ms. Weiss conscious of the distinction.

Her visits involved many of the same activities, “but it feels very different,” she said. “I feel the appreciation from my aunt, even if she’s much less able to verbalize it.” A cherished confidante since adolescence, her aunt breaks into smiles when Ms. Weiss arrives and exclaims over every small gift, even a doughnut. She worked in the music industry for decades and, despite her memory loss, happily sings along with the jazz CDs Ms. Weiss brings.

Because she had no such connection with her mother, whom Ms. Weiss described as distant and critical, “it’s harder to do what I have to do,” she said. (We spoke before her mother’s death.) “One is an obligation I fulfill out of duty. One is done with love.”

Unlike her friend Ms. A, “I don’t feel guilty that I don’t feel warmly towards my mother,” Ms. Weiss said. “I’ve made my peace.”

Let’s acknowledge that at times almost every caregiver knows exhaustion, anger and resentment.  But to me, reluctant caregivers probably deserve more credit than most. They are not getting any of the good stuff back, no warmth or laughter, little tenderness, sometimes not even gratitude.

Yet they are doing this tough work anyway, usually because no one else can or will. Maybe an early death or a divorce means that the person who would ordinarily have provided care can’t. Or maybe the reluctant caregiver is simply the one who can’t walk away.

“It’s important to acknowledge that every relationship doesn’t come from ‘The Cosby Show,’” said Barbara Moscowitz when I called to ask her about reluctance. Ms. Moscowitz, a senior geriatric social worker at Massachusetts General Hospital, has heard many such tales from caregivers in her clinical practice and support groups.

“We need to allow people to be reluctant,” she said. “It means they’re dutiful; they’re responsible. Those are admirable qualities.”

Yet, she recognizes, “they feel oppressed by the platitudes. ‘Your mother is so lucky to have you!’” Such praise just makes people like Ms. A. squirm.

Ms. Moscowitz also worries about reluctant caregivers, and urges them to find support groups where they can say the supposedly unsay-able, and to sign up early for community services — hotlines, senior centers, day programs, meals on wheels — that can help lighten the load.

“Caregiving only goes one way – it gets harder, more complex,” she said. “Support groups and community resources are like having a first aid kit. It’s going to feel like even more of a burden, and you need to be armed.”

I wonder, too, if reluctant caregivers have a romanticized view of what the task is like for everyone else. Elder care can be a wonderful experience, satisfying and meaningful, but guilt and resentment are also standard parts of the job description, at least occasionally.

For a reluctant caregiver, “the satisfaction is, you haven’t turned your back,” Ms. Moscowitz said. “You can take pride in that.”


Paula Span is the author of “When the Time Comes: Families With Aging Parents Share Their Struggles and Solutions.”

Read More..

The New Old Age Blog: The Reluctant Caregiver

Now and then, I refer to the people that caregivers tend to as “loved ones.” And whenever I do, a woman in Southern California tells me, I set her teeth on edge.

She visits her mother-in-law, runs errands, helps with the paperwork — all tasks she has shouldered with a grim sense of duty.  She doesn’t have much affection for this increasingly frail 90something or enjoy her company; her efforts bring no emotional reward. Her husband, an only child, feels nearly as detached. His mother wasn’t abusive, a completely different scenario, but they were never very close.

Ms. A., as I’ll call her because her mother-in-law reads The Times on her computer, feels miserable about this. “She says she appreciates us, she’s counting on us. She thanks us,” Ms. A. said of her non-loved one. “It makes me feel worse, because I feel guilty.”

She has performed many services for her mother-in-law, who lives in a retirement community, “but I really didn’t want to. I know how grudging it was.”

Call her the Reluctant Caregiver. She and her husband didn’t invite his parents to follow them to the small city where they settled to take jobs. The elders did anyway, and as long as they stayed healthy and active, both couples maintained their own lives. Now that her mother-in-law is widowed and needy, Ms. A feels trapped.

Ashamed, too. She knows lots of adult children work much harder at caregiving yet see it as a privilege. For her, it is mere drudgery. “I don’t feel there’s anybody I can say that to,” she told me — except a friend in Phoenix and, anonymously, to us.

The friend, therapist Randy Weiss, has served as both a reluctant caregiver to her mother, who died very recently at 86, and a willing caregiver to her childless aunt, living in an assisted living dementia unit at 82. Spending time with each of them made Ms. Weiss conscious of the distinction.

Her visits involved many of the same activities, “but it feels very different,” she said. “I feel the appreciation from my aunt, even if she’s much less able to verbalize it.” A cherished confidante since adolescence, her aunt breaks into smiles when Ms. Weiss arrives and exclaims over every small gift, even a doughnut. She worked in the music industry for decades and, despite her memory loss, happily sings along with the jazz CDs Ms. Weiss brings.

Because she had no such connection with her mother, whom Ms. Weiss described as distant and critical, “it’s harder to do what I have to do,” she said. (We spoke before her mother’s death.) “One is an obligation I fulfill out of duty. One is done with love.”

Unlike her friend Ms. A, “I don’t feel guilty that I don’t feel warmly towards my mother,” Ms. Weiss said. “I’ve made my peace.”

Let’s acknowledge that at times almost every caregiver knows exhaustion, anger and resentment.  But to me, reluctant caregivers probably deserve more credit than most. They are not getting any of the good stuff back, no warmth or laughter, little tenderness, sometimes not even gratitude.

Yet they are doing this tough work anyway, usually because no one else can or will. Maybe an early death or a divorce means that the person who would ordinarily have provided care can’t. Or maybe the reluctant caregiver is simply the one who can’t walk away.

“It’s important to acknowledge that every relationship doesn’t come from ‘The Cosby Show,’” said Barbara Moscowitz when I called to ask her about reluctance. Ms. Moscowitz, a senior geriatric social worker at Massachusetts General Hospital, has heard many such tales from caregivers in her clinical practice and support groups.

“We need to allow people to be reluctant,” she said. “It means they’re dutiful; they’re responsible. Those are admirable qualities.”

Yet, she recognizes, “they feel oppressed by the platitudes. ‘Your mother is so lucky to have you!’” Such praise just makes people like Ms. A. squirm.

Ms. Moscowitz also worries about reluctant caregivers, and urges them to find support groups where they can say the supposedly unsay-able, and to sign up early for community services — hotlines, senior centers, day programs, meals on wheels — that can help lighten the load.

“Caregiving only goes one way – it gets harder, more complex,” she said. “Support groups and community resources are like having a first aid kit. It’s going to feel like even more of a burden, and you need to be armed.”

I wonder, too, if reluctant caregivers have a romanticized view of what the task is like for everyone else. Elder care can be a wonderful experience, satisfying and meaningful, but guilt and resentment are also standard parts of the job description, at least occasionally.

For a reluctant caregiver, “the satisfaction is, you haven’t turned your back,” Ms. Moscowitz said. “You can take pride in that.”


Paula Span is the author of “When the Time Comes: Families With Aging Parents Share Their Struggles and Solutions.”

Read More..

Gadgetwise Blog: Q&A: Locking Caps on an iPhone

While I have no desire to SHOUT MY WAY through text messages, I do have to use ALL UPPERCASE sometimes and would like to have CAPS LOCK available on my iPhone. Do I have ANY HOPE?

While the phone’s software keyboard has no dedicated Caps Lock key, quickly tapping the Shift key twice turns on the Caps Lock function. The Shift key turns blue when in Caps Lock mode. To turn off the Caps Lock mode, tap the Shift key again.

The iPhone keyboard has a few other shortcuts to make typing in such a small area more efficient. For example, instead of tapping the .?123 key in the bottom-left corner to switch over to the section of the keyboard that holds the numbers and punctuation keys (and then having to tap the corner key again to switch back to the ABC keyboard), just press the .?123 key down and slide your finger to the number or punctuation mark you need. Once you slide over and select the character, you can resume typing without having to tap back and forth between the different keyboards.

Pressing and holding keys for vowels (and other letters) that use accent marks reveals a pop-up list of accented characters to choose from, like é or ü. When you tap the space bar twice at the end of a sentence, the iPhone inserts a period and capitalizes the next letter you type to begin a new sentence. Apple’s site has an illustrated page of other tips and tricks for the iPhone 5.

Read More..

IHT Rendezvous: China's Cyberwarriors

Rendezvous’s editor, Marcus Mabry, interviews David E. Sanger, chief Washington correspondent, on the efforts of Chinese hackers to infiltrate critical American infrastructure, from electrical grids to oil and gas pipelines. Is there a cyber cold war underway?
Read More..

DealBook: Prosecutors, Shifting Strategy, Build New Wall Street Cases

Criticized for letting Wall Street off the hook after the financial crisis, the Justice Department is building a new model for prosecuting big banks.

In a recent round of actions that shook the financial industry, the government pushed for guilty pleas, rather than just the usual fines and reforms. Prosecutors now aim to apply the approach broadly to financial fraud cases, according to officials involved in the investigations.

Lawyers for several big banks, who spoke on the condition of anonymity, said they were already adjusting their defenses and urging banks to fire employees suspected of wrongdoing in the hope of appeasing authorities.

But critics question whether the new strategy amounts to a symbolic reprimand rather than a sweeping rebuke. So far, the Justice Department has extracted guilty pleas only from remote subsidiaries of big foreign banks, a move that has inflicted reputational damage but little else.

The new strategy first materialized in recent settlements with UBS and the Royal Bank of Scotland, which were accused of manipulating interest rates to bolster profit. As part of a broader deal, the banks’ Japanese subsidiaries pleaded guilty to felony wire fraud.

The settlements present a significant shift. Authorities have long avoided guilty pleas over fears they will destroy the banks and imperil the broader economy. By going after a subsidiary, prosecutors shield the parent company from losing its license, but still send a warning to the financial industry.

The Justice Department plans to continue the campaign as it pursues guilty pleas from other bank subsidiaries suspected of reporting false interest rates, according to the prosecutors and the lawyers who requested anonymity to discuss the cases. Authorities are scrutinizing Citigroup, whose Japanese unit is suspected of rate manipulation, and prosecutors recently accused one former trader there of colluding with other banks in a vast rate-rigging conspiracy.

Prosecutors want the rate-rigging investigation to serve as a template for other financial fraud cases. Two officials, who spoke on condition of anonymity, described a plan to eventually wring an admission of guilt from an entire bank.

“This Department of Justice will continue to hold financial institutions that break the law criminally responsible,” Lanny A. Breuer, the departing head of the agency’s criminal division, said in an interview.

The strategy will face significant roadblocks.

For one, banking regulators are likely to sound alarms about the economy. HSBC avoided charges in a money laundering case last year after concerns arose that an indictment could put the bank out of business. In the first interest rate-rigging case, prosecutors briefly considered criminal charges against an arm of Barclays, but they hesitated given the bank’s cooperation and its importance to the financial system, two people close to the case said.

The Justice Department will also face resistance from Wall Street. In meetings with authorities, banks are trying to distinguish their activities from the bad behavior at UBS and Barclays, according to the industry lawyers. One lawyer who represents Deutsche Bank acknowledged that Wall Street was girding for battle over the push for guilty pleas.

Some lawyers posit that the new approach amounts to a government shakedown, because institutions may plead guilty to dodge an indictment. “I think it’s a step in the wrong direction,” said James R. Copland, the director of the Center for Legal Policy at the Manhattan Institute.

Complicating matters, lawmakers and consumer advocates will continue to complain that banks get off too easily. In the rate manipulation cases, critics have clamored for more potent penalties, seeking convictions against parent companies.

The problems “should provide motivation to prosecutors, regulators and Congress to do more to ensure that this type of behavior is stopped, and that banks and their executives who manipulate markets are held accountable,” said Senator Carl Levin, Democrat of Michigan.

Critics point to the UBS case. Before UBS signed the deal, Japanese authorities assured the bank that a guilty plea would not cost the subsidiary its license, a person involved in the case said. While the case has weighed on the stock price, the subsidiary is operating normally and clients have stayed put, according to people with direct knowledge of the case.

Prosecutors defend their effort, saying it was born from painful experiences over the last decade.

After Arthur Andersen was convicted in 2002, the accounting firm went out of business, taking 28,000 jobs with it. The Supreme Court later overturned the case, prompting the government to alter its approach.

Prosecutors then turned to deferred-prosecution agreements, which suspend charges against corporations in exchange for certain concessions and a promise to behave. But the Justice Department took heat for prosecuting few top bank executives after the financial crisis. A recent “Frontline” documentary portrayed prosecutors as Wall Street apologists.

So the government is seeking a balanced approach, aiming to hold banks accountable without shutting them down. Prosecutors consulted federal policies that required them to weigh action with “collateral consequences” like job losses. Mr. Breuer also collected input from staff, including the head of his fraud unit, Denis J. McInerney, a former defense lawyer who represented Arthur Andersen.

Mr. Breuer eventually deployed a strategy built on guilty pleas for subsidiaries. He imported the model, in part, from his foreign bribery actions and pharmaceutical cases.

“Extracting a guilty plea from a wholly owned subsidiary finally enables the Justice Department to look tough on financial institutions while sparing them from the corporate death penalty,” said Evan T. Barr, a former federal prosecutor who now defends white-collar cases as a partner at Steptoe & Johnson.

As the Arthur Andersen cases fades from memory, some prosecutors say their new approach will lay the groundwork for parent companies to plead guilty.

But first, officials say, they are testing the strategy in the interest rate-rigging case. Authorities suspect that more than a dozen banks falsified reports to influence benchmark interest rates like the London interbank offered rate, or Libor, which underpins the costs for trillions of dollars in financial products like mortgages and credit cards.

Prosecutors focused on Japanese units because e-mail traffic exposed how traders there had routinely manipulated rates to increase profits, officials say. The units also have few ties to American arms of the banks, containing any threat to the economy.

After the Barclays case, authorities shifted to UBS, given the scope of the evidence and the bank’s past brushes with authorities, according to officials. The bank’s Japanese subsidiary was also a hub of rate-rigging activity. “The Justice Department had a clear view on the past of this institution,” said one executive who met with government officials.

Along with paying $1.5 billion in fines, the bank agreed to bolster its controls and have its Japanese unit plead guilty. It was the first big global bank subsidiary to plead guilty in more than two decades.

The Royal Bank of Scotland met a similar fate. The bank’s conduct was less severe than the actions of UBS, but it too had a rogue Japanese subsidiary. The bank announced a $612 million settlement with authorities this month, including a guilty plea in Japan.

Using the settlements as a template, prosecutors are building cases against other banks ensnared in the investigation, people involved in the case said, and guilty pleas are likely. Deutsche Bank is expected to settle with authorities by late 2013, the people said.

Citigroup and JPMorgan Chase, two American banks under scrutiny, pose a thornier challenge. So far, authorities have flexed their newfound muscle with foreign banks.

American regulators may warn that extending the campaign to Citigroup would threaten the company’s stock and prompt an exodus of clients. Japan’s regulators, some feeling upstaged by the recent actions, might raise similar concerns. Citigroup’s lawyers will also push back, people involved in the case said, citing the bank’s cooperation with investigators and emphasizing that wrongdoing never reached upper levels of management. The bank fired the trader recently charged by the Justice Department.

Authorities could counter that Citigroup’s Japanese unit is a repeat offender. It butted heads with Japanese regulators three times over the last decade.

“This is hard-nosed negotiation,” said Samuel W. Buell, a former prosecutor who is now a professor at Duke Law School. “It’s a game of chicken.”

Mark Scott contributed reporting from London and Hiroko Tabuchi from Tokyo.

Read More..

National Briefing | South: Abortion Curbs Clear Senate in Arkansas



The State Senate voted 25 to 7 on Monday to ban most abortions 20 weeks into a pregnancy. The measure goes back to the House to consider an amendment that added exceptions for rape and incest. The legislation is based on the belief that fetuses can feel pain 20 weeks into a pregnancy, and is similar to bans in several other states. Opponents say it would require mothers to deliver babies with fatal conditions. Gov. Mike Beebe has said he has constitutional concerns about the proposal but has not said whether he will veto it.


Read More..

National Briefing | South: Abortion Curbs Clear Senate in Arkansas



The State Senate voted 25 to 7 on Monday to ban most abortions 20 weeks into a pregnancy. The measure goes back to the House to consider an amendment that added exceptions for rape and incest. The legislation is based on the belief that fetuses can feel pain 20 weeks into a pregnancy, and is similar to bans in several other states. Opponents say it would require mothers to deliver babies with fatal conditions. Gov. Mike Beebe has said he has constitutional concerns about the proposal but has not said whether he will veto it.


Read More..

Gadgetwise Blog: Q&A: Controlling Access to a Kindle Fire HD

Is there any way to keep my kid from roaming around through the videos on my Kindle Fire HD tablet?

Amazon’s Kindle Fire tablets include built-in parental controls for restricting access to specific apps, functions and content on the device. On the Kindle Fire HD, swipe your finger down on the screen to get to the settings area and tap More. Tap Parental Controls and then tap the On button. Select a password (one that will be needed to unlock the restrictions), and tap the Finish button. Select the apps and actions you want to block, like the Web browser, e-mail, video playback or the power to make purchases. Amazon has more information on parental controls here.

The newer Kindle Fire HD models also include Kindle FreeTime, an app that lets you select videos, apps and other specific content the child can view on the tablet. Instructions for setting up a child’s FreeTime profile are on Amazon’s site as well.

Read More..