Tag Archives: privacy

Infosecalypse Now

A number of links in the chain:Mr. Walsh asks Why We Fight?Which spurs Mr. Hoffman’s Nam flashback.Bloginfosec says it’s safe to surf this beach, so its safe to surf this beach. Meanwhile, Charlie squats in the bush, everyday getting stronger, … Continue reading

Posted in Uncategorized | Tagged , , , | Leave a comment

With The AM Radio On

The imperial raftload of opinions on who really is the victim of credit card fraud, stemming from the Boston Globe article on the legislative reactions to the Stop and Shop Skimming Shenanigans, is centered around this quote as much as … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment

Privacy raised to level of Terrorism, Drugs

This bit from my hometown paper, written by ace real estate appraiser David Lewis, uses privacy, identity theft and terrorism to support his objection to a law requiring disclosure of the amount of real estate transactions. In some ways, The … Continue reading

Posted in Uncategorized | Tagged | Leave a comment

I don’t give a damn about my bad reputation

No. No. Not me. I was meditating on reputation risk the other day, and behold, the Daily Dave belches forth the documents I sought. (I remembered something on Emergent Chaos on this topic, but hadn’t dug deep enough into their … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment

Stupid, powerless, uneducated.

Infoworld on a session at RSA: The Cybercrime Blame Game. Although a conference center ballroom may not be conducive to rational discourse (see: US Political Party Conventions), this discussion appears a bit over the top: More people complaining about identity … Continue reading

Posted in Uncategorized | Tagged , , , | Leave a comment

Buzzword Compliance or Compensating Controls

The most recent SANS e-mail letter, this article from Computerworld on pretty minor (all things considered) security incident at federal retirement fund agency.The voice of SANS (Pescatore in this case) remarked thusly: This and the Nordea incident, as well as … Continue reading

Posted in Uncategorized | Tagged , , , | 2 Comments

Canadian Breach Notification

From Emergent Chaos, a link to the paper “Approaches to Breach Notification” from the Canadian Internet Policy and Public Interest Clinic. I’ve been spending this frosty MLK Day afternoon looking it over. I really dig this approach: Generally, the affected … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment

Finders Keepers

Corporations lose data in a variety of ways, with impacts to the organization and to the privacy of individuals. The view from the advantage of the threat actors becomes a bit clearer when the lost data is identified simply as … Continue reading

Posted in Uncategorized | Tagged , | Leave a comment

Now That’s What I Call Fraud By Impersonation! COED EDITION!

NY Post story on mysterious fraudster coed. “All she took was her cat, her toothbrush and her brushes and combs – anything with DNA on it,” he said. Man, I try to keep my DNA away from my cat. From … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment

Provably Private?

From the Guardian, I read this curious article on privacy and contextualintegrity. “Linear temporal logic,” eh? I wish I could groove to what that means. So I read Wikipedia, then I started researching the folks mentioned in the article, finding … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment