Thursday, November 20, 2008

Perhaps the leak was not the result of “simple ignorance”

http://www.pogowasright.org/article.php?story=20081119154116815

Police scour BNP membership to find officers breaching ban (follow-up)

Wednesday, November 19 2008 @ 03:41 PM EST Contributed by: PrivacyNews

Note from Dissent: as if we needed any additional reminders of why breaches matter even if they do not pose a risk of financial ID theft, the BNP breach in the UK is a serious reminder as jobs may be lost , people may be harassed, or worse....

Every police force in the UK was tonight scouring the leaked British National party membership list for names of serving officers, after the Merseyside force confirmed it was investigating one officer's links to the far-right party.

The Prison Service pledged to oust any employee on the list and far-right supporters spoke of fear for their livelihoods as the BNP was plunged into crisis.

Party officials complained that hundreds of members had received threatening or abusive telephone calls within hours of the list being posted on the internet, and feared that the episode could lead to a damaging slump in support and membership.

Source - Guardian

[From the article:

A handful of those contacted by the Guardian said their names appeared by mistake, claiming to have no interest in the BNP. "We're absolutely horrified by this," said a retired teacher from West Yorkshire, who has appeared on the list with her husband. "We're absolutely devastated and wondering if we offended someone and they applied to the BNP with our names as a joke. We're contacting lawyers but what can we do?"



Is there any reason to consider this a CyberWar tactic?

http://blog.wired.com/defense/2008/11/army-bans-usb-d.html

Under Worm Assault, Military Bans Disks, USB Drives

By Noah Shachtman November 19, 2008 6:12:30 PM

The Defense Department's geeks are spooked by a rapidly spreading worm crawling across their networks. So they've suspended the use of so-called thumb drives, CDs, flash media cards, and all other removable data storage devices from their nets, to try to keep the worm from multiplying any further.

The ban comes from the commander of U.S. Strategic Command, according to an internal Army e-mail. It applies to both the secret SIPR and unclassified NIPR nets. The suspension, which includes everything from external hard drives to "floppy disks," is supposed to take effect "immediately." Similar notices went out to the other military services.



Getting into databases is easy. Knowing you are in the database, determining what information is attached to your name and getting it corrected/removed is almost impossible.

http://www.washingtonpost.com/wp-dyn/content/article/2008/11/19/AR2008111903710.html

Little Data Disclosed In Files, Activists

Material's Sensitivity Is Cited by Agency

By Lisa Rein and Josh White Washington Post Staff Writers Thursday, November 20, 2008; Page B02

Activists whose names and groups were improperly entered into a Maryland State Police database that tracks terrorism suspects said yesterday that the agency has failed to disclose the extent of the surveillance and why it was done.

The American Civil Liberties Union of Maryland released the police files of 19 of the 53 people who police say were wrongly entered into state and federal databases. Attorneys for the civil liberties union, which represents 28 activists, said the police have not explained why the files are heavily redacted, raising more questions than answers.

"We are nowhere near approaching full disclosure of what they did, why they did it and who they did it to," ACLU staff attorney David Rocah said at a news conference in Baltimore. He called the redactions, the events police chose to track, and the inclusion of some people in the database and not others "random and haphazard."


Related: You can never have too much surveillance.

http://www.pogowasright.org/article.php?story=20081120060342135

New York Police Fight With U.S. On Surveillance

Thursday, November 20 2008 @ 06:03 AM EST Contributed by: PrivacyNews

An effort by the New York Police Department to get broader latitude to eavesdrop on terrorism suspects has run into sharp resistance from the Justice Department in a bitter struggle that has left the police commissioner and the attorney general accusing each other of putting the public at risk.

Source - NY Times

[From the article:

The Police Department, with the largest municipal counterterrorism operation in the country, wants the Justice Department and the Federal Bureau of Investigation to loosen their approach to the federal law that governs electronic surveillance. But federal officials have refused to relax the standards, and have said requests submitted by the department could actually jeopardize surveillance efforts by casting doubt on their legality. [Wow! This from the folks who brought us unlimited warrantless wiretapping! Bob]



We will also mandate a class called “The Joy of Big Brother” wherein students will learn to rat on their parents and friends... Look, it would be so much easier if you just handed us your wallet so we could copy everything... (Thanks Gary)

http://www.insidehighered.com/news/2008/11/19/oig

Nov. 19

Privacy Concerns About U.S. Database

As a general rule, big government databases aren’t especially popular, and higher education’s recent experiences with them — be they the relatively new federal database to track foreign students in the wake of September 11, or a proposed “unit records” database to track the academic success of students as they move through the educational system — have generated controversy.

Little wonder, then, that advocates for colleges and students are more than a little concerned — okay, freaked out — by a plan by the U.S. Department of Education’s Office of Inspector General to gather personally identifiable information from nine existing databases [Translation: They already have the data Bob] of grant, loan and contract recipients into one giant “data analytics system” and by the Education Department’s decision to waive certain privacy rules for the new records system. [“Hey, if Google and e-Bay and all those other folks can change their privacy policy whenever they want, so can we!” Bob


Related? Perhaps this is how they will use the Education Database – listing known or suspected drug dealers in each school...

http://blog.wired.com/27bstroke6/2008/11/us-drug-czar-po.html

U.S. Drug Czar Posts Roadmap to Buying Dope in San Francisco

By Kevin Poulsen November 19, 2008 3:49:39 PM

Vacationers traveling to San Francisco and hoping to score some weed have a great new resource at their disposal, courtesy of the U.S. government: a Google map mashup that shows the locations of all the medical marijuana dispensaries in the City by the Bay.

The map, posted on the blog of the Office of National Drug Control Policy, denotes the locations of 71 pot sellers with tiny cannabis leaf icons. The map also pinpoints all the Starbucks stores — just the thing for smokers looking to satisfy their munchies with an overpriced croissant.



This pretty much defines a “lock in.” It also defines poor planning.

http://tech.slashdot.org/article.pl?sid=08/11/19/189246&from=rss

London's Oystercard Gets New Contract, But Same Suppliers

Posted by timothy on Wednesday November 19, @01:15PM from the captain-amazing-wears-no-glasses dept. Transportation Security

nk497 writes

"Over the summer, the London travelcard ticketing system — called Oyster — fell over twice, forcing the transport authority to offer free travel to the six million Londoners using the system. After that, it cut its contract with the supplier of the system, a consortium called TranSys. But now, Transport for London has signed a new contract to replace the TranSys one — with the same two companies that made up the TranSys consortium. Sure, that should fix everything."



Outsourcing Perhaps Mexico could expand its Consulates to include a Hospital?

http://www.newsweek.com/id/169827?from=rss

Ultimate Outsourcing

Now, Mexican medicine. American companies are building hospitals south of the border to serve refugees from an ailing health-care system.

By Tina Peng Newsweek Web Exclusive Nov 19, 2008 Updated: 1:29 p.m. ET Nov 19, 2008

... Older Americans who live near the Mexican border have always crossed in search of dental care and pharmaceutical drugs, neither of which are fully covered by Medicare, according to Prof. David Warner, who studies cross-border health care at the University of Texas's LBJ School of Public Affairs.

This growing demand for lower-cost procedures is fueling an increase in hospital construction, often in developing countries and targeted in part at foreign customers. Mexico's largest private-hospital chain, Grupo Empresarial Angeles, is building 15 new hospitals over the next three years and hopes foreigners will make up 20 percent of their patients by 2010, up from 5 percent now.


Related Outsource the UAW too?

http://www.huffingtonpost.com/jane-hamsher/chinese-want-to-buy-the-b_b_144920.html

Jane Hamsher Posted November 19, 2008 01:02 PM (EST)

Chinese Want To Buy the Big 3 Automakers

It appears that the Chinese car makers SAIC and Dongfeng have plans to acquire the Big 3:

A take-over of a large overseas auto maker would fit perfectly into China's plans. As reported before, China has realized that its export chances are slim without unfettered access to foreign technology. The brand cachet of Chinese cars abroad is, shall we say, challenged. The Chinese could easily export Made-in-China VWs, Toyotas, Buicks. If their joint venture partner would let them. The solution: Buy the joint venture partner. Especially, when he's in deep trouble.



With a little Photoshopping, you could make up those Post Office posters now and save time later!

http://www.bespacific.com/mt/archives/019857.html

November 19, 2008

New Member Pictorial Directory: 111th Congress

New Member Pictorial Directory: 111th Congress - View images of the new members of the 111th Congress.



Sometimes you just can't wait.

http://www.bespacific.com/mt/archives/019861.html

November 19, 2008

Federal Register Announces Launch of New Electronic Public Inspection Desk

News release: "The Office of the Federal Register has created an Electronic Public Inspection Desk to provide free worldwide electronic access to public documents. For the first time in the 72-year existence of the daily Federal Register, the documents on file are available for viewing anytime, anywhere. Every Federal business day, anyone with access to a computer now can read critical documents governing Federal regulations relating to business, health, and safety as soon as the documents are placed on file. To view these documents, go to www.federalregister.gov. See "View Documents on Public Inspection" on the left hand side. This new desk grants the public access to documents that will be published in the next day's Federal Register as early at 8:45 a.m. EST. Previously, such documents could only be seen by viewing the documents physically located at the Office of the Federal Register in Washington, D.C."



My Risk Analysis classes make similar “calculators” for other “events” It is simple to do.

http://www.infoworld.com/article/08/11/19/How_much_does_spam_cost_you_Google_will_calculate_1.html?source=rss&url=http://www.infoworld.com/article/08/11/19/How_much_does_spam_cost_you_Google_will_calculate_1.html

How much does spam cost you? Google will calculate

Google Message Security calculator determines how many days and dollars your company loses in productivity to spam

By Robert McMillan, IDG News Service November 19, 2008

How much is spam costing your company? Google unveiled a nifty little calculator Wednesday to help you add it up.

It's part of a marketing campaign for Google Message Security, the online spam-filtering service based on the Postini technology Google acquired last year. "We know in these tougher economic times that companies are trying to figure out how they can save," said Adam Dawes, a Google product manager.



This is likely to be a truly bad idea, yet I suspect it will be inevitable. Think of the implications of development in the hands of individuals who see no need to document or explain their asumptions of how the organization works. Every organization can have their own 'sub-prime' application!

http://www.infoworld.com/article/08/11/20/47NF-codeless-dev_1.html?source=rss&url=http://www.infoworld.com/article/08/11/20/47NF-codeless-dev_1.html

A future without programming

Code-free application builders allow business people to take development into their own hands. Where does that leave the coders?

By Tom Kaneshige November 20, 2008

A few years ago, self-proclaimed nondeveloper Kevin Smith worked for a software company that tried to build a project tracking tool using Microsoft .Net. Some 15 developers spent a year with little success. "After burning though a million dollars and still without a product, the company called it quits," says Smith, now managing partner of NextWave Performance, a consultancy in Denver, Colo.

NextWave took up the idea but ran into similar timetable and budgetary overruns. "I said, 'I'll learn to code and do it myself,'" a frustrated Smith recalls. His search eventually led him to Coghead, a Web app for code-free development of Web apps -- and Smith built key components of the tracking tool in less than 30 days.

"I was showing my business partner some of this stuff the other day and he turned to me and asked, 'How do traditional developers stay in business?'" Smith says. "It's such a game changer. I think it turns developers from wizards who read the magic book and know the syntax into business analysts who understand the processes and goals of what they're trying to achieve."

Such views may be a bit far-fetched, but it's true that do-it-yourself application development has never been more appealing. With IT budgets being squeezed, along with the growing dysfunctional relationship between IT staff and managers, it's no wonder the promise of cheap "codeless" development that sidesteps IT resonates loudly with businesspeople. "We also have a whole new wave of business users that are not intimidated by the notion of application development," says Mike Gualtieri, analyst at Forrester.



For my website class. Also some links to other amusing tools...

http://www.killerstartups.com/Video-Music-Photo/convertmytube-com-convert-youtube-videos

ConvertMyTube.com - Convert YouTube Videos

http://www.convertmytube.com

There is a fair number of online applications that aim to make the experience of using YouTube a more realized one. Preeminently among them are the tools for capturing and converting video files stored at the popular hosting service. The one we are discussing right now falls squarely into that category.

In general terms, all you have to do is cut and paste the corresponding YouTube URL into the provided box and hit the “Convert & Download” button.

... And the one aspect that can be modified is actually the one that should not be bypassed, namely the file extension. This is important if only because it will enable you to rest assured the converted file will be viewable in different setups (like PCs and Macs) and devices (like iPods and iPhones).



Every teacher/research librarian dreams it could be this easy! ('cause some people need to be insulted.)

http://digg.com/comedy/Let_me_google_that_for_you

"Let me google that for you..."

letmegooglethatforyou.com — For all those people that find it more convenient to bother you with their question rather than google it for themselves.

http://letmegooglethatforyou.com/

Wednesday, November 19, 2008

I'm not aware of the data breaches mentioned in this article, but then they are ancient in “Internet time”

http://www.pogowasright.org/article.php?story=20081119061920499

MA: Teen pleads guilty to hacking spree

Wednesday, November 19 2008 @ 06:19 AM EST Contributed by: PrivacyNews

From his home in Worcester, he called 911 in Seattle and Georgia, reporting nonexistent crimes that resulted in SWAT teams being dispatched.

..... Dshocker obtained stolen credit card numbers and purchased items over the Internet. To evade arousing suspicion of credit card companies, he had packages sent to the homes of the card holders whose identities he had stolen. But before the packages arrived at their destinations, a confederate who worked at a major shipping company would reroute the packages to Dshocker's home, the indictment said.

From January 2008 to May 2008, he made 911 calls to police departments across the country, reporting bomb threats or that an armed gunman was at a school - hoaxes known as "swatting." To disguise his identity on those calls, he used a process of fooling caller identification equipment with stolen names and phone numbers, known as caller ID spoofing, the indictment said. He obtained addresses and phone numbers for the hoax by hacking into the records of Internet service providers.

Court records said he gained access to corporate computer systems, including the networks of Charter Communications, Road Runner, and Comcast, and would steal information about customers.

Source - Boston.com

[From the article:

From November 2005 to January 2008 he had controlled "botnets," networks of thousands of computers infected with a malicious software code, according to the indictment.



Who else do we know who “has a little list?” The “Lord High Executioner” and the Democrats.

http://www.pogowasright.org/article.php?story=20081118171238414

UK: Victims cannot sue party (follow-up and update)

Tuesday, November 18 2008 @ 05:12 PM EST Contributed by: PrivacyNews

Thousands of BNP members whose details were leaked will not be able to sue either the far-right group or the disgruntled former member suspected of publishing the list, leading lawyers said last night.

Although there was a “clear breach” of data protection law in publishing the list, the legal remedies available to those affected are sparse. Members will not be able to sue the BNP itself, Hugh Tomlinson, QC, a leading data protection lawyer, said. “It’s unlikely they’d have a remedy against the BNP, which seems to be a victim of someone unlawfully obtaining sensitive information which it held.

Source - Times Online

Update: Another article in Times Online reports:

More than 12,000 names, home addresses, telephone numbers and e-mail contact details were included in a major breach of data protection.

The identities and ages of school-children with family memberships were also disclosed. Some supporters were listed with comments such as “discretion required – employment concerns”. A number even had their hobbies recorded.

The BNP said that the revelation could leave its members vulnerable to violent attack.


Related? The cost of a security breach is trending up. Isn't this a good thing? (Of course in the UK, most breaches are from government agencies.)

http://www.pogowasright.org/article.php?story=20081118104825151

UK: Fines likely for data breaches

Tuesday, November 18 2008 @ 10:48 AM EST Contributed by: PrivacyNews

The UK’s privacy and data protection watchdog, the Information Commissioner’s Office (ICO), is seeking the power to fine businesses up to 10 per cent of their revenues for breaking data laws.

That penalty is the maximum punishment the Financial Services Authority can impose on companies that breach financial regulations. The ICO believes it should be able to enact the same penalty for companies that commit ‘serious and reckless breaches [of the Data Protection Act] resulting in harm to individuals’. The maximum penalty currently available to the ICO is £5,000.

Source - growthbusiness.co.uk


Related? No reason to do this since the law didn't go into effect until after the Christmas buying season...

http://www.pogowasright.org/article.php?story=20081118132449836

Mass. delays enforcement of data security regs

Tuesday, November 18 2008 @ 01:24 PM EST Contributed by: PrivacyNews

The Massachusetts’ Office of Consumer Affairs and Business Regulation is postponing the compliance date for its identity theft data security regulations in light of the current economic crisis.

The general compliance deadline for the state’s 201 CMR 17 regulations was initially set for Jan. 1, 2009, but officials have pushed it to May 1. E

Source - GCN


Probably related too... Everything seems to be today.

http://www.pogowasright.org/article.php?story=20081119060705659

Congress Warned of Google Privacy & Security Risks After Google Markets Services to Staffers on Hill; New Video Shows Privacy Problems With Gmail

Wednesday, November 19 2008 @ 06:07 AM EST Contributed by: PrivacyNews

Consumer Watchdog released a new on-line video exposing privacy problems with Google's Gmail service and other Google applications in the wake of Google's recent marketing efforts on Capitol Hill. At a speech in Washington D.C. today, Google CEO Eric Schmidt acknowledged the group's privacy concerns and expressed an interest in addressing them. He said his concern was balancing performance and speed of the system with privacy and security demands.

The video -- which can be viewed at http://www.consumerwatchdog.org/google -- shows that whether you use Google's Gmail or not, Google reads the contents of your emails, if the recipient uses Gmail. Consumer Watchdog also highlighted how the "auto save" function in many Google applications creates an unprotected communication for users even before a message is sent or a document submitted. Previously Consumer Watchdog had called on Google to adopt Secure Sockets Layer (SSL) protection for transmission of information as a default.

Source - MarketWatch Press Release



Another technology that is spreading faster than thoughtful ways to control it.

http://www.pogowasright.org/article.php?story=2008111815453021

RFID Chips: A Privacy And Security Pandora's Box?

Tuesday, November 18 2008 @ 03:45 PM EST Contributed by: PrivacyNews

A research article published in the current issue of the International Journal of Intellectual Property Management suggests that Big Brother could be opening a privacy and security Pandora's Box if human rights, particularly regarding data protection are not addressed in the design of new RFID applications.

Source - Science Daily Press Release

[From the article:

Their increasingly widespread deployment means individuals do not necessarily know when, how and what kind of information about them is being transmitted at any given time from an RFID in a passport, in their shopping bags, or even when they visit the library



Antitrust alert? Or something Microsoft should have done years ago?

http://it.slashdot.org/article.pl?sid=08/11/18/2319243&from=rss

Microsoft To Offer Free Anti-Virus Software

Posted by kdawson on Tuesday November 18, @09:19PM from the another-industry-done-gone dept. Microsoft Security

Dynamoo writes

"The good news is that Microsoft have announced free anti-virus software for consumers, dubbed Morro, available late next year. The bad news is... well, exactly the same. Although Microsoft's anti-malware products are pretty good, this move could drive many competitors out of business and create a dangerous security monoculture; major rivals will be lawyering up already. On the other hand, many malware infections could be prevented even by basic software. So is this going to be a good or bad thing overall?"



You should get coffee while your computer boots...

http://news.slashdot.org/article.pl?sid=08/11/18/1754236&from=rss

Should You Get Paid While Your Computer Boots?

Posted by kdawson on Wednesday November 19, @12:02AM from the define-work-and-give-two-examples dept.

An anonymous reader notes a posting up at a law blog with the provocative title Does Your Boss Have to Pay You While You Wait for Vista to Boot Up?. (Provocative because Vista doesn't boot more slowly than anything else, necessarily, as one commenter points out.) The National Law Journal article behind the post requires subscription. Quoting:

"Lawyers are noting a new type of lawsuit, in which employees are suing over time spent booting [up] their computers. ... During the past year, several companies, including AT&T Inc., UnitedHealth Group Inc. and Cigna Corp., have been hit with lawsuits in which employees claimed that they were not paid for the 15- to 30-minute task of booting their computers at the start of each day and logging out at the end. Add those minutes up over a week, and hourly employees are losing some serious pay, argues plaintiffs' lawyer Mark Thierman, a Las Vegas solo practitioner who has filed a handful of computer-booting lawsuits in recent years. ... [A] management-side attorney... who is defending a half-dozen employers in computer-booting lawsuits... believes that, in most cases, computer booting does not warrant being called work."



At last, Quality videos

http://news.cnet.com/8301-17939_109-10102144-2.html?part=rss&subj=news&tag=2547-1_3-0-5

Monty Python launches YouTube Channel, tells users to stop stealing

Posted by Don Reisinger November 19, 2008 5:28 AM PST

Monty Python, the iconic comedy series, has launched a YouTube channel. And although the page features a slew of clips from the show, most noteworthy is its featured video, which blames users for "ripping" the show off.

"For three years you YouTubers have been ripping us off, taking tens of thousands of our videos and putting them on YouTube," it says on the Monty Python YouTube page. "Now the tables are turned. It's time for us to take matters into our own hands.

"We know who you are, we know where you live and we could come after you in ways too horrible to tell. But being the extraordinarily nice chaps we are, we've figured a better way to get our own back: We've launched our own Monty Python channel on YouTube.



Research... Honest!

http://www.bespacific.com/mt/archives/019845.html

November 18, 2008

LIFE photo archive hosted by Google

"Search millions of photographs from the LIFE photo archive, stretching from the 1750s to today. Most were never published and are now available for the first time through the joint work of LIFE and Google."

Tuesday, November 18, 2008

So easy, even a caveman can do it.

http://breachblog.com/2008/11/17/pccf.aspx?ref=rss

Inmate allegedly obtains personal information about prison workers

Date Reported: 11/06/08 Organization: Plymouth County (MA)

"BOSTON (WBZ) - A former inmate of the Plymouth County Correctional Facility is accused of hacking into a prison computer and distributing personal information of workers to other inmates."

... The Indictment alleges that while JANOSKO was an inmate at the Plymouth County Correctional Facility in Plymouth County, Massachusetts, the prison provided inmates a computer so they could research legal matters. [Evan] I suppose they (inmates) have the "right" to such things.

To maintain computer and prison security, the prison attempted to restrict the inmates’ access to legal research and nothing else. [Evan] It baffles me.

As configured, the computer prevented inmates from accessing the Internet, e-mail, other computers on the prison's networks, or even other computer programs on the legal research computer. [...at least, that's what they intended... Bob]

The Indictment further alleges that despite these restrictions, JANOSKO figured out how to use the legal research computer for purposes other than legal research, by several methods including exploiting a previously-unknown idiosyncrasy in the legal research software. [Evan] "idiosyncrasy" = "bug".

Using a thin client that was connected to a prison server, the prisoner was able to access an employee database by exploiting a bug in legal research software made available to inmates.



A Willie Sutton crime (go where the money is) or practicing a tactic of CyberWar (destroy the morale of the troops)

http://www.pogowasright.org/article.php?story=20081117193659364

ID theft cases surging among Americans in U.K. (follow-up)

Monday, November 17 2008 @ 07:36 PM EST Contributed by: PrivacyNews

RAF MILDENHALL, England — The number of U.S. military members in England who have had their identity stolen this year continues to rise, the Air Force said last week.

And even though some bases released the number of ID theft cases earlier this year, Air Force Office of Special Investigations officials would not say last week how many cases have occurred since then, citing the ongoing nature of the investigation.

Source - Stars and Stripes



Note to academics: Read the Entire F***ing Manual

http://www.pogowasright.org/article.php?story=20081117124201499

Jp: Student data slip out via Google Maps

Monday, November 17 2008 @ 12:42 PM EST Contributed by: PrivacyNews

Personal information on about 980 students from 37 schools has been mistakenly disclosed to the public by teachers using the Google Maps Web site, according to a Yomiuri Shimbun study.

Primary, middle and high school teachers using the site to locate their students' homes easily and for other record-keeping purposes have been inputting the names, addresses and other pieces of personal information of students on the free online map search site. In some cases, however, they have mistakenly made the information accessible to the general public.

Source - Daily Yomiuri Online

[From the article:

The Yomiuri study also found that some of the data in question has remained in the public domain even after teachers tried to delete it.

... The public disclosure problem stems from Google Maps' default settings. Users of the service tend to assume that information entered is available only to themselves as the site promotes itself as an exclusive map for individual users. But the default setting allows access to all Internet users and this remains the case as long as the user does not change the setting to limited access.



See what fun you can have when you do read the manual?

http://www.pogowasright.org/article.php?story=20081117172527241

KY: Student charged with hacking, blackmail scheme

Monday, November 17 2008 @ 05:25 PM EST Contributed by: PrivacyNews

A University of the Cumberlands student is accused of hacking into other students' accounts and using the information to blackmail them.

Sungkook Kim, 23, is charged with identity theft and unlawful access to a computer, according to a press release from the Kentucky Attorney General's office. The office's cybercrime unit conducted a joint investigation with Williamsburg police.

Source - Kentucky.com

Related - Attorney General Conway Announces Cybercrimes Arrest On Kentucky College Campus Press Release

[From the article:

Investigators said Kim pirated another person's wireless router to send the threatening e-mails and that he had installed spyware on college library computers to capture logon IDs and passwords for students and faculty, according to the attorney general's statement.


Related Perhaps I should download a few of the dozens of free keyloggers before the FTC wakes up?

http://www.pogowasright.org/article.php?story=20081117173529229

FTC Takes Aim at "Stalker Spyware" Company

Monday, November 17 2008 @ 05:35 PM EST Contributed by: PrivacyNews

Acting on a request from the Federal Trade Commission, a U.S. District Court has temporarily halted the sale of "stalker spyware," pending a decision on whether these products engage in unfair and deceptive practices by enabling and encouraging privacy invasion. Keylogger programs are often sold as "stalker spyware" and describe in detail how to spy on others without being detected, according to the FTC complaint. CDT applauds the hard work of the Electronic Privacy Information Center, which first brought a petition to the FTC to stop these deceptive, privacy invasive technologies

Source - CDT.org Related - FTC Notice on Court Action

[From the article:

According to papers filed with the court, the defendants provided RemoteSpy clients with detailed instructions explaining how to disguise the spyware as an innocuous file, such as a photo, attached to an email. When consumer victims clicked on the disguised file, the keylogger spyware silently installed in the background without the victims’ knowledge. This spyware recorded every keystroke typed on the victim’s computer (including passwords); captured images of the computer screen; and recorded Web sites visited. To access the information gathered and organized by the spyware, RemoteSpy clients would log into a Web site maintained by the defendants.



Provacy Statistics

http://www.pogowasright.org/article.php?story=20081117091331827

Ca: 1.7 Million Canadians Are Victims of Identity Fraud

Monday, November 17 2008 @ 09:13 AM EST Contributed by: PrivacyNews

Nearly 1.7 million Canadian consumers were victims of identity fraud in the past year, according to a new national survey conducted by researchers at the DeGroote School of Business at McMaster University.

These victims spent more than 20 million hours and more than $150 million of their own money to resolve the fraud.

Source - Newswise Press Release



Not all markets are down...

http://www.pogowasright.org/article.php?story=20081117173023649

UK identities sold for £80 online

Monday, November 17 2008 @ 05:30 PM EST Contributed by: PrivacyNews

Internet fraudsters sell complete financial identities for just £80, according to an online safety group.

The details packaged and sold online include names, addresses, passport numbers and confidential financial data such as credit card numbers.

With six out of 10 people now managing finances online, experts say the public needs to do more to prevent e-crime.

Source - BBC Thanks to Brian Honan for the link.

[From the article:

The safety group estimates that nearly half of all computer users in the UK are vulnerable because they are not using defensive measures such as a firewall, or up-to-date software which can identity malicious programs.



New players?

http://www.washingtonpost.com/wp-dyn/content/article/2008/11/16/AR2008111601624_pf.html

A New Voice in Online Privacy

Group Wants Tighter Rules for Collecting, Using Consumer Data

By Kim Hart Washington Post Staff Writer Monday, November 17, 2008; A06

A group of privacy scholars, lawyers and corporate officials are launching an advocacy group today designed to help shape standards around how companies collect, store and use consumer data for business and advertising.

The group, the Future of Privacy Forum, will be led by Jules Polonetsky, who until this month was in charge of AOL's privacy policy, and Chris Wolf, a privacy lawyer for law firm Proskauer Rose. They say the organization, which is sponsored by AT&T, aims to develop ways to give consumers more control over how personal information is used for behavioral-targeted advertising.

... President-elect Barack Obama has cited privacy as one of the technology issues his administration would address, setting the stage for a debate over standards for online publishers and advertisers. Obama also said he would appoint the first chief technology officer, who may be charged with making government data more transparent while protecting citizens' privacy. The Future of Privacy Forum will seek to work with the government on these issues.



I'd say that was a good indication that the law went too far...

http://www.pogowasright.org/article.php?story=20081118065044637

De: Police Unions Join Politicians in Opposition to German Spy Law

Tuesday, November 18 2008 @ 06:50 AM EST Contributed by: PrivacyNews

A law expanding the spying abilities of Germany's federal police has been criticized by police unions. They say the proposed law's aggressive online evidence-gathering measures are ill-conceived and open to abuse.

Source - dw-world.de



This is rather scary... Will ISPs be next?

http://www.pogowasright.org/article.php?story=20081118063703136

RIAA Wins, Campuses Lose as Tennessee Governor Signs Campus Network Filtering Law

Tuesday, November 18 2008 @ 06:37 AM EST Contributed by: PrivacyNews

Last week, the RIAA celebrated the signing of a ridiculous new law in Tennessee that says:

Each public and private institution of higher education in the state that has student residential computer networks shall:

[...]

[R]easonably attempt to prevent the infringement of copyrighted works over the institution's computer and network resources, if such institution receives fifty (50) or more legally valid notices of infringement as prescribed by the Digital Millennium Copyright Act of 1998 within the preceding year.

Source - EFF



Q: Are we Big Brother-izing politics? A: Don't be silly. We have always known more about you second class citizens than you will ever know about us.

http://www.pogowasright.org/article.php?story=2008111719383420

Barack Obama's Privacy Challenge

Monday, November 17 2008 @ 07:38 PM EST Contributed by: PrivacyNews

... While both Democrats and Republicans used databases to profile and target voters to get out the vote, it's the Democrats who have historically been big privacy advocates, [Advocacy is not belief Bob] but who during this election cycle profited politically from the sophisticated integration of all the data contained in state level voter files, commercial databases, and from canvassing information that was also added by millions of volunteers.

All that data collected during the 2008 campaign now sits in databases controlled by the Obama campaign and the Democratic National Committee, in addition to third-party vendors such as Catalist.

Source - Threat Level



If the police find the chained, beaten but still breathing body of a Spammer on their doorstep – with a signed confession stapled to his forehead – should they ignore it?

http://it.slashdot.org/article.pl?sid=08/11/17/2053220&from=rss

McColo Takedown, Vigilantes Or Neighborhood Watch?

Posted by CmdrTaco on Monday November 17, @05:49PM from the where's-batman-when-you-need-him dept. Security The Internet

CWmike writes

"Few tears were shed when alleged spam and malware purveyor McColo was suddenly taken offline last Tuesday by its upstream service providers. But behind the scenes of the McColo case and another recent takedown of Intercage, a ferocious struggle is taking place between the purveyors of Web-based malware and loosely aligned but highly committed groups of security researchers who are out to neutralize them. Backers claim that the effort to shut down miscreant ISPs is needed because of the inability of law enforcement agencies to deal with a problem that is global in nature. But some question whether there is a hint of vigilantism behind the takedowns — even as they acknowledge that there may not be any other viable options for dealing with the problem at this point."



Think of this as an example of the “to outsource or not to outsource” test.

http://news.slashdot.org/article.pl?sid=08/11/18/023224&from=rss

It's Official, Australia Needs a Space Agency

Posted by kdawson on Tuesday November 18, @05:32AM from the bird-on-the-barbie dept. Government Space

Dante_J writes

"In the final report published by the Australian Senate inquiry into 'The Current State of Australia's Space Science & Industry Sector' entitled 'Lost in Space? Setting a new direction for Australia's space science and industry sector,' it calls for the formation of a 'Space Industry Advisory Council' to oversee the creation of a fully-fledged Australian Space Agency. Of the top 20 GDP nations, Australia is the only one without a Space Agency, which impacts on many aspects of ordinary life, not to mention Research and Engineering endeavors. Every satellite operated by Australia is owned by another party and the costs of this alone are comparable to that of a Space Agency. The report is a tidy piece that drew upon submissions form Andy Thomas, and an impressive collection of Australian Academics and Space Science entities frustrated by successive generations of government apathy. While this report is welcome, lethargic Government action in a climate of competing concerns is not expected to stem the flow of Space Science brain drain out of Australia any time soon."



Backups are good.

http://www.killerstartups.com/Web-App-Tools/gmail-backup-com-play-it-safe

GMail-Backup.com - Play It Safe

http://www.gmail-backup.com

As its name unequivocally implies, GMail Backup is a tool that will let you rest assured all the vital communications that are stored online at your GMail account won’t be lost accidentally.

All major operating systems are taken into account, and those who use PCs, Macs and Linux are catered for.

This solution is actually provided free of charge, and you can download the latest version at the website. Alternative download sites are also listed just in case, but bear in mind that not all of them feature the latest version for download.



For your Security Manager (PowerPoint, but worth looking at just for the images and links)

http://bhconsulting.ie/securitywatch/?p=498

Incident Response Presentation Available Online

October 31st, 2008 | by Brian Honan |

My presentation on improving incident response to the Irish Computer Society’s Privacy Forum is now online.



Changes to Security theater (only seven years in the making!)

http://blog.wired.com/27bstroke6/2008/11/chertoff-were-c.html

Chertoff: We're Closing that Boarding-Pass Loophole

By Ryan Singel November 17, 2008 1:57:11 PM

There’s a hole in airline security big enough to get Osama bin Laden himself onto a domestic flight, Homeland Security chief Michael Chertoff acknowledges, but that’s no reason to ditch watch lists or ID checks at the airport, he says.

Chertoff told Threat Level in an interview last week that the government was aware of, and patching, the so-called boarding-pass loophole, which just came back into the public eye after a recent Atlantic magazine story where a reporter got though security using a fake boarding pass.

That loophole lets a known terrorist who is on a government watch list board a plane without needing a fake ID. All that’s needed is a home computer, a printer and a little skill at HTML.



Forensics

http://yro.slashdot.org/article.pl?sid=08/11/17/2218209&from=rss

Feds Can Locate Cell Phones Without Telcos

Posted by kdawson on Monday November 17, @06:31PM from the marco-polo-if-you-can dept.

schwit1 sends along an Ars Technica report covering the release of documents obtained under the FOIA suggesting that the Justice Department may have been evading privacy laws in their use of "triggerfish" technology. Triggerfish are cell-tower spoofing devices that induce cell phones to give up their location and other identifying information, without recourse to any cell carrier.

"Courts in recent years have been raising the evidentiary bar law enforcement agents must meet in order to obtain historical cell phone records that reveal information about a target's location. But documents obtained by civil liberties groups under a Freedom of Information Act request suggest that 'triggerfish' technology can be used to pinpoint cell phones without involving cell phone providers at all. The Justice Department's electronic surveillance manual explicitly suggests that triggerfish may be used to avoid restrictions in statutes like CALEA that bar the use of pen register or trap-and-trace devices..." [After all, if we called the suspect and he told us where he was, that would be admissable. What's different about calling his phone for the same information? Bob]

The article does mention that the Patriot Act contains language that should require a court order to deploy triggerfish, whereas prior to 2001 "the statutory language governing pen register or trap-and-trace orders did not appear to cover location tracking technology."



Forensics

http://yro.slashdot.org/article.pl?sid=08/11/18/0115242&from=rss

Digital Photos Give Away a Camera's Make and Model

Posted by kdawson on Monday November 17, @09:57PM from the nobody-saw-me-you-can't-prove-anything dept. Privacy

holy_calamity writes

"Engineers at Polytechnic University Brooklyn have discovered that digital snaps shorn of any metadata still reveal the make and model of camera used to take them. It is possible to work backwards from the relationships of neighboring pixel values in a shot to identify the model-specific demosaicing algorithm that combines red, green, and blue pixels on the sensor into color image pixels. Forensics teams are already licking their chops."



For my website students (to go with all those free videos, pictures and sounds)

http://www.killerstartups.com/Web20/superarticlez-com-articles-for-blogs-and-ezines

SuperArticlez.com - Articles For Blogs And Ezines

http://www.superarticlez.com

Are you looking for contents and materials for inclusion in your existing blog or online publication? If that is ever the case, a visit to the suitably-titled Super Articlez website might just be what you need. Generally speaking, this web-based endeavor collects together contents ranging far and wide - from articles dealing with health and home improvement to pieces covering the world of computers and online business. These have been submitted by members of the online community for the consideration of other internauts.

The main page presents the different articles under the relevant headings, whereas the latest additions to this online collection are spotlighted for browsing convenience. Moreover, whenever an article is displayed a list of similar posts is featured at the bottom of the page. Further navigation tools include a tag cloud and a search engine.

A site like this is perfect for those who are either low on inspiration or short of time to come up with interesting contents themselves, not to mention being a superb outlet for aspiring writers who want to establish an online presence. Consider paying it a visit should you fall into either category.



Is this enough to provoke a response?

http://edition.cnn.com/2008/WORLD/africa/11/17/kenya.tanker.pirates/?iref=hpmostpop

Pirates hijack Saudi 'super tanker'

(CNN) -- Pirates inhave hijacked a Saudi-owned oil tanker with 25 crew aboard off the coast of Kenya the U.S. Navy and the British Foreign Office confirmed on Monday..

The Sirius Star -- a crude "super tanker" flagged in Liberia and owned by the Saudi Arabian-based Saudi Aramco company -- was attacked on Saturday more than 450 nautical miles southeast of Mombasa, Kenya, the statement said. The crew include British, Croatian, Polish, Filippino and Saudi nationals.

Monday, November 17, 2008

...because...

http://www.pogowasright.org/article.php?story=20081117053609991

Data “Dysprotection:” breaches reported last week

Monday, November 17 2008 @ 05:36 AM EST Contributed by: PrivacyNews

A recap of incidents or privacy breaches reported last week for those who enjoy shaking their head and muttering to themselves with their morning coffee.

Source - Chronicles of Dissent



I didn't say that... I thunk it many times, but I never said it.

http://www.pogowasright.org/article.php?story=20081117052810962

A Wealth of Data, and Nobody in Charge

Monday, November 17 2008 @ 05:28 AM EST Contributed by: PrivacyNews

Wanted: scout to look out for Big Brother and his cousin, Data Breach. Evangelist to spread the word about what information can be shared. A shredder abettor who knows what is nobody's business. This person should also be prepared to help our college recover from embarrassing headlines about Social Security numbers gone missing.

Colleges may soon be running ads something like that for chief privacy officers, a title so new in higher education that one campus public-relations official, when asked if his institution had a CPO, replied, "What in the blue blazes is that?

Source - Chronicle of Higher Education



Not all laws are rational...

http://www.pogowasright.org/article.php?story=20081116140414285

Google and Europe at odds over privacy

Sunday, November 16 2008 @ 02:04 PM EST Contributed by: PrivacyNews

When Google began hiring in Zurich for its new engineering center in 2004, local officials welcomed the U.S. company with open arms. Google's arrival is still bearing fruit for Zurich: 450 employees, about 300 of them engineers, work in Google's seven-story complex in a converted brewery on the outskirts of the placid mountain metropolis.

But almost five years into its expansion into Europe - where it has a headquarters in Dublin, large facilities in Zurich and London and smaller centers in Denmark, Russia and Poland, among other countries - Google is beginning to bump up against a web of privacy laws that threaten its growth and the positive image it has cultivated as a company dedicated to doing good - its unofficial motto.

Source - International Herald Tribune



Here comrade citizen, stick this up your nose... (Do we have a list of “Do not fly” diseases?)

http://www.sciencedaily.com/videos/2008/0904-detecting_disease_in_less_than_60_seconds.htm

Detecting Disease In Less Than 60 Seconds

Viral Immunologists Invent Speedy Virus Identification Technique

September 1, 2008 — Chemists and immunologists devised a new rapid system for detecting and identifying viruses. It uses surface enhanced Raman spectroscopy to measure the frequency of near-infrared laser light as it scatters off viral DNA and RNA. After a swab of a person's nasal passage, the technique can detect individual virus particles quickly and identify many types.



This technology has been around for years. Perhaps this indicates that Identity Theft is rising above background noise.

http://www.switched.com/2008/11/16/new-visa-card-features-keypad-generates-random-security-codes/

New Visa Card Features Keypad, Generates Random Security Codes

by Lee Bains, posted Nov 16th 2008 at 10:01AM

In response to popular concerns with online credit card fraud, Visa Europe has announced a newly designed credit card, complete with a keypad and digital number display, according to the Daily Mail.

While the credit card is of the usual size and features a credit card number and magnetic strip for use with conventional card readers, it does not have a security code number in the traditional sense. Instead, cardholders will enter their PIN into the keypad, which will then generate a random number on the display. This random number will serve as the cardholder's one-time security code, which can then be entered to make online purchases.



“We're a technology-selling company not a technology-understanding company.”

http://yro.slashdot.org/article.pl?sid=08/11/17/0234256&from=rss

In AU, Dodgy Dell Deal Faces Consumer Backlash

Posted by kdawson on Monday November 17, @04:22AM from the you-advertised-it-now-honor-it dept. Businesses Hardware

Ben Seberry writes

"It appears Dell has been caught red-faced by yet another pricing mistake on their Australian website. Many customers thought they had spotted a fantastic deal when they came across a 55%-off offer. Dell later denied that this was a valid special and telephoned customers to offer them a choice of the standard price, or a cancelled order. Dell's senior manager of corporate communication came out and apologized for the mistake, promising processes would be reviewed to prevent it from happening again. In the days after the original 'incorrectly priced' offer was fixed, Dell made a different error leading to an even cheaper price being advertised. This time, on many user forums and blogs, users are debating Australian contract law as it applies to this matter — it is not as clear-cut as many originally believed."



How far out could these orders ripple? (Not as outlandish as it sounds...)

http://ralphlosey.wordpress.com/2008/11/16/plaintiffs-mom-ordered-to-produce-her-laptop-and-flash-drives-for-forensic-examination/

Plaintiff’s Mom Ordered to Produce Her Laptop and Flash Drives for Forensic Examination

The plaintiff’s mother in a case in New Orleans, Mary Catherine Hoover, was ordered to produce her laptop, flash drives, and other ESI storage devices to the defendant for forensic inspection. Hoover v. Florida Hydro, Inc., 2008 WL 4467661 (E.D. La. Oct. 1, 2008). The third-party subpoena was enforced even though she was not a party to the suit and had done no wrong. The plaintiff’s best friend from college days was subject to a similar subpoena and order. The decision was rendered by an experienced and highly regarded Magistrate Judge Karen Wells Roby. How could such a thing happen you may well ask? This blog will attempt to fathom the answer and see what lessons can be learned from the decision.



What percentage of Lawyering involves bluffing? (Is this the Legal equivalent of a lousy poker face?)

http://yro.slashdot.org/article.pl?sid=08/11/16/1258246&from=rss

Toyota Demands Removal of Fan Wallpapers

Posted by Soulskill on Sunday November 16, @09:16AM from the see-what-sticks dept. Censorship

An anonymous reader writes

"TorrentFreak reports that Toyota's lawyers have recently contacted computer wallpaper site Desktop Nexus in a blatant example of DMCA abuse. Toyota issued a blanket request to demand the immediate removal of all member-uploaded wallpapers featuring a Toyota, Lexus, or Scion vehicle (citing copyright violation), regardless of whether Toyota legally holds the copyright to the photos or not. When site owner Harry Maugans requested clarification on exactly which wallpapers were copyrighted by Toyota, he was told that for them to cite specifics (in order to file proper DMCA Takedown Notices), they would invoice Desktop Nexus for their labor."



This is somewhat surprising...

http://news.cnet.com/8301-17852_3-10098287-71.html?part=rss&subj=news&tag=2547-1_3-0-5

Hulu's ad revenues to catch up to YouTube's?

Posted by Chris Matyszczyk November 17, 2008 12:01 AM PST

It has always been in the back of many minds that having many not quite legal and not quite professional videos on your site might just affect advertising revenue.

Now Arash Amel, an Analyst at Screen Digest, a company that researches digital media, is forecasting that Hulu's US revenue will rival that of YouTube next year, his estimated number being $180 million. (Hulu hasn't even got around to launching in the rest of the world yet)

Mr. Amal makes YouTube's earnings sound like profit of doom: "YouTube is in a very tough place right now," he told the Financial Times. "Most of that user-generated content is worthless or illegal. The next 18 months will determine whether or not it was just an expensive mistake for Google."



Think of this as a blueprint for a Small Business...

http://www.bespacific.com/mt/archives/019821.html

November 16, 2008

Pew Data Memo: When Technology Fails

News release: "Although information technology is well integrated into the lives of many Americans, gadgets and communication services require, for some, a call for help. Some 48% of technology users usually need help from others to set up new devices or to show them how they function. Many tech users encounter problems with their cell phones, internet connections, and other gadgets. This, in turn, often leads to impatience and frustration as they try to get them fixed."



Does this suggest a marketing strategy? (Now the Kindle comes with free subscriptions to the following newspapers and magazines...)

http://hardware.slashdot.org/article.pl?sid=08/11/16/2035233&from=rss

On the Economics of the Kindle

Posted by kdawson on Sunday November 16, @04:18PM from the how-much-is-cool-worth dept. Books Displays Handhelds

perlow writes

"Just how many books a year would you need to read before the cost of Amazon's Kindle is justified? The answer is not so cut-and-dried. If you're a college student and all of your texts were available on Kindle (possible but unlikely), you could recover the cost of the reader in a semester and a half. For consumers to break even with Kindle's cost in that time, they would have to be in the habit of buying and reading four new hardback books per month — if the convenience factor wasn't part of the equation. At two books per month, breakeven would be in three years."

Here is the spreadsheet if you want to play with the numbers.



For my website students

http://www.killerstartups.com/Video-Music-Photo/pizap-com-have-fun-with-photographs

Pizap.com - Have Fun With Photographs

http://www.pizap.com

All pranksters out there are going to relish visiting to this site, along with those who don’t fall in that category but are prone to a bit of tomfoolery every now and then. In general terms, piZap is a web-hosted service that will enable you to upload a picture and modify at will. You can add stickers and text as well as implementing different effects and adding any text you like.

Once you have finished work on your masterpiece, you can save it and share with other via social networks and the like. Moreover, you can create products using your finished designs and order them through the site.

This service is actually provided free of charge, and (as it was already mentioned) it is wholly web-based – you don’t have to incur into any kind of software download, nor worry about system specs and compatibility issues. All it takes for you to use it is a computer with an Internet connection, and you’re ready for some photographic action.

Sunday, November 16, 2008

No great insights, but an indication that the natives are becoming restless?

http://www.pogowasright.org/article.php?story=20081116063016945

Security breach upsets UF clients (commentary)

Sunday, November 16 2008 @ 06:30 AM EST Contributed by: PrivacyNews

An article in The Gainesville Sun by Nathan Crabbe contains some interesting figures that shows us -- yet again -- how little we find out about. -- Dissent

[...]

[University of Florida] records show 15 privacy breaches occurred in the year prior to the latest incident. They range in size from a prospective student's UF application that was accidentally viewed by another applicant to the posting of more than 11,500 students' personal information on a Web site.

While data security breaches are common for all institutions, universities comprise fewer than 5 percent of those incidents, said Rodney Petersen, security task force coordinator for Educause. The nonprofit promotes the intelligent use of information technology in higher education.

Petersen said three to five incidents in the last couple years is a typical number for a large university.

Source - The Gainesville Sun



GPS on trial? More like bad personnel procedures, and violation of the Union agreement.

http://www.pogowasright.org/article.php?story=20081115093808160

Firing based on faulty data, ex-city employee's lawsuit says

Saturday, November 15 2008 @ 09:38 AM EST Contributed by: PrivacyNews

A former Fremont maintenance worker has filed suit against the city charging that his firing was based on faulty data from a Global Positioning System device that had been installed in his city vehicle to track his whereabouts.

The city fired Jim Dunn last year claiming that he wasn't working nearly half of the time he was on the job, according to Dunn's complaint filed in Alameda County Superior Court.

However, Dunn, who suffers from diabetes and previously had been diagnosed with sleep apnea, contends the GPS data compiled by the city is flawed.

The complaint also contends that Fremont has targeted older workers and those with medical conditions for GPS surveillance and subsequent discipline, although it offers no examples other than Dunn's case.

City officials wouldn't comment on the lawsuit, which was filed last month.

Source - InsideBayArea.com



Not clear from the article if the tax preparer provided the social security numbers...

http://www.pogowasright.org/article.php?story=20081115093238103

CO: Weld officials claim 1,338 ID theft cases

Saturday, November 15 2008 @ 09:32 AM EST Contributed by: PrivacyNews

Weld County authorities say they have uncovered 1,338 possible cases of identity theft by illegal immigrants after seizing records from a Greeley-based tax preparer.

The tax records were for 2006 and 2007 and were suspected of containing false or stolen identity information.

Source - reporterherald.com



Attention White Hat Hackers! (Would they be willing to provide the raw data from their logs if my attorney asked politely? It would make for an interesting handout in the Security classes...)

http://it.slashdot.org/article.pl?sid=08/11/15/1413247&from=rss

$1M Reward Offered To Nab Data Breach Extortionist

Posted by Soulskill on Saturday November 15, @10:17AM from the i've-seen-this-it's-gary-sinise-send-me-a-check dept. Security Businesses The Almighty Buck

alphadogg writes with this excerpt from NetworkWorld:

"Express Scripts, the pharmacy benefits management company which recently disclosed an extortionist is demanding money by threatening to expose millions of patient records the company holds, Wednesday said it has decided to offer $1 million to nab the perpetrator. 'We're going on the offense with this reward,' an Express Scripts spokesman said. The $1 million will be paid to anyone who provides information leading to the capture and conviction of the extortionist who sent a letter to Express Scripts in early October that contained personal information on 75 people, considered members, who use the company's pharmacy-benefits services. The extortionist claims to have information on millions more Express Scripts members and wants money to not reveal it."

