Articles, News

FTC tears into Apple, Google over kids’ privacy – or lack of

Comments Off 20 February 2012

The FTC has notified Apple & Google that they actually need to read, abide by and enforce their own privacy policies.  Specifically, these two operators can’t turn a blind-eye to what data the cell-phone application developers collect, and what they do with that data.

 

 

From The Register:

FTC tears into Apple, Google over kids’ privacy – or lack of

‘Impossible’ to know data collected by apps, watchdog fumes

By Brid-Aine Parnell

 

US regulators have told smartphone software makers to do more to protect the privacy of kids using their apps – or face the watchdogs’ wrath.

In a report that acknowledged the “tremendous” growth of mobile software, the Federal Trade Commission said app developers are not making “simple and short” declarations of their privacy policies. As a result, young users – picked out for their vulnerability – could be giving up their mobile phone numbers, contacts, location and other data without knowing about it.

It also warned that app stores run by Apple and Google needed to do more.

“Although the app store developer agreements require developers to disclose the information their apps collect, the app stores do not appear to enforce these requirements. This lack of enforcement provides little incentive to app developers to provide such disclosures and leaves parents without the information they need,” notes the report.

“As gatekeepers of the app marketplace, the app stores should do more.”

via FTC tears into Apple, Google over kids’ privacy – or lack of • The Register.

Articles, News

Google Caught Tracking Safari Users – What You Need to Know

Comments Off 20 February 2012

Don’t be evil.  That’s Google’s job.

 

In contravention of Apple’s policies, and their own statements about consumer privacy, Google bypassed Safari’s security settings to store permanent cookies on Apple devices.

 

From Mashable.com:

Google Caught Tracking Safari Users: What You Need to Know

Google is in a lot of hot water over recent revelations about how it tracks user activity on Apple devices — particularly iPhones and iPads.

As reported by The Wall Street Journal, an independent researcher has discovered that Google embeds hidden software on many websites — software designed to circumvent the default settings on a web browser to record a user’s behavior.

via Google Caught Tracking Safari Users: What You Need to Know.

Articles, News

Feds Want to Warrantlessly Track Phones Bought with Fake Names

Comments Off 20 February 2012

In US vs Warshak, the DOJ argued in court that since email accounts are hacked into, people die, and people forget their passwords, email should have no 4th amendment protections.

By this logic, NO HOUSE or APARTMENT in the US is safe.  Houses get broken into, people lose house keys, and some people die alone. (no wills, no heirs)

 

The FBI applied similar logic when attaching GPS trackers, without warrants, to college student’s vehicles in the US.

 

Now, if you buy a phone with a fake name, or rent an apartment under a fake name, they argue you’ve forfeited your 4th Amemdment rights.

 

From Gizmodi & Wall Street Journal:

Feds Want to Warrantlessly Track Phones Bought with Fake Names

If the DOJ gets its way, it won’t need a warrant to monitor people who buy cell phones and other electronic services using a fake name, according to a story in today’s Wall Street Journal.

The DOJ is arguing that because a California man used a fake name when he bought a broadband card, service and a computer (and rented his apartment) he’s not entitled to protection under the fourth amendment.

The government used a device called a Stingray to locate the broadband card being used by Daniel David Rigmaiden. The Stingray mimics a cell phone tower, and pings the target device. It measures the signal strength, and then moves to another location and measures it again. It uses that data to triangulate the phone’s position. They are increasingly being used by law enforcement.

The FBI didn’t get a warrant when it used a Stingray to locate Rigmaiden’s location. At his apartment complex, it found he had used a fake ID on his rental application. It used that to get a search warrant, where it found the broadband card.

The government’s argument is that it didn’t need a warrant to locate Rigmaiden because he gave up his fourth ammendment rights and had no reasonable expectation of privacy when he used a fake name to rent and purchase his broadband card, service and computer.

It’s in the courts, but if the DOJ wins this one, it could mean that even if you use a fake name to buy something in a non-fraudulent matter—say a burner phone—it can track you down, and perhaps even listen in. Beware, Stringer Bell.

via Feds Want to Warrantlessly Track Phones Bought with Fake Names.

Articles, News

Germany’s intelligence services Ignore current neo-nazi threats, focus on elected Officials

Comments Off 20 February 2012

According to the Economist, the German Federal & State intelligence services are stuck in the past.

 

Rather that focusing on current threats, like a neo-naze group that murdered 10 people, they have been focused on spying on former East German radicals…including those that have been democratically elected, and hold political offices.

 

We saw this in the US in the 1950s-1970s, where the government spied on it’s political rivals, not actual threats.

 

This is the biggest long-term threat to privacy from Social Media, Cloud Computing and ubiquitous surveillance.

Like roach motels, once your data checks in, it never checks out. 

Once you’ve been tagged as a threat / problem / terrorist or rabble rouser, the cops, governments and databases will treat you as such for life.

The Occupy Wall Street protestors were the most heavily photographed and video demonstration in the US.  You can bet their names, photos, addresses are in hundreds of threat databases.

 

From The Economist:

Protection racket

The spooks can’t keep their eyes off the left

Feb 4th 2012 | BERLIN | from the print edition

GERMANY’S intelligence services failed to detect a gang of neo-Nazis who murdered ten people over several years. Never mind. They have a vice-president of the Bundestag in their sights.

Times are awkward for the 17 Offices for the Protection of the Constitution, as the domestic intelligence agencies are known (one at federal level and one for each of the 16 states). The “Zwickau cell” killed with impunity until two of its members shot themselves in November after fleeing a bank robbery. Perhaps that is because the spooks were busy watching the Left Party, the fourth-largest in the Bundestag. The federal office is monitoring 27 of its deputies, including Petra Pau (a Bundestag vice-president) and a member of the committee that oversees the intelligence services. The party, or affiliated groups, are also targets in most states. This constitutes “defamation of the opposition”, complained Jan Korte, a legislator on the watch list.

There are reasons to keep an eye on the Left Party. It is the direct descendant of East Germany’s communists and expanded westward by attracting disgruntled Social Democrats. Although the party espouses “democratic socialism” it harbours some groups that seem unsure about democracy. It has seats in 13 state legislatures and has helped govern, mostly pragmatically, three eastern states. The federal agency has been watching it since 1995.

via Germany’s intelligence services: Protection racket | The Economist.

Articles, News

The Minority Report is Here

Comments Off 17 February 2012

Do you recall how in The Minority Report, stores were trying to sell Tom Cruise products based on his retina scans?

What would you do if a Retailer knew you were pregnant, and when the due date was before you told your friends and family?

Or they figured out whether you got a bonus or were unemployed without you telling them?

This article in Forbes on Target’s Pregnancy Identifier database is eerily unsettling. Especially the way they created the “random coupons” baby book.

http://www.forbes.com/sites/kashmirhill/2012/02/16/how-target-figured-out-a-teen-girl-was-pregnant-before-her-father-did/

Continue Reading

Articles

Americans can be forced to decrypt their laptops | Privacy Inc. – CNET News

Comments Off 31 January 2012

What the Supreme Court Giveth in 4th Amendment Protections (namely, GPS surveillance requires warrants), a lower court takes away in 5th Amendment protections.

 

Americans can be forced to decrypt their laptops

Declan McCullagh

by Declan McCullagh January 23, 2012 3:35 PM PST

American citizens can be ordered to decrypt their PGP-scrambled hard drives for police to peruse for incriminating files, a federal judge in Colorado ruled today in what could become a precedent-setting case.

Judge Robert Blackburn ordered a Peyton, Colo., woman to decrypt the hard drive of a Toshiba laptop computer no later than February 21–or face the consequences including contempt of court.

 

Blackburn, a George W. Bush appointee, ruled that the Fifth Amendment posed no barrier to his decryption order. The Fifth Amendment says that nobody may be “compelled in any criminal case to be a witness against himself,” which has become known as the right to avoid self-incrimination.

“I find and conclude that the Fifth Amendment is not implicated by requiring production of the unencrypted contents of the Toshiba Satellite M305 laptop computer,” Blackburn wrote in a 10-page opinion today. He said the All Writs Act, which dates back to 1789 and has been used to require telephone companies to aid in surveillance, could be invoked in forcing decryption of hard drives as well.

Ramona Fricosu, who is accused of being involved in a mortgage scam, has declined to decrypt a laptop encrypted with Symantec’s PGP Desktop that the FBI found in her bedroom during a raid of a home she shared with her mother and children (and whether she’s even able to do so is not yet clear).

via Judge: Americans can be forced to decrypt their laptops | Privacy Inc. – CNET News.

Articles

US Supreme Court – GPS tracking requires warrant

Comments Off 31 January 2012

Celebrate!! The 4th Amendment isn’t dead…yet.

The feds will need warrants to install GPS trackers on your vehicles.

 

From The Register:

US Supremes: GPS tracking requires warrant

 

‘Stop! In the name of the 4th Amendment…’

By Iain Thomson in San Francisco • Get more from this author

Posted in Law, 24th January 2012 01:29 GMT

 

The US Supreme Court has ruled unanimously that police need to request a warrant before attaching GPS tracking devices to suspects’ cars.

“We decide whether the attachment of a Global-Positioning-System (GPS) tracking device to an individual’s vehicle, and subsequent use of that device to monitor the vehicle’s movements on public streets, constitutes a search or seizure within the meaning of the Fourth Amendment,” the judgment reads. Their decision – after extensive hearings – was, at core, “Yes”.

The case reviewed by the Supremes revolved around Antoine Jones, a nightclub owner the police linked with the drug trade, and the decision to follow his car’s movements using a GPS tracking system. The police obtained a court order for the use of such a device, but were a day late in installing it. The data it obtained was then used to link Jones to a house containing $850,000 in cash, 97kg of cocaine, and a kilo of cocaine base.

via US Supremes: GPS tracking requires warrant • The Register.

Articles

Social media ‘private’ data is fair game for e-discovery in court

Comments Off 31 January 2012

Data Privacy Day: Social media ‘private’ data is fair game for e-discovery in court

Microsoft Trustworthy Computing released data about how posting on social networking sites can impact more than online profiles and reputation; it can also cause negative consequences in the real world. All that data, even the allegedly ‘private’ social media data, is not private but is fair game as e-discovery in civil litigation. Another study found who you are digitally on Facebook is who you are offline in real life. Lastly, the more data we overshare on social media, the more it becomes the “norm” for society . . . meaning for society as a whole, it lowers what is considered a reasonable expectation of privacy.

 

via Privacy and Security Fanatic: Data Privacy Day: Social media ‘private’ data is fair game for e-discovery in court.

Articles

Google finally admits it wants to OWN YOU • The Register

Comments Off 31 January 2012

I’ve waited a few days to post this, because with all things Google, there’s more obscured behind the clouds.

 

The US congress has a few questions for Google

Some old Congressional privacy watchdogs are nipping at Google’s heels

 

Whether any of this will improve the internet, privacy or cyber liberties is an open question.

 

What isn’t debatable is that Google is finally living up to Larry & Sergey’s grad school yearnings – they want to know you better than your mother, or your therapist does.

 

And as usual, The Register has the best take on the whole show.

 

Google finally admits it wants to OWN YOU

 

Big changes to Terms of Service due in March

 

Posted in Platform, 25th January 2012 10:14 GMT

Mountain View’s Chocolate Factory is putting its vast userbase on notice of major changes to its privacy policies.

Come 1 March the 350 million people worldwide who have Gmail accounts, for example, will no longer be able to use that service in isolation of other Google products they browse to online.

That’s because the company’s Terms of Service are changing.

Some will argue that Google is merely doing some neat housekeeping by cutting and shutting the majority of its 70 privacy policies into one clean explanation of what will happen with the information users input into the company’s array of products.

Others might note that these privacy tweaks are coming ahead of any public antitrust battle Google potentially faces on both sides of the Atlantic where formal regulatory probes of the world’s largest ad broker are already well underway.

 

Google is reasserting that ALL of its products relate back to its search estate. In other words, Page’s crew are insisting that the company only really offers one service online.

via Google finally admits it wants to OWN YOU • The Register.

Articles

Man faces five years for ‘God does not exist’ Facebook post | ZDNet

Comments Off 31 January 2012

Nietzsche declared “God is dead” (or “the death of God”) in Thus Spake Zarathustra.  For that work, and many others, he is widely created with creating whole new branches in Western philosophy.

 

In Indonesia, simply stating that “God does not exist” can land you in jail.

 

I wonder what the Indonesians (and others) would have done if Neitzsche were alive today.

 

From ZDNET:

31-year-old Alexander Aan faces up to fives years in prison after he declared himself an atheist on Facebook. The Indonesian man is in protective police custody because he fears physical assault.31-year-old Alexander Aan faces a maximum prison sentence of five years for posting “God does not exist” on Facebook. The civil servant was attacked and beaten by an angry mob of dozens who entered his government office at the Dharmasraya Development Planning Board on Wednesday. The Indonesian man was taken into protective police custody Friday since he was afraid of further physical assault.The posting was made on a Facebook Page titled Ateis Minang Minang Atheist, which Aan created. At the time of writing, it had over 1,700 Likes. Aan’s posting has been removed, but supporters on the Page are urging police to release him.

via Man faces five years for ‘God does not exist’ Facebook post | ZDNet.

Articles

WSJ – Google employees bypassed policy to sell illegal drug ads, Larry Page aware, $500 million penalty

Comments Off 26 January 2012

“Google’s employees were instrumental in bypassing policy regarding pharmacy verification,” Mr. Whitaker told the Journal. “The websites were blatantly illegal.”

At the agents’ direction, Mr. Whitaker said he signaled his illegal intent to Google ad executives, including Google’s top manager in Mexico. As a tape recorder ran, he walked Google executives through the illegal parts of the websites. He said he told ad executives that U.S. Customs had seized shipments, for example, and that one client wanted to be “the biggest steroid dealer in the United States.”

 

The government’s case also contained potentially embarrassing allegations that top Google executives, including co-founder Larry Page, were told about legal problems with the drug ads.

Mr. Page, now Google’s chief executive, knew about the illicit conduct, said Mr. Neronha, the U.S. attorney for Rhode Island who led the multiagency federal task force that conducted the sting. “We simply know from the documents we reviewed and witnesses we interviewed that Larry Page knew what was going on,” he said in an interview after the August settlement.

 

via Con Artist Starred in Sting That Cost Google Millions – WSJ.com.

Articles

Threatened by Anonymous, Symantec tells users to pull pcAnywhere’s plug – Computerworld

Comments Off 26 January 2012

So let’s get this straight:

1) Symantec failed to stop the SONY Rootkit because Sony is a well-known multinational

2) Symantec released source code to the Indian Government without adequate protections

3) They’ve known about the breach for over 6 years, but until Anonymous threatened them, Symantec kept quite.

 

So, which is it?

Do Symantec’s DLP, AV and Security Software work, but Symantec FAILED to use them properly?

Or is their DLP/AV/firewall useless junk?

 

And will Symantec be compensating clients for lost time, failed security and productivity loss?

 

 

Threatened by Anonymous, Symantec tells users to pull pcAnywhere’s plug

Source code leaked [over 6] years ago, but now Anonymous hacking group has software in its sights

By Gregg Keizer

January 26, 2012 06:44 AM ET1

Computerworld – Symantec this week took the highly unusual step of telling users of its pcAnywhere remote access software to disable or uninstall the software while it fixes an unknown number of bugs.Security experts said the move was unprecedented for a company of Symantec’s size.”This is the first time I have seen a company of Symantec’s scale tell their customers to stop using a shipping product, especially one that many users depend on for remote access,” said HD Moore, chief technology officer of Rapid7, and the creator of the popular Metasploit penetration testing toolkit.”It’s certainly a new precedent for a security breach,” added Andrew Storms, director of security operations at nCircle Security. “Talk about dirty laundry getting aired.”Symantec’s recommendation was blunt.”At this time, Symantec recommends disabling the product until we release a final set of software updates that resolve currently known vulnerability risks,” the company in a statement Wednesday.

via Threatened by Anonymous, Symantec tells users to pull pcAnywhere’s plug – Computerworld.

 

 

Articles, News

“Everything You Say Can And Will Be Used Against You, By Anybody, Now Or Decades Into The Future.” – Falkvinge on Infopolicy

Comments Off 02 January 2012

“Everything You Say Can And Will Be Used Against You, By Anybody, Now Or Decades Into The Future.”

Arrest

Freedom of Speech

There are politicians trying to eliminate anonymity on the net. That’s a very, very dangerous game to play. Beside the fact that it will always be easily circumvented when people know they need to be anonymous, the danger lies in when people don’t think of that need.

Every day, we say things that we wouldn’t say in other contexts. We react to news with WTF-type blurts, we react to stupid politicians and greedy bankers with emotional statements.

via “Everything You Say Can And Will Be Used Against You, By Anybody, Now Or Decades Into The Future.” – Falkvinge on Infopolicy.

Articles, News

This Is Data Retention. Would You Give It To Any Future Government? – Falkvinge on Infopolicy

Comments Off 02 January 2012

This Is Data Retention.

http://falkvinge.net/wp-content/uploads/2011/07/CrowdFlow-646x363.jpg

Would You Give It To Any Future Government?

A new visualization of cellphone location data surfaced on Engadget. While it was hailed as a cool visualization of location, it is something more: it is an insight into the powers taken by European governments by means of the Data Retention Directive.Would you want the Police to be able to see your movements and the movements of all of your friends like this? Would you want the Police under any future government and set of laws to be able to track and correlate how you and your friends move, in real time and in recorded history, like this?

 

Many people dismiss Data Retention with the “I have nothing to hide” shrug. That is dangerous, careless and ignorant of everything history has to teach us. If the former East European governments had had this kind of visualization on their dissidents, they would still be around. The governments, that is, not necessarily the dissidents.

via This Is Data Retention. Would You Give It To Any Future Government? – Falkvinge on Infopolicy.

Articles, News

ACMA finds Facebook photos are not private

Comments Off 20 December 2011

ACMA finds Facebook photos are not private

By Brett Winterford on Dec 19, 2011 1:56 PM

Users offered no safety from Facebook-trawling.

Australia’s communications regulator has ruled that television networks are not breaking the industry’s code of practice when publishing photos lifted from a public Facebook profile.

 

The Australian Communications and Media Authority ACMA determined that Channel Seven did not breach the Commercial Television Industry Code of Practice when it accessed and broadcasted photographs – specifically in the case of a deceased person lifted from a Facebook tribute page, and another which broadcasted the name, photograph and comments penned by a 14-year old boy.

via ACMA finds Facebook photos are not private – Security – Technology – News – iTnews.com.au.

Articles, News

FBI says Carrier IQ files used for “law enforcement purposes”

Comments Off 12 December 2011

FBI says Carrier IQ files used for “law enforcement purposes”

By Rob Beschizza at 12:42 pm Monday, Dec 12

The FBI disclosed this weekend that it uses data gathered by Carrier IQ software for “law enforcement purposes”, but refused to give any details of exactly how it has done so.

Responding to a Freedom of Information Act request filed by Muckrock, the FBI said that it held relevant records but that their release could interfere with pending or prospective law enforcement proceedings.

via Boing Boing.

Articles, News

Assange vs. Zuckerberg

Comments Off 12 December 2011

Assange vs. Zuckerberg

 

 

 

via Assange vs. Zuckerberg – Imgur.

Articles, News

Ambulances turned away as computer virus infects Gwinnett Medical Center computers

Comments Off 12 December 2011

Ambulances turned away as computer virus infects Gwinnett Medical Center computers

By Misty Williams and Joel Anderson

The Atlanta Journal-Constitution

Gwinnett Medical Center on Friday confirmed it has instructed ambulances to take patients to other area hospitals when possible after discovering a system-wide computer virus that slowed patient registration and other operations at its campuses in Lawrenceville and Duluth.

Staff members discovered the virus Wednesday afternoon and have been working since then with outside I.T. experts to fix the problem, spokeswoman Beth Okun said. In the meantime, the health system has been forced to switch back to paperwork.

The situation is expected to last through the weekend, Okun said.

via Ambulances turned away as computer virus infects Gwinnett Medical Center computers  | ajc.com.

Articles, News

Firewall Law Could Infringe on Free Speech

Comments Off 12 December 2011

Stop the Great Firewall of America

By REBECCA MacKINNON

Published: November 15, 2011

 

China operates the world’s most elaborate and opaque system of Internet censorship. But Congress, under pressure to take action against the theft of intellectual property, is considering misguided legislation that would strengthen China’s Great Firewall and even bring major features of it to America.

The legislation — the Protect IP Act, which has been introduced in the Senate, and a House version known as the Stop Online Piracy Act — have an impressive array of well-financed backers, including the United States Chamber of Commerce, the Motion Picture Association of America, the American Federation of Musicians, the Directors Guild of America, the International Brotherhood of Teamsters and the Screen Actors Guild. The bills aim not to censor political or religious speech as China does, but to protect American intellectual property. Alarm at the infringement of creative works through the Internet is justifiable. The solutions offered by the legislation, however, threaten to inflict collateral damage on democratic discourse and dissent both at home and around the world.

The bills would empower the attorney general to create a blacklist of sites to be blocked by Internet service providers, search engines, payment providers and advertising networks, all without a court hearing or a trial. The House version goes further, allowing private companies to sue service providers for even briefly and unknowingly hosting content that infringes on copyright — a sharp change from current law, which protects the service providers from civil liability if they remove the problematic content immediately upon notification. The intention is not the same as China’s Great Firewall, a nationwide system of Web censorship, but the practical effect could be similar.

via Firewall Law Could Infringe on Free Speech – NYTimes.com.

Articles, News

Artists Sue CBS, CNET, for Promoting and Profiting from Piracy

Comments Off 12 December 2011

Artists Sue CBS, CNET, for Promoting and Profiting from Piracy

November 15, 2011

 

A coalition of artists has joined eccentric billionaire and FilmOn founder Alki David in a new class action lawsuit against CNET and CBS Interactive. The complaint filed at a federal court in Los Angeles claims that through websites like Download.com, these companies have willingly profited from popularizing online copyright infringements. The artists want the CBS chiefs to be held accountable for “soliciting such widespread theft.”

cnetEarlier this year Alki David and a handful of artists sued CBS Interactive and CNET for their role in distributing LimeWire and other P2P and DRM-cracking software.

In July the lawsuit was pulled, but David promised to come back later in the year with an even bigger case. That day has now arrived.

Together with the “Justice for Artists Coalition” which includes Dough E Fresh, H-Town, Slick Rick and Ron Brows, David has filed a new lawsuit at a federal court in Los Angeles. In common with their previous case, the coalition claims that CBS and CNET profited heavily from distributing and popularizing file-sharing software such as LimeWire.

“CBS Interactive has quietly made billions by inducing the public to break the law, by providing them the file-sharing software and step-by-step guides, on exactly how to do it. No one has held Defendant accountable for this. Until now,” the complaint reads.

via Artists Sue CBS, CNET, for Promoting and Profiting from Piracy | TorrentFreak.

What to teach your kids about Social Media

Comments

Thanks Raj Scott Dunkerley Regional Manager Security- SLED South-West Cisco SecureX (Scott Dunkerley)

Quote Rotator

Loading Quotes...

© 2012 Raj Goel, CISSP. Powered by WordPress.

Daily Edition Theme by WooThemes - Premium WordPress Themes