Do you really think that Google, along with everyone else on the Web, hasn’t been collecting your data for years now? Deal with it already

23 02 2012

http://www.zdnet.com/blog/networking/googles-new-privacy-rules-get-over-it-already/2053





White House announces new privacy “Bill of Rights,” Do Not Track agreement

23 02 2012

http://arstechnica.com/tech-policy/news/2012/02/white-house-announces-new-privacy-bill-of-rights-do-not-track-agreement.ars





A new Web standard proposal authored by Google, Microsoft, and Netflix seeks to bring copy protection mechanisms to the Web

23 02 2012

http://arstechnica.com/business/news/2012/02/unethical-html-video-copy-protection-proposal-criticized-by-standards-stakeholders.ars





The Netherlands And The U.S. Have Signed Cybercrime Treaty – Will Hunt Down Hackers

23 02 2012

Dutch Minister of Justice Ivo Opstelten announced that the two countries will work together on topics such as critical infrastructure protectection and that they will share information as well as knowledge and expertise whenever hackers are attacking those infrastructures

“We want to find the criminals who are behind those attacks”, the Minister stated.

Dutch language news article:
http://www.nu.nl/internet/2747630/nederland-tekent-verdrag-cybercrime.html

 





TV Production Company EyeWorks Thought It Could Get Away With (Non-Stop) Recording 1,500 Patients Of A Hospital Using 35 Cameras

23 02 2012

Patients, politicians and legal experts are outraged. Legal and ethical rules have been trampled on.

Only 215 patients have been asked for permission, only after they had been recorded. 150 people gave permission for the footage to be used for Eyeworks’ TV production.

One father reported that he’d spent ours with his daughter at the E.R. Only after they’d left they were asked for their permission to use the footage. The TV crew even recorded a private conversation between the daughter and the physician, without consulting the father beforehand.

Dutch language news article:
http://nieuwsuur.nl/onderwerp/344079-vu-mc-schendt-beroepsgeheim.html

 





The email addresses and passwords of more than a million users of the YouPorn sex chat site were exposed to all and sundry this week following a coding error that went undetected for years

23 02 2012

The data – which identifies customers of the smut site, exposing them to potential embarrassment as a result – might also be used in attempts to hack into more sensitive accounts maintained by the same potential victims. Those that use the same or similar passwords for more sensitive accounts (webmail, Facebook, PayPal etc) are most at risk of attack.

http://www.theregister.co.uk/2012/02/22/smut_chat_breach/





Web privacy standards: Having been involved in privacy technology now for about 15 years, I’m not optimistic that technology alone here is going to solve the problem

23 02 2012

If we had good legal enforcement that would make up for the fact that the technology is brittle, because then if somebody goes ahead and breaks the technology you would have the law come swooping in to go after them. But as it is they’re both brittle

http://arstechnica.com/tech-policy/news/2012/02/web-privacy-standards-easy-to-break-hard-to-enforce.ars





Tony Blair’s wife sues Murdoch company over hacking

23 02 2012

http://news.cnet.com/8301-17852_3-57382939-71/tony-blairs-wife-sues-murdoch-company-over-hacking/





State of California has reached an agreement with Apple, Google, Microsoft, RIM and others to prosecute developers who do not abide by new privacy policies

23 02 2012

http://gizmodo.com/5887437/apps-that-abuse-privacy-will-now-be-punished-by-the-law





A briefcase detailing a joint French/UK military drone was stolen in Paris

23 02 2012

The briefcase in question, belonging to an executive from major French military contractor Dassault (French for “The Assault”), was packed with documents marked ‘Defence – Confidential’, The Telegraph reports. And how did such precious intel, detailing a major defense initiative between two world powers, get nicked?

Some dude walked away with it. Really, the BBC says: “the briefcase was stolen when a senior Dassault Aviation official buying a Eurostar rail ticket went to the help of a colleague who was being bothered by a young man. When the official returned to retrieve his case, it had disappeared.” Correct—he walked away to deal with a “young man,” leaving the briefcase behind. The briefcase filled with documents marked ‘Defence – Confidential’. Although cops are allegedly calling it a “random” crime, what are the odds this one briefcase—located in Europe’s busiest train station—was targeted by accident?

More:

http://gizmodo.com/5887422/thieves-snatch-briefcase-full-of-secret-drone-documents-in-public





DOJ Urges Supreme Court to Halt Challenge to Warrantless Eavesdropping

23 02 2012

http://www.wired.com/threatlevel/2012/02/scotus-fisa-amendments/





Expose Online Devices. Search Webcams, Routers, Powerplants, iPhones, Wind Turbines, Refrigerators And VOIP Phones With ShodanHQ

22 02 2012

http://www.shodanhq.com/

http://www.shodanhq.com/search?q=linksys+country%3ANL

Dutch language news article:
http://www.security.nl/artikel/40442/1/”Veel_WiFi-routers_kwetsbaar_voor_hackers”.html





A privacy group suing the Federal Trade Commission said Tuesday in a federal court brief that the agency’s inaction against Google warrants judicial review and failure to do so could cause “irreparable injury” to consumers

22 02 2012

http://www.zdnet.com/blog/identity/irreparable-injury-result-if-ftc-fails-to-police-google-group-tells-court/261





Dutch ‘National Theater Ticket Register’ Database Hacked. Personal Data Of 100,000 Customers Compromised

22 02 2012

E-mail addresses, active credit card accounts, personal details of politicians and law enforcement officers out in the open. Some of the most sensitive data was not encrypted.

Dutch language news article:

http://www.nu.nl/internet/2746843/creditcardgegevens-gelekt-hack-nationale-theaterkassa.html

 





Facebook Teaches Us That Content Is Still King And That Its Integrity – And The Way It Is Being Presented And By Whom – Matters A Lot

21 02 2012

Content is still king – Every status update, every link, every post, is a form of content. Images are not a replacement for compelling content in terms of drawing people to your page. If you are blogging, make sure you cross post it to your page. Share links to articles that speak to the needs and interests of your customers. Become a clearinghouse for everything they need to know about your particular business or product category.

Think historically – With the timeline on our personal profiles, we are no longer confined to the few years for which we’ve been on the platform. I can now post pictures from my entire life, in context, all the way back to 1962. It’s an online scrapbook. If you have any old photos, whether they be from the 1890s or the 1990s, you might want to start scanning and digitizing them.

Much more:

http://www.business2community.com/facebook/9-ways-to-prepare-for-facebooks-timeline-for-business-pages-0135903

Personal brands compete with corporate brands. Social media has empowered individuals to build a direct audience through Twitter, Facebook, Google+, e-book self-publishing, email direct marketing, etc. And there’s increasing evidence coming from online influence measurement to suggest that personal brands actually exert more pull than established corporate brands in the social media space.

Like it or not, you are a personal brand. Whether you work for yourself or someone else, whether you’re in sales or marketing or you’re a business professional, if you are engaged in an occupation in which you rely your reputation you probably should be thinking seriously about your personal brand. Everyone else is.

http://www.theglobeandmail.com/report-on-business/small-business/sb-tools/the-top-tens/ten-ways-to-build-up-your-personal-brand/article2342035/





Scared of Anonymous? NSA chief says you should be

21 02 2012

Anonymous has so far plied its trade in “hactivist” exploits. But according to the director of the National Security Agency, it might soon turn its focus to U.S. infrastructure.

According to the Wall Street Journal, citing sources, Gen. Keith Alexander has said in private meetings at the White House and elsewhere that the U.S. must keep a close eye on Anonymous’ growth. He reportedly warned that if the organization continues to gain power, it might even take down a part of the U.S. power grid within the next couple of years.





American and Chinese Brands Targeted by Almost 3/4 of Phishing Attacks, Says MarkMonitor

21 02 2012

https://www.markmonitor.com/mmblog/q4-2011-fraud-intelligence-report/





Spam reached its lowest level in years last quarter, but malware surpassed security firm’s estimates for the year, says McAfee

21 02 2012

http://news.cnet.com/8301-1009_3-57381839-83/spam-continues-to-dip-but-malware-marches-merrily-on/





Iran Nixes VPN Access Ahead of Parliamentary Elections

21 02 2012

http://gizmodo.com/5886790/iran-nixes-vpn-access-ahead-of-parliamentary-elections





In what ways are children targeted online?

21 02 2012

Children are targeted through the use of visual lures — flashing colours, pretty animations and interesting graphics can all serve as tools for a hacker to gain access to your machine. It is highly unlikely a young child will be worrying about online safety when a highly-visual animation or graphic ropes them in to clicking a button — and they may not understand what permissions they are granting a piece of third-party software when they do.

A child is also not necessarily aware of what signs to watch out for in order to realize a machine is infected. Slow performance, a spam bot sending out infected emails, or software such as toolbars and a changed Internet home page may rouse suspicion in an adult, but not necessarily someone younger.

Why does this occur?

Children are not always aware of threats lurking on the Internet, and therefore do not know how to prevent themselves becoming exposed to online scams — making them an enticing target for cyber-criminals.

Much more:
http://www.zdnet.com/blog/igeneration/children-and-hackers-what-you-need-to-know/14855





Facebook has won a December 2008 lawsuit against Power Ventures. Facebook accused Power Ventures of using Power.com to spam and Facebook users and steal data from the social network

21 02 2012

No freedom of information – no freedom of innovation?

Power Ventures argued Power.com allowed users to access multiple social networking accounts from a single portal, while Facebook said it misled users into signing up for its service so that it could access their Facebook accounts and spam their friends.

Power Ventures filed a motion to dismiss the case, which was denied, and alleged that Facebook was being anti-competitive by placing restraints on its ability to manipulate users’ Facebook data even when their consent was given, but this also led nowhere.

The Court agreed with Facebook and determined that Power Ventures’ conduct violated state and federal law because their access to the site was “without permission” and that PV circumvented technical measures designed to stop such activity.

“Facebook has established a dangerous precedent for the future of users rights to own and control their data,” Power Ventures’ founder and CEO, Steve Vachani said in a statement. “We intend to aggressively continue this fight.”

“Facebook wants to prevent users from choosing follow-on innovation that it doesn’t like, so it’s asking the court to broaden computer crime laws in ways that would let it manufacture and cherry-pick lawsuits against users and competitors,” EFF Senior Staff Attorney Marcia Hofmann said in a statement. “Facebook’s position would create legal uncertainty for tech start-ups everywhere, stifling innovation and competition. No one would want to challenge a behemoth like Facebook with the specter of criminal charges looming over interoperability.”

http://www.zdnet.com/blog/facebook/facebook-wins-power-ventures-spam-battle-but-war-isnt-over/9291





Facebook and many other sites are using an almost identical scheme (to Google’s) to override Internet Explorer’s privacy setting

20 02 2012

“Companies have discovered that they can lie in their [P3P policies] and nobody bothers to do anything about it,” the privacy researcher at Carnegie Mellon University writes.

http://arstechnica.com/tech-policy/news/2012/02/google-tricks-internet-explorer-into-accepting-tracking-cookies-microsoft-claims.ars





When the IE team heard that Google had bypassed user privacy settings on Safari, we asked ourselves a simple question: is Google circumventing the privacy preferences of Internet Explorer users too?

20 02 2012

We’ve discovered the answer is yes: Google is employing similar methods to get around the default privacy protections in IE and track IE users with cookies.”

http://arstechnica.com/tech-policy/news/2012/02/google-tricks-internet-explorer-into-accepting-tracking-cookies-microsoft-claims.ars





FTC dropped security requirements from contract for sites hit by Anonymous

20 02 2012

http://arstechnica.com/business/news/2012/02/recipe-for-getting-hacked-ftc-dropped-security-requirements-from-contract-for-sites-hit-by-anonymous.ars





Responsible-disclosure.com – Our goal is to collect, verify and publish security risks found on the web

20 02 2012

We want to raise public awareness about the risk of entrusting your personal data to unsafe services. We also hope to encourage companies to pay more attention to the protection of the users of their services. Some of them will be left with no choice, because their security flaws will be published on this site!

But we do want to offer companies the chance to remedy their mistakes. This is why we will always notify the owner of a compromised website first and give them enough time to resolve the issue, before it is published on our site. This method of exposure is commonly known as responsible disclosure.

How does it work?

  1. Someone submits a security issue for a website or service to Responsible Disclosure
  2. Responsible Disclosure will confirm the validity of the issue
  3. Responsible Disclosure will contact the owner of the site or service involved
  4. A deadline for fixing the issue is set in consultation with the owner – until the issue is published, only Responsible Disclosure, the owner and the submitter will be aware of the risk
  5. When the deadline is passed Responsible Disclosure will check whether the issue has been resolved (if the issue is not resolved or the owner is not cooperative we will go full disclosure).
  6. The issue will be published on Responsible Disclosure

More:
https://responsible-disclosure.com/en








Follow

Get every new post delivered to your Inbox.