<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: dna]]></title>
    <link>http://securityratty.com/tag/dna</link>
    <description></description>
    <pubDate>Mon, 21 Jan 2008 09:17:39 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Links List 6.9.08]]></title>
      <link>http://securityratty.com/article/fa14378a8d4efe7a97ada0be1a76881b</link>
      <guid>http://securityratty.com/article/fa14378a8d4efe7a97ada0be1a76881b</guid>
      <description><![CDATA[A different twist on the weekly links of interest, here are some blogs that I have been reading and commenting on lately that I have found very interesting
Weve talked about green IT , and Ciscos VP...]]></description>
      <content:encoded><![CDATA[<p>A different twist on the weekly links of interest, here are some blogs that I have been reading and commenting on lately that I have found very interesting.</p>
<p>We&#8217;ve talked about <a href="http://blog.sciencelogic.com/green-it-the-cart-and-the-horse/05/2008" target="_blank">green IT</a>, and Cisco’s VP of green engineering Paul Marcoux had a nice <a href="http://venturebeat.com/2008/06/06/ciscos-vp-of-green-engineering-on-data-center-efficiency-virtualization-and-startup-opportunities/" target="_blank">Q&amp;A which fits in nicely and is well worth the read</a>. He said that currently Cisco is even with the curve, but a bit behind our European Counterparts who “embraced climate change as long as 15 years ago and baked it into the culture”. He stated that it will become part of Cisco’s DNA as well.</p>
<p>This week ScienceLogic had a nice mention in <a href="http://servervirtualization.blogs.techtarget.com/2008/06/03/hyper-v-could-benefit-from-vmware%e2%80%99s-xen-based-competition/" target="_blank">Mark Gallagher’s Blog post</a>, where we provided some of our insight and thoughts on virtualization management and multiplatform virtual environments. Check it out when you have a chance!</p>
<p>Amongst the blogs that I have been reading for some time is Brad Feld’s blog. Brad has a fantastic blend of information on his blog which always makes it a fascinating read. Yesterday <a href="http://www.feld.com/blog/archives/2008/06/teds_demise_and.html#respond" target="_blank">Brad posted a note which linked to a Vanity Fair “Inventing the Internet” article which I really enjoyed</a>. This was a fantastic blast from the past, but a great story from the actual inventors of the day. Soon after they created packet switching, the world was transformed because Telenet, Tymnet, CompuServe, and BBN rapidly created their own X.25 PDN&#8217;s (networks that are still running today) that forever changed the way the world communicated.</p>
<p>Another such blog I really enjoy is <a href="http://www.blogmaverick.com/" target="_blank">Mark Cuban’s blog</a>. I met Mark many years ago when CompuServe (where I spent the first 10 years of my professional career) purchased his Dallas, TX based systems integrator business called MicroSolutions. <a href="http://www.blogmaverick.com/2008/06/04/why-tiered-broadband-is-a-wonderful-thing-and-asivs/" target="_blank">Mark recently wrote an article</a> entitled “Why tiered bandwidth being a Wonderful Thing and ASIVS”</p>
<p>Having been involved with the telecommunications industry for most of my career, and serving many service providers with our current EM7 products, I do believe that the future of the Internet as consumers know it on the “all you can eat” pricing models will likely be under pressure in the future. I will shed more of my thoughts on that topic in a subsequent post because there is way too much to cover in this post.</p>
<p><a href="http://sharethis.com/item?&wp=2.3.3&amp;publisher=f8a81d13-50d0-4a5c-833d-8e5f2341e305&amp;title=Links+List+6.9.08&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Flinks-list-6908%2F06%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Mon, 09 Jun 2008 10:05:46 +0000</pubDate>
      <category domain="http://securityratty.com/tag/brad felds blog">brad felds blog</category>
      <category domain="http://securityratty.com/tag/blog">blog</category>
      <category domain="http://securityratty.com/tag/mark cubans blog">mark cubans blog</category>
      <category domain="http://securityratty.com/tag/mark">mark</category>
      <category domain="http://securityratty.com/tag/brad">brad</category>
      <category domain="http://securityratty.com/tag/internet article">internet article</category>
      <category domain="http://securityratty.com/tag/article">article</category>
      <category domain="http://securityratty.com/tag/subsequent post">subsequent post</category>
      <category domain="http://securityratty.com/tag/ciscos dna">ciscos dna</category>
      <source url="http://blog.sciencelogic.com/links-list-6908/06/2008">Links List 6.9.08</source>
    </item>
    <item>
      <title><![CDATA[Third Annual Movie-Plot Threat Contest Winner]]></title>
      <link>http://securityratty.com/article/e1b7abfc15ee18403bdc40a8a014e3d6</link>
      <guid>http://securityratty.com/article/e1b7abfc15ee18403bdc40a8a014e3d6</guid>
      <description><![CDATA[On April 7 -- seven days late -- I announced the Third Annual Movie-Plot Threat Contest: For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the...]]></description>
      <content:encoded><![CDATA[<p>On April 7 -- seven days late -- I <a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html">announced</a> the Third Annual Movie-Plot Threat Contest:</p>

<blockquote>For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the sale of your new product idea. There are lots of risks out there, some of them serious, some of them so unlikely that we shouldn't worry about them, and some of them completely made up. And there are lots of products out there that provide security against those risks.

<p>Your job is to invent one. First, find a risk or create one. It can be a terrorism risk, a criminal risk, a natural-disaster risk, a common household risk -- whatever. The weirder the better. Then, create a product that everyone simply has to buy to protect him- or herself from that risk. And finally, write a catalog ad for that product.</p>

<p>[...]</p>

<p>Entries are limited to 150 words ... because fear doesn't require a whole lot of explaining. Tell us why we should be afraid, and why we should buy your product.</blockquote></p>

<p>On May 7, I <a href="http://www.schneier.com/blog/archives/2008/05/third_annual_mo_2.html">posted</a> five semi-finalists out of the 327 blog comments:</p>

<ul><li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c260856">DNA adulteratometer</a> to detect waiters spitting in your soup.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c260621">Toothpaste test strips</a>.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c261112">SOS device</a> for people locked in car trunks.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c261220">Anti-laser-pointer eyeglasses</a>.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c260675">"Alertness alert"</a> heartbeat monitor.</ul>

<p>Sadly, two of those five was above the 150-word limit.  Out of the three remaining, I (with the help of my readers) have chosen a winner.</p>

<p>Presenting, the winner of the Third Annual Movie Plot Threat Contest, <a href="http://www4.ncsu.edu/~akmassey/">Aaron Massey</a>:</p>

<p><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c260621">Tommy Tester Toothpaste Strips</a>:</p>

<blockquote>Many Americans were shocked to hear the results of the research trials regarding heavy metals and toothpaste conducted by the New England Journal of Medicine, which FDA is only now attempting to confirm. This latest scare comes after hundreds of deaths were linked to toothpaste contaminated with diethylene glycol, a potentially dangerous chemical used in antifreeze.

<p>In light of this continuing health risk, Hamilton Health Labs is proud to announce Tommy Tester Toothpaste Strips! Just apply a dab of toothpaste from a fresh tube onto the strip and let it rest for 3 minutes. It’s just that easy! If the strip turns blue, rest assured that your entire tube of toothpaste is safe. However, if the strip turns pink, dispose of the toothpaste immediately and call the FDA health emergency number at 301-443-1240.</p>

<p>Do not let your family become a statistic when the solution is only $2.95!</blockquote></p>

<p>Aaron wins, well, nothing really, except the fame and glory afforded by this blog.  So give him some fame and glory.  Congratulations.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=hfeYbH"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=hfeYbH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=E3MRuH"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=E3MRuH" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 15 May 2008 02:24:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/health risk">health risk</category>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/criminal risk">criminal risk</category>
      <category domain="http://securityratty.com/tag/toothpaste immediately">toothpaste immediately</category>
      <category domain="http://securityratty.com/tag/toothpaste">toothpaste</category>
      <category domain="http://securityratty.com/tag/common household risk">common household risk</category>
      <category domain="http://securityratty.com/tag/toothpaste test strips">toothpaste test strips</category>
      <category domain="http://securityratty.com/tag/annual movie-plot threat">annual movie-plot threat</category>
      <category domain="http://securityratty.com/tag/terrorism risk">terrorism risk</category>
      <source url="http://www.schneier.com/blog/archives/2008/05/third_annual_mo_1.html">Third Annual Movie-Plot Threat Contest Winner</source>
    </item>
    <item>
      <title><![CDATA[Third Annual Movie-Plot Threat Contest Semi-Finalists]]></title>
      <link>http://securityratty.com/article/e151aa7acd84566a5a5fcefdfe32edbb</link>
      <guid>http://securityratty.com/article/e151aa7acd84566a5a5fcefdfe32edbb</guid>
      <description><![CDATA[A month ago I announced the Third Annual Movie-Plot Threat Contest: For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the sale of your new...]]></description>
      <content:encoded><![CDATA[<p>A month ago I <a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html">announced</a> the Third Annual Movie-Plot Threat Contest:</p>

<blockquote>For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the sale of your new product idea. There are lots of risks out there, some of them serious, some of them so unlikely that we shouldn't worry about them, and some of them completely made up. And there are lots of products out there that provide security against those risks.

