By Andrew Jacobs

Cyberattack on U.S. and South Korean Governments Stymies Investigators

Law enforcement officials are still investigating the cyberattacks that hobbled some U.S. and South Korean government websites for five days beginning July 4, the New York Times reports. The distributed denial of service attack caused 50,000 to 65,000 infected computers to jam websites of government agencies such as the Federal Trade Commission and the Secret Service with an extraordinary amount of traffic. Although independent and government investigations have led to computers in Miami, Florida, and the U.K., some experts think finding the ultimate source of the “amateurish” attack may prove to be impossible.

Microsoft Convinces Court IP Addresses Are Not Personally Identifiable Information

MediaPost News reports that in a recent class action case against Microsoft, a federal district court in Seattle held that IP addresses do not count as “personally identifiable information” (PII), a term regularly used in user agreements and online privacy policies. The June 23 opinion granted Microsoft’s motion for summary judgment on charges that it had violated its user agreement by collecting IP addresses during automatic software updates. Judge Richard Jones held that in order to be PII, a piece of data must directly identify “a person,” rather than “a computer,” as an IP address does. The decision is in tension with recent E.U. regulatory findings and a 2008 opinion from the New Jersey Supreme Court, according to MediaPost.

New Zealand Takes Second Swing at “Three Strikes”

On July 14, New Zealand’s Ministry of Economic Development introduced a revised version of its “three strikes” copyright provision aimed at curbing online infringement, Ars Technica and Billboard report. The original bill, which provided for the termination of internet service provider subscribers’ accounts as a penalty for repeat copyright infringement, was scrapped in March after public outcry and industry disagreement. The new version addresses due process concerns by allowing alleged infringers to respond to notices of infringement and to have their cases mediated before trial. Termination of infringers’ internet accounts remains a possible penalty under the revised law.