Tuesday, March 23, 2010

All you need is an Internet connection to reach out to every online banking system in the world. Someone, somewhere has probably used a default or easily guessable password. If only 1 in a million did so, that's still hundreds (if not thousands) of opportunity for theft. (It's just statistics)

http://www.databreaches.net/?p=10772

Organized Crooks Hit NJ Town, Ark. Utility

March 22, 2010 by admin

Brian Krebs reports:

An Arkansas public water utility and a New Jersey town are the latest victims of an organized cyber crime gang that is stealing tens of millions of dollars from small to mid-sized organizations via online bank theft.

On Thursday, officials in Egg Harbor Township, N.J. acknowledged that a sizable amount of money was taken in an “outside intrusion into a municipal banking account,” suggesting in public statements that computer criminals were responsible.

[...]

In a separate incident on March 4, organized crooks stole roughly $130,000 from North Garland County Regional Water District, a public, nonprofit utility in Hot Springs, Ark. Again, thieves somehow broke into the utility’s online bank account and set up unauthorized transfers to more than a dozen individuals around the country that were not affiliated with the district.

Read more on KrebsonSecurity.com

For those keeping track: I’m not sure how to categorize such breaches as it’s not clear whether someone on the victim entity’s side lost control of login info or was compromised or if the compromise was on the bank’s side.



This is interesting. I wonder if this hack will be added to the toolkit of their Cyber War division?

http://www.wired.com/threatlevel/2010/03/alleged-rbs-hacker-arrested?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29

Russia Arrests Alleged Mastermind of RBS WorldPay Hack

Russian authorities have nabbed the man accused of masterminding a coordinated global ATM heist of $9.5 million from Atlanta-based card processing company RBS WorldPay.

Viktor Pleshchuk, 28, of St. Petersburg, was arrested by the Russian Federal Security Service, or FSB, according to the Sunday Mail, which broke the story last week in the United Kingdom.

The Financial Times confirmed the arrest this week, adding that Pleshchuk was among “several suspects” arrested. The paper didn’t name the other suspects or say when any of them were arrested. The arrests are being touted by some as signaling a new era of cooperation between Russian and U.S. Authorities.

… The hack involved reverse-engineering PINs for payroll debit card accounts — the holy grail of bank card hacking.

… The hackers compromised RBS WorldPay’s database encryption to raise the amount of funds available on the compromised cards, and boost their daily withdrawal limits. In some case, the hackers raised the limits to $500,000.



You could characterize this as a Government Grant to learn how to commit computer crime.

http://www.wired.com/threatlevel/2010/03/gonzalez-salary/

Secret Service Paid TJX Hacker $75,000 a Year

By Kim Zetter March 22, 2010 12:23 pm

Convicted TJX hacker Albert Gonzalez earned $75,000 a year working undercover for the U.S. Secret Service, informing on bank card thieves before he was arrested in 2008 for running his own multimillion-dollar card-hacking operation.

The information comes from one of Gonzalez’s best friends and convicted accomplices, Stephen Watt. Watt pleaded guilty last year to creating a sniffer program that Gonzalez used to siphon millions of credit and debit card numbers from the TJX corporate network while he was working undercover for the government.

… Gonzalez, 28, is set for sentencing this week on three indictments covering nearly every headline-making bank-card theft in recent years, including intrusions at TJX, Office Max, Hannaford Brothers, 7-Eleven and Heartland Payment Systems (which alone exposed magstripe data on 130 million credit and debit cards).



Denver is number 8

http://norton.newslinevine.com/

The Norton Top 10 Riskiest Online Cities Report Reveals Who’s Most Vulnerable to Cybercrime



Oh, joy. How to explain the scope of computer crime to legislators?

http://it.slashdot.org/story/10/03/23/1226241/The-Biggest-Cloud-Providers-Are-Botnets?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

The Biggest Cloud Providers Are Botnets

Posted by CmdrTaco on Tuesday March 23, @09:35AM

Julie188 writes

"Google is made up of 500,000 systems, 1 million CPUs and 1,500 gigabits per second (Gbps) of bandwidth, according to cloud service provider Neustar. Amazon comes in second with 160,000 systems, 320,000 CPUs and 400 Gbps of bandwidth, while Rackspace offers 65,000 systems, 130,000 CPUs and 300 Gbps. But these clouds are dwarfed by the likes of the really big cloud services, otherwise known as botnets. Conficker controls 6.4 million computer systems in 230 countries, with more than 18 million CPUs and 28 terabits per second of bandwidth."



A candidate for the Privacy Foundation's collection of “Privacy Laws that 'Get it right!'” or at least “Get management's attention!”

http://www.databreaches.net/?p=10777

Hacked personal data originating from China

March 22, 2010 by admin

Park Sung-woo reports:

A 22-year-old Korean man named Kim is under arrest for purchasing lists of Koreans’ personal information, such as cell phone numbers and e-mail addresses, which had been hacked in China. After spending 1 million won ($880) for 31 million items of data since July of last year, Kim posted an Internet ad and sold off 10 million such items.

A 27-year-old man Lee, who runs a branch for an Internet service provider, was one of the buyers. He spent 3 million won for 140,000 phone numbers for his branch’s telemarketing scheme.

The Seoul Metropolitan Police Agency took in Kim and Lee without physical detention, and also detained the owners of the companies that failed to protect their customer information from computer hackers.

Last September, a used-car trading Web site and the Internet home page for a car navigation manufacturer were victims of Chinese hackers who stole names and residential registration numbers of 910,000 online members.

Read more on JoongAng Daily.

Imagine: actually detaining someone for not adequately protecting customer information. Can you imagine what our jails would like like if they did that here?


(Related) Interesting model. They gathered some “ordinary citizens” then gave them an overview of current practices and asked what bothered them.

http://www.databreaches.net/?p=10782

Compensation should be paid for personal data loss, says report

March 23, 2010 by admin

Urmee Khan reports:

Putting a price on privacy will deter organisations from losing or abusing people’s personal details, the influential think tank Demos found.

The recommendation comes amid increasing concern that there has been a dramatic expansion of a “surveillance society”, which threatens to erode civil liberties.

The report Private Lives, published today, recommended that consumers affected by the misuse or illicit sale of information should be compensated.

It has also advocated giving consumers more say over how their data is used. More consent should be required before personal data such as medical data and banking details are released, according to the findings.

Read more in the Telegraph.

Related: Private Lives: a People’s Inquiry into Personal Information by Peter Bradwell, Demos.

[From the Telegraph article:

Regulators should be required to name companies and government departments who mishandle information and produce a ‘Top 100 named and shamed’ list. [I like it, but you would need to factor in such things as Zero Day attacks and Security Best Practices. Bob]



For those interested in Self-Surveillance? Or perhaps Monitoring your Teenage Driver?

http://news.cnet.com/8301-19882_3-20000948-250.html?part=rss&subj=news&tag=2547-1_3-0-20

Motolingo brings telematics to clunkers

Motolingo's Motoriety is a neat tool that marries the data your car is generating in real time with the power of a smartphone to bring some pretty modern capabilities to older cars. There's hardware, software, and a Web service involved in the product, but it looks like it should all work together well.

The hardware component is a small black box that you plug into your car's diagnostic port (all cars built after about 1996 have them). It communicates via Bluetooth to software on your smartphone and monitors things like road speed, engine performance, and the causes of check engine lights. If you drive too fast (based on your programming), or in a way that's not "green," (based on engine load over time), you can get an alert.

The program can also use the GPS capability of your smartphone to "geofence" your car, sending an alert if you leave a pre-programmed area.

[Will your Toyota tweet “Let's go faster?” Bob]



Lots of stories on this topic. NPR mentioned that China I in the range of 600-800 million dollars (out of $27 Billion) of Google's business.

http://www.pogowasright.org/?p=8503

Google stops censoring in China

March 22, 2010 by Dissent

Everyone’s writing about Google’s cessation of censoring search results in China. Here’s a sampling:

Thomas Claburn reports:

Ending months of speculation, Google on Monday stopped censoring search results in China.

The company has done so by redirecting searchers who arrive at Google.cn, its search site in China, to Google.com.hk, which relies on servers based in Hong Kong.

Google’s chief legal officer David Drummond, in a blog post, explained that figuring out how to keep the company’s promise to stop censoring Google Search, Google News, and Google Images on Google.cn was difficult.

Read more on InformationWeek.

The BBC adds:

The US National Security spokesman, Mike Hammer, said: “We are disappointed that Google and the Chinese government were unable to reach an agreement that would allow Google to continue operating its search services in China on its Google.cn website.”

China’s official Xinhua news agency said Google had violated a “written promise” and was “totally wrong” to end censorship of its Chinese-language search portal Google.cn.

Chinese government officials had warned Google repeatedly that it would face consequences if it did not comply with the country’s censorship rules.

But Ryan Singel of Wired thinks that China will get the last word.

[From the Information Week article:

To assist users in determining which of Google's services have been blocked in mainland China, Google has created an Apps Status Web page for its users in China. The page currently shows that Blogger, Google Sites, and YouTube are blocked, that Google Docs, Groups and Picasa are partially blocked, and that Google Ads Gmail, News, and Web Search are available.

[From the BBC article:

While Google is the world's most popular search engine, it is a distant number two in the Chinese market, which is dominated by Baidu.



Hey, kids! Let's put all our Health Records online so Big Brother can protect them for us!

http://www.phiprivacy.net/?p=2270

Prescription drug database battle rages

By Dissent, March 22, 2010 10:09 am

Bob Barr comments on legislation proposed in Georgia:

Federal and state drug agencies want Georgia to create a database of doctors who prescribe pain medications, pharmacists who fill prescriptions for pain medications, and patients who receive prescription pain medications. And law enforcement agencies are employing a full-court press in the General Assembly to get what they want. Whether they succeed against a coalition of state senators and representatives concerned about such a privacy-invasive database, remains very much up in the air as the General Assembly enters the home stretch of its 40-day session. Hanging in the balance is the question of whether law enforcement and regulatory agencies across the state and across the nation will have ready access to Georgia citizens’ private medication records — to be analyzed, cataloged and manipulated in ways they will never know.

[...]Leaving aside for the moment the fundamental principle that what a doctor prescribes for a patient should be the concern of the doctor and his patient, and not law enforcement or government regulators, the bill pending before the Georgia General Assembly (currently, SB 418) to create a mandatory electronic database to monitor prescription drugs, sweeps far too broadly and raises serious privacy and other constitutional concerns.

Read more on The Barr Code.



Something for my Disaster Recovery classes.

http://www.bespacific.com/mt/archives/023812.html

March 22, 2010

ebrary Launches Free Natural Disaster and Extreme Weather Searchable Information Center

News release: "ebrary®, a leading provider of digital content products and technologies..announced that it has created a publicly available research center featuring hundreds of important government documents related to natural disasters and extreme weather - the Natural Disaster and Extreme Weather Searchable Information Center."



Ah ha! Al Gore is connecting his inventions (the Internet and Global Warming). Do you suppose he's been buying up lots of used computers? But more seriously, is this the best way the Brits can come up with to stop Global Warming? By the same logic, perhaps the government should pay us to keep 20 year old cars running rather than build new one?

http://it.slashdot.org/story/10/03/23/1016202/Tax-Free-IT-Repairs-Proposed-For-the-UK?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Tax-Free IT Repairs Proposed For the UK

Posted by timothy on Tuesday March 23, @07:02AM

judgecorp writes

"Removing tax from computer repairs could have a real impact on the IT industry's carbon footprint, according to a petition of the UK government. Old computer equipment often ends up in landfill, or in toxic illegal re-cycling centers in developing countries, because users think it is not cost-effective to repair it. Making repairs tax free could be a simple bit of financial engineering to encourage skilled jobs and keep electronics out of the waste stream, says the author of the campaign."


(Related)

http://reviews.cnet.com/8301-12261_7-20000872-10356022.html?part=rss&subj=news&tag=2547-1_3-0-20

Mobile phone buyback offered at carrier stores



April First humor...

http://www.makeuseof.com/tag/4-free-april-fools-prank-ideas-friends-love/

4 Free April Fools Prank Ideas Your Friends Will Love

Monday, March 22, 2010

For your Security Manager

http://tech.slashdot.org/story/10/03/21/1341201/Google-Hands-Out-Web-Security-Scanner?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Google Hands Out Web Security Scanner

Posted by Soulskill on Sunday March 21, @10:36AM

An anonymous reader writes

"Apparently feeling generous this week, Google has released for free another of their internally developed tools: this time, a nifty web security scanner dubbed skipfish. A vendor-sponsored study cited by InformationWeek discovered that 90% of all web applications are vulnerable to security attacks. Are Google's security people trying to change this?"



For my Network Security students. The video shows what you can learn from network logs.

http://campustechnology.com/Articles/2010/03/12/Machine-Hunt-User-Forensics-at-Salt-Lake-Community-College.aspx?p=1

Machine Hunt: User Forensics at Salt Lake Community College

[The video: http://www.etelemetry.com/resources/demos/demo_locate2.aspx



If I send records out of a HIPAA protected environment, are there penalties?

http://science.slashdot.org/story/10/03/21/2149258/Medical-Professionals-Arent-Leaping-For-E-Medicine?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Medical Professionals Aren't Leaping For E-Medicine

Posted by timothy on Sunday March 21, @06:40PM

theodp writes

"Despite all the stimulus money being directed toward developing electronic medical records, surprisingly few doctors, hospitals and insurers are using Google Health and other sites like it. One reason, Newsweek suggests, may be that Web-based personal-health records like the ones being compiled on Google Health don't appear to be covered under HIPAA, which requires that health care providers and health plans protect patient confidentiality. 'We don't connect that information to other aspects of Google,' explains Dr. Roni Zeiger, product manager for Google Health. Still, the federal government is in the process of drafting privacy recommendations that would apply to Google Health, as well as the makers of consumer apps that perform tasks like monitoring blood pressure."



Another fun one to watch. Not bad enough they can't figure out a viable business model, they can't even develop a consistent strategy for the one they have.

http://yro.slashdot.org/story/10/03/22/081200/Dueling-Summary-Judgment-Motions-In-Viacom-v-YouTube?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Dueling Summary Judgment Motions In Viacom v. YouTube

Posted by timothy on Monday March 22, @05:27AM

I Don't Believe in Imaginary Property writes

"Eric Goldman, an Associate Professor of Law at Santa Clara University School of Law, has an excellent analysis of the dueling summary judgment motions in Viacom v. YouTube. Basically, both sides have been trotting out the most damning things they can find and asking the judge to rule against the other party. Viacom is mad that Chad Hurley, one of YouTube's co-founders, lost his email archive and couldn't remember some old emails. Worse, YouTube founder Karim once uploaded infringing content. But then Google points out that only a very small percentage of the users are engaged in infringing activity (some 0.016% of all YouTube accounts have been deleted for infringement), one of the clips Viacom is suing over is only one second long (what about fair use?), and most of YouTube's content is non-infringing, including the campaign videos which all major US presidential candidates posted to YouTube."

"But the worst thing they found is that Viacom can't make up their mind. They spent $1M advertising on YouTube and tried to buy it. And even though they demanded that YouTube remove videos containing Viacom property on sight, Viacom had a complex internal policy authorizing some clips, including ones disguised as 'leaks' and put out by their marketers. Viacom was so conflicted internally that their very expensive lawyers couldn't figure out what Viacom had authorized to be uploaded even after doing extensive research as required by court rules, only to discover that some of the clips Viacom was suing over were ones Viacom uploaded themselves. The lawyers then had to go to court and drop those clips from their case — twice. They missed some the first time."



Not something I use much in my Math classes, but it has potential.

http://www.makeuseof.com/dir/preceden-make-a-timeline-online

Preceden: Make A Timeline Online & Share

www.preceden.com

Similar tools: TimeToast, Circavi, Timetube and TimeRime.



April First is fast approaching! NOTE: Still feel your password is adequate protection?

http://www.makeuseof.com/tag/konboot-computer-prank-passwordbypass-tool/

KON-BOOT – A Computer Prank Password-Bypass Tool

by Mike Fagan on Mar. 21st, 2010

Pranks are fun and rewarding.

… But getting onto someone’s computer when they are not around can be a tall task. Most people have passwords on their machines, thwarting any would-be pranksters.

Well, this problem can be solved with a small tool called KON-BOOT. Rather than cracking a Windows password, KON-BOOT bypasses it and lets you into the computer without typing one in. Then, when you restart, everything is back to normal, that is, everything you didn’t change for the computer prank.

… To get KON-BOOT, go to their website here.



Now this could be useful. I'll have to work up some generalized process... (If you didn't think XKCD's author was a geek, this might come as a shock.)

http://venturebeat.com/2010/03/19/data-mining-google-xkcd/

Now you can data mine with Google queries too

March 19, 2010 | Kim-Mai Cutler

Geek comic artist Randall Munroe, better known as XKCD’s creator, revealed a little-known Google Spreadsheets secret yesterday. You can plot out the estimated volume of Google search results against different queries.

How do you do it? Alex Chitu at Google Operating System says:

If you are familiar with Google Spreadsheets, try to create a sheet that lets you enter a query like “My IQ is X”, a variable name and the values for that variable. The result should be a graph that shows the number of Google search results for each instance of your query. Use importXML and an XPath expression to find the number of Google search results: “//p[@id='resultStats']/b[3]“. Here’s an example.

Sunday, March 21, 2010

If you think disclosure of your tax information is bad, consider what modifying it (increase income, remove deductions) or destruction (“You failed to file a return for the last three years...”) could do to your excellent relationship with the IRS.

http://yro.slashdot.org/story/10/03/20/1422224/IRS-Security-Faults-Leave-Taxpayer-Data-At-Risk?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

IRS Security Faults Leave Taxpayer Data At Risk

Posted by Soulskill on Saturday March 20, @11:46AM

coondoggie writes

"In this tax season, when billions of dollars and tons of personal information is relayed to and from the government, it's more than disconcerting to hear that the Internal Revenue Service is still struggling to keep private information secure. A report out Friday from watchdogs at the Government Accountability Office says about 69% of the tax agency's previously noted security flaws remain unfixed and continue to jeopardize the confidentiality, integrity, and availability of the IRS's systems (PDF). The problems put the IRS at increased risk of unauthorized disclosure, modification, or destruction of financial and taxpayer information, the GAO concluded."



There's smart and then there's e-smart. If this is how easily (presumably) smart people can be scammed, is there any hope for the half of the world that is below average?

http://yro.slashdot.org/story/10/03/21/0818202/US-Law-Firms-Targeted-By-Cyberscams?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

US Law Firms Targeted By Cyberscams

Posted by timothy on Sunday March 21, @07:59AM

Hugh Pickens writes

"The San Francisco Chronicle reports that last year a Long Beach law firm received an e-mail from a Hong Kong businessman seeking help collecting debts from American customers. After a month of signing paperwork and exchanging telephone calls, the attorney received word that one debtor had sent a $200,000 cashier's check to pay off his balance. The attorney deposited it in his firm's account, subtracted his $10,000 fee and wired the remaining $190,000 to his Hong Kong client. Then the attorney's bank called and told him the $200,000 check had bounced. 'They send me a nice, big, worthless check,' says the attorney. In this case, the bank was able to prevent the wire transfer from reaching its destination, but attorneys say they are on the receiving end of sophisticated scams with increasing frequency that include attacks to steal client data that can be sold or used to learn the details of future litigation."



There's a moral here: Don't “party” in front of a camera (or cell phone)

http://www.pogowasright.org/?p=8475

Anonymous sender of beer pong email gets to remain unknown

March 21, 2010 by Dissent

Evan Brown reports on a case in New Jersey where the standards for unmasking an anonymous party articulated in Dendrite v. Doe were applied to a case involving a teenage girl who tried to unmask the anonymous party who sent pictures of her playing beer pong to the her school administrators.

In A.Z. v. Doe, the trial court granted Doe’s motion to quash the subpoena served on Optimum Online because the court concluded that A.Z. had failed to meet the fourth prong of the Dendrite analysis, which balances First Amendment protection of anonymous speech against both the strength of the prima facie case and the plaintiff’s need for the anonymous speaker’s identity to be disclosed to proceed (see the four prongs as outlined in Dendrite, below the break). A.Z. appealed, and the appellate court upheld the trial court’s decision, but on different grounds. The appellate court held that A.Z. hadn’t met the third prong in the Dendrite analysis, i.e., she hadn’t made a prima facie case.

Read more of the background on this case on Internet Cases.

—- from Dendrite:

We offer the following guidelines to trial courts when faced with an application by a plaintiff for expedited discovery seeking an order compelling an ISP to honor a subpoena and disclose the identity of anonymous Internet posters who are sued for allegedly violating the rights of individuals, corporations or businesses. The trial court must consider and decide those applications by striking a balance between the well-established First Amendment right to speak anonymously, and the right of the plaintiff to protect its proprietary interests and reputation through the assertion of recognizable claims based on the actionable conduct of the anonymous, fictitiously-named defendants.

We hold that when such an application is made, the trial court should first require the plaintiff to undertake efforts to notify the anonymous posters that they are the subject of a subpoena or application for an order of disclosure, and withhold action to afford the fictitiously-named defendants a reasonable opportunity to file and serve opposition to the application. These notification efforts should include posting a message of notification of the identity discovery request to the anonymous user on the ISP’s pertinent message board. [Difficult if the anonymous user used a 'disposable' (one time) account. Bob]

The court shall also require the plaintiff to identify and set forth the exact statements purportedly made by each anonymous poster that plaintiff alleges constitutes actionable speech.

The complaint and all information provided to the court should be carefully reviewed to determine whether plaintiff has set forth a prima facie cause of action against the fictitiously-named anonymous defendants. In addition to establishing that its action can withstand a motion to dismiss for failure to state a claim upon which relief can be granted pursuant to R. 4:6-2(f), the plaintiff must produce sufficient evidence supporting each element of its cause of action, on a prima facie basis, prior to a court ordering the disclosure of the identity of the unnamed defendant.

Finally, assuming the court concludes that the plaintiff has presented a prima facie cause of action, the court must balance the defendant’s First Amendment right of anonymous free speech against the strength of the prima facie case presented and the necessity for the disclosure of the anonymous defendant’s identity to allow the plaintiff to properly proceed.

[From the article:

A purported “concerned parent” set up a Gmail account (anonymously) and sent an email to the faculty advisor for the Cool Kids & Heroes program. The email had photos attached showing several of the program’s kids doing things they shouldn’t be doing like drinking and smoking pot. [Welcome to “Your Resume” the Internet version. Bob] In all fairness it should be noted that the picture of plaintiff only showed her playing beer pong — it didn’t actually show her drinking or smoking, though there were cups and beer cans on the table in front of her.

The faculty advisor forwarded the email and images on to school administrators, and the school also notified the police. But law enforcement apparently took no further action.

… The big problem with plaintiff’s defamation claim came from the requirement that the statement alleged to be defamatory (in this case, that plaintiff had broken the law) needed to be “false.” The court found five reasons why this element had not been met:



What a marvelous “Big Brother” idea! If you want to exist in the eyes of the government, you must do so through a webpage that reports your activity and location. (and God only knows what else in the future.) I'm sure congress will want to “Keep American up with the rest of the world!” NOTE: The comments indicate the threat to Privacy was the first thing readers thought of...

http://yro.slashdot.org/story/10/03/20/220244/Every-British-Citizen-To-Have-a-Personal-Webpage?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Every British Citizen To Have a Personal Webpage

Posted by timothy on Saturday March 20, @07:00PM

Hugh Pickens writes

"The Telegraph reports that British Prime Minister Gordon Brown is about to announce that within a year everyone in Great Britain will be given a personalized webpage for accessing Government services as part of a plan to save billions of pounds by putting all public services online. The move could see the closure of job centers and physical offices dealing with tax, vehicle licensing, passports and housing benefits within 10 years as services are offered through a single digital gateway. [This] 'saves time for people and it saves money for the Government — the processing of a piece of paper and mailing it back costs many times more than it costs to process something electronically,' says Tim Berners-Lee, an advisor to the Prime Minister. However, the proposals are coming under fire from union leaders who complain that thousands of public sector workers would be made jobless and pointed to the Government's poor record of handling personal data. 'Cutting public services is not only bad for the public who use services but also the economy as we are pushing people who provide valuable services on the dole,' says one union leader."



Interesting and technically correct ruling. Is it too technical for a jury? (Consider: We all click to the wrong website on occasion. You might need this defense!)

http://yro.slashdot.org/story/10/03/20/1615211/Canadas-Top-Court-Quashes-Child-Porn-Warrant?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Canada's Top Court Quashes Child Porn Warrant

Posted by Soulskill on Saturday March 20, @01:51PM

m.ducharme writes

"The CBC is reporting that the Supreme Court of Canada has handed down a decision quashing a search warrant used to obtain the computer of a man accused of possession of child porn. 'Urbain P. Morelli maintained his charter rights were violated when police searched his computer for child pornography after a technician who had visited his home to work on the machine expressed concerns to police.' What the Slashdot community may find notable about this decision is the distinction drawn between 'accessing' and 'possessing' digital images, most particularly the recognition that a user does not 'possess' cached data. From the decision: '[35] When accessing Web pages, most Internet browsers will store on the computer's own hard drive a temporary copy of all or most of the files that comprise the Web page. This is typically known as a "caching function" and the location of the temporary, automatic copies is known as the "cache." While the configuration of the caching function varies and can be modified by the user, cached files typically include images and are generally discarded automatically after a certain number of days, or after the cache grows to a certain size. [36] On my view of possession, the automatic caching of a file to the hard drive does not, without more, constitute possession. While the cached file might be in a "place" over which the computer user has control, in order to establish possession, it is necessary to satisfy mens rea or fault requirements as well. Thus, it must be shown that the file was knowingly stored and retained through the cache.'"



Even some movies not yet available on DVD?

http://www.killerstartups.com/Video-Music-Photo/johoo-tv-watching-movies-tv-shows-at-no-cost

Johoo.tv - Watching Movies & TV Shows At No Cost

http://www.johoo.tv/

… Named Johoo.tv, it will let you watch all these shows that are currently making waves as well as those past shows that have gone down in history as genre-defining. Besides, the site makes it possible for you to watch movies in an equally simple way – simply input your search and away you go.



Because sometimes you need a backup...

http://www.makeuseof.com/tag/5-simple-steps-rip-entire-dvd-hard-drive/

5 Simple Steps To Rip An Entire DVD To Your Hard Drive



For my website students.

http://www.makeuseof.com/dir/colorhex-hsl-values

ColorHex: See RGB, HSV & HSL Values For Any Color

You see a color, you like it, but you want to know more about it. ColorHex is probably the best site to know a color inside out. Just pick any color from the palette or select your desired one by entering the 6 digit hex code. ColorHex will then show you detailed information like the RGB, HSL, HSV and CMYK values.

It will also display a pie chart showing the RGB value composition and an HSL color chart showing Hue, Saturation and Lightness. ColorHex also changes the background of the webpage to your selected color so you can see it clearly and also display information such as opposite color, brightened color and web safe color related to your desired color.

It also displays the use of your selected color in text, background and borders, along with generating a CSS code for using that color on your website.

www.color-hex.com

Saturday, March 20, 2010

You can't make this stuff up. Even I know this is called “Undue Reliance” but if ALL your records are on the computer, what else could you rely on?

http://news.yahoo.com/s/ap/20100319/ap_on_re_us/us_police_wrong_address;_ylt=AqCLxNmGZj9X8RoimuSH9bys0NUE;_ylu=X3oDMTNyNjZ2dWYxBGFzc2V0A2FwLzIwMTAwMzE5L3VzX3BvbGljZV93cm9uZ19hZGRyZXNzBGNjb2RlA21vc3Rwb3B1bGFyBGNwb3MDOARwb3MDNQRwdANob21lX2Nva2UEc2VjA3luX2hlYWRsaW5lX2xpc3QEc2xrA2NvcHNtaXN0YWtlbg--

NYC police: Computer glitch led to mistaken visits

Fri Mar 19, 12:26 pm ET

NEW YORK – A senior New York City police official apologized Friday for the 50 or so door-pounding visits police made to the home of a bewildered elderly couple.

It seems a glitch in computer records had led them over and over to Walter and Rose Martin's modest home in Brooklyn. [And no procedure to correct errors? That's even more scary. Bob]

… On Thursday, detectives from the NYPD's Identity Theft Squad went to see the Martins again — this time to apologize. "And we wanted to be sure perps weren't using that address for identity theft," NYPD Deputy Commissioner Paul Browne told The Associated Press on Friday.

The detectives told 82-year-old Rose and 83-year-old Walter that Police Commissioner Raymond Kelly had ordered them to solve the problem, which had gone on for at least four years [That wasn't the motivator... Bob] and was reported this week in the New York Daily News. [...that was! Bob]

Police used the Brooklyn address as part of what Browne called "random material" to test an automated computer system that tracks crime complaints and records other internal police information. [Best Practice: Never ever use real data in a test. Bob]

The couple first complained about the harrowing police visits in 2007, "and we identified the problem then," Browne said. "It was a mistake by the police department."

Police wiped the Martins' address from the system.

Or so they thought, said Browne.

Instead, the visits continued.

Apparently, some computer files bearing the Martins' address stayed in the system. [and, apparently, there was no procedure to identify and remove them. Bob]

… To make sure it will never happen again, Browne said the Martins' address has been flagged with alerts, so if there's any record indicating an officer should visit the address, "they're barred from doing it." [Sounds like an open invitation to crooks of all kinds. Bob]

A skeptical Rose Martin has asked the department to write her an official letter to that effect.



Fifth Third was TJX's bank. This could be related to that breach, but more likely is a new one.

http://www.databreaches.net/?p=10713

New 5/3 debit cards ’safety precaution’

March 19, 2010 by admin

WOOD-TV reports:

A security breach through a third-party payment company prompted Fifth Third Bank to send new debit cards to its customers as a safety precaution.

Bank officials sent a letter to customers and said the debit cards may have been compromised, but other sensitive information, such as Social Security numbers, were not accessed.

The news station is trying to get more information from Fifth Third.



So, is they is or is they ain't going to protect my data?

http://www.pogowasright.org/?p=8466

Swiss upper house approves five bank data deals

March 19, 2010 by Dissent

The Swiss parliament’s upper house on Wednesday approved deals with the United States and four other countries to share data on potential tax dodgers, bringing the Alpine state closer in line with international standards.

Under the deals Switzerland will have banking data sharing arrangements with France, Britain, the United States, Denmark and Mexico in cases of tax fraud and tax evasion, in accordance with OECD standards, except when those requests are based on stolen data.

Read more on Reuters.

[From the Article:

Switzerland's relations with both France and Germany have been strained in recent months after both countries obtained stolen information on possible tax dodgers with Swiss bank accounts.

"We won't give administrative assistance if stolen data is presented. That's our sovereign right," finance minister Hans-Rudolf Merz told television show Classe Politique.

"France has stolen data," he said. "If we get a request for administrative assistance from France, we're not honouring it."

All five agreements have been signed bilaterally but still have to be passed by parliament's lower house, where the right-wing SVP, which has said it opposes them, has the most seats.



Most likely, this is a case of “We can use big words too” rather than a clear plan.

http://www.readwriteweb.com/archives/cloud-based_open-source_future_for_teachers.php

Cloud-Based, Open-Source Future For Teachers?

Written by Audrey Watters / March 16, 2010 4:00 PM

A computing device for every teacher and student so they can access the Internet at school or at home? That, along with an embrace of cloud computing, Creative Commons, and open-source technologies is part of a new set of recommendations from the U.S. Department of Education.

On March 5, the department released an 80-page draft of its National Educational Technology Plan entitled Transforming Education: Learning Powered by Technology. The plan lays out an ambitious agenda for transforming teaching and learning through technology.

Friday, March 19, 2010

Now this is more like it! Just when we're discussing “Cloud Computing” (http://law.du.edu/documents/privacy-foundation/Privacy-Brochure-March-2010.pdf ) as a “new thing,” Tim O'Reilly goes and introduces another new term/concept!

http://news.cnet.com/8301-13505_3-10469399-16.html?part=rss&subj=news&tag=2547-1_3-0-20

Tim O'Reilly: 'Whole Web' is the OS of the future


(Related) Making the virtual real?

http://techcrunch.com/2010/03/19/cloudcrowd-outsources-labor-to-the-cloud/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Techcrunch+%28TechCrunch%29

CloudCrowd Takes On CrowdFlower To Outsource Labor To The Cloud

by Leena Rao on Mar 19, 2010

… CrowdFlower is a labor as a service startup that helps businesses outsource mundane or repetitive tasks to the cloud. Now the startup has attracted a competitor, recently launched CloudCrowd, which also promises increase efficiency and lower costs to companies by breaking large projects into smaller tasks, and distributing them to its virtual workforce.



Most data breaches are not noticed by the “victims.” Think of those as far to the left on the bell curve. But, every now and then we have something far to the right – here is an almost “Perfect Storm!” Could it have been worse? Consider the Reporter getting the Lawyer's medical information...

http://www.phiprivacy.net/?p=2235

Hospital Makes Changes After Billing Blunder

By Dissent, March 18, 2010 11:15 am

Rafael Sanchez reports on a breach involving him:

An Indianapolis hospital system is using a new registration and billing system after the wrong Rafael Sanchez received a 6News’ reporter’s medical bill.

Rafael Sanchez, an attorney at Bingham McHale, called the station in December after he was mailed a $2,051.45 bill from Methodist Hospital intended for 6News’ reporter Rafael Sanchez, in violation of federal law.

The invoices he received were for real [vs. fictional? Bob] medical care Sanchez the reporter received after he collapsed outside court while covering a mass murder trial on Dec. 10.

Clarian Health investigated the incident, and its facilities are now using a new system intended to minimize billing errors, especially for patients with similar names.

Read more on TheIndyChannel.



I wonder if TD paid back the money stolen rather than “recovered it.” Governments (even small town governments) might have more leverage than small businesses.

http://www.databreaches.net/?p=10706

Town recovers $378,470 stolen by hackers

March 19, 2010 by admin

Michael Valkys reports:

Town of Poughkeepsie officials Thursday night announced the town has recovered more than $378,000 in town funds alleged to have been stolen by cyber thieves.

Supervisor Patricia Myers announced the recovery at a special Town Board meeting at Town Hall. She read a brief statement after the board’s approximately one-hour executive session.

“The Town of Poughkeepsie is pleased to announce that, with the assistance of TD Bank and various law enforcement authorities, the $378,470 which was diverted by cyber theft has been restored.”

[...]

Myers had been critical of TD Bank officials for not catching the theft, but praised the bank during Thursday’s announcement.

Town officials have said they implemented new security measures after the thefts were discovered. [Better late than never? What else have they failed to do? Bob]

“The town has reviewed and updated its internal computer systems and it recognizes the integrity and security of TD Bank’s online banking system,” Myers said

Read more in the Poughkeepsie Journal.



Yes we teach students “How to write a virus,” but no, this isn't one of ours.

http://www.databreaches.net/?p=10696

(update) Virus that hit Mary’s Pizza “so new it was not even in virus database”

March 19, 2010 by admin

David Bolling provides more information on a breach reported here previously:

The Plaza location of Mary’s Pizza Shack has been identified as the target of Internet hackers who penetrated the restaurant’s computer system with a “logger” virus that captured credit card numbers at the transaction terminal.

The presence of a virus was discovered by a corporate official on Feb. 10 after the family-run company received reports from friends about unauthorized credit card charges. CEO Vince Albano, grandson of Mary’s founder Mary Fazio, said the company immediately contacted the four affected credit card companies – VISA, MasterCard, Discover and American Express, and then hired Trustwave, a Chicago-based data security firm recommended by the card companies.

Only credit card numbers were taken by the virus, Albano emphasized, no personal identification information, such as Social Security numbers or bank account records were exposed, [nor did they steal your car or gold from Fort Knox, but the PR people always look for something positive to say, even if it is totally unrelated. Bob] although VISA and MasterCard debit accounts were apparently raided. Trustwave identified and removed the virus doing the damage on Feb. 23.

Albano said he was told by Trustwave officials that the virus was so new it was not even in the company’s virus database.

[...]

Sonoma police, who have followed the case from the beginning, reported that Mary’s was not the only hacked card terminal in the Valley but they have not yet identified other company victims.

Albano told the Index-Tribune that Sheriff’s Office investigators reported there were at least 70 cases of stolen credit card number use reported, some 50 of which were traced to Mary’s.



“Can you hear me now?”

http://www.eff.org/deeplinks/2010/03/ftc-internet-companies-start-using-ssl

FTC to Internet Companies: Start Using SSL

Deeplink by Peter Eckersley March 18th, 2010

HTTPS is the backbone of web security. The protocol, which is also commonly known as the Secure Sockets Layer (SSL), is what guarantees we can use the web to transmit sensitive information — financial, medical, or other — with relative confidence that it won't be intercepted or stolen. EFF has been arguing for years that best practices demand that all sensitive data be sent exclusively over SSL.


(Related) Could they be getting serious?

http://arstechnica.com/tech-policy/news/2010/03/150000-take-fcc-broadband-speed-test-in-first-week.ars

150,000 take FCC broadband speed test in first week



I wonder if California will use this as a revenue generator? They have to balance the budget somehow...

http://yro.slashdot.org/story/10/03/18/2237230/1st-Trial-Under-California-Spam-Law-Slams-Spammer?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

1st Trial Under California Spam Law Slams Spammer

Posted by timothy on Thursday March 18, @05:42PM

www.sorehands.com writes

"In the first case brought by a spam recipient to actually go to trial in California, the Superior Court of California held that people who receive false and deceptive spam emails are entitled to liquidated damages of $1,000 per email under California Business & Professions Code Section 17529.5. In the California Superior Court ruling (PDF), Judge Marie S. Weiner made many references to the fact that Defendants used anonymous domain name registration and used unregistered business names in her ruling. This is different from the Gordon case, where one only had to perform a simple whois lookup to identify the sender; here, Defendants used 'from' lines of 'Paid Survey' and 'Your Promotion' with anonymously registered domain names. Judge Weiner's decision makes it clear that the California law is not preempted by the I CAN-SPAM Act. This has been determined in a few prior cases, including my own. (See http://www.barbieslapp.com/spam for some of those cases.)"



Does a Social Network have “Community Values?” Could a case be made that this IS the community norm and we're just a bunch of old fuddy-duddies?

http://www.pogowasright.org/?p=8441

Court bars charges against teen who posed semi-nude

March 19, 2010 by Dissent

Dan Goodin reports:

A federal appeals court rebuked a Pennsylvania district attorney who threatened to file felony child pornography charges against teens who were photographed semi-nude unless they attended an “education program”.

In a unanimous decision issued Wednesday by the appeals court in Philadelphia, a three-judge panel said the threat amounted to a “Hobson’s Choice” that would retaliate against one of the girls and her family for exercising their constitutional right to free speech. A rare dose of government-issued sanity in the prosecutorial crusade against teenage ’sexting’, the ruling upheld a lower-court order issued last year in the case.

Read more in The Register.

Ashby Jones of the Wall Strreet Journal also covers the decision:

Do teens, tweens or anyone else under 18 have a First Amendment right to send sexually explicit messages or photos through their cell phones? …. The Third Circuit, in this opinion, decided to punt on the First Amendment issue. But the ruling was a win for the girl, a then 16-year-old from a town near Scranton, Pa. The three judges said a prosecutor could not charge her merely for appearing in a photograph without evidence she had engaged in distributing it.


(Related)

http://www.wired.com/threatlevel/2010/03/cyberbullying-not-protected?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29

Court: Cyberbullying Threats Are Not Protected Speech



“We can arrest you AND the horse you rode in on...”

http://yro.slashdot.org/story/10/03/18/191238/Killer-Convicted-Using-Dog-DNA-Database?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Killer Convicted, Using Dog DNA Database

Posted by timothy on Thursday March 18, @02:04PM

lee1 writes

"It turns out that the UK has a DNA database — for dogs. And this database was recently used to apprehend a South London gang member who used his dog to catch a 16-year-old rival and hold him while he stabbed him to death. The dog was also accidentally stabbed, [..causing dog lovers to demand immediate execution! Bob] and left blood at the scene. The creation of human DNA databases has led to widespread debates on privacy; but what about the collation of DNA from dogs or other animals?"



“Plus ca change plus la meme chose”

http://politics.slashdot.org/story/10/03/18/1851243/Obama-Administration-Withholds-FoIA-Requests-More-Often-Than-Bushs?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Obama Administration Withholds FoIA Requests More Often Than Bush's

Posted by timothy on Thursday March 18, @02:31PM

bonch writes

"Agencies under the Obama administration cite security provisions to withhold information more often than they did under the Bush administration. For example, the 'deliberative process' exemption of the Freedom of Information Act was used 70,779 times in 2009, up from the 47,395 of 2008. Amusingly, the Associated Press has been waiting three months for the government to deliver records on its own Open Government Directive."


(Ditto) but perhaps now we can see the relationships more easily?

http://www.bespacific.com/mt/archives/023785.html

March 18, 2010

MAPLight.org - New Web Site Reveals Money and Politics Links in New Ways

"MAPLight.org, the award-winning nonpartisan, nonprofit research organization dedicated to illuminating the connection between money and politics, has launched a new web site which shines the light of transparency and accountability in powerful ways as never before. The new site is being launched during Sunshine Week, a nonpartisan, national initiative to open a dialogue about the importance of open government and freedom of information. MAPLight.org users will find on the new site robust tools to

  • illuminate how money aligns with votes

  • reveal data on individual legislators and how much money they have received from industry and organizations

  • expose specific contributions to persons, by parties, by committee, and within date ranges and important and vital features including

  • a new U.S. Congress research blog

  • a powerful search engine"



http://www.freetech4teachers.com/2010/03/check-out-new-pages.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+freetech4teachers%2FcGEY+%28Free+Technology+for+Teachers%29

Thursday, March 18, 2010

Check Out the New Pages

I've recently added some new pages to Free Technology for Teachers. These pages, located just below the header banner, contain some presentations, how-to instructions, and resources for teaching with technology. The pages are a work in progress so check back from time to time for more content on the pages.



If you don't want to, would you mind if I did?

http://www.makeuseof.com/tag/feelhome-remotely-access-files/

FeelHome: Remotely Access All Your Files From Anywhere

… You can install this free program on any Linux, Mac or Windows computer and access your computer files remotely from anywhere.



This might make a good quiz for my Computer Security students. “Recover the data on this drive – you have 15 minutes.”

http://www.makeuseof.com/tag/completely-securely-erase-hard-drive-windows/

How To Completely & Securely Erase Your Hard Drive [Windows]

Thursday, March 18, 2010

Usually, articles that address the topics we discuss in a Privacy Foundation's seminar are published well after the seminar. This is an exception, since the seminar is tomorrow. http://law.du.edu/documents/privacy-foundation/Privacy-Brochure-March-2010.pdf

http://news.cnet.com/8301-19413_3-10469214-240.html?part=rss&subj=news&tag=2547-1_3-0-20

Is a legal challenge to cloud inevitable?

March 17, 2010 9:30 PM PDT

I've been spending this week at the Cloud Connect conference at the Santa Clara Convention Center, in Santa Clara, Calif., listening closely to the broad range of opinions and concerns raise by both the customers of cloud and it's vendor community.

… The sense I am getting is that adoption of cloud is beginning to outstrip the ability of legal council to evaluate the liabilities that the cloud introduces to enterprise IT. [This seems inevitable. Legislators won't react until a significant portion of the voting public tells them to. Bob]

[Free (but untitled) presentation PDFs from Cloud Connect are here: http://www.cloudconnectevent.com/2010/presentations/free.php



Maybe we shouldn't scoff. Looks like the prosecutor had a viable strategy.

http://www.pogowasright.org/?p=8418

Google Italy & Privacy: Not What You Might Think

March 18, 2010 by Dissent

Ryan Calo writes:

Reading through Italian news coverage of the Google Italy case, another picture emerges. User privacy may well be at issue, but not in the way you probably think. I grew up in Italy and now research and teach Internet law in the United States. When I heard about the verdict against three Google executives, one of them an alumnus of the law school where I work, I went first to American sources, then to Italian ones. What I found was that most Americans may be getting the basic facts and ideas of the case wrong.

[...]

The prosecutor brought two sets of charges against Google’s executives. The first sought to hold them criminally liable for the defamatory acts of the kids that uploaded the offending video. This charge was thrown out, likely on the basis of an Italian law—Article 17 of Legislative Decree 70—that mostly resembles our own federal immunity for content uploaded by third-parties. We’ll see when the court publishes its reasoning in a few months.

The second set of charges, of which the Google executives were actually convicted, are supposed to be about privacy—namely, criminal liability for violating provisions of the Italian Personal Data Protection Code. But as Susan Crawford told the New York Times, “[a]ny concern for privacy in this case is a pious cover.” Indeed, it appears that the prosecution sought to use these infractions as a way to defeat the above-mentioned immunity, on the theory that Article 17 protection is not available to criminals. (UPDATE: Chris Parsons pointed me toward a post over at Out-Law explaining that data privacy violations are not entitled to immunity at all under EU law.)

Read more on CIS.



I hope this translates to the US. Condemning tools for the work done with them is illogical. (If Spock didn't say that, he should have.)

http://yro.slashdot.org/story/10/03/18/0027235/P2P-and-P2P-Links-Ruled-Legal-In-Spain?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

P2P and P2P Links Ruled Legal In Spain

Posted by samzenpus on Thursday March 18, @02:12AM

Nieriko writes



e-Repo-man My hacking 101 students will love this! All we have to do is break a simple password?

http://tech.slashdot.org/story/10/03/17/2218208/Disgruntled-Ex-Employee-Remotely-Disables-100-Cars?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Disgruntled Ex-Employee Remotely Disables 100 Cars

Posted by samzenpus on Wednesday March 17, @06:35PM

hansamurai writes

"Over one hundred cars equipped with a Webtech Plus blackbox were remotely disabled when a former employee of dealership Texas Auto Center got hold of his employer's database of users. Webtech Plus is repossession software that allows the dealership to disable a car's ignition or trigger the horn to honk when a payment is due. Owners had to remove the battery to stop the incessant honking. After the dealership began fielding an unusually high number of calls from upset car owners, they changed the passwords to the Webtech Plus software and then traced the IP address used to access the client to its former employee."



Can you say, “Slippery Slope?” “Next week, we're gonna add Republicans!”

http://www.wired.com/threatlevel/2010/03/sex-offender-databases/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29

Court: State Can Dump Non-Sex Offenders Into Registry



How to tell someone is fishing for a high paying job in the industry they regulate... This is Politics 101, not Political Science.

http://www.pogowasright.org/?p=8386

FTC member rips into Google’s privacy efforts

March 17, 2010 by Dissent

Grant Gross reports:

Several major U.S. Internet companies, including Google and Facebook, need to “step up” and better protect consumer privacy or face tougher penalties from the U.S. Federal Trade Commission, a commissioner said Wednesday.

Commissioner Pamela Jones Harbour, who is leaving the FTC next month, [Number One clue! Bob] ripped into Google for the launch of its Buzz social-networking tool in February, and she complained that many other Internet firms, including Facebook and Microsoft, aren’t encrypting the consumer data that lives in their clouds.

“I am especially concerned that technology companies are learning harmful lessons from each other’s attempts to push the privacy envelop,” she said during an FTC privacy workshop. “Even the most respected and popular online companies, the ones who claim to respect privacy, continue to launch products where the guiding privacy policy seems to be, ‘Throw it up against the wall and see if it sticks.’”

Read more on Network World.



I didn't see the annual Wiretaping report, but it might show up eventually.

http://www.bespacific.com/mt/archives/023769.html

March 17, 2010

Sources for Finding Mandated Reports to Congress by U.S. Federal Agencies

Rick McKinney: "The Law Librarians' Society of Washington, D.C., Inc. (LLSDC) is pleased to announce the availability on its Legislative Source Book Website of a new title called "Sources for Finding Mandated Reports to Congress by U.S. Federal Agencies" (http://www.llsdc.org/fed-agency-reports/). The site briefly describes and links to sources that list or may make available reports from Federal agencies mandated by Congressional statute. Other matters discussed include where the text of report provisions can be found in the law, who receives the reports, sunsetted report provisions that remain in the U.S. Code, general reporting provisions applicable to most agencies, and other matters."



I always use Yogi Berra to explain how statistics can fail:

“Baseball is ninety percent mental and the other half is physical. “

“Half the lies they tell about me aren't true. “

But one of the Comments said it best, “I would never believe a statistic that I did not make up myself! ”

http://science.slashdot.org/story/10/03/17/2239252/Science-and-the-Shortcomings-of-Statistics?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Science and the Shortcomings of Statistics

Posted by samzenpus on Wednesday March 17, @09:30PM

Kilrah_il writes

"The linked article provides a short summary of the problems scientists have with statistics. As an intern, I see it many times: Doctors do lots of research but don't have a clue when it comes to statistics — and in the social science area, it's even worse. From the article: 'Even when performed correctly, statistical tests are widely misunderstood and frequently misinterpreted. As a result, countless conclusions in the scientific literature are erroneous, and tests of medical dangers or treatments are often contradictory and confusing.'"



It's a (brief) slideshow... Might show it in my Statistics class.

http://www.bespacific.com/mt/archives/023773.html

March 17, 2010

Pew Presentation: Teens and the internet -The future of digital diversity

Teens and the Internet: The Future of Digital Diversity, Kristen Purcell, Ph.D. Associate Director, Pew Internet Project, Fred Forward Conference, March 23, 2010.



Building a toolkit for geeks

http://www.makeuseof.com/tag/top-10-downloaded-portable-applications-movers-shakers/

Top 10 Most Downloaded Portable Apps [Movers & Shakers]