<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: citizens]]></title>
    <link>http://securityratty.com/tag/citizens</link>
    <description></description>
    <pubDate>Tue, 09 Sep 2008 01:42:18 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Forensic genomics]]></title>
      <link>http://securityratty.com/article/db4fa79fc51e6d9290abb3a8fd263e3f</link>
      <guid>http://securityratty.com/article/db4fa79fc51e6d9290abb3a8fd263e3f</guid>
      <description><![CDATA[I recently presented a paper on Forensic genomics: kin privacy, driftnets and other open questions (co-authored with Lucia Bianchi, Pietro Liò and Douwe Korff ) at WPES 2008 , the Workshop for...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.cl.cam.ac.uk/~fms27/">I</a> recently presented a paper on <a href="http://www.cl.cam.ac.uk/~fms27/papers/2008-StajanoBiaLioKor-genomics.pdf"><em>Forensic genomics: kin privacy, driftnets and other open questions</em></a> (co-authored with Lucia Bianchi, <a href="http://www.cl.cam.ac.uk/~pl219/">Pietro Liò</a> and <a href="http://www.londonmet.ac.uk/research-units/hrsj/staff/douwe-korff.cfm">Douwe Korff</a>) at <a href="http://dais.cs.uiuc.edu/wpes08/">WPES 2008</a>, the Workshop for Privacy in the Electronic Society of <a href="http://www.sigsac.org/ccs/CCS2008/">ACM CCS</a>, the ACM Computer and Communication Security</a> conference. Pietro and I also gave a <a href="http://talks.cam.ac.uk/talk/index/13300">related talk</a> here at the Computer Laboratory in Cambridge.</p>
<p>While <a href="http://en.wikipedia.org/wiki/Genetics">genetics</a> is concerned with the observation of specific sections of DNA, genomics is about studying the entire <a href="http://en.wikipedia.org/wiki/Genome">genome </a> of an organism, something that has only become practically possible in recent years. In forensic genetics, which is the technology behind the large national DNA databases being built in several countries including notably UK and USA (<a href="http://www.nature.com/embor/journal/v7/n1s/pdf/7400727.pdf">Wallace&#8217;s outstanding article</a> lucidly exposes many significant issues), investigators compare scene-of-crime samples with database samples by checking if they match, but only on a very small number of specific locations in the genome (e.g. 13 locations according to the <a href="http://en.wikipedia.org/wiki/Codis">CODIS</a> rules). In our paper we explore what might change when forensic analysis moves from genetics to genomics over the next few decades. This is a problem that can only be meaningfully approached from a multi-disciplinary viewpoint and indeed our combined backgrounds cover computer security, bioinformatics and law.</p>
<p><img src="http://upload.wikimedia.org/wikipedia/commons/7/7a/Codis_profile.jpg" alt="CODIS markers" /><em><br />
(Image from <a href="http://en.wikipedia.org/wiki/Image:Codis_profile.jpg">Wikimedia commons</a>, in turn from <a href="http://www.cstl.nist.gov/div831/strbase/fbicore.htm">NIST</a>.)</em></p>
<p>Sequencing the first human genome (2003) cost 2.7 billion dollars and took 13 years. The US&#8217;s National Human Genome Research Institute has <a href="http://www.medicalnewstoday.com/articles/118963.php">offered over 20 M$ worth of grants</a> towards the goal of <a href="http://www.genome.gov/27527584">driving the cost of whole-genome sequencing down to a thousand dollars</a>. This will enable <a href="http://en.wikipedia.org/wiki/Personal_genomics">personalized genomic medicine</a> (e.g. predicting genetic risk of contracting specific diseases) but will also open up a number of ethical and privacy-related problems. Eugenetic abortions, genomic pre-screening as precondition for healthcare (or even just dating&#8230;), (mis)use of genomic data for purposes other than that for which it was collected and so forth. In various jurisdictions there exists legislation (such as the recent <a href="http://www.govtrack.us/congress/billtext.xpd?bill=h110-493&amp;show-changes=0&amp;page-command=print">GINA</a> in the US) that attempts to protect citizens from some of the possible abuses; but how strongly is it enforced? And is it enough? In the forensic context, is the DNA analysis procedure as infallible as we are led to believe? There are many subtleties associated with the interpretation of statistical results; when even professional statisticians disagree, how are the poor jurors expected to reach a fair verdict? Another subtle issue is kin privacy: if the scene-of-crime sample, compared with everyone in the database, partially matches Alice, this may be used as a hint to investigate all her relatives, who aren&#8217;t even in the database; indeed, some 1980s murders were recently solved in this way. &#8220;This raises compelling policy questions about the balance between collective security and individual privacy&#8221; [<a href="http://www.sciencemag.org/cgi/content/full/sci;312/5778/1315">Bieber, Brenner, Lazer, 2006</a>]. Should a democracy allow such a &#8220;driftnet&#8221; approach of suspecting and investigating all the innocents in order to catch the guilty?</p>
<p>This is a paper of questions rather than one of solutions. We believe an informed public debate is needed <em>before</em> the expected transition from genetics to genomics takes place. We want to stimulate discussion and therefore we invite you to read the paper, make up your mind and support what you believe are the right answers.</p>
]]></content:encoded>
      <pubDate>Thu, 27 Nov 2008 12:58:58 +0000</pubDate>
      <category domain="http://securityratty.com/tag/genomics">genomics</category>
      <category domain="http://securityratty.com/tag/forensic genomics">forensic genomics</category>
      <category domain="http://securityratty.com/tag/privacy">privacy</category>
      <category domain="http://securityratty.com/tag/individual privacy">individual privacy</category>
      <category domain="http://securityratty.com/tag/dna">dna</category>
      <category domain="http://securityratty.com/tag/national dna databases">national dna databases</category>
      <category domain="http://securityratty.com/tag/genome">genome</category>
      <category domain="http://securityratty.com/tag/whole-genome">whole-genome</category>
      <category domain="http://securityratty.com/tag/kin privacy">kin privacy</category>
      <source url="http://www.lightbluetouchpaper.org/2008/11/27/forensic-genomics/">Forensic genomics</source>
    </item>
    <item>
      <title><![CDATA[Keeping America Safe from Terrorism by Monitoring Distillery Webcams]]></title>
      <link>http://securityratty.com/article/97364c3b71b32b3988fc75fe4bcaf94a</link>
      <guid>http://securityratty.com/article/97364c3b71b32b3988fc75fe4bcaf94a</guid>
      <description><![CDATA[Really : We had an email recently from an observer &quot;curious as to why the webcam that was inside the shop/bar is no longer there, or at least, functional&quot;. The email was from the Defense Threat...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.bruichladdich.com/wmd_story.htm">Really</a>:</p>

<blockquote>We had an email recently from an observer "curious as to why the webcam that was inside the shop/bar is no longer there, or at least, functional". The email was from the Defense Threat Reduction Agency in the United States.

<p>When we replied that it was simply a short term technical problem, we asked why on earth they could be interested in the comings and goings of a small Distillery off the West Coast of Scotland. Were there secret manoeuvres taking place in Loch Indaal, or even a threat of terrorists infiltrating the mainland via Islay?</p>

<p>The answer we received was even more surreal. Evidently the mission of the DTRA is to safeguard the US and its allies from weapons of mass destruction -chemical, biological, radiological, nuclear and high explosives.   The department which contacted the Distillery deals with the implementation of the Chemical Weapons Convention, going to sites to verify treaty compliance.  Funnily enough chemical weapon processes look very similar to the distilling process and as part of training there is a visit to a brewery for familiarization with reactors, batch processors and evaporators.  As they said, it just goes to show how "tweaks" to the process flow or equipment, can create something very pleasant (whisky) or deadly (chemical weapons).</p>

<p>As they say: "In the post-Cold War environment, a unified, consistent approach to deterring, reducing and countering weapons of mass destruction is essential to maintaining our national security. Under DTRA, Department of Defense resources, expertise and capabilities are combined to ensure the United States remains ready and able to address the present and future WMD threat. We perform four essential functions to accomplish our mission: combat support, technology development, threat control and threat reduction. These functions form the basis for how we are organized and our daily activities. Together, they enable us to reduce the physical and psychological terror of weapons of mass destruction, thereby enhancing the security of the world's citizens. At the dawn of the 21st century, no other task is as challenging or demanding".</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=pHqMM"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=pHqMM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=KbK3M"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=KbK3M" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 31 Oct 2008 08:15:49 +0000</pubDate>
      <category domain="http://securityratty.com/tag/chemical weapons convention">chemical weapons convention</category>
      <category domain="http://securityratty.com/tag/chemical weapons">chemical weapons</category>
      <category domain="http://securityratty.com/tag/weapons">weapons</category>
      <category domain="http://securityratty.com/tag/threat">threat</category>
      <category domain="http://securityratty.com/tag/future wmd threat">future wmd threat</category>
      <category domain="http://securityratty.com/tag/mass destruction -chemical">mass destruction -chemical</category>
      <category domain="http://securityratty.com/tag/mass destruction">mass destruction</category>
      <category domain="http://securityratty.com/tag/distillery">distillery</category>
      <category domain="http://securityratty.com/tag/threat control">threat control</category>
      <source url="http://www.schneier.com/blog/archives/2008/10/keeping_america.html">Keeping America Safe from Terrorism by Monitoring Distillery Webcams</source>
    </item>
    <item>
      <title><![CDATA[You could drink a "sex on the beach" in Dubai, but doing the real thing could land you in Jail]]></title>
      <link>http://securityratty.com/article/7043a433bca91be7ddee85321a26795b</link>
      <guid>http://securityratty.com/article/7043a433bca91be7ddee85321a26795b</guid>
      <description><![CDATA[This Yahoo news story highlights what can happen when Westerners forget that Dubai is not like other cities

Just because non-muslims are allowed to purchase and consume alcohol in hotel bars, doesn't...]]></description>
      <content:encoded><![CDATA[This <a href="http://news.yahoo.com/s/ap/20081016/ap_on_re_mi_ea/ml_dubai_sex_on_beach">Yahoo news story </a>highlights what can happen when Westerners forget that Dubai is not like other cities.<br /><span id="fullpost"><br />Just because non-muslims are allowed to purchase and consume alcohol in hotel bars, doesn't mean that the authorities take kindly to drunkeness.  Now, couple an afternoon of binge drinking with hanky-panky on the beach in a muslim country and you have the makings of a jail-house cocktail.  <br /></span><br />This type of behaviour is one of the reasons why we have decided to conduct executive security training in the U.A.E.  Our security agents need to know exactly  what type of behaviour is permitted and allowed in a society and by the citizens of that society when they travel abroad.  <br /><br />Inexperienced agents or those who have not been properly trained could cause a client to cancel a contract or at the vry least make it uncomfortable fr that agent during the course of the engagement.  Security employers owe it to their employees to enkighten them as to the ways of their clients even if foreign tavel is not anticipated.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sun, 19 Oct 2008 12:50:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/conduct executive security">conduct executive security</category>
      <category domain="http://securityratty.com/tag/agents">agents</category>
      <category domain="http://securityratty.com/tag/security agents">security agents</category>
      <category domain="http://securityratty.com/tag/security employers owe">security employers owe</category>
      <category domain="http://securityratty.com/tag/muslim country">muslim country</category>
      <category domain="http://securityratty.com/tag/foreign tavel">foreign tavel</category>
      <category domain="http://securityratty.com/tag/behaviour">behaviour</category>
      <category domain="http://securityratty.com/tag/travel abroad">travel abroad</category>
      <category domain="http://securityratty.com/tag/jail-house cocktail">jail-house cocktail</category>
      <source url="http://www.thebulletproofblog.com/2008/10/you-could-drink-sex-on-beach-in-dubai.html">You could drink a "sex on the beach" in Dubai, but doing the real thing could land you in Jail</source>
    </item>
    <item>
      <title><![CDATA[Militants send terror messages in India by 'wardriving']]></title>
      <link>http://securityratty.com/article/9f6a1b5a8d2b3fb51ba10fe63c04e1b2</link>
      <guid>http://securityratty.com/article/9f6a1b5a8d2b3fb51ba10fe63c04e1b2</guid>
      <description><![CDATA[Citizens need to be vigilant and patch poorly secured wireless networks, the Indian police said Monday after announcing the arrest of technology-savvy members of a militant group that exploited...]]></description>
      <content:encoded><![CDATA[Citizens need to be vigilant and patch poorly secured wireless networks, the Indian police said Monday after announcing the arrest of technology-savvy members of a militant group that exploited insecure wireless networks to send messages.]]></content:encoded>
      <pubDate>Sun, 05 Oct 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/insecure wireless networks">insecure wireless networks</category>
      <category domain="http://securityratty.com/tag/wireless networks">wireless networks</category>
      <category domain="http://securityratty.com/tag/messages">messages</category>
      <category domain="http://securityratty.com/tag/indian police">indian police</category>
      <category domain="http://securityratty.com/tag/patch poorly">patch poorly</category>
      <category domain="http://securityratty.com/tag/vigilant">vigilant</category>
      <category domain="http://securityratty.com/tag/monday">monday</category>
      <category domain="http://securityratty.com/tag/militant">militant</category>
      <category domain="http://securityratty.com/tag/citizens">citizens</category>
      <source url="http://www.networkworld.com/news/2008/100608-militants-send-terror-messages-in.html?fsrc=rss-security">Militants send terror messages in India by 'wardriving'</source>
    </item>
    <item>
      <title><![CDATA[Corporate Greed and the Destabilization of Society]]></title>
      <link>http://securityratty.com/article/155810725ba943a1b35e1c2b39138f7a</link>
      <guid>http://securityratty.com/article/155810725ba943a1b35e1c2b39138f7a</guid>
      <description><![CDATA[In The Audacity of Capital Markets we briefly touched on the culture of arrogance and greed in financial services. It is interesting because if you look at the various software players that are...]]></description>
      <content:encoded><![CDATA[<p>In <a title="The Audacity of Capital Markets" rel="bookmark" href="../2008/09/19/the-audacity-of-capital-markets/">The Audacity of Capital Markets</a> we briefly touched on the culture of arrogance and greed in financial services.  It is interesting because if you look at the various software players that are focused on selling to financial services, you will easily see that they have bought into the same &#8220;feed the beast&#8221; culture that has contributed to the destabilization of the economy and, in turn, society.</p>
<p>For example, the &#8220;Average Joe Investor&#8221; does not care about &#8220;best order execution&#8221; or &#8220;smart order routing,&#8221; this is for &#8220;the big boys.&#8221;  As we all know, saving a few pennies or dollars per transaction to &#8220;Average Joe Investor&#8221; does nothing for them when their retirement nest egg is lost due to corporate greed and negligence.     The folks who &#8220;really care&#8221; about shaving a few milliseconds off market execution are the companies that are trading high volumes of exotic derivatives and baskets who have, for the most part, zero interest in the personal financial portfolio of &#8220;Jane in Iowa&#8221; or &#8220;Joe in Kansas.&#8221;</p>
<p>I am really amazed to see the dominance of greed in corporate America and the lack of corporate social responsibility.  Risk taking and &#8220;split second trading&#8221; does little for any small. individual investor and has proven to destabilize our society.    Who cares about saving a few pennies or dollars in market executive?</p>
<p>The answer: Only the greedy corporations, the same people responsible for the current destabilization, chao and near collaspe of our entire financial system.   Homes lost, unprecedented bankruptcies. and money market funds less than par value!   You no doubt have read that folks in the <a href="http://www.reservefunds.com/" target="_blank">Reserve Money Market funds</a> cannot even withdraw their &#8220;safe money.&#8221;  Investors in the Reserve Funds are being told that for every dollar they invested in a money market, they now only have 97 cents and cannot withdraw their capital as the Reserve waits for a government bailout.</p>
<p>What is to blame? Greed and profits over corporate social responsibility are to blame.</p>
<p>I read where some folks think the government needs to regulate market-related news, supposedly to stabilize trading based on news.   Regulating news has another name -  &#8220;censorship&#8221; - but who cares about the US Constitution when money and split second algo trading is involved?    I am amazed.   Folks in financial services just will say or do anything to make a buck, or keep from losing one, even at the expense of society and our basic constitutional freedoms.  News is not regulated in our democratic society, nor should it be to make algorithmic trading &#8220;better&#8221;.     What we need is less split second, computerized algo trading and more stablity.   Machine processing should not dicate nor mandate changes to our democratic principles.</p>
<p>Nor should our lives in a free society be censored or regulated because of the trading requirements for split second transactions that benefit large corporations.    The average investor does not need an unstable financial system trading exotic derivatives and baskets at the speed of light.  This requirement is driven by corporate greed that destabilizes the core economy and fabric of our society.</p>
<p>Of couse, many of the same folks would like for us to believe that technology is the answer.  This is a fallacy.</p>
<p>Corporate greed is destabilizing society.   What need to be regulated is not the news, but corporate risk taking and corporate goverance.  Individual investors do not need lightspeed transactions in an unstable world.   Citizens and families need a secure, stable economic infrastructure, something that has been lost in the culture of corporate greed, but hopefully not forever.</p>
]]></content:encoded>
      <pubDate>Tue, 23 Sep 2008 14:24:22 +0000</pubDate>
      <category domain="http://securityratty.com/tag/society">society</category>
      <category domain="http://securityratty.com/tag/greed">greed</category>
      <category domain="http://securityratty.com/tag/safe money">safe money</category>
      <category domain="http://securityratty.com/tag/money">money</category>
      <category domain="http://securityratty.com/tag/money market funds">money market funds</category>
      <category domain="http://securityratty.com/tag/democratic society">democratic society</category>
      <category domain="http://securityratty.com/tag/average joe investor">average joe investor</category>
      <category domain="http://securityratty.com/tag/free society">free society</category>
      <category domain="http://securityratty.com/tag/joe">joe</category>
      <source url="http://www.thecepblog.com/2008/09/23/corporate-greed-and-the-destabilization-of-society/">Corporate Greed and the Destabilization of Society</source>
    </item>
    <item>
      <title><![CDATA[India wants to secure Wi-Fi hotspots, citing terror threat]]></title>
      <link>http://securityratty.com/article/79a83d38b4a4156eedcede96b621d7c3</link>
      <guid>http://securityratty.com/article/79a83d38b4a4156eedcede96b621d7c3</guid>
      <description><![CDATA[Security experts and other citizens in Mumbai, India, are planning a drive to make people in the city and the rest of the country more aware of the need to secure their Wi-Fi...]]></description>
      <content:encoded><![CDATA[Security experts and other citizens in Mumbai, India, are planning a drive to make people in the city and the rest of the country more aware of the need to secure their Wi-Fi networks.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=7329?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=7329?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Tue, 16 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/india">india</category>
      <category domain="http://securityratty.com/tag/secure">secure</category>
      <category domain="http://securityratty.com/tag/security experts">security experts</category>
      <category domain="http://securityratty.com/tag/wi-fi networks">wi-fi networks</category>
      <category domain="http://securityratty.com/tag/country">country</category>
      <category domain="http://securityratty.com/tag/rest">rest</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/aware">aware</category>
      <source url="http://www.networkworld.com/news/2008/091708-india-wants-to-secure-wi-fi.html?fsrc=rss-security">India wants to secure Wi-Fi hotspots, citing terror threat</source>
    </item>
    <item>
      <title><![CDATA[The opt-out from hell]]></title>
      <link>http://securityratty.com/article/e2ac86231138c2d34a97b7acfc4cd2ec</link>
      <guid>http://securityratty.com/article/e2ac86231138c2d34a97b7acfc4cd2ec</guid>
      <description><![CDATA[One problem with making your email address available (which I will continue to do, don't worry) is that folks with something to sell assume you're interested in their stuff. To wit, let's consider an...]]></description>
      <content:encoded><![CDATA[<p>One problem with making your email address available (which I will continue to do, don't worry) is that folks with something to sell assume you're interested in their stuff. To wit, let's consider an email I received today (copied, headers and all, after my griping).</p>  <p>Note that if I want to opt out of further communications, I have to do <em>two separate things</em> -- which actually becomes three things.</p>  <ul>   <li>First I have to click the last link to opt out of future TechTarget spam. (Yes, I deleted the actual links. But certainly none of <em>my</em> trustworthy readers would attempt to re-subscribe me, right...? &lt;g&gt; </li>    <li>But that isn't enough -- I <em>also</em> have to separately opt out of future Avaya spam! (Why does the no-more-from-Avaya link live on a techtargetmail.com server? Whatever.) Clicking on that link eventually does land me on an avaya.com page, where I have to confirm my email address and indicate they don't have my permission to send me spam. Hmm, too difficult to embed my email in that link, when the other techtargetmail.com link <em>did</em> embed my email? </li>    <li>Then after submitting it, another page pops up telling me that I'll soon receive an email with <em>additional</em> instructions! In this email there's a link -- to avaya.com with my email address embedded -- that I must click, I guess to double plus confirm that yes, I really really really do wish never to hear from you again. Clicking that link takes me to a page that promises my &quot;permissions have successfully been set. Thank you.&quot; </li> </ul>  <p>A pox on both your houses, TechTarget and Avaya. I never asked for your stuff. Go away.</p>  <p>Spam, my friends, is only going to <a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/09/12/AR2008091201211.html?hpid=topnews" target="_blank">get</a> <a href="http://voices.washingtonpost.com/securityfix/2008/09/virginia_anti-spam_law_overtur.html?hpid=news-col-blogs" target="_blank">worse</a>. It was so easy to <a href="http://en.wikipedia.org/wiki/Junk_fax" target="_blank">ban junk faxes</a> in 1991. But even those regulations were <a href="http://en.wikipedia.org/wiki/Junk_Fax_Prevention_Act_of_2005" target="_blank">weakened in 2005</a>. So do you really think we'll see anything even remotely logical for outlawing spam? I doubt it, unless we the citizens foment a revolt. Let's get cracking! </p>  <p>&#160;</p>  <hr />  <p><font face="Courier New" size="2">Received: from SVC-EXGWY-E801.partners.extranet.microsoft.com (10.251.24.242)      <br />by tk5-exhub-c102.redmond.corp.microsoft.com (157.54.18.53) with Microsoft       <br />SMTP Server (TLS) id 8.1.291.1; Tue, 16 Sep 2008 11:27:56 -0700       <br />Received: from mail139-wa4-R.bigfish.com (216.32.181.113) by       <br />mail04.microsoft.com (10.253.160.184) with Microsoft SMTP Server (TLS) id       <br />8.1.291.1; Tue, 16 Sep 2008 11:27:55 -0700       <br />Received: from mail139-wa4 (localhost.localdomain [127.0.0.1])&#160;&#160;&#160; by       <br />mail139-wa4-R.bigfish.com (Postfix) with ESMTP id 018C11184C2&#160;&#160;&#160; for       <br />&lt;steriley@microsoft.com&gt;; Tue, 16 Sep 2008 18:27:50 +0000 (UTC)       <br />X-BigFish: ps16(zz18c1K1936K2b7wcak69jzzzz2af1jz2fh6bh5eh65h)       <br />X-Spam-TCS-SCL: 4:0       <br />Received: by mail139-wa4 (MessageSwitch) id 1221589667478982_28100; Tue, 16       <br />Sep 2008 18:27:47 +0000 (UCT)       <br />Received: from pp.techtargetmail.com (pp.techtargetmail.com [65.211.80.227])       <br />&#160;&#160;&#160; by mail139-wa4.bigfish.com (Postfix) with SMTP id 46566978071&#160;&#160;&#160; for       <br />&lt;steriley@microsoft.com&gt;; Tue, 16 Sep 2008 18:27:47 +0000 (UTC)       <br />DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=pp.techtargetmail.com; b=iOmibOrM91/1Ugy2gj3QbWo74T2m3GuhmwxZCXJQpFT+nwRES8QKg+4vjt48SNp7WWJExG61Ge+DtnKD3KVI3KwqTKzkPRVrEBF0DCHhYot6VAG/EyEr5vb5RhBz+91yvNhbIqITzGnuQ+uBDJzyc6gU0FHfBl0Fa3S/phcPELM=;       <br />Message-ID: &lt;a818b044.724694.236c8ee748f7dd97.1.n.4.2971370188@pp.techtargetmail.com&gt;       <br />Date: Tue, 16 Sep 2008 14:27:47 -0400       <br />thread-index: a818b044.724694.236c8ee748f7dd97.1.n.4       <br />Reply-To: Avaya &lt;a818b044.724694.236c8ee748f7dd97.1.n.4@pp.techtargetmail.com&gt;       <br />From: Avaya &lt;Avaya@pp.techtargetmail.com&gt;       <br />To: Steve Riley &lt;steriley@microsoft.com&gt;       <br />Subject: 7 Tips to Ensure Readiness for UC Deployment       <br />MIME-Version: 1.0       <br />Content-Type: text/plain       <br />Content-Transfer-Encoding: 7bit       <br />Content-Class: urn:content-classes:message       <br />Importance: normal       <br />Priority: normal       <br />X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4133       <br />Return-Path: a818b044.724694.236c8ee748f7dd97.1.n.4@pp.techtargetmail.com       <br />X-MS-Exchange-Organization-PRD: pp.techtargetmail.com       <br />Received-SPF: Pass (SVC-EXGWY-E801.partners.extranet.microsoft.com: domain       <br />of Avaya@pp.techtargetmail.com designates 65.211.80.227 as permitted sender)       <br />receiver=SVC-EXGWY-E801.partners.extranet.microsoft.com;       <br />client-ip=65.211.80.227; helo=mail139-wa4-R.bigfish.com;       <br />X-MS-Exchange-Organization-PCL: 2       <br />X-MS-Exchange-Organization-Antispam-Report: DV:3.3.6916.600;SV:3.3.6916.813;SID:SenderIDStatus Pass;OrigIP:65.211.80.227       <br />X-MS-Exchange-Organization-SCL: 2       <br />X-MS-Exchange-Organization-SenderIdResult: PASS</font></p>  <p><font face="Courier New" size="2">The following message was sent to you as a subscriber to third party offers from a TechTarget property, including our network of Search sites, Bitpipe.com, CIO Decisions Magazine, Information Security Magazine, Storage Magazine, KnowledgeStorm, TheServerSide.com and/or TheServerSide.NET. To unsubscribe, see below.      <br />____________________________________________________________ </font></p>  <p><font face="Courier New" size="2">How should you evaluate the move to unified communications (UC)? Who within which parts of an organization will benefit? Will UC reduce the time to market? Read this E-Guide for answers to these questions and a better look at how the value of UC will, at first, be less of a financial issue and more of a productivity improvement issue that translates into financial benefits. Download this white paper now: </font><a href="http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1"><font face="Courier New" size="2">http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1</font></a></p>  <p><font face="Courier New" size="2">When implementing unified communications, there are a number of important issues to think about and questions to ask. This E-Guide analyzes seven phases to ensure you reap the full benefits of UC in each. If you're ready to take the plunge but you're not sure your business or your infrastructure is - download this E-Guide now. </font></p>  <p><font face="Courier New" size="2">Click here to learn more: </font><a href="http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1"><font face="Courier New" size="2">http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1</font></a></p>  <p><font face="Courier New" size="2">&quot;If you do not wish to receive future promotions directly from Avaya please forward this e-mail to <u>{link removed}</u> ; please note that there is a separate opt-out procedure below to be removed from the list from which this email originated.&quot;       <br />____________________________________________________________ </font></p>  <p><font face="Courier New" size="2">Please do not reply to this email.&#160; To unsubscribe from all future third party offers from all TechTarget properties, simply click here: <u>{link removed}</u></font></a></p>  <p><font face="Courier New" size="2">TechTarget | 117 Kendrick Street, Suite 800 | Needham, MA 02494</font> </p>  <hr /><img src="http://blogs.technet.com/aggbug.aspx?PostID=3124873" width="1" height="1">]]></content:encoded>
      <pubDate>Tue, 16 Sep 2008 15:22:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/smtp server">smtp server</category>
      <category domain="http://securityratty.com/tag/server">server</category>
      <category domain="http://securityratty.com/tag/smtp">smtp</category>
      <category domain="http://securityratty.com/tag/x-spam-tcs-scl">x-spam-tcs-scl</category>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/future avaya spam">future avaya spam</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/microsoft smtp server">microsoft smtp server</category>
      <category domain="http://securityratty.com/tag/avaya">avaya</category>
      <source url="http://blogs.technet.com/steriley/archive/2008/09/16/the-opt-out-from-hell.aspx">The opt-out from hell</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Indian Terror over Wi-Fi; Fastest Wireless; Health Fears; Wi-Fi Tub; and More]]></title>
      <link>http://securityratty.com/article/38100bf79f0cedd88c5f6a02e45c5a85</link>
      <guid>http://securityratty.com/article/38100bf79f0cedd88c5f6a02e45c5a85</guid>
      <description><![CDATA[Another terror message sent via open Wi-Fi in India: Credit for terrorist blasts in Delhi was sent by email minutes before the attack took place using a Wi-Fi network owned by a retired engineer's...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.telegraphindia.com/1080915/jsp/nation/story_9835144.jsp"><strong>Another terror message sent via open Wi-Fi in India:</strong></a> Credit for terrorist blasts in Delhi was sent by email minutes before the attack took place using a Wi-Fi network owned by a retired engineer's wife. Though articles keep saying the network was "hacked," the Telegraph also notes that the network was "unsecured."</p>

<p>Italian free space optics test hits 1.2 terabits per second (<a href="http://www.corriere.it/scienze_e_tecnologie/08_settembre_11/wifi_pisa_record_3a9bf132-801f-11dd-9f6f-00144f02aabc.shtml">in Italian</a>, <a href="http://translate.google.com/translate?u=http://www.corriere.it/scienze_e_tecnologie/08_settembre_11/wifi_pisa_record_3a9bf132-801f-11dd-9f6f-00144f02aabc.shtml&hl=en&ie=UTF-8&sl=it&tl=en">Google translation</a>): Researchers in Pisa, Italy, along with colleagues from two Japanese institutions, crossed 1.2 Tbps in a test. Free space optics typically uses infrared lasers, and can work over a distance of kilometers. </p>

<p><a href="http://www.canada.com/montrealgazette/news/story.html?id=2e090761-519c-4de6-9ace-4153d6dc71d2"><strong>More Canadian Wi-Fi health fears:</strong></a> This time in an island in Montr&eacute;al. One of the concerned citizens: "This is something that is really under the radar. People do not know that long-term health hazards are associated with wireless technology." They don't know that because all verifiable, repeatable, well-conducted, academic tests so far indicate that there's no such health hazard associated with EMF. The concerned folks are raising an alarm about Wi-Fi being broadcast island wide, but are not paying attention, obviously, to the AM/FM radio, satellite radio, cellular, cordless, and thousand other wireless uses that are bombarding them right now, often at far higher signal levels.</p>

<p><a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/09/13/AR2008091300340.html"><strong>Wi-Fi in a tub:</strong></a> I'm not going to say anything more.</p>

<p><a href="http://www.quickertek.com/products/expresscard.php"><strong>QuickerTek adds antenna to 300 mW ExpressCard for MacBook Pro:</strong></a> Users of Apple's higher-end laptops can drop $200 to get a 300 mW Draft N (802.11n) ExpressCard and 5 dBi external antenna with a mounting clip. That's a lot of power, and it's important to recall that have a louder signal doesn't mean that distant base stations can necessarily hear you better. Draft N devices typically pair better listening (receive sensitivity) with higher transmission power, however.</p>

<p><a href="http://networklocationapp.com/"><strong>Mac product ties location settings to Wi-Fi position:</strong></a> Centrix has updated its $29 Mac OS X location preferences program NetworkLocation to take advantage of Skyhook Wireless's Wi-Fi positioning data. You can now tie the package of settings that control what email account you use, iChat status, programs launched, disks mounted, and other factors, to where you're currently at.</p>]]></content:encoded>
      <pubDate>Mon, 15 Sep 2008 06:03:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi network owned">wi-fi network owned</category>
      <category domain="http://securityratty.com/tag/wireless">wireless</category>
      <category domain="http://securityratty.com/tag/wi-fi position">wi-fi position</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/skyhook wireless">skyhook wireless</category>
      <category domain="http://securityratty.com/tag/broadcast island wide">broadcast island wide</category>
      <category domain="http://securityratty.com/tag/island">island</category>
      <category domain="http://securityratty.com/tag/dbi external antenna">dbi external antenna</category>
      <source url="http://wifinetnews.com/archives/008439.html">Wee-Fi: Indian Terror over Wi-Fi; Fastest Wireless; Health Fears; Wi-Fi Tub; and More</source>
    </item>
    <item>
      <title><![CDATA[EC praises Google's data-retention move, asks for more]]></title>
      <link>http://securityratty.com/article/5d51c4a87e012a7d069ba77bb44a88df</link>
      <guid>http://securityratty.com/article/5d51c4a87e012a7d069ba77bb44a88df</guid>
      <description><![CDATA[The European Commission welcomed Google's reduction in data retention times for people's search data but it urged the company and its rivals to go even further in order to safeguard European citizens'...]]></description>
      <content:encoded><![CDATA[The European Commission welcomed Google's reduction in data retention times for people's search data but it urged the company and its rivals to go even further in order to safeguard European citizens' privacy, the regulator said Thursday.]]></content:encoded>
      <pubDate>Wed, 10 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/data retention times">data retention times</category>
      <category domain="http://securityratty.com/tag/safeguard european citizens">safeguard european citizens</category>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/european commission">european commission</category>
      <category domain="http://securityratty.com/tag/rivals">rivals</category>
      <category domain="http://securityratty.com/tag/reduction">reduction</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/regulator">regulator</category>
      <source url="http://www.networkworld.com/news/2008/091108-ec-praises-googles-data-retention.html?fsrc=rss-security">EC praises Google's data-retention move, asks for more</source>
    </item>
    <item>
      <title><![CDATA[Identity Farming]]></title>
      <link>http://securityratty.com/article/b473cbd43ff87938f8034236b68d25c8</link>
      <guid>http://securityratty.com/article/b473cbd43ff87938f8034236b68d25c8</guid>
      <description><![CDATA[Let me start off by saying that I'm making this whole thing up
Imagine you're in charge of infiltrating sleeper agents into the United States. The year is 1983, and the proliferation of identity...]]></description>
      <content:encoded><![CDATA[<p>Let me start off by saying that I'm making this whole thing up. </p>

<p>Imagine you're in charge of infiltrating sleeper agents into the United States. The year is 1983, and the proliferation of identity databases is making it increasingly difficult to create fake credentials. Ten years ago, someone could have just shown up in the country and gotten a driver's license, Social Security card and bank account -- possibly using the identity of someone roughly the same age who died as a young child -- but it's getting harder. And you know that trend will only continue. So you decide to grow your own identities. </p>

<p>Call it "identity farming." You invent a handful of infants. You apply for Social Security numbers for them. Eventually, you open bank accounts for them, file tax returns for them, register them to vote, and apply for credit cards in their name. And now, 25 years later, you have a handful of identities ready and waiting for some real people to step into them. </p>

<p>There are some complications, of course. Maybe you need people to sign their name as parents -- or, at least, mothers. Maybe you need to doctors to fill out birth certificates. Maybe you need to fill out paperwork certifying that you're home-schooling these children. You'll certainly want to exercise their financial identity: depositing money into their bank accounts and withdrawing it from ATMs, using their credit cards and paying the bills, and so on. And you'll need to establish some sort of addresses for them, even if it is just a mail drop. </p>

<p>You won't be able to get driver's licenses or photo IDs on their name. That isn't critical, though; in the U.S., more than 20 million adult citizens don't have photo IDs. But other than that, I can't think of any reason why identity farming wouldn't work. </p>

<p>Here's the real question: Do you actually have to show up for any part of your life? </p>

<p>Again, I made this all up. I have no evidence that anyone is actually doing this. It's not something a criminal organization is likely to do; twenty-five years is too distant a payoff horizon. The same logic holds true for terrorist organizations; it's not worth it. It might have been worth it to the KGB -- although perhaps harder to justify after the Soviet Union broke up in 1991 -- and might be an attractive option to existing intelligence adversaries like China. </p>

<p>Immortals could also use this trick to self-perpetuate themselves, inventing their own children and gradually assuming their identity, then killing their parents off. They could even show up for their own driver's license photos, wearing a beard as the father and blue spiked hair as the son. Iâm told this is a common idea in Highlander fan fiction. </p>

<p>The point isn't to create another movie plot threat, but to point out the central role that data has taken on in our lives. Previously, I've said that we all have a <a href="http://www.schneier.com/essay-219.html">data shadow</a> that follows us around, and that more and more institutions interact with our data shadows instead of with us. We only intersect with our data shadows once in a while -- when we apply for a driver's license or passport, for example -- and those interactions are authenticated by older, less-secure interactions. The rest of the world assumes that our photo IDs glue us to our data shadows, ignoring the rather flimsy connection between us and our plastic cards. (And, no, REAL-ID won't help.) </p>

<p>It seems to me that our data shadows are becoming increasingly distinct from us, almost with a life of their own. What's important now is our shadows; we're secondary. And as our society relies more and more on these shadows, we might even become unnecessary. </p>

<p>Our data shadows can live a perfectly normal life without us.</p>

<p>This essay <a href="http://www.wired.com/politics/security/commentary/securitymatters/2008/09/securitymatters_0904">previously appeared<a> on Wired.com.</p>

<p>EDITED TO ADD (9/9): Interesting <a href="http://www.examiner.com/x-536-Civil-Liberties-Examiner~y2008m9d4-Im-not-myself-today-or-manufacturing-a-new-you">commentary</a>.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=YzkGL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=YzkGL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=JDMVL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=JDMVL" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 09 Sep 2008 01:42:18 +0000</pubDate>
      <category domain="http://securityratty.com/tag/identity">identity</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/data shadow">data shadow</category>
      <category domain="http://securityratty.com/tag/data shadows">data shadows</category>
      <category domain="http://securityratty.com/tag/shadows">shadows</category>
      <category domain="http://securityratty.com/tag/financial identity">financial identity</category>
      <category domain="http://securityratty.com/tag/photo ids glue">photo ids glue</category>
      <category domain="http://securityratty.com/tag/photo ids">photo ids</category>
      <category domain="http://securityratty.com/tag/identity databases">identity databases</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/identity_farmin.html">Identity Farming</source>
    </item>
  </channel>
</rss>
