Sunday, May 26, 2013

Suggestive, and not in a good way. If this was only detected by consumers reporting fruad, has it been going long enough to hit their monthly statements? If all cards used “before Friday” is accurate, it sounds like someone accessed the archived card information, something they are not supposed to keep. I wonder why reporters never ask questions anymore...
Chuck Williams reports that a number of companies have been notified by card processors of what may be a major breach. In Callaway Gardens’ case, it seems to involve malware, but the other companies affected are not named nor whether the same malware was involved in their compromises:
Consumers who have used credit or debit cards at Callaway Gardens are being urged to check their accounts for possible fraudulent charges after the Harris County resort was notified this week of a breach of its system.
The problems could impact anyone who used a card at the resort before Friday, according to a news release from Callaway Gardens. The release did not say when the problem started.
A credit card processing company identified and notified multiple companies, including Callaway Gardens, that sophisticated fraudulent credit card activity had been detected, according to the news release. The companies were identified by common points of counterfeit purchases reported by consumers, according to the release.
Read more on Ledger-Enquirer. I don’t see any notice or link on the resort’s home page, but a Google search led me to this notice on their site.
Anyone know who the other companies are? If anyone has any additional details, please email me or contact me via Twitter, @pogowasright.


What strategy are they following? Consolidating all the lawsuits would be cheaper than fighting them individually, right? Is that all this is?
Becky Yerak of the Chicago Tribune reports:
The grocer laid out the math in its filing: It notes that, based on the plaintiff’s allegations, the class could be as large as 500,000. If each one spent at least two hours of “time and effort” dealing with the breach – even if they were minimum-wage workers being paid $7.25 an hour – the potential damage could be $7.25 million, says Schnuck, which also has stores in Champaign, Urbana, Peoria, Springfield, Normal, DeKalb and Roscoe.
Furthermore, Schnucks points out, the Illinois Supreme Court has in the past approved a ratio of punitive to compensatory damages of about 11 to 1.
When has any databreach resulted in an hourly rate for damages to consumers? And when has there been any award, period, where there has been no demonstration of actual harm? I realize that Schnucks would be eager to consolidate cases and remove them to federal court, but can the court look at this and say, “No court has ever awarded anything like this for a data breach, so this is unrealistic?”
[From the Article:
Schnuck Markets Inc., which has more than 30 stores in the Rockford area and in downstate Illinois, disclosed last month that between December 2012 and March 29, 2013, about 2 million credit and debit cards used at most of its stores might have been compromised by what they believe is a criminal hacking.


Interesting question. Were the Apps actually hacked or is the message claiming the Apps were hacked a fake?
Joe Svetlik reports:
Sky’s Android apps have been hacked by the Syrian Electronic Army. In the early hours of this morning, the broadcaster advised Android users via the Sky Help Team Twitter feed to uninstall the offending apps and wait until it says it’s safe.
Those apps are Sky Go, Sky+, Sky WiFi, Sky News, Sky Sports Football and Sky Sports News. At time of writing, they’ve all been yanked from Google Play.
Read more on CNET UK, but also read Graham Cluley’s blog post about this.
[From the Cnet article:
Of course there's always the chance that the Sky Help Team Twitter feed has itself been hacked. As Graham Cluley points out, its alerts were sent via Twitter's Web user interface, instead of the usual Lithium Social Web. Some dodgy grammar could also point to a non-native English speaker, or that could be down to the fact they were sent out in the early hours by someone who was tired.


This is scary! I do not recall seeing anything like this before. Has Google installed a “Right to be forgotten” algorithm and kept it secret? Who gets to be forgotten (Democrats) and who does not (Republicans) could have significant impact down the road.
"Speaking at the Hay Festival in the U.K. this weekend, Google's Eric Schmidt spoke about the permanence of your online presence, and how that will affect kids growing up in an online world. 'We have never had a generation with a full photographic, digital record of what they did. We have a point at which we [Google] forget information we know about you because it is the right thing to do.' He makes the point that a lot of respectable, upstanding adults today had dubious incidents as kids and teenagers. They were able to grow up and move past those events, and society eventually forgot — but today, every notable misdeed is just a Google search away. CNET's coverage points out that 'mistakes' can often be events that put somebody's life on track. 'A word or an act can seem like a mistake when it happens — and even shortly afterward. In years to come, though, you might look back on it and see that, though it created friction and even hurt at the time, it served a higher and more character-forming purpose in the long run.' Of course, it's also true that some mistakes a simply indicators that somebody's a schmuck."
Schmidt also made an interesting comment in an interview with The Telegraph while he was in the U.K. He said, "You have to fight for your privacy, or you will lose it." This is quite different from his infamous 2009 remark: "If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place."


I wish we could avoid the trap of thinking that a separate law was required each time a new technology or some variation of technology hits the news.
Emily Boyer reports:
As the domestic use of drones become more prevalent, Colorado Democratic Senator Mark Udall is introducing legislation to ensure that the privacy rights of Americans are protected.
The Safeguarding Privacy and Fostering Aerospace Innovation Act [.pdf] will make it illegal for an individual or business to conduct surveillance of another person using Unmanned Aerial Systems (UAS) technology. There are some exceptions, including if the person has consented or if the person is in a public place.
Read more on KUNC


Perspective (and a really interesting chart)
So Far, There Are Only 3 Big Winners in the Smartphone Market


“...some of my best friends are Mac users!”
Install Windows software on your Mac – without the need for a virtual machine, an emulator or dual-booting. Wineskin is a Mac app that brings Wine to your Mac, OS X style, allowing you to create custom packages including everything your favorite Windows programs need to run on your Mac (well… many of your favorite Windows programs).


Once again I have been VINDICATED in my choice of beverages. I must be so healthy by now I could live forever. “Beer! It's not just for breakfast!”
Drop The Fruit Punch And Grab A Beer: Sugary Drinks Could Raise Kidney Stone Risk
… The new study published in the Clinical Journal of American Nephtology stated that people who drank one or more sugary drink per day were at a 23 percent higher risk for developing kidney stones. The risk was increased to 33 percent in those who drank high-sugar beverages such as fruit punch as opposed to those who drank cola.


My weekly amusement...
… The Chicago Public Schools Board of Education — appointees of Mayor Rahm Emanuel — voted to close 49 schools in the city, the biggest single mass closure of schools in the nation’s history. [Old School Bob]
edX announced 15 new members to its consortium this week, including Tsinghua University, Peking University, The University of Hong Kong, Hong Kong University of Science & Technology, Kyoto University, Seoul National University, Cornell University, Berklee College of Music, Boston University, Davidson College, University of Washington, Karolinska Institutet, Université catholique de Louvain, the Technical University of Munich, and the University of Queensland. [New school Bob]
… The “Mechanical MOOC” — the introduction to Python programming course offered by P2PU, MIT OpenCourseware, Codecademy, and OpenStudy — will run again, beginning June 17. (My write-up on the first version is here.)
Lumen Learning, the new company founded by open education leader David Wiley, has offered six “open course frameworks” via the Instructure LMS platform. The courses, which are free and openly licensed, include beginning algebra, intermediate algebra, developmental reading, developmental writing, English composition, and College Success. More courses will be released this summer.
… The for-profit Capella University has gotten the “OK” from its regional accrediting organization to pilot a competency-based program that would not rely on the credit hour but instead on “direct assessment.” [If you know the subject, you get the degree. What a concept! Bob]


This is just one reason why I want to teach robotics...
Nice Self-Driving Car. But How Much Does It Cost?
… While Google’s (GOOG) autonomous driving vehicle costs $75,000, Budisteanu’s system—which uses 3D radar and a mounted camera to detect traffic lanes and curbs—can be had for $4,000.

Dilbert provides another...

No comments: