Saturday, February 21, 2009

I can remember the days when this would be considered a huge breach! Now it hardly merits a comment, but of course I'll make one. The tape does belong to the IT Department. Who owns the data? Is it Police related, Human Resources, or the Governor's Office. And why keep it for 12 years?

http://www.databreaches.net/?p=1646

Tape with criminal background checks on 807,000 people missing

February 20, 2009 by admin

Filed under: Government Sector, Lost or Missing, Subcontractor, U.S.

The Associated Press is reporting that Information Vaulting Services cannot account for a computer storage tape belonging to the Arkansas Department of Information Systems, The tape reportedly contains data from criminal background checks on 807,000 people conducted over a 12-year period.

The Arkansas Times has a copy of the press release issued by DIS.



Another article pointing out the obvious?

http://www.atthebreach.com/blog/2nd-20mm-class-action-lawsuit-against-rbs-worldpay/

February 20, 2009

2nd 20MM Class Action Lawsuit against RBS WorldPay

A firm in Philadelphia has filed a second class action lawsuite against RBS WorldPay in the amount of 20 million. This is after criminals stole 9 million in a highly coordinated ATM fraud scheme. See previous post here for more information.

It is becoming so that data breach is synonymous with class-action lawsuit. Worse still, the lawsuits are typically several times the amount of money that the hard costs of the breach itself (in this case 9 million just in cash loses).

http://news.scotsman.com/scotland/US-arm-of-RBS-faces.4989997.jp



With Technology changing as rapidly as it does, perhaps we need a more dynamic plan?

http://www.bespacific.com/mt/archives/020627.html

February 20, 2009

DHS: 2009 National InfrastructureProtection Plan

"The National Infrastructure Protection Plan provides the unifying structure for the integration of a wide range of efforts for the enhanced protection and resiliency of the nation's critical infrastructure and key resources (CIKR) into a single national program.

The overarching goal of the NIPP is to build a safer, more secure, and more resilient America by preventing, deterring, neutralizing, or mitigating the effects of deliberate efforts by terrorists to destroy, incapacitate, or exploit elements of our nation's CIKR and to strengthen national preparedness, timely response, and rapid recovery of CIKR in the event of an attack, natural disaster, or other emergency.

The 2009 NIPP replaces the 2006 version and reflects changes and updates to program elements and concepts. It captures the evolution and maturation of the processes and programs first outlined in 2006 without changing the underlying policies. The revised NIPP integrates the concepts of resiliency and protection, and broadens the focus of NIPP-related programs and activities to an all-hazards environment."



When knowledge is outlawed only outlaws will have knowledge? Will it also be a crime to read the results of Dutch research that proves “secure RFID” isn't secure at all?

http://www.pogowasright.org/article.php?story=20090220174805951

Nevada bill would outlaw RFID security research, EFF says

Friday, February 20 2009 @ 05:48 PM EST Contributed by: PrivacyNews

A proposed bill in the Nevada State Legislature would make it a crime to do legitimate research on security weaknesses in radio frequency identification, the Electronic Frontier Foundation said on Friday.

The bill, S.B. 125, would make it a Class 3 felony to possess, read, or capture another person's personal identifying information through RFID, subject to up to five years in prison and a $10,000 fine.

Source - Cnet



This is beginning to sound like a Marx Brothers comedy: “A Day in the Courtroom”

http://yro.slashdot.org/article.pl?sid=09/02/21/0347200&from=rss

Pirate Bay Day 5 — Prosecution Tries To Sneak In Evidence

Posted by Soulskill on Saturday February 21, @05:11AM from the not-sneaky-enough dept. The Courts The Internet News

Hodejo1 writes

"On the old Perry Mason TV shows, it was a common sight to see someone burst into the crowded courtroom at a dire moment and confess aloud that they, not the defendant, killed so-and-so. In reality, courts do not allow evidence to enter trial without a chance for the opposing council to view it and for a judge to rule on their admissibility. Yet, in the fifth day of the Pirate Bay trial, lawyers for the prosecution again tried to sneak in surprise evidence while questioning defendants. The judge put his foot down this time, telling lawyers for the state, 'If you have documents which you eventually plan to use, you need to hand them over now.' The prosecution continues to struggle in court. In one humorous moment, prosecutor HÃ¥kan Roswall tried to show how 'hip' he was with technology when he questioned defendant Peter Sunde. 'When did you meet [Gottfrid] for the first time IRL?' asked the Prosecutor. 'We do not use the expression IRL,' said Peter, 'We use AFK.' The defendants are not out of the woods yet. Lawyer and technology writer Richard Koman wonders aloud if the Pirate Bay's 'I-dunno' defense is all that much better."

[IRL: In real life, AFK: Away from keyboard Bob]



Wouldn't this business model work with any art form and some not-so-artsy forms? And couldn't the photos be used in non-ad contexts?

http://www.killerstartups.com/Video-Music-Photo/adography-com-monetize-your-photographs

Adography.com - Monetize Your Photographs

http://www.adography.com/

Is using a camera something you truly excel at? Do you want to make the jump from amateur to pro, and are weighing up your available options? If you do, and you think that you have some pictures that would make a superb advertisement, then this site will let you set off on the path of monetization.

That is, this portal will empower you to submit your photographs as “perfect advertisements” for companies and brands, and name your price for them. If the company spots the pictures and likes them, the platform makes for selling the photos on the spot.

On the other hand, if you are an advertiser who needs any photos to publicize your company or brand, the site will enable you to post a want-ad describing what you envision, and see what comes up. When a photo that suits your needs is posted, it can be easily bought trough the site.

On the whole, the site adheres to its tagline of “Where photos become advertisements” by providing users with a platform where both sides are catered for, and bonds can be created and nurtured. As such, it is worth bookmarking and keeping in mind by amateur and seasoned photographers alike.



This might be useful...

http://www.killerstartups.com/Web-App-Tools/tynt-com-the-home-of-tracer-for-your-site

Tynt.com - The Home Of Tracer For Your Site

http://www.tynt.com/

Tynt.Com, is the home to tracer. But one may ask, to trace what? Well this company provides a java code which you may easily install on your site to track what people do when they are on your website.

Here’s how it works, you go online and you subscribe for free, they send you a confirmation e-mail and you are pretty much done to get going. Once you are all setup the piece of code starts tracking what people do on your site and which bits they find more interesting. How do they do this? What they do is measure actions such as for instance when they highlight with their mouse a specific term, or when they copy and paste it generate a log for your visualization about this action.

The best thing perhaps is how it helps you take advantage of all those copy and pasted bits of your site since it inserts a link automatically taking the person back to the site where the content originates. In this way you will be taking double advantage of whatever bit of your site is deemed interesting by your audience.

Most likely, the best thing about the stats produced by traced is that with this information you may finally identify which are the strong points of your site. In this way you may focus your work on this targeted area to improve your sites success.

No comments: