Friday, August 13, 2010

Companies are still ignoring basic security practices and their PR departments are still relying on the public's ignorance of technology to make their ignorance seem wise. Mailing an un-encryptrd DVD is slower and more expensive than transmitting encrypted data via the Internet. What manager makes a choice like that?

http://www.phiprivacy.net/?p=3319

DVD with Walsh Pharmacy patient data disappears during mailing

By Dissent, August 12, 2010

When McKesson Pharmacy Systems mailed Massachusetts-based Walsh Pharmacy a DVD containing information on Walsh Pharmacy patients, the envelope arrived but the DVD was missing. Through its attorney, Walsh Pharmacy notified the New Hampshire Attorney General’s Office of the incident involving its business associate systems vendor.

Information on the DVD included pharmacy patients’ names, and in some cases, Social Security or health insurance numbers, driver’s license numbers, and prescription information. No credit card or financial information was on the missing DVD. Walsh reports that the envelope appeared intact, and that the files on it had been created using a UNIX system which would make the contents more difficult to extract in a comprehensible format. [Unless you actually had a UNIX system. (Cost: $0) Bob]

As a result of this incident, Walsh has changed its procedures and going forward, business associates will no longer return media with sensitive information, but will destroy it instead.


(Related) Relies more on the contract language than the security process.

http://www.databreaches.net/?p=13206

EMI v. Comerica: Court Finds Commercially Reasonable Security — Bank Loses Motion for Summary Judgment

August 13, 2010 by admin

David Navetta provides a legal analysis of the court’s denial of the bank’s motion for summary judgment in the case.

An odd result — we know.

We previously reported on the lawsuit filed by Experi-Metal, Inc. (“EMI”) and the subsequent motion for summary judgment (and briefs) filed by Comerica Bank to have the case dismissed. As reported in July, the U.S. District Court for the Eastern District of Michigan has issued a ruling on Comerica’s motion for summary judgment. To make a long story short, the Court denied Comerica’s motion and this case appears headed toward trial (or potentially appeal or settlement). Ironically, in the course of its ruling the Court found that Comerica had utilized commercially reasonable security procedures. However, that ruling had more to do with the language in Comerica’s contracts than an actual substantive analysis of Comerica’s security procedures. In this blogpost, we take a closer look at the Court’s ruling.

Read more on Info Law Group.

[From the original report:

As you might recall this case involved a successful phishing attack that allowed the bad guys to get the EMI’s online banking login credentials and wire transfer about $560,000 from EMI’s account (the original amount was $1.9 million, but Comerica was able to recover some of that). The bad guys were able to foil Comerica's two factor token-based authentication with a man in the middle attack.



As far as I know, no one has a “when you die” procedure.

http://tech.slashdot.org/story/10/08/12/143223/Can-Twitter-and-Facebook-Deal-With-Their-Dead?from=rss

Can Twitter and Facebook Deal With Their Dead?

Posted by CmdrTaco on Thursday August 12, @10:40AM

"One and a half million Facebook users die each year. Twitter faces a similar mortality rate. Yet the social networks have been relatively slow to deal with the uncomfortable business of death. Only this week has Twitter finally unveiled a policy for handling the accounts of dead members. Yet the process for closing the accounts of deceased relatives is complicated, while reminders to follow the accounts of people who have long since passed away continue to arrive, adding to the pain of grieving friends and relatives."



Part of a growing collection of Privacy guidelines. Someone has to get something right some day, don't they?

http://www.pogowasright.org/?p=12811

DARPA Releases Privacy Guidelines For R&D

August 12, 2010 by Dissent

Elizabeth Montalbano reports:

The technology-research arm of the U.S. military has released a new set of privacy principles to guide all of its future R&D projects.

The Defense Advanced Research Projects Agency’s (DARPA’s) new principles are aimed at ensuring that any programs that may raise privacy issues are “designed and implemented in a responsible and ethical fashion,” according to a White House blog post attributed to Tom Kalil, deputy director for Policy at the White House Office of Science and Technology Policy He acknowledged that DARPA’s role “working at the technology and security frontiers” can inherently lead to “tension between the value of having access to information and the importance of respecting personal privacy.”

Read more on InformationWeek.



I'm not neutral...

http://tech.slashdot.org/story/10/08/12/139203/EFF-Reviews-the-Verizon-Google-Net-Neutrality-Deal?from=rss

EFF Reviews the Verizon-Google Net Neutrality Deal

Posted by CmdrTaco on Thursday August 12, @09:48AM

"The EFF has written an analysis of the Net Neutrality deal brokered between Verizon and Google. While the EFF agrees with substantial portions of it, such as giving the FCC only enough authority to investigate complaints, rather than giving them a blank check to create regulations, there are a number of troubling issues with the agreement. In particular, they're concerned that what constitutes 'reasonable' network management is in the eye of the beholder and they don't like giving a free pass to anyone who claims they're attempting to block unlawful content, even when doing so in such a way that they interfere with lawful activities. On balance, while there are some good ideas about how to get Net Neutrality with minimal government involvement, there are serious flaws in the agreement that would allow ISPs to interfere with any service they wanted to because there is no algorithm that can correctly determine which numbers are currently illegal."



I mentioned this earlier, but this is a better format. Again, not just for teachers, anyone can play.

http://www.freetech4teachers.com/2010/08/how-to-do-11-techy-things-in-new-school.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+freetech4teachers%2FcGEY+%28Free+Technology+for+Teachers%29

Thursday, August 12, 2010

How To Do 11 Techy Things In the New School Year

Earlier this week I published a list of 11 Techy Things for Teachers To Try This Year. As promised at the end of that post, I have created a free how-to guide for the things I listed. The 58 page guide embedded below is intended as quick-start guide for teachers who want to try something new in the 2010-2011 school year. The guide is a available as a free download.



How would you like a (free) separate computer for each project/class/day of the week?

http://www.smashingapps.com/2010/08/12/turn-your-web-browser-into-an-online-computer-with-icloud.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SmashingApps+%28Smashing+Apps%29

Turn Your Web Browser Into An Online Computer With icloud

What if your there was physical damage to your computer? All your backups would be on your hard drive an in the case it got damaged, all data would be lost. The best solution to secure your data therefore is by storing a backup online.

icloud lets you do just that. icloud is a web service that provides its users with a virtual desktop. After creating an account and signing in to it, you virtual desktop loads up.

This desktop operates within your web browser and similar to the desktop screen of regular computers. You can store files in your icloud account and use the desktop interface to browse through files and use them.

Currently icloud offers 3GB storage to its free users and 100GB storage to users who pay the $40 fee. The web service is neat service to try and a great way to secure your important data.



A “how are they doing that” tool for my website students.

http://www.killerstartups.com/Web-App-Tools/wappalyzer-com-understanding-web-technologies

Wappalyzer.com - Understanding Web Technologies

http://wappalyzer.com/

We could define Wappalyzer by saying it is an add-on for Firefox that can be used to analyze any site that you come across, and get a rundown of the different Web technologies that have been employed to put it together. As it stands right now, Wappalyzer can detect both CMS and e-commerce systems, as well as database managers and issue trackers. The full list of tracked applications can actually be read on the site, and the number is getting close to 150.



Tools & Techniques Something for the Swiss Army Folder...

http://www.freetech4teachers.com/2010/08/gooreader-read-google-books-on-your.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+freetech4teachers%2FcGEY+%28Free+Technology+for+Teachers%29

Friday, August 13, 2010

GooReader - Read Google Books On Your Desktop

GooReader is a desktop application for locating, reading, and saving materials from Google Books. The visual interface of GooReader is much nicer and should be easier on the eyes for many people. If you choose to upgrade to a paid plan, GooReader will allow you to print titles. But if you don't upgrade, remember that you can print directly from Google Books for free. GooReader is currently only available for Windows. A Mac version is in development.

No comments: