Nintendo has issued the following statement in response: “The operation of Nintendo eShop in Europe is fully compliant with European laws relating to the statutory rights of consumers.”

Norway has accused Nintendo of breaking the law by not letting customers get a refund on a pre-order.

In an open letter to Nintendo, the Norwegian Consumer Council called upon the Japanese company to comply with European law on the eShop.

When pre-ordering a video game, you have the right to cancel your order at any time before the release date,” said Finn Myrstad, director of digital policy at the NCC.

“This should be a quick and easy process, for example by the click of a button.” We’ve asked Nintendo for comment.

Nintendo isn’t the only video game company to come under fire from the Norwegian Consumer Council. It found of the seven leading digital video game platforms, only EA’s Origin and Valve’s Steam have adequate systems in place for refunding purchased video games. But the Consumer Council said Nintendo stands out from the rest when it comes to pre-ordering.

“The company plainly states that all purchases are final,” the NCC said. “According to the right of withdrawal laid down in the Consumer Rights Directive, such terms are illegal. Until the game can be downloaded and launched, the seller cannot prohibit the consumer from cancelling their pre-order.”

We had a gander at the eShop on a Nintendo Switch this morning in a bid to verify the Norwegian Consumer Council’s accusation. When we tried to pre-order Toki Tori 2+, we were presented with a box to check. It reads: “I consent that Nintendo begins with the performance of its obligations before the cancellation period ends. I acknowledge that I thereby lose my right to cancel.”

This checkbox reveals Nintendo considers the “performance of its obligations” to begin as soon as you put your money down for a pre-order, and because you’ve agreed to this and to waive your right to cancel, it isn’t required to offer a refund. Norway, however, disagrees, insisting Nintendo’s “performance of its obligations” only begins when you download and start a game.

This isn’t the first time a video game company’s digital refund policy has hit the headlines. In 2015, the BBC’s Watchdog programme investigated Sony’s digital refund policy after it received a number of complaints from PlayStation owners who had struggled to get their money back following fraudulent purchases.

At the time, Sony was heavily criticised for not refunding some customers who were charged for games they never bought. When these customers had their banks refund the money, Sony blocked their PlayStation Network accounts, preventing them from accessing online features and playing games they’d previously bought.

(eurogamer)

Norway has accelerated plans to scale up its national security infrastructure against threats emanating from the cyber domain.

Norway has accelerated plans to scale up its national security infrastructure against threats emanating from the cyber domain.

Recent intelligence reports more than suggest that Norway’s critical IT infrastructure will likely face a higher level of targeting in the shape of malicious cyber attacks launched by hostile foreign governments and cyber crime actors.

To counter this ever-present risk, conservative prime minister Erna Solberg has mobilised the country’s national security infrastructure, including the Norwegian Defence Force’s (NDF) specialist cyber defence unit (CDU), under an umbrella-style partnership that includes strategic input from private sector ICT suppliers.

The government’s heightened interest in waging war against cyber threats became clear in January 2018, when it contracted state telecom Telenor to advise departments on best practice in the implementation of effective cyber defence strategies. The emphasis is on using advanced technologies and security measures to protect critical ICT systems.

The evolving public-private sector alliance is taking place against a backdrop of rising cyber attacks against state-run infrastructure, including the public transport company NSB, military sites and hospitals.

The partnership, which will link to a new government policy initiative to reinforce ICT security on a national level, is timely. It comes in the wake of a serious cyber attack launched in January against Helse Sør-Øst, Norway’s largest regional healthcare provider.

The preliminary results of an investigation by the national security agency PST (Politiets Sikkerhetstjeneste) indicated the attack was the work of an international cyber crime group operating on behalf of an unidentified “foreign state”. The “attackers” penetrated the outer wall of the HSO’s security shield but failed to gain access to the targeted patient data system. This system contained over two million separate patient and medical files.

An identical outer wall system “breach” was recorded at Oslo University Hospital (Oslo Universitetssykehus), Norway’s biggest medical facility, which operates as part of the HSO organisation.

“Unfortunately, this type of cyber threat is becoming more prevalent. Patient security wasn’t affected, but all malicious hacking events like this are serious. This is why the government wants to do much more to prevent such attacks and better defend Norway’s critical IT systems against all hostile actors,” said Justice Minister Sylvi Listhaug.

The PST was alerted to the cyber attack against the HSO by Sykehuspartner, the healthcare organisation’s IT security partner. The PST described the attack as “quite advanced and professional”, adding that it is cooperating with all critical service providers in Norway to ensure that their ICT systems are capable of withstanding sustained attacks from cyber space.

“The suspicion we have is that someone, on behalf of a foreign state, is gathering information. If the client state can be revealed, this is a source of fundamental damage to our national interests and a threat against state infrastructure,” said Line Nyvoll Nygaard, a prosecuting attorney at the PST.

The Norwegian government’s partnering with Telenor represents both a logical and strategic component in its cyber defence capacity building mobilisation project. Around 80% of all domestic data traffic is carried on Telenor-owned networks.

In a connected state-funded programme, Telenor will deepen its cyber defence competence exchange collaboration with the NDF, delivering a range of tools and solutions to the CDU.

Significantly, the cooperation agreement reached between the NDF and Telenor covers the development of enhanced digital-based security tools to protect significant military events, such as joint NDF-NATO exercises, against the prying digital eyes and ears of “foreign agencies”.

Disruptive interference

Not only is the NDF concerned about cyber space surveillance of its activities, the organisation is increasingly on high alert against the potential for cyber-warfare-type “strikes”, and “disruptive interference” against the battlefield management command ICT-systems used to coordinate and direct large-scale military manoeuvres.

Closer cooperation in the cyber defence domain with Telenor will ensure important resources are available at the times they are required, said Major General Inge Kampenes, head of the NDF-CDU.

Telenor’s national role in Norway’s Total Defence System, which combines military and civil emergency preparedness, was elevated in 2017 as part of the government’s increased capital investment into high-priority cyber security projects.

“We will examine vulnerabilities and potential risks, and work together to develop expertise and exchange information about incident threats. We will analyse methods of attack and different malware in the cyber domain,” said Kampenes.

The collaboration between the NDF and Telenor is heavily weighted towards strengthening the military organisation’s crisis management expertise. Cooperation also aims to enhance the NDF’s ability to both protect and safeguard the operation of critical infrastructure as it relates to national security and emergency preparedness.

“Alongside the growth of increased digital dependency and vulnerability, it is natural we focus more on national emergency preparedness and our ability to react,” said Kampenes.

Cyber security tools

Telenor, in collaboration with the NDF-CDU, plans to roll out advanced cyber security tools ahead of NATO’s upcoming Trident Juncture 2018 exercises.

Hosted by Norway, the multi-branch Trident Juncture exercise will run during October and November of 2018. It will involve the deployment of up to 50,000 troops, and become NATO’s biggest military training operation since the fall of the Berlin Wall and the end of the Cold War era.

“We must be prepared for added security challenges. An exercise of this scale will attract a lot of international attention. We expect a greater load on our network,” said Berit Svendsen, head of Telenor Norge.

Propelled by the lure of mutual advantage, Norway’s leading business and industry chiefs are displaying a keen desire to join state-led cyber security projects. The primary driving force behind this mood of positive cooperation is powered by the universally accepted consensus, within the private sector, that the selective sharing of resources and professional expertise offers the best means to combat future threats from cyber space.

A survey conducted by BDO Norway, released in January, found cyber threats against ICT systems surpassed the risk of an economic downturn or financial crisis as the single biggest fear among 1,500 of the country’s top business and industry leaders.

Some 25% of senior Norwegian executives, in the BDO survey, conceded their companies were not adequately prepared or equipped to defend their computer systems and networks against professional and sustained malicious attacks from cyber space.

“Companies in Norway still have a long way to go in building organisations that can manage IT and cyber risks in the same way as other business risks,” said Chris Culina, head of BDO Norway’s operational IT security services department. “It’s a strange observation to make. It’s comparable to worrying about burning but failing to install smoke detectors.”

(computerweekly)