Thursday, August 20, 2020

Hasn’t this name come up before? Were no lessons learned?

https://www.zdnet.com/article/experian-south-africa-discloses-data-breach-impacting-24-million-customers/?&web_view=true

Experian South Africa discloses data breach impacting 24 million customers

The South African branch of consumer credit reporting agency Experian disclosed a data breach on Wednesday.

The credit agency admitted to handing over the personal details of its South African customers to a fraudster posing as a client.

While Experian did not disclose the number of impacted users, a report from South African Banking Risk Centre (SABRIC), an anti-fraud and banking non-profit, claimed the breach impacted 24 million South Africans and 793,749 local businesses.





Should ‘poor security’ reduce any insurance coverage? Increase management/vendor liability?

https://www.databreaches.net/law-enforcement-websites-hit-by-blueleaks-may-have-been-easy-to-hack/

Law Enforcement Websites Hit by Blueleaks May Have Been Easy to Hack

Micah Lee reports:

Whoever broke into 251 law enforcement websites and obtained the blueleaks trove of documents appears to have reused decades-old software for opening “backdoors” in web servers.

The use of the widely available backdoors provides evidence that the hacktivist who compromised the sensitive sites, including fusion centers linked to federal agencies, didn’t need to use sophisticated digital attack methods because the sites were not very secure.

Read more on The Intercept.





A link for my Computer Security students.

https://www.cpomagazine.com/data-protection/iso-standards-for-information-and-data-protection/

ISO Standards for Information and Data Protection





Don’t commit a crime and leave your fingerprints face behind.

https://arstechnica.com/tech-policy/2020/08/cops-in-miami-nyc-arrest-protesters-from-facial-recognition-matches/

Cops in Miami, NYC arrest protesters from facial recognition matches

Cops' use of the tech among the list of things protesters are demonstrating against.

Miami police used Clearview AI to identify and arrest a woman for allegedly throwing a rock at a police officer during a May protest, local NBC affiliate WTVJ reported this week. The agency has a policy against using facial recognition technology to surveil people exercising "constitutionally protected activities" such as protesting, according to the report.

Similar reports have surfaced from around the country in recent weeks. Police in Columbia, South Carolina, and the surrounding county likewise used facial recognition, though from a different vendor, to arrest several protesters after the fact, according to local paper The State. Investigators in Philadelphia also used facial recognition software, from a third vendor, to identify protestors from photos posted to Instagram, The Philadelphia Inquirer reported.

New York City Mayor Bill de Blasio promised on Monday the NYPD would be "very careful and very limited with our use of anything involving facial recognition," Gothamist reported. This statement came on the heels of an incident earlier this month when "dozens of NYPD officers—accompanied by police dogs, drones and helicopters" descended on the apartment of a Manhattan activist who was identified by an "artificial intelligence tool" as a person who allegedly used a megaphone to shout into an officer's ear during a protest in June.





Loyal, like my Rottweiler?

Article: A Duty of Loyalty for Privacy Law

To add to your must-read list: Richards, Neil M. and Hartzog, Woodrow, A Duty of Loyalty for Privacy Law (July 3, 2020). Available at SSRN: https://ssrn.com/abstract=

Abstract

Data privacy law fails to stop companies from engaging in self-serving, opportunistic behavior at the expense of those who trust them with their data. This is a problem. Modern tech companies are so entrenched in our lives and have so much control over what we see and click that the self-dealing exploitation of people has now become a major element of the Internet’s business model.

Academics and policymakers have recently proposed a possible solution: require those entrusted with peoples’ data and online experiences to be loyal to those who trust them. But critics and companies have concerns about a duty of loyalty. What, exactly, would such a duty of loyalty require? What are the goals and limits of such a duty? Should loyalty mean obedience or a pledge to make decisions in peoples’ best interests? What would the substance of the rules implementing the duty look like?

In this article, we offer a theory of loyalty based upon the risks of digital opportunism in information relationships. Data collectors bound by this duty of loyalty would be obligated to act in the best interests of people exposing their data and online experiences, up to the extent of their exposure. They would be prohibited from designing digital tools and processing data in a way that conflicts with a trusting parties’ best interests. This duty could also be used to set rebuttable presumptions of disloyal activity and act as an interpretive guide for other duties. A duty of loyalty would be a revolution in data privacy law. That’s exactly what is needed to break the cycle of self-dealing ingrained into the current Internet. This Article offers one pathway for us to get there.

You can read or download the full paper on SSRN, here.





A new local resource?

https://www.bizjournals.com/denver/news/2020/08/19/palantir-peter-thiel-alex-karp-headquarters-denver.html?page=all

Data-analysis giant Palantir is moving its headquarters to Denver

Palantir Technologies Inc., a $20 billion data-analysis software firm that sells its products to governments to help them track everything from immigrants to terrorists to the spread of coronavirus, is relocating its headquarters from Palo Alto, California, to Denver.

Company officials have not yet responded to Denver Business Journal's requests for interviews, but the firm now lists Denver as its headquarters on its website, its social media pages and its Wikipedia entry — changes believed to have been made quietly on Tuesday.





The things you learn reading strange articles.

https://daily.jstor.org/the-people-who-thought-farmers-without-radios-were-rubes/

The People Who Thought Farmers Without Radios Were Rubes

The year 2020 (August 20, to be precise) marks the 100-year anniversary of the first broadcast by a federally licensed radio station, Detroit’s 8MK. The advent of real-time mass media changed the country in all kinds of ways.



No comments: