Monday, April 01, 2013

Interesting, as such articles often are, but (I think) unworkable.
The Dangers of Surveillance, Neil M. Richards, Washington University in Saint Louis – School of Law, March 25, 2013, Harvard Law Review, 2013
Abstract:
From the Fourth Amendment to George Orwell’s Nineteen Eighty-Four, our law and literature are full of warnings about state scrutiny of our lives. These warnings are commonplace, but they are rarely very specific. Other than the vague threat of an Orwellian dystopia, as a society we don’t really know why surveillance is bad, and why we should be wary of it. To the extent the answer has something to do with “privacy,” we lack an understanding of what “privacy” means in this context, and why it matters. Developments in government and corporate practices, however, have made this problem more urgent. Although we have laws that protect us against government surveillance, secret government programs cannot be challenged until they are discovered. And even when they are, courts frequently dismiss challenges to such programs for lack of standing, under the theory that mere surveillance creates no tangible harms, as the Supreme Court did recently in the case of Clapper v. Amnesty International. We need a better account of the dangers of surveillance.
This article offers such an account. Drawing on law, history, literature, and the work of scholars in the emerging interdisciplinary field of “surveillance studies,” I explain what those harms are and why they matter. At the level of theory, I explain when surveillance is particularly dangerous, and when it is not. Surveillance is harmful because it can chill the exercise of our civil liberties, especially our intellectual privacy. It is also gives the watcher power over the watched, creating the the risk of a variety of other harms, such as discrimination, coercion, and the threat of selective enforcement, where critics of the government can be prosecuted or blackmailed for wrongdoing unrelated to the purpose of the surveillance.
At a practical level, I propose a set of four principles that should guide the future development of surveillance law, allowing for a more appropriate balance between the costs and benefits of government surveillance. First, we must recognize that surveillance transcends the public-private divide. Even if we are ultimately more concerned with government surveillance, any solution must grapple with the complex relationships between government and corporate watchers. Second, we must recognize that secret surveillance is illegitimate, and prohibit the creation of any domestic surveillance programs whose existence is secret. Third, we should recognize that total surveillance is illegitimate and reject the idea that it is acceptable for the government to record all Internet activity without authorization. Fourth, we must recognize that surveillance is harmful. Surveillance menaces intellectual privacy and increases the risk of blackmail, coercion, and discrimination; accordingly, we must recognize surveillance as a harm in constitutional standing doctrine.
You can download the full paper from SSRN.


How to stand out in a totalitarian state...
Email is a fairly insecure way of sending a message – it sits in both inboxes and send mail folders until the sender or receiver decide to delete it. Cloakmy is different in that it allows you to send messages to email addresses, with an added layer of security.
… the recipient gets a link to the Cloakmy service where they can view the message (which can be password protected, too). The sender can choose auto self-destruct, which destroys the message after it has been read, timed-deletion and no deletion at all.


We've got this army of little robots, see? Some of them vacuum your carpet while you're not home. Some can mow your lawn. We even have an air force to deliver your morning paper...
Newspapers, Delivered by Drone
Add one more to the list of career paths that are being obviated by robots: news delivery.
In Auvergne, a province in central France, residents get their daily news the old-fashioned way: through newspapers. But the delivery of said newspapers, apparently, will soon be executed with the help of high tech -- because it'll be done with the help of drones.
Auvergne's local postal service, La Poste Group, announced on its blog that it is partnering with the drone-maker Parrot to explore the wacky world of high-flying news delivery. The service will be called "Parrot Air Drone Postal," and it will make use of Parrot's quadricopter drones. To test its general feasibility, the delivery service is already being, er, piloted in Auvergne, Silicon Alley Insider reports, with a team of 20 postal workers and 20 drones. (The postal workers control the drones by a specialized app -- which they can use on iOS or Android devices.)


Sometimes, just making the attempt has value...
Babak Siavoshy writes:
The most vexing failure of privacy scholarship, in my opinion, is that “privacy advocates” have failed to articulate in simple terms (to the public or any other audience) the value of privacy and the harm from undermining it.
I’m not suggesting I can solve this problem, but I have some thoughts about its sources. I think there are several reasons privacy harms and benefits are difficult to articulate, including the following:
(1) in addition to being an individual right, privacy is (in the most important ways) a collective or system-based right, and the harm from violating privacy rights and the benefits from protecting them are only apparent in the aggregate. That makes these harms and benefits more difficult to articulate and conceive in simple terms. In this sense, privacy is like voting — it may be a relatively small societal harm to prevent one person from voting, but restricting the right to vote will, in the aggregate, fundamentally harm the system we live in by undermining values like democratic accountability.
Read more on a law and tech blog.


I'm teaching Statistics again this Spring, so I need some raw data. Probably not this much, but you never know...
March 31, 2013
New on LLRX - Statistics Resources and Big Data on the Internet 2013
Via LLRX.com - Statistics Resources and Big Data on the Internet 2013: Marcus P. Zillman has updated his best practices bibliography of sites and reliable sources focused on the hot topic of statistics and big data. These sources are representative of multiple publishers, national and global - government, academia, NGOs, and industry, many of which leverage open source and collaborative applications.


For my Intro to IT students...
More Sites Like ... allows you to find all kinds of sites based on any other website.
To use the site, you simply type in a search term or the URL of a website you want compared. It will show you a list of websites based on the search term or URL, ranked by popularity and similarity,

(Related) I like to keep my Intro students grounded. We can't all be Billionaires...
He Has Millions and a New Job at Yahoo. Soon, He’ll Be 18.
… Nick D’Aloisio, a programming whiz who wasn’t even born when Yahoo was founded in 1994, sold his news-reading app, Summly, to the company on Monday for a sum said to be in the tens of millions of dollars. Yahoo said it would incorporate his algorithmic invention, which takes long-form stories and shortens them for readers using smartphones


Global Warming! Global Warming! I admit I don't quite get it, but if too much CO2 is the cause, won't trapping carbon in new plants be a solution?
The green, green grass of the Arctic: Researchers predict dramatic boost in trees and shrubs due to global warming
Experts say the wooded areas in the region could increase by 50% over the coming decades - and accelerate global warming in the process.

Posted by at No comments:

Sunday, March 31, 2013

Another day when nothing much is being reported. Perhaps everyone is off rolling Easter eggs?


Sometimes, police work is easy...
Police: Janitor stole laptop, then called for tech support
A Far South Side janitorial worker charged with stealing a laptop from the U.S. EPA’s field office in Chicago was busted after allegedly calling the computer maker’s help line for assistance when he couldn’t get it to work.
Alan Baker, 35, of the 13000 block of South Houston Avenue, was on a temporary assignment at the EPA office at the time a laptop and two smartphones were stolen in December, according to the Cook County Sheriff’s Office.
Investigators figured out Baker had the laptop when he contacted the manufacturer’s help line for assistance, the sheriff’s office said.


Imagine being the bad guy who stole this card and facing one of “the Band of Brothers-who-are-also-Judges” Can you say, “99 years!” (Maybe now he would be willing to speak at one of the Privacy Foundation Seminars?)
Chief Justice John Roberts a victim of credit-card fraud
Anyone can fall victim to credit-card fraud - even Chief Justice John Roberts.
A Supreme Court spokeswoman said someone got hold of one of Roberts' credit card account numbers. No further details were given.
However, the Washington Post reports that Roberts told a Starbucks cashier in suburban Maryland that he had to use cash for his morning coffee because he had canceled his credit card after discovering someone had the number.


Could be useful...
12 Open Educational Resources: From Khan to MIT
#1: MIT OpenCourseWare
#2: Connexions
Rice University's Connexions is an OER repository organized into independent modules that students can access independently
#3 OpenStax College
Another Rice University project, OpenStax College, aims to create complete, authoritative university textbooks for subjects starting with physics, sociology and biology. Basic downloads of these texts are free, and print-on-demand versions can be purchased inexpensively.
#4 Khan Academy
Although the first Khan Academy videos targeted math education at the K-12 level,
#5: AMSER
AMSER (the Applied Math and Science Education Repository) is a portal of educational resources and services aimed at community and technical colleges but free for anyone to use.
#6: Center For Open Educational Resources And Language Learning
The Center for Open Educational Resources and Language Learning at the University of Texas at Austin focuses on foreign language learning
#7: OER Commons
OER Commons describes its mission as "curating best in class learning materials from around the world since 2007." It covers primary, secondary and post-secondary education
#8: Blended Learning Toolkit
Blended Learning Toolkit from the University of Central Florida is an example of an open resource for building your own online curriculum. Download one of its sample courses, such as this one on College Algebra, and you get a set of Web templates you can load onto your own server and use as the basis for an online course
#9: OER University
OER University is a project of several higher education institutions
#10: MERLOT
MERLOT, the Multimedia Educational Resource for Learning and Online Teaching, is a repository and community website dedicated to OERs for higher education,
#11: The Saylor Foundation
Saylor.org is yet another nonprofit site dedicated to organizing the best OERs for higher education.
#12: Boundless
One of the things that makes Boundless interesting (and controversial) is the way it remixes OER materials into "alignments" with popular textbooks from commercial publishers. Rather than simply downloading an OER textbook, students can have it rearranged in such a fashion that they can download and use it in place of the more expensive text their professor actually assigned, knowing that it covers approximately the same material.

Posted by at No comments:

Saturday, March 30, 2013

Apparently, nothing much happened yesterday...

There is no “Security through Obscurity.” It isn't difficult to watch who enters a school. No cops, no guns.
Des Moines Register Maps Which Public Schools Are Totally Unguarded
The Des Moines Register is in a bit of hot water after they published an interactive Google Map revealing the level of security in most Iowa's school districts. The map has since been taken down due to complaints from people who were upset that it was basically putting a target on the schools where any troublemakers would face no resistance from security guards or police officers.
As you probably know, the National Rifle Association and other gun advocates have pushed more armed guards to be placed in schools arguing that "gun-free zone" actually draw criminals to schools, because they know no one there we able to challenge them.


For my amusement...
… Legislation in North Carolina will force schools to use digital materials in lieu of printed textbooks by 2017. Schools will be allowed to spend money that’s been allocated for textbooks on technology. But according to the Fayobserver.com, the state has slashed textbook funding in order to balance the budget, and there isn’t any money earmarked for devices. Sounds like a winning plan.
… A proposed bill in Tennessee would cut a family’s welfare benefits by 30% if a child fails a grade. “It’s really just something to try to get parents involved with their kids,” said the bill’s sponsor, state Senator Stacey Campfield, who has no plans to punish affluent families for poor school performance.
… Dave Winer, podcasting and blogging pioneer and developer of RSS, has a new company, Small Pictures, which released its first product this week: Little Outliner. As the name would suggest, the browser-based tool is great for outlining writing projects.

Posted by at No comments:

Friday, March 29, 2013

It is simple to tell most “Criminal Hacker Gang” attacks from “Military Grade” attacks – Criminals rely on victims who fail to implement and update their security while the Military attacker assumes all the security is top shelf and workinig.
How the Spamhaus DDoS attack could have been prevented
Nearly 13 years ago, the wizardly band of engineers who invented and continue to defend the Internet published a prescient document they called BCP38, which described ways to thwart the most common forms of distributed denial-of-service attack.
BCP38, short for Best Current Practice #38, was published soon after debilitating denial of service attacks crippled eBay, Amazon, Yahoo, and other major sites in February 2000. If those guidelines to stop malcontents from forging Internet addresses had been widely adopted by the companies, universities, and government agencies that operate the modern Internet, this week's electronic onslaught targeting Spamhaus would have been prevented.
… BCP38 outlined how providers can detect and then ignore the kind of forged Internet addresses that were used in this week's DDoS attack. Since its publication, though, adoption has been haphazard. Hardware generally needs to be upgraded. Employees and customers need to be trained. Routers definitely need to be reconfigured. The cost for most providers, in other words, has exceeded the benefits.

(Related) An example of an attack your security software might not handle?
You Won't Believe How Adorable This Kitty Is! Click for More!
Employees beware: Don't fall prey to a cat named Dr. Zaius.
"Check out these kitties! :-)" read emails featuring the photo of a Turkish Angora cat with a purple mohawk, sent to nearly two million cubicle dwellers so far. It includes an attachment or link promising more feline photos. Those who click get a surprise: stern warnings from their tech departments.
The Dr. Zaius email is a simulated cyberattack. It is among the ploys companies are using to dupe employees into committing unsafe computing as a way to train them not to be so easily fooled.


Well golly gosh. If you can't trust your government, who can you trust!
Mike Masnick writes that the DOJ’s lack of forthrightness with the courts about its use of Stingray technology is becoming more evident:
The ACLU filed a bunch of FOIA (Freedom of Information Act) requests to dig into this and newly released documents show that, indeed, it was apparently standard practice by the DOJ to be “less than explicit” and less than “forthright” with judges in seeking warrants and court orders to make use of this technology. Here’s an email that was revealed:
As some of you may be aware, our office has been working closely with the magistrate judges in an effort to address their collective concerns regarding whether a pen register is sufficient to authorize the use of law enforcement’s WIT technology (a box that simulates a cell tower and can be placed inside a van to help pinpoint an individual’s location with some specificity) to locate an individual. It has recently come to my attention that many agents are still using WIT technology in the field although the pen register application does not make that explicit.
While we continue work on a long term fix for this problem, it is important that we are consistent and forthright in our pen register requests to the magistrates…
Read more on TechDirt.


“Know your enemy” vs “Saturate the target market” Remember, statistically half the world is below average.
Here’s How Far-Right Extremists Recruit on Twitter
It’s not hard to find extremists on the internet. But it’s really hard finding out who’s the most successful at spreading extremism, which can make counteracting their influence difficult. Now a pair of researchers think they’ve figured out how to do it — which could make extremist threats easier to identify and block.
The researchers also discovered some peculiar data about how extremists on both the far right and left use Twitter and how online extremist networks are organized. In a new report, terrorism analyst J.M. Berger his co-author Bill Strathearn found that traditional leaders on the far right are losing influence to new forms of extremist media, spread online by a small group of influential activists who are relative unknowns, but can communicate to a much larger audience of potential recruits. These activists are even attempting to make inroads into mainstream politics.


I still think the winner of the “Car Talk” Bumper Sticker competition says it best: “Honk if you love Jesus, Text if you want to meet Him”
March 28, 2013
New Study via AT&T - Nearly Half of Commuters Admit to Texting While Driving
"Nearly half of commuters self-reported texting while driving in a recent poll, and 43% of those who did called it a “habit.” Commuters are texting and driving even more than teens – 49%1, compared to 43%2. And the problem has gotten worse. Six in 10 commuters say they never texted while driving three years ago. So while efforts to raise awareness of the http://www.att.com/gen/press-room?pid=23184 are working – 98% of commuters surveyed said they know sending a text or email while driving isn’t safe – there’s clearly more work to be done to change behaviors. Survey sponsor AT&T is calling on employers to help end texting while driving by taking action during National Distracted Driving Awareness Month in April, and beyond. It’s asking businesses to join the more than 165 organizations already engaged in the Texting & Driving-It Can Wait movement, and to use the policies, technologies and communications materials available free at att.com/itcanwait to help move their employees beyond being aware of the danger to making a personal commitment not to text and drive."


For my students...
"Google has announced the Open Patent Non-Assertion (OPN) Pledge. In the pledge Google says that they will not sue any user, distributor, or developer of Open Source software on specified patents, unless first attacked. Under this pledge, Google is starting off with 10 patents relating to MapReduce, a computing model for processing large data sets first developed at Google. Google says that over time they intend to expand the set of Google's patents covered by the pledge to other technologies."
This is in addition to the Open Invention Network, and their general work toward reforming the patent system. The patents covered in the OPN will be free to use in Free/Open Source software for the life of the patent, even if Google should transfer ownership to another party. Read the text of the pledge. It appears that interaction with non-copyleft licenses (MIT/BSD/Apache) is a bit weird: if you create a non-free fork it appears you are no longer covered under the pledge.

Posted by at No comments:

Thursday, March 28, 2013

Is this a cyber-attack that equates to a Pearl Harbor, or a mini-Pearl Harbor, or perhaps a childish prank? Does a physical attack on cyber infrastructure equal a cyber-attack on physical infrastructure?
Egypt's Naval forces claim they have captured three scuba divers who were trying to cut an undersea Internet cable in the Mediterranean. Col. Ahmed Mohammed Ali said in a statement that the divers were caught while “cutting the undersea cable” of Telecom Egypt. Internet services have been disrupted since March 22 in Egypt. From the article: "The statement was accompanied by a photo showing three young men, apparently Egyptian, staring up at the camera in what looks like an inflatable launch. It did not have further details on who they were or why they would have wanted to cut a cable."

(Related) Now what do you think?

(Related) Still just a series of coinkydinks?
UAE Etisalat users face disruption after cable cut


This is the equivalent of giving people who rent storage lockers a brand new shiney padlock!
Amazon Woos the Paranoid With Crypto Cloud Service
Amazon’s cloud services just keep getting bigger, but the fact remains that many people are still worried that this cloud computing thing just isn’t as secure as the systems you might set up in your own data center.
If Amazon wants its service to continue growing at their current rate it has to change this perception. This week the company stepped up this crusade, unveiling a new service for creating and managing encryption keys in the cloud.
The service is called CloudHSM. HSM stands for Hardware Security Modules — physical devices that handle the creation and management of cryptographic keys. These aren’t a new thing, but they’re new to Amazon Web Services, or AWS, a set of online services that provide access to all sorts of computing power, including virtual servers and data storage and more.

(Related) Now all they need to do is actually use the padlock...
How Private Data Became Public on Amazon's Cloud
Companies that use Amazon's popular cloud computing service have accidentally [This is clearly NOT an accident. Someone (probably an entry level IT guy) turned this off and no one (management) checked! Bob] disclosed confidential information including sales records and source code, highlighting the risks of moving sensitive data to the Web, according to new research.
… Rapid7 said the documents were public because many of Amazon's customers overrode a key security mechanism intended to keep such information private, likely by accident as the result of poorly designed third-party management software.
Apparently this is just one company that hired some computers from some e-crooks. Imagine a case where a country takes control of all the computers they can locate, and uses them to attack another country.
March 27, 2013
BBC News - Global internet slows after 'biggest attack in history'
"The internet around the world has been slowed down in what security experts are describing as the biggest cyber-attack of its kind in history. A row between a spam-fighting group and hosting firm has sparked retaliation attacks affecting the wider internet. It is having an impact on popular services like Netflix - and experts worry it could escalate to affect banking and email systems. Five national cyber-police-forces are investigating the attacks. Spamhaus, a group based in both London and Geneva, is a non-profit organisation which aims to help email providers filter out spam and other unwanted content. To do this, the group maintains a number of blocklists - a database of servers known to be being used for malicious purposes. Recently, Spamhaus blocked servers maintained by Cyberbunker, a Dutch web host which states it will host anything with the exception of child pornography or terrorism-related material."
[From the article:
Spamhaus has alleged that Cyberbunker, in cooperation with "criminal gangs" from Eastern Europe and Russia, is behind the attack.
… Mr Linford said the attack's power would be strong enough to take down government internet infrastructure.
"If you aimed this at Downing Street they would be down instantly," he said. "They would be completely off the internet."
He added: "These attacks are peaking at 300 Gbps (gigabits per second).
"Normally when there are attacks against major banks, we're talking about 50 Gbps"
… Spamhaus said it was able to cope as it has highly distributed infrastructure in a number of countries.
The group is supported by many of the world's largest internet companies who rely on it to filter unwanted material.
Mr Linford told the BBC that several companies, such as Google, had made their resources available to help "absorb all of this traffic".
The attacks typically happened in intermittent bursts of high activity. [When the criminal computers are “between jobs?” Bob]


Find a similar, less technical example and see what has truly changed...
"The Supreme Court of Canada has ruled that text messages are private communication (Official Ruling) and therefore police are required to get a warrant to gain access to the text messages of private citizens. The CBC reports: '[Supreme Court Justice Rosalie Silberman] Abella said the only practical difference between text messaging and traditional voice communications is the transmission process. "This distinction should not take text messages outside the protection to which private communications are entitled," she wrote.'"
Quite different from the attitude in the U.S.


Perhaps we should read this...
March 27, 2013
EFF Commentary on Expanded Powers of Computer Fraud And Abuse Act Reform
EFF: "Law professor and historian Tim Wu has called the Computer Fraud and Abuse Act (CFAA) the “worst law in technology.” The Ninth Circuit Court of Appeals has described the government’s interpretation of it “expansive,” “broad,” and “sweeping.” And Orin Kerr, former federal prosecutor and law professor, has detailed how the government could use it to put "any Internet user they want [in jail]." So it's pretty surprising to see that now, instead of reining in the CFAA’s dangerous reach, the House Judiciary Committee is floating a proposal to dramatically expand it and is reportedly planning to rush it to the floor of Congress during its April “cyber” week... Techdirt’s Mike Masnick posted a new draft and analysis of the CFAA expansion bill on Monday."


I expect a lot of my students will telecommute.
March 27, 2013
Costs and Benefits Advantages of Telecommuting For Companies
The Telework Research Network: "We’re read over 500 studies about telecommuting and here are what we’ve found to be the most common advantages for the companies that establish work from home programs. The following pros and cons of work from home programs aren’t just our view, they’re the outcomes from a wide range of studies. Visit our Research: Pros & Cons page for additional information about how individuals and communities can benefit from telecommuting as well."


Think of the infrastructure Walmart is creating here. First in-store lockers and then customers for store-to-door delivery. Revise that to mailboxes and postal carriers and you can immediately see they are trying to take over the Postal Service and probably all the express services... (Or perhaps split it with Amazon to avoid the taint of monopoly)
"Amazon has been placing lockers in brick-and-mortar retail stores, such as 7-Eleven, for pickup of online purchases. Walmart plans to pilot a similar program, presumably making it easier to pick up online purchases at Wal-Mart. 'Wal-Mart hopes its network of physical stores, which number about 4,000 in the United States, will give it an edge as consumers increasingly use smart phones while they shop. Wal-Mart has been testing the shipping of online orders from a small number of its physical stores for about two years. In 2013, the company plans to expand this program from about 25 stores currently to a total of roughly 50 stores. ... Two-thirds of the U.S. population live within five miles of a Wal-Mart store."

(Related)
Wal-Mart may get customers to deliver packages to online buyers
… Wal-Mart has millions of customers visiting its stores each week. Some of these shoppers could tell the retailer where they live and sign up to drop off packages for online customers who live on their route back home, Anderson explained.
Wal-Mart would offer a discount on the customers' shopping bill, effectively covering the cost of their gas in return for the delivery of packages, he added.


Amusing. Perhaps I'll be able to point out some of the things I did...
NSA Declassifies — Sort Of — Its Super-Secret Internal Magazine
… Titled Cryptolog: The Journal of Technical Health, its existence has been known for years, having been mentioned in books about the agency by authors like James Bamford. But its contents, like so much else about the agency and its work, have remained a secret.
That changed today, when the NSA declassified about a quarter century of back issues of the publication running from 1974 to 1997. You can have a look at the results here.


We probably should start thinking about this. They are showing the classic signs... “When in doubt, yell louder!”
What happens if North Korea collapses?
North Korea shut down its last military hotline to South Korea on Wednesday, warning that nuclear war was imminent. The threat was the latest in a series of increasingly belligerent statements made by the Hermit Kingdom since world leaders imposed sanctions as punishment for the communist regime's recent missile and nuclear tests. Pyongyang has threatened to nuke both South Korea and the U.S.

Posted by at No comments:

Wednesday, March 27, 2013

Perhaps they don't take time for a “Lessons Learned” analysis. Perhaps they don't know how to learn.
By Dissent, March 26, 2013 7:45 pm
As I read coverage around the internet, I saw a few reports on the recent OSHU breach that mentioned it was OHSU’s third reported HIPAA breach since 2009. Actually, it’s only the second breach that will appear on HHS’s breach tool, but it’s important to note that this was OHSU’s fourth HIPAA breach that we know about since 2008. And disturbingly, all four of them involved stolen devices with unencrypted patient information:
  • In December 2008, OHSU notified 890 patients that a laptop stolen from a hotel where an employee was staying on business might contain patient records.
  • In June 2009 – also before HITECH went into effect – OHSU notified 1000 patients that their names, treatment information and medical record numbers were on a laptop stolen from a physician’s car outside the doctor’s home.
  • In July 2012, OHSU disclosed that 14,495 names and addresses with 14,300 dates of birth, phone numbers, medical numbers, 195 Social Security numbers and vaccination information were on a USB drive stolen from an employee’s home. OHSU only notified 702 of those affected, primarily those whose records “referenced health conditions that are a bit more personal or might be an embarrassment for a patient if disclosed.”
  • And now, OHSU is notifying 4,022 patients whose information was on a researcher’s laptop stolen from a vacation rental home.
The question seems obvious: what the hell will it take before OHSU encrypts all devices? At what point do we – and HHS – say “enough is enough” and this is just downright negligent or failure to learn from experience? Maybe the doctor who left the laptop in the car violated protocols, but if the data had been encrypted, there wouldn’t have been a reportable breach. Maybe the employee who accidentally took the USB drive home made a mistake, but if the data had been encrypted, there wouldn’t have been a reportable breach. And maybe if OHSU had a policy of encrypting devices used for research purposes, the most recent laptop theft wouldn’t have been a reportable incident.
Approximately 20,000 people had their protected health information needlessly exposed and stolen because OHSU didn’t – and doesn’t – encrypt all devices containing PHI.
HHS has seemingly not closed its investigation of the July 2012 reported incident. The newest incident hasn’t even been added to their breach tool yet. But because HHS does not have records on the 2008 and 2009 incidents, they are likely to miss the big picture – that OHSU has had repeated and easily avoidable breaches.
And that’s a shame.


...because someone, somewhere might be a terrorist!
…. Because Gmail is sent between a user’s computer and Google’s servers using SSL encryption, for instance, the FBI can’t intercept it as it is flowing across networks and relies on the company to provide it with access. Google spokesman Chris Gaither hinted that it is already possible for the company to set up live surveillance under some circumstances. “CALEA doesn’t apply to Gmail but an order under the Wiretap Act may,” Gaither told me in an email. “At some point we may expand our transparency report to cover this topic in more depth, but until then I’m not able to provide additional information.”
Either way, the FBI is not happy with the current arrangement and is on a crusade for more surveillance authority.
Read more on Slate.
[From the article:
According to Weissmann, the bureau is working with “members of intelligence community” to craft a proposal for new Internet spy powers as “a top priority this year.” Citing security concerns, he declined to reveal any specifics. “It's a very hard thing to talk about publicly,” he said, though acknowledged that “it's something that there should be a public debate about.”


Beware of flowery phrases meaning nothing...
"Want to be invisible to Google? Apparently you can't, at least according to the European Commission and Information Commissioner's Office. '"The right to be forgotten worries us as it makes people expect too much," said [deputy commissioner David Smith]. Instead, Smith said the focus should be on the "right to object" to how personal data is used, as this places the onus on businesses to justify the collection and processing of citizens' data. "It is a reversal of the burden of proof system used in the existing process. It will strengthen the person's position but it won't stop people processing their data." EC data protection supervisor Peter Hustinx added the right to be forgotten is currently unworkable as most countries are divided on what qualifies as sensitive personal data. "I believe the right to be forgotten is an overstatement," said Hustinx."


Perhaps not the best use of social media...
App tracks the wise who hate their bosses on Twitter
FireMe! takes note of all those who tweet about how much they loathe their hardworking bosses. It even has a leaderboard.
… Now, some kindly Germans have come along to fully expose those who are temporarily taken by a need to express job-loathing. They have created an app called FireMe!, which lovingly collates tweets that could most politely be described as injudicious.
… The tweets that FireMe! collects are separated into four categories: "Sexual Intercourses," "Haters," "Horrible Bosses" and the quite riveting "Potential Killers."


Location, location, location. Perhaps I'll write a paper on “Camouflague in the Digital Age.” (Start by using the name, address and phone number of your lawyer or congressman whenever you register on a website...)
March 26, 2013
Nature.com - Unique in the Crowd: The privacy bounds of human mobility
Unique in the Crowd: The privacy bounds of human mobility, Yves-Alexandre de Montjoye, César A. Hidalgo, Michel Verleysen & Vincent D. Blondel. Scientific Reports 3; Article number:1376; doi:10.1038/srep01376; Published 25 March 2013
  • "We study fifteen months of human mobility data for one and a half million individuals and find that human mobility traces are highly unique. In fact, in a dataset where the location of an individual is specified hourly, and with a spatial resolution equal to that given by the carrier's antennas, four spatio-temporal points are enough to uniquely identify 95% of the individuals. We coarsen the data spatially and temporally to find a formula for the uniqueness of human mobility traces given their resolution and the available outside information. This formula shows that the uniqueness of mobility traces decays approximately as the 1/10 power of their resolution. Hence, even coarse datasets provide little anonymity. These findings represent fundamental constraints to an individual's privacy and have important implications for the design of frameworks and institutions dedicated to protect the privacy of individuals."


Since the government knows everything about you anyway...
How the Maker of TurboTax Fought Free, Simple Tax Filing
Imagine filing your income taxes in five minutes — and for free. You'd open up a pre-filled return, see what the government thinks you owe, make any needed changes and be done. The miserable annual IRS shuffle, gone.
It's already a reality in Denmark, Sweden and Spain. The government-prepared return would estimate your taxes using information your employer and bank already send it. Advocates say tens of millions of taxpayers could use such a system each year, saving them a collective $2 billion and 225 million hours in prep costs and time, according to one estimate.
The idea, known as "return-free filing," would be a voluntary alternative to hiring a tax preparer or using commercial tax software. The concept has been around for decades and has been endorsed by both President Ronald Reagan and a campaigning President Obama.
… Intuit argues that allowing the IRS to act as a tax preparer could result in taxpayers paying more money. It is also a member of the Computer & Communications Industry Association (CCIA), which sponsors a "STOP IRS TAKEOVER" campaign and a website calling return-free filing a "massive expansion of the U.S. government through a big government program."


Might be a preview of debates here...
March 26, 2013
Proposed new EU General Data Protection Regulation
Proposed new EU General Data Protection Regulation: Article-by-article analysis paper, V1.0
12 February 2013. UK Information Commission Office (ICO).
  • "We originally produced this document for two main audiences – the ICO’s own staff and the Ministry of Justice, to help to inform the UK’s negotiations in Europe. However, it has become clear that the information contained in this paper could be of use more widely, as a resource for all those with an interest in the data protection reform process and the ICO’s views. Therefore we have decided to publish it."


If I understand this, now my wife has to train her dogs to “casually trot around a neighborhood and act as a 'confidential canine informant' when they get a whiff of some illegal substances...” Should be a piece of cake.
Prior to hearing oral argument in the Proposition 8 case this morning, the Supreme Court handed down its decision in Florida v. Jardines, the other dog sniff case (Florida v. Harris was decided last month). In an opinion written by Justice Scalia, the Court affirmed the Florida Supreme Court. The Court held a dog sniff at the front door of a house where the police suspected drugs were being grown constitutes a search for purposes of the Fourth Amendment. Justice Kagan filed a concurrence joined by Justices Ginsburg and Sotomayor. Justice Alito filed a dissent joined by the Chief Justice, and Justices Kennedy and Breyer.
Read more on SCOTUSblog.
Orin Kerr commented on the decision:
This morning the Supreme Court handed down Florida v. Jardines, the case on use of a drug-sniffing dog at a suspect’s front porch to sniff around for narcotics inside. Held, in a 5-4 decision by Justice Scalia: Entry onto the porch was an unconstitutional search because it was a physical intrusion into the curtilage around the home under Jones that was beyond the scope of any implied consent. In light of my Supreme Court Review article on how there was no “trespass test” before Katz, I was particularly interested to see that the majority’s application of Jones does not use the word “trespass.” Instead, the Court refers to the Jones test as a test of “physical intrusion.”
Ryan Calo, however, had a somewhat different perspective, writing on Concurring Opinions that the decision leaves him somewhat puzzled/worried. He raises three thought-provoking questions.


“Future Crime” If this test predicts reoffenders 51% of the time (no numbers in the article) in a environment where 67.5% reoffend, is it truly ready for prome time?
Brain Scans Predict Which Criminals Are Most Likely to Reoffend
Brain scans of convicted felons can predict which ones are most likely to get arrested after they get out of prison, scientists have found in a study of 96 male offenders.
“It’s the first time brain scans have been used to predict recidivism,” said neuroscientist Kent Kiehl of the Mind Research Network in Albuquerque, New Mexico, who led the new study. Even so, Kiehl and others caution that the method is nowhere near ready to be used in real-life decisions about sentencing or parole.


This could become interesting. There are lasers that do not use visible light (e.g. X-ray) and those that are guaranteed to be safe for eyes at the classtroom range, let alone a few thousand feet. If Google uses one of those to hunt for potential sinkholes in Florida or to create accurate topographical maps, are the people on the ground victims?
Aiming Laser Pointer at Airplane Gets Man 2.5 Years in Prison
A 19-year-old North Hollywood man has been sentenced to 2.5 years in prison for aiming a laser pointer at a commercial aircraft — a steep punishment going well beyond the year federal prosecutors were seeking.
“In this case the judge really felt it was serious behavior and he wanted to make sure that people understood it was not a joke,” Los Angeles federal prosecutor Melissa Mills said in a telephone interview Tuesday.
… Defense attorneys, who did not respond for comment, were seeking two years of probation and community service.


Perspective I make that 40,000 man years. Thank goodness “Computer” no longer means “some guy with a green eyeshade”
"It may be a movie about a stone age family, but DreamWorks said its latest 3D animated movie The Croods took more compute cycles to create than any other movie they've made. The movie required a whopping 80 million compute hours to render, 15 million more hours than DreamWorks' last record holder, The Rise of the Guardians. The production studio said between 300 and 400 animators worked on The Croods over the past three years. The images they created, from raw sketches to stereoscopic high-definition shots, required about 250TB of data storage capacity. When the movie industry moved from producing 2D to 3D high-definition movies over the past decade, the data required to produce the films increased tremendously. For DreamWorks, the amount of data needed to create a stereoscopic film leaped by 30%."


Simple? Yes Useful? …
Wednesday, March 27, 2013
Quizdini - Create Online Quizzes That Give Students Instant Feedback
Quizdini is a free tool for creating online quizzes. The best feature of Quizdini is that you can create explanations of the correct answer for your students to view immediately after trying each question in your quiz. Your explanation can include text and or links to online resources like videos and images. Quizdini quizzes can be created in a traditional linear format or in a matching format that asks students to pair answers to terms.
Learn how to create a Quizdini quiz by watching the video below.

Posted by at No comments:

Tuesday, March 26, 2013

If the US had been the target, would we consider ourselves at war? And with whom?
NATO Researchers: Stuxnet Attack on Iran Was Illegal ‘Act of Force’
A cyberattack that sabotaged Iran’s uranium enrichment program was an “act of force” and was likely illegal, according to research commissioned by NATO’s cyberwarfare center.
“Acts that kill or injure persons or destroy or damage objects are unambiguously uses of force” and likely violate international law, according to the Tallinn Manual on the International Law Applicable to Cyber Warfare, a study produced by international legal experts at the request of NATO’s Cooperative Cyber Defense Center of Excellence in Estonia.
Acts of force are prohibited under the United Nations charter, except when done in self-defense, Michael Schmitt, professor of international law at the U.S. Naval War College in Rhode Island and lead author of the study, told the Washington Times.
The 20 experts who produced the study were unanimous that Stuxnet was an act of force, but were less clear about whether the cyber sabotage against Iran’s nuclear program constituted an “armed attack,” which would entitle Iran to use counterforce in self-defense. An armed attack constitutes a start of international hostilities under which the Geneva Convention’s laws of war would apply.


Why? Is Saudi Arabia far less stable than we think? Could Arab Spring come again? Is it only the disruption of old technologies?
Saudi Arabia 'threatens Skype ban'
Encrypted messaging services such as Skype, Viber and WhatsApp could be blocked in Saudi Arabia, the telecommunications regulator there is reported to have warned.
It is demanding a means to monitor such applications, but Saudis say that would seriously inhibit their communications.
Saudi newspapers are reporting that the companies behind the applications have been given a week to respond.
No explanation has been given of why the demand has been made.
Ahmed Omran, a Saudi blogger who runs the Riyadh Bureau site, says that Saudi telecom companies may be tempted to go along with the request from the regulator - even though it will upset their customers - because of the loss of revenue they suffer from the free apps, which are hugely popular in the country.
… Outside interest in the phenomenon has largely focused on how this has allowed Saudis to express themselves in a public forum on social or political issues in an unprecedented way.
Saudis see this latest threat a little differently, our correspondent says. Any move to monitor or block sites like Skype and WhatsApp would potentially deprive them of what has become an essential means of simply communicating with friends and family.
… If it did happen, though, one Saudi told the BBC that it would not take long for people to find a new way to communicate for free.


Drones as advertising? Attach Behavioral Advertising techniques and I expect a swarm of drones over my house spelling out “Still uses last year's technology!”
"As a harbinger for the Paramount film 'Star Trek — Into Darkness', starting in May in Europe's cinemas, last night a swarm of 30 mini-helicopters equipped with the LED lights drew the Star Trek logo into the skies over London. The choreography for the show was developed by Ars Electronica Futurelab from Linz (Austria). Quadrocopter maker Ascending Technologies GmbH from Munich (Germany) provided the aircrafts."


The postal service's hidden cost factor? As far as I can determine from this fluffy article, the “fraud” they catch is phoney postage meters... I don't see how that pays for the system.
The postal service's hidden cool factor
The United States Postal Service is at the cutting edge of supercomputing technologies and the big data revolution, operating one of the most powerful non-classified supercomputing databases on the planet to process and detect fraud on over 528 million mail pieces every day.
… The technological specs of the facility Atkins is allowed to publicly share are impressive: 16 terabytes of in-memory computing coupled with transactional database record ingest rates that allow it to run comparative analysis on a database of about 400 billion records faster than you can blink.
… The information from each mail piece is then compared in the database to some 400 billion records, and complex algorithms help carry out fraud detection and other tests on the data before it is routed back through the Postal Routed Network to the delivery center.


Congress asked for information on the Cloud? Uh-oh...
March 25, 2013
Cloud Computing: Constitutional and Statutory Privacy Protections
CRS - Cloud Computing: Constitutional and Statutory Privacy Protections, Richard M. Thompson II, Legislative Attorney. March 22, 2013
  • "...cloud computing is a web-based service that allows users to access anything from e-mail to social media on a third-party computer. For instance, Gmail and Yahoo are cloud-based email services that allow users to access and store emails that are saved on each respective service’s computer, rather than on the individual’s computer. As more communications are facilitated through these cloud-based programs, it is no surprise that government and law enforcement would seek to access this stored information to conduct criminal investigations, prevent cyber threats, and thwart terrorist attacks, among other purposes. This prompts the following questions: (1) What legal protections are in place for information shared and stored in the cloud? (2) What legal process must the government follow to obtain this information? and (3) How do these rules differ from those applied in the physical world?"


It's always amusing to watch the bureaucratic brain at work...
"3D-printing gun parts has taken off, thanks to the likes of Cody Wilson and Defense Distributed. While the technology adds a rather interesting wrinkle to the gun control debate, the ATF currently is pretty hands-off, ... 'We are aware of all the 3D printing of firearms and have been tracking it for quite a while,' Earl Woodham, spokesperson for the ATF field office in Charlotte, said. 'Our firearms technology people have looked at it, and we have not yet seen a consistently reliable firearm made with 3D printing.' A reporter called the ATF's Washington headquarters to get a better idea of what it took to make a gun 'consistently reliable,' and program manager George Semonick said the guns should be 'made to last years or generations.' In other words, because 3D-printed guns aren't yet as durable as their metal counterparts, the ATF doesn't yet consider them as much of a concern."


Interesting. Leave the processing and storage and Internet connections in your home computer closet and connect a touch screen via WiFi...
"GeekWire reports on Amazon CEO Jeff Bezos' pending patent on remote displays that communicate with base stations and operate on wireless power. Reducing devices to mere screens with minimal storage that receive pre-rendered content (e.g., bitmap images), the patent application explains, eliminates the need for bulky batteries or processors, and employing techniques like electromagnetic or electrostatic induction allows one to cut the cord completely. Such remote displays, Amazon suggests, could find a home on college campuses (tablets), in your car (windshield displays or DVD players), and even on your face (eyeglasses)."
There's already a (not wirelessly powered) device similar to the one described in the patent.


For my spreadsheet students...
A Canadian accountant has built a role playing game (RPG) inside of Excel. It’s called Arena.Xlsm, and it does in fact work.
Why build an RPG inside of Excel? The question is backwards. Why the hell wouldn’t we? Anyone who spent the majority of math in High School programming their TI-83 to prevent boredom knows what I’m talking about.
Note: While TNW tested it on Excel 2010, your mileage may vary. Also, you have to enable the spreadsheet twice, one for editing and second for content. Excel’s protections built to keep you safe in this case are roadblocks in between you and some fun.


“Stuff Students Should Know” At least, my Intro to IT class... We need the next e-Mily Post?
How We’re Turning Digital Natives Into Etiquette Sociopaths
Let’s face it: Technology and etiquette have been colliding for some time now, and things have finally boiled over if the recent spate of media criticisms is anything to go by. There’s the voicemail, not to be left unless you’re “dying.” There’s the e-mail signoff that we need to “kill.” And then there’s the observation that what was once normal — like asking someone for directions — is now considered “uncivilized.”
Cyber-savvy folks are arguing for such new etiquette rules because in an information-overloaded world, time-wasting communication is not just outdated — it’s rude. But while living according to the gospel of technological efficiency and frictionless sharing is fine as a Silicon Valley innovation ethos, it makes for a downright depressing social ethic.
People like Nick Bilton over at The New York Times Bits blog argue that norms like thank-you messages can cost more in time and efficiency than they are worth. However, such etiquette norms aren’t just about efficiency: They’re actually about building thoughtful and pro-social character.


A version for “Student Success? Might be an interesting e-book project for my Intro to IT students.
The Most Effective Strategies for Success
For years, I've been trying to convince people that success is not about who you are, but about what you do.
Roughly two years ago, I wrote about the "Nine Things Successful People Do Differently," which became HBR's most-read piece of content over that time span. It was a list of strategies, based on decades of scientific research, proven effective for setting and reaching challenging goals. I later expanded that post into a short e-book, explaining how you can make each one a habit. But how would readers know if they were doing enough of each "Thing"? (After all, we're terrible judges of ourselves.) To help answer that question, last spring I created something I called the Nine Things Diagnostics — it's a free, online set of questionnaires designed to measure your own use of each of the nine things in pursuit of your personal and professional goals.

Posted by at No comments:
Subscribe to: Posts (Atom)