Sunday, December 06, 2009

“I'm shocked! Shocked, I tell you!” Everything in this article is a failure to implement “Best Practices,” so we can't say any of this is “new” or “unprecedented.”

http://www.databreaches.net/?p=8748

NZ Privacy Commissioner annual report finds security gaps

December 6, 2009 by admin Filed under Commentaries and Analyses, Non-U.S.

The New Zealand Privacy Commissioner, Marie Schoff, has presented the annual privacy commissioner’s report for the period ending June 2009. The report (pdf) indicates that privacy concerns are on the increase, particularly with respect to businesses and the Internet.

From the report, the section on portable storage devices [PSDs] in the government sector:

Our survey of the 42 main government agencies showed PSDs were widely used but that there were real gaps in security procedures and practices.

Thirty-five out of the 37 agencies that responded to the survey (95 percent) made PSDs available to staff – most commonly USB sticks. Nearly two-thirds of agencies also allowed staff to use personal PSDs for work purposes.

Just nine of the agencies made PSD encryption mandatory, while 43 percent did not provide encryption solutions of any sort. Sixty-two percent kept a PSD register but only 22 percent said they would be able to track transfers of data to PSDs.

Although the survey found 75 percent of the government agencies had policies to restrict or control the use of PSDs, we are not yet confident that those policies are of a good standard, followed in practice or are well known by staff.

  • Only half of the policies included details about how to delete content.

  • Only 25 percent of agencies performed an audit to ensure PSD procedures were followed.

  • Seventy percent had procedures to report the loss or theft of a corporate PSD, but only 27 percent for personal PSDs used for work.

  • Availability and use of security tools – such as encryption, tracking of data transfers, or hardware and software controls – was patchy or lacking.

Agencies that held the most sensitive classified information had significantly tighter controls over the use of PSDs than those that held the largest amounts of personal information.

It was particularly concerning that some of the agencies with poorer practices were flagship departments that hold the personal details of millions of New Zealanders. I am forced to the conclusion that personal information about New Zealanders is not being treated with the same care and respect as other sorts of ‘classified’ or ‘sensitive’ information.

Entire report can be downloaded here (pdf). Hat-tip, Privacy Lives.



This is related to the increasing awareness of Privacy. Perhaps if the paparazzi start losing their heads, they will learn some restraint?

http://www.pogowasright.org/?p=6020

The Queen gets tough on paparazzi in royal privacy row

December 5, 2009 by Dissent Filed under Non-U.S.

Andrew Alderson reports:

The Queen has authorised a crackdown on the paparazzi amid her growing anger at intrusions into the private lives of members of the Royal family and their friends.

The new get-tough approach has the full support of the Prince of Wales, Prince William, Prince Harry and other senior members of the Royal family, who are now prepared to take legal action against what they see as the “intrusive and unacceptable behaviour” of photographers.

The new strategy is likely to be tested later this month when the Queen, accompanied by other members of the Royal family, enjoys her traditional Christmas break at Sandringham, her Norfolk estate.

Read more in The Telegraph.



There must be more here than is reported in the article. If this is the way the law works, imagine a series of child porn images labeled “House Bill 249” or “Poll of eligible voters” and the devastating impact it could have on Congress when their staff downloads them....

http://yro.slashdot.org/story/09/12/05/1511258/Accidental-Download-Sending-22-Year-Old-Man-To-Prison?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

"Accidental" Download Sending 22-Year-Old Man To Prison

Posted by Soulskill on Saturday December 05, @11:21AM from the do-not-pass-go dept.

An anonymous reader writes

"Two years ago, Matthew White searched Limewire for porn. He was looking for 'College Girls Gone Wild,' but ended up downloading some images of child pornography. This was accidental, according to White, and he quickly deleted the images. A year later, the FBI showed up on his family's doorstep and asked to search the computer. After thorough sleuthing, the FBI found some images 'deep within the hard drive.' According to White, the investigators agreed that he himself could not have accessed the files anymore. Matthew now faces 20 years in jail for possession of child pornography. On advice from his lawyer, he intends to plead guilty so that he will 'hopefully' end up with 3.5 years in jail, 10 years probation and a registration as a sex offender. 'The FBI could not comment on this specific case, but said if child pornography is ever downloaded accidentally, the user needs to call authorities immediately. They may confiscate your computer, but it's better than the alternative.'"



More than 140 characters to tell us businesses haven't figured out the new technologies?

http://www.businessweek.com/magazine/content/09_50/b4159048693735.htm?chan=magazine+channel_top+stories

Beware Social Media Snake Oil

Hordes of marketing "experts" are promoting the value of wikis, social networks, and blogs. All the hype may obscure the real potential of these online tools

By Stephen Baker December 3, 2009, 5:00PM EST


(Related) Neither have governments. Another interesting risk of social networks. Imagine what would happen if the Whigs were able to identify and track (stalk?) the Tories...

http://politics.slashdot.org/story/09/12/05/2044243/Iranian-Crackdown-Goes-Global?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Iranian Crackdown Goes Global

Posted by timothy on Saturday December 05, @04:26PM from the innocuous-backup-account dept.

An anonymous reader writes

"Tehran's leadership faces its biggest crisis since it first came to power in 1979, as Iranians at home and abroad attack its legitimacy in the wake of June's allegedly rigged presidential vote. An opposition effort, the 'Green Movement,' is gaining a global following of regular Iranians who say they never previously considered themselves activists. The regime has been cracking down hard at home. And now, a Wall Street Journal investigation shows, it is extending that crackdown to Iranians abroad as well. Part of the effort involves tracking the Facebook, Twitter and YouTube activity of Iranians around the world, and identifying them at opposition protests abroad. People who criticize Iran's regime online or in public demonstrations are facing threats intended to silence them."


(Related) Note that Iran is not considered to be creating a cyber war group. This is all simple “flip of the switch” stuff.

http://news.cnet.com/8301-1023_3-10410035-93.html?part=rss&subj=news&tag=2547-1_3-0-20

Iran Internet access down pre-protests, report says

by Leslie Katz December 5, 2009 10:58 AM PST

… Sources close to Iran's technical services say the cut to Tehran's outside access was the result of "a decision by the authorities" and not a technical breakdown, the news agency reports. Telecommunications ministry officials were unavailable for comment.



Security tool

http://www.makeuseof.com/dir/open-port-check-tool-test-for-open-ports/

Open Port Check Tool: Test For Open Ports Behind Firewalls

www.canyouseeme.org

Similar tool: ShieldsUP.



Because everyone is getting a video camera for Christmas?

http://www.makeuseof.com/tag/essential-video-tutorials-for-shooting-editing-video/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Makeuseof+%28MakeUseOf.com%29

Essential Video Tutorials For Shooting & Editing Video

Dec. 5th, 2009 By Bakari Chavanu



This could be handy for my website students. Click on the icons for tutorials.

http://www.killerstartups.com/Search/codyscode-com-a-good-resource-for-programmers?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+killerstartups%2FBkQV+%28KillerStartups.com%29

CodysCode.com - A Good Resource For Programmers

http://www.codyscode.com/snippets/search.php

Those within the fascinating world of programming are always on the lookout for resources to be able to get things done simpler and faster. CodysCode is a portal where you can search and find a great assortment of programming-related data that will let you optimize the way you work.

… You will also find general tutorials and snippets for PHP, MySQL, Python, Java, C++, and Operating Systems on the whole.



Reminds me to ask: Why hasn't someone made shows specifically for the Internet? (Except the porn industry of course.)

http://www.makeuseof.com/tag/3-best-free-sites-for-watching-tv-on-the-internet/

3 Best Free Sites For Watching TV On The Internet

Dec. 5th, 2009 By Karl L. Gechlik



Just because Zombies have become a running joke in my Disaster Recovery class.

http://www.makeuseof.com/dir/freehorrormovies-watch-full-length-movies-horror/

Free-Horror-Movies: Watch Full Length Horror Movies Online

… Their selection has reached more than 450 movies including the latest releases for 2009 such as Zombieland, Jennifer’s Body, and Paranormal Activity. Classic horror hits like the 1931 Dracula, the original Friday the 13th, and Dawn of the Dead are also available.

www.free-horror-movies.com

Free, no sign up is required. Download wallpapers from various horror films. Play flash horror games. For more free horror movies, read “Top 6 Sites To Watch Horror Movies Online for Free“.

No comments: