HN user

matbilodeau

914 karma

for the cheese https://hnbadges.netlify.app/?user=matbilodeau

Kismet : 8d240f87745707dbd7b48d0b1880574ec79561cb6a9a3d028cc86dcb5c1ac28e

[ my public key: https://keybase.io/matbilodeau; my proof: https://keybase.io/matbilodeau/sigs/8N_WF2kRQFQAl6qh4SM_BRVHPxnEGINrpKeihn0VR94 ]

Posts69
Comments134
View on HN
www.telusdigital.com 4mo ago

Telus Digital acknowledges Cybersecurity incident

matbilodeau
1pts0
nationalpost.com 4mo ago

Canadian ISP must hand over names associated with IPs in torrent copyright case

matbilodeau
2pts2
www.cbc.ca 1y ago

'Copycat' websites targeted in court battle with pirate Soap2Day streamers

matbilodeau
1pts0
www.theverge.com 2y ago

Airbnb is banning indoor security cameras

matbilodeau
341pts505
www.cbc.ca 2y ago

Canada Supreme Court rules police need warant to get a person's IP address

matbilodeau
8pts0
torrentfreak.com 2y ago

City Council Unwittingly Approves Pirate IPTV Scheme and Documents Everything

matbilodeau
4pts0
www.bleepingcomputer.com 2y ago

Canada to ban the Flipper Zero to stop surge in car thefts

matbilodeau
9pts1
www.canada.ca 2y ago

Canadian government banning Flipper Zero to combat auto theft

matbilodeau
296pts323
anydesk.com 2y ago

AnyDesk Incident Response 2-2-2024

matbilodeau
29pts11
borncity.com 2y ago

AnyDesk Exchanged code signing certificate, potential cyber incident

matbilodeau
4pts2
news.ycombinator.com 2y ago

Bill 96 forces CompTIA to stop offering certifications to Quebec residents

matbilodeau
8pts5
www.journaldemontreal.com 2y ago

Quebec Ministry of Cybersecurity and Digital Technology employee data leaked

matbilodeau
33pts22
www.cbc.ca 3y ago

Suncor swaps laptops, asks employees to stay off social media after cyberattack

matbilodeau
1pts0
torrentfreak.com 3y ago

Soap2Day shut down following Canadian Court Order

matbilodeau
2pts0
www.ctvnews.ca 3y ago

Bill C-18: Google to remove news links in Canada over online news law

matbilodeau
383pts484
www.lapresse.ca 3y ago

Bill 96 forces Games Workshop Black Library to stop selling to Quebec customers

matbilodeau
2pts0
www.bleepingcomputer.com 3y ago

Suncor Energy cyberattack impacts Petro-Canada gas stations

matbilodeau
1pts1
soapgate.org 3y ago

Soap2Day Closing Forever

matbilodeau
3pts0
www.cbc.ca 3y ago

Canadian Governement Websites Attacked by Pro-Russia Group

matbilodeau
2pts0
www.cbc.ca 3y ago

Insider says Manulife Bank didn't protect customers' private information

matbilodeau
1pts0
www.theguardian.com 3y ago

Canada police arrest ‘pedophile hunting’ group over child abuse images

matbilodeau
10pts12
www.theguardian.com 3y ago

Ecuadorian TV presenter wounded by bomb disguised as USB stick

matbilodeau
4pts0
www.ourcommons.ca 3y ago

Assessment of Canada's security posture in relation to Russia

matbilodeau
7pts0
www.cbc.ca 3y ago

Hive ransomware group was behind 2021 cyberattack on Newfoundland health systems

matbilodeau
1pts0
citoyens.soquij.qc.ca 3y ago

Giving the finger is a ‘God-given right’, Canadian judge rules

matbilodeau
525pts298
adastraholdings.ca 3y ago

Health Canada Approves Adastra Labs to Include Cocaine Under Dealer’s License

matbilodeau
1pts0
montrealgazette.com 3y ago

Quebec follows Canada in banning TikTok on government devices

matbilodeau
5pts1
www.theguardian.com 3y ago

Canada bans TikTok on government devices over security risks

matbilodeau
95pts60
www.ctvnews.ca 3y ago

Canadian spy agency, CSIS, warns China, Russia targeting Canada's AI know how

matbilodeau
1pts0
www.theguardian.com 3y ago

Canadian RCMP sued for arresting photographer covering protest

matbilodeau
1pts0

The judge was “satisfied that the Doe defendants were given fair warning of the possibility that their personal information could be disclosed by Cogeco.”

The broadband outfit “provided the Doe defendants with first and second notices from (Hellboy Productions’) counsel which asserted (its) copyright in the work and alleged infringement of the work by the Doe defendants. The first notice advised of Cogeco’s obligation to retain records that will allow for the identification of the Doe defendants and the second notice warned of the plaintiff’s ability to make a formal legal request to Cogeco to compel the Doe defendants’ identity.”

First, the law firm sends them notices, giving them seven days to take the movie down and stop giving it away. If they comply, then typically nothing happens.

If they don’t stop, the firm issues a second notice indicating it reserves the right to sue the alleged movie pirates.

The ramifications of this breach are profound. Cybercriminals who gained access to the AnyDesk portal could glean valuable information about customers, including license keys, active connections, session durations, contact information, email addresses, and the number of managed remote access hosts, all with their online/offline status and IDs. Such details open up a plethora of malicious possibilities.

In light of this breach, AnyDesk customers must take proactive steps to protect their accounts and data. Password changes alone are insufficient. AnyDesk offers a whitelist feature, enabling users to specify who can connect to their devices, adding an extra layer of security. Multi-factor authentication (MFA) is strongly recommended to enhance account protection. Organizations should also monitor for any unexpected password and MFA changes, suspicious sessions, and emails referencing AnyDesk accounts from unknown sources.

https://securityonline.info/anydesk-breach-2024-dark-web-sal...

can't do much , didn't make English language news. Google translate seems to have problems with some news sites. Here's what Radio-Canada (french CBC) has to say

https://ici.radio-canada.ca/nouvelle/2001279/incident-securi...

The Ministère de la Cybersécurité et du Numérique du Québec confirmed on Thursday that an incident of computer security due to an action by an employee was quickly corrected.

This employee has been transferred to une boîte de courriel personale des documents contenant des renseignements personnels de 529 employés de la fonction publique. Elle aurait agi de bonne foi et a collaboré avec le ministère, a indicé ce dernier en réponse aux questions de Radio-Canada.

The incident occurred on May 23 last year, when the employee was transferred to another public organization. She explained that she had transferred documents to be able to answer the questions of her replacement in order to facilitate the transition.

The ministry specified that the employee had access to this information in the framework of his duties.

Even if the intention of the employee was not to use the information for an illegal purpose, this practice contravenes the rules of safety in place intended for the personnel of MCN, the ministry emphasized in its email to Radio-Canada.

Par ailleurs, the ministère indicated that a complaint had been filed with the police so that an inquiry could be opened.

The employee was also sanctioned for not respecting the rules of the ministry, which ensured the destruction of the information transferred to the personal email box.

The Information Access Commission was also informed of the incident.

Here are excerpts from a Canadian Supreme Court decision explaining the reasoning in a much better way than my previous summary. Reasoning is the same.

P38 The first issue is important because it governs whether the prohibition on possession is confined to representations of actual persons, or whether it extends to drawings from the imagination, cartoons, or computer generated composites. The available evidence suggests that explicit sexual materials can be harmful whether or not they depict actual children (...)

P43 (...)The question is this: would a reasonable observer perceive the person in the representation as being under 18 and engaged in explicit sexual activity?

P51 Family photos of naked children, viewed objectively, generally do not have as their “dominant characteristic” the depiction of a sexual organ or anal region “for a sexual purpose”. Placing a photo in an album of sexual photos and adding a sexual caption could change its meaning such that its dominant characteristic or purpose becomes unmistakably sexual in the view of a reasonable objective observer(...)

https://www.canlii.org/en/ca/scc/doc/2001/2001scc2/2001scc2....

oops...

“There were exchanges of photos during conversations [online] and what the law says, when you share a photo, that it is explicit pornographic material and that you claim that it represents a person of age minor, even if it really isn’t, it becomes child pornography,” constable Andrée East told the Canadian Press. “It’s considered as such, even if in truth it doesn’t really represent the body of a minor person.”

Yes there is an exception in Canadian legislation when such investigation techniques are used by law enforcement.

I follow you train of thought and I'm wondering where the loophole would be. I mean if you file on paper you don't use the My Account service. How would the agreement acceptance occur ? Maybe the TOS could be interpreted as "being the holder of a canadian SIN, CRA gives you access to My Account".

In return for the Canada Revenue Agency (CRA) giving you access to My Account, you agree to abide by the following terms and conditions of use for this and all future uses of My Account:

https://www.canada.ca/en/revenue-agency/services/e-services/...

Thankfully , the Civil Code also contains definitions for contracts So here we are dealing with an contract of adhesion (terms being imposed by CRA).

Here's an interesting case that may enlighten, however it was approached as a consumer contract because it was not onerous. https://www.canlii.org/en/qc/qccs/doc/2011/2011qccs1506/2011...

How onerous is it to be forced to use CRA online services ? Are the taxes you pay considered onerous ? Are the CRA TOS considered an adhesion contract ?

This should really be tested by by the justice system rather than enthusiasts on a discussion forum. However, since we're all governed by such laws, it's never a loss to spend time on learning about them, especially physics.

1378. A contract is an agreement of wills by which one or several persons obligate themselves to one or several other persons to perform a prestation. Contracts may be divided into contracts of adhesion and contracts by mutual agreement, synallagmatic and unilateral contracts, onerous and gratuitous contracts, commutative and aleatory contracts, and contracts of instantaneous performance or of successive performance; they may also be consumer contracts.

1379. A contract of adhesion is a contract in which the essential stipulations were imposed or drawn up by one of the parties, on his behalf or upon his instructions, and were not negotiable. Any contract that is not a contract of adhesion is a contract by mutual agreement.

1384. A consumer contract is a contract whose field of application is delimited by legislation respecting consumer protection whereby one of the parties, being a natural person, the consumer, acquires, leases, borrows or obtains in any other manner, for personal, family or domestic purposes, property or services from the other party, who offers such property or services as part of an enterprise which he carries on.

That's where 3149 would come in. Maybe even 3150 if you have "ID theft" insurance.

3149. Québec authorities also have jurisdiction to hear an action based on a consumer contract or a contract of employment if the consumer or worker has his domicile or residence in Québec; the waiver of such jurisdiction by the consumer or worker may not be set up against him.

3150. Québec authorities also have jurisdiction to hear an action based on a contract of insurance where the holder, the insured or the beneficiary of the contract is domiciled or resident in Québec, the contract covers an insurable interest situated in Québec or the loss took place in Québec.

https://www.legisquebec.gouv.qc.ca/en/document/cs/CCQ-1991?l...