[Note: One comment suggests the extortionist could load his files on someone else's computer, then rat him out for the reward! (He may have used someone else's computer in the first place.) Bob]



An interesting (and obvious-in-retrosprct) use of the Internet. I'm suprized that the TV networks (or any news organization) is not doing something similar – but perhaps they are concentrating too much on the entertainment side...

http://www.killerstartups.com/Web20/crisiswire-com-crisis-information-in-real-time

CrisisWire.com - Crisis Information In Real-time

http://www.crisiswire.com

As its name suggests, CrisisWire is an online resource that gathers together information about crises of all denomination that are affecting the country. This information is actually presented in real-time so that you know that by checking the site you are abreast of the latest developments as regards any emergency that arises. This is most useful if you have friends or relatives in the close vicinity of any of these locations, and wish to know the way things are shaping up.

The site has just been launched, and so far the one crisis that is featured is the Santa Barbara fires. Whenever any other situation arises, the same will be aggregated so that citizens from all over the nation can stay updated and see if there is a way they can help and alleviate the situation in any way.

Moreover, links to sites such as the RedCross portal are provide along with the telephone numbers that you should always bear in mind to request professional assistance in such situations. Official Twitter feeds are likewise included for further reference.



Supression of facts v. the Streisand Effect?

http://yro.slashdot.org/article.pl?sid=08/11/15/1944211&from=rss

Politician Forces German Wikipedia Off the Net

Posted by kdawson on Saturday November 15, @05:51PM from the inconvenient-truth dept. Censorship The Internet

Stephan Schulz writes

"A German Member of parliament for a left-wing party, Lutz Heilmann, has obtained a preliminary injunction against the local chapter of the Wikimedia foundation, Wikimedia Deutschland e.V., forbidding the forwarding of the popular http://wikipedia.de to the proper http://de.wikipedia.org. Apparently Heilmann is not happy with the fact that his Wikipedia article (English version) contains information on his work for the former GDR Stasi, the much-hated internal secret service. Wikimedia Germany displays a page explaining the situation, and has announced that it will file an objection to get the injunction lifted. The German Wikipedia has more than 800,000 pages, and is hosted, like all Wikimedia projects, by the Florida-based Wikimedia Foundation, and hence beyond the effective reach of at least German politicians and judges."



Suspicions confirmed!

http://www.pogowasright.org/article.php?story=20081115093404346

Survey: Employee Data More Vulnerable Than Constituent Data

Saturday, November 15 2008 @ 09:34 AM EST Contributed by: PrivacyNews

Personal information about employees is more than twice as likely to be compromised in government security breaches than is constituent data, according to an online survey released by consulting firm PricewaterhouseCoopers (PwC). The survey also found that most governments don't keep accurate inventories of where their data is stored in their organization.

PwC, in partnership with CIO and CSO magazines, conducted the Global State of Information Security 2008 survey from March 25 to June 26, 2008. It included more than 7,000 CEOs, chief financial officers, CIOs, chief security officers and other high-level respondents from 119 countries via e-mail. Five hundred fifty-three came from the public sector, but PwC would not disclose how many came from U.S. government.

Forty-two percent of the public-sector respondents reported that employee data was more likely to be impacted by security breaches than constituent data. Only 19 percent reported otherwise.

Source - Government Technology

[Links:

PwC white paper on survey findings: Safeguarding the new currency of business (125kb)

PwC industry summaries



Interesting. I didn't know so many people were impersonating me!

http://www.killerstartups.com/Web-App-Tools/usernamecheck-com-check-your-username

UsernameCheck.com - Check Your Username

http://www.usernamecheck.com

A simple service that might nonetheless come in handy sometime, the suitably-titled UsernameCheck will let you find out where is your username registered in a more or less instant way.

The programmer himself claims that he concocted this service to answer a recurrent question: “Do I have my username registered across every site that I should?”. That is a valid question, because how would you feel if the next Internet humiliation that comes along happens to share the same username that you have been using since the dawn of the web? That would mean that all of a sudden you will be bombarded with e-mails asking “Is that you?”, and your credibility has gone out the window.

This site, then, will let you check where you username is registered just by supplying it and hitting the “check” button. A service by service rundown is then carried out, and you will then find out whether your back is covered or not.



The future of computers? (At least one step in their evolution...)

http://hardware.slashdot.org/article.pl?sid=08/11/15/1813229&from=rss

Plastic Logic E-Newspaper

Posted by kdawson on Saturday November 15, @03:39PM from the getting-there dept.

Ostracus writes with news of another contender for a next-gen device suitable for displaying a newspaper page. It's very thin but weighs a bit more than a Kindle.

"Plastic Logic, a spin-off company from the Cambridge University's Cavendish Laboratory, has recently released its design of a future electronic newspaper reader. This lightweight plastic screen copies the appearance, but not the feel, of a printed newspaper. This electronic paper technology was pioneered by the E-Ink Corporation and is used in the current generation Sony eReader and Amazon.com's Kindle. Plastic Logic's device, yet to be named, has a highly legible black-and-white display and a screen more than twice as large compared to current versions available on the market."



How do you get to Carnegie Hall?

http://news.slashdot.org/article.pl?sid=08/11/15/1636209&from=rss

Success Not Just a Matter of Talent

Posted by Soulskill on Saturday November 15, @12:22PM from the ninety-nine-percent-something-something dept. Businesses Education Technology

NinjaCoder writes

"The Guardian has an interesting article based on a new book (Outliers: The Story Of Success, by Malcolm Gladwell) which examines some persons of interest to computer technology (Bill Joy, Bill Gates and Steve Jobs, amongst others). It examines reasons for their successes and strongly suggests a link between practice (10,000 hours by age 20 being the magic milestone) and luck. This maybe an obvious truism, but the article does give interesting anecdotes on how their personal circumstances led to today's technological landscape. It points out that many of the luminaries of the current tech industry were born around 1955, and thus able to take advantage of the emerging technologies.



Geeky Hacker stuff

http://digg.com/microsoft/Useful_Tools_to_Bring_Power_to_the_RightClick_Menu_Windows

Useful Tools to Bring Power to the RightClick Menu [Windows]

makeuseof.com — Who doesn ’t love a shortcut? Thanks to the guy who programmed in the right click menu, we get to take some of them while working or browsing on the computer. Here at MakeUseOf we have looked at some of the ways to add more power to the right click menu.

http://www.makeuseof.com/tag/3-more-tools-to-bring-power-to-the-right-click-menu-windows/



In the battle of the sexes, there are some books that a male should NEVER recommend to a female!

http://digg.com/gaming_news/How_to_Condescend_to_Women_About_Technology_the_Book

How to Condescend to Women About Technology, the Book

heartlessdoll.com — According to its press release, this is a book that "shows every woman how to sort out the complicated world of technology. Whether she's buying a computer, shopping for a cell phone, trolling electronics aisles, or simply surfing the Internet, How to Be a Geek Goddess makes sense of it all with wit, intelligence, and attitude."

http://www.heartlessdoll.com/2008/11/how_to_condescend_to_women_about_technology_the_bo.php



There is hope for us old dogs!

http://www.telegraph.co.uk/scienceandtechnology/science/sciencenews/3463897/Elderly-dogs-to-be-offered-genetic-enhancement-to-make-them-young-again.html

Elderly dogs to be offered genetic enhancement to make them young again

Frail elderly dogs could be injected with genes which allow them to run around like puppies, with technology which could be approved by next year.

Simon Hart and Laura Donnelly Last Updated: 12:09AM GMT 16 Nov 2008