<p>Your job is to invent one. First, find a risk or create one. It can be a terrorism risk, a criminal risk, a natural-disaster risk, a common household risk -- whatever. The weirder the better. Then, create a product that everyone simply has to buy to protect him- or herself from that risk. And finally, write a catalog ad for that product.</p>

<p>[...]</p>

<p>Entries are limited to 150 words ... because fear doesn't require a whole lot of explaining. Tell us why we should be afraid, and why we should buy your product.</blockquote></p>

<p>Submissions are in.  The blog entry has 327 comments.  I've read them all, and here are the semi-finalists:</p>

<ul><li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c260856">DNA adulteratometer</a> to detect waiters spitting in your soup.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c260621">Toothpaste test strips</a>.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c261112">SOS device</a> for people locked in car trunks.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c261220">Anti-laser-pointer eyeglasses</a>.
<li><a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c260675">"Alertness alert"</a> heartbeat monitor.</ul>

<p>It's not in the running, but reader "False Data" deserves special mention for his <a href="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html#c261190">Safe-T-Nav</a>, a GPS system that detects high crime zones.  It would be a semi-finalist, but it <a href="http://inventorspot.com/articles/honda_navigation_system_warns_high_crime_areas_12959">already</a> <a href="http://www.pcmag.com/article2/0,2817,2286023,00.asp">exists</a>.</p>

<p>Cast your vote; I'll announce the winner on the 15th.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=KGCS5H"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=KGCS5H" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=p8E4OH"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=p8E4OH" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Wed, 07 May 2008 10:33:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/criminal risk">criminal risk</category>
      <category domain="http://securityratty.com/tag/common household risk">common household risk</category>
      <category domain="http://securityratty.com/tag/annual movie-plot threat">annual movie-plot threat</category>
      <category domain="http://securityratty.com/tag/terrorism risk">terrorism risk</category>
      <category domain="http://securityratty.com/tag/product idea">product idea</category>
      <category domain="http://securityratty.com/tag/product">product</category>
      <category domain="http://securityratty.com/tag/fear">fear</category>
      <category domain="http://securityratty.com/tag/toothpaste test strips">toothpaste test strips</category>
      <source url="http://www.schneier.com/blog/archives/2008/05/third_annual_mo_2.html">Third Annual Movie-Plot Threat Contest Semi-Finalists</source>
    </item>
    <item>
      <title><![CDATA[Third Annual Movie-Plot Threat Contest]]></title>
      <link>http://securityratty.com/article/f2473402e0c81ad0941d76f69a49f0ec</link>
      <guid>http://securityratty.com/article/f2473402e0c81ad0941d76f69a49f0ec</guid>
      <description><![CDATA[I can't believe I let April 1 come and go without posting the rules to the Third Annual Movie-Plot Threat Contest. Well, better late than never
For this contest, the goal is to create fear. Not just...]]></description>
      <content:encoded><![CDATA[<p>I can't believe I let April 1 come and go without posting the rules to the Third Annual Movie-Plot Threat Contest.  Well, better late than never.</p>

<p>For this contest, the goal is to create fear.  Not just any fear, but a fear that you can alleviate through the sale of your new product idea.  There are lots of risks out there, some of them serious, some of them so unlikely that we shouldn't worry about them, and some of them completely made up.  And there are lots of products out there that provide security against those risks.</p>

<p>Your job is to invent one.  First, find a risk or create one.  It can be a terrorism risk, a criminal risk, a natural-disaster risk, a common household risk -- whatever.  The weirder the better.  Then, create a product that everyone simply <i>has to</i> buy to protect him- or herself from that risk.  And finally, write a catalog ad for that product.</p>

<p>Here's an example, pulled from page 25 of the Late Spring 2008 Skymall catalog I'm reading on my airplane right now:</p>

<blockquote> A Turtle is Safe in Water, A Child is Not!

<p>Even with the most vigilant supervision a child can disappear in seconds and not be missed until it's too late.  Our new wireless pool safety alarm system is a must for pool owners and parents of young children.  The Turtle Wristband locks on the child's wrist (a special key is required to remove it) and instantly detects immersion in water and sounds a shrill alarm at the Base Station located in the house or within 100 feet of the pool, spa, or backyard pond.  Keep extra wristbands on hand for guests or to protect the family dog.</blockquote></p>

<p>Entries are limited to 150 words -- the example above had 97 words -- because fear doesn't require a whole lot of explaining.  Tell us why we should be afraid, and why we should buy your product.</p>

<p>Entries will be judged on creativity, originality, persuasiveness, and plausibility.  It's okay if the product you invent doesn't actually exist, but this isn't a science fiction contest.</p>

<p>Portable salmonella detectors for salad bars.  Acoustical devices that estimate tiger proximity based on roar strength.  GPS-enabled wallets for use when you've been pickpocketed.  Wrist cuffs that emit fake DNA to fool DNA detectors.  The <a href="http://www.qsleeper.com/">Quantum Sleeper</a>.  Fear offers endless business opportunities.  Good luck.</p>

<p>Entries due by May 1.</p>

<p>The First Movie-Plot Threat Contest <a href="http://www.schneier.com/blog/archives/2006/04/announcing_movi.html">rules</a> and <a href="http://www.schneier.com/blog/archives/2006/06/movieplot_threa_1.html">winner</a>.  The Second Movie-Plot Threat Contest <a href="http://www.schneier.com/blog/archives/2007/04/announcing_seco.html">rules</a>, <a href="http://www.schneier.com/blog/archives/2007/06/second_annual_m.html">semifinalists</a>, and <a href="http://www.schneier.com/blog/archives/2007/06/second_movieplo.html">winner</a>.</p>

<p>EDITED TO ADD (4/7): Submit your entry in the comments.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=lSqzOhG"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=lSqzOhG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=uLf8WoG"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=uLf8WoG" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Mon, 07 Apr 2008 11:50:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/movie-plot threat">movie-plot threat</category>
      <category domain="http://securityratty.com/tag/annual movie-plot threat">annual movie-plot threat</category>
      <category domain="http://securityratty.com/tag/criminal risk">criminal risk</category>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/common household risk">common household risk</category>
      <category domain="http://securityratty.com/tag/product idea">product idea</category>
      <category domain="http://securityratty.com/tag/product">product</category>
      <category domain="http://securityratty.com/tag/terrorism risk">terrorism risk</category>
      <category domain="http://securityratty.com/tag/entries">entries</category>
      <source url="http://www.schneier.com/blog/archives/2008/04/third_annual_mo.html">Third Annual Movie-Plot Threat Contest</source>
    </item>
    <item>
      <title><![CDATA[The Continuing Slide Towards Thoughtcrime]]></title>
      <link>http://securityratty.com/article/b7d75e490b04e1212ea1dd6092ffd22b</link>
      <guid>http://securityratty.com/article/b7d75e490b04e1212ea1dd6092ffd22b</guid>
      <description><![CDATA[A suggestion from the UK of putting primary-school children in a DNA database &quot;exhibit behaviour indicating they may become criminals in later life.&quot; Pugh's call for the government to consider options...]]></description>
      <content:encoded><![CDATA[<p>A <a href="http://www.guardian.co.uk/society/2008/mar/16/youthjustice.children">suggestion</a> from the UK of putting primary-school children in a DNA database "exhibit behaviour indicating they may become criminals in later life."</p>

<blockquote>Pugh's call for the government to consider options such as placing primary school children who have not been arrested on the database is supported by elements of criminological theory. A well-established pattern of offending involves relatively trivial offences escalating to more serious crimes. Senior Scotland Yard criminologists are understood to be confident that techniques are able to identify future offenders.

<p>A recent report from the think-tank Institute for Public Policy Research (IPPR) called for children to be targeted between the ages of five and 12 with cognitive behavioural therapy, parenting programmes and intensive support. Prevention should start young, it said, because prolific offenders typically began offending between the ages of 10 and 13. Julia Margo, author of the report, entitled 'Make me a Criminal', said: 'You can carry out a risk factor analysis where you look at the characteristics of an individual child aged five to seven and identify risk factors that make it more likely that they would become an offender.' However, she said that placing young children on a database risked stigmatising them by identifying them in a 'negative' way.</blockquote></p>

<p>Thankfully, the article contains some reasonable reactions:</p>

<blockquote>Shami Chakrabarti, director of the civil rights group Liberty, denounced any plan to target youngsters. 'Whichever bright spark at Acpo thought this one up should go back to the business of policing or the pastime of science fiction novels,' she said. 'The British public is highly respectful of the police and open even to eccentric debate, but playing politics with our innocent kids is a step too far.'

<p>Chris Davis, of the National Primary Headteachers' Association, said most teachers and parents would find the suggestion an 'anathema' and potentially very dangerous. 'It could be seen as a step towards a police state,' he said. 'It is condemning them at a very young age to something they have not yet done. They may have the potential to do something, but we all have the potential to do things. To label children at that stage and put them on a register is going too far.'</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=t3gA4vF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=t3gA4vF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=qs07HfF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=qs07HfF" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 18 Mar 2008 11:12:43 +0000</pubDate>
      <category domain="http://securityratty.com/tag/database">database</category>
      <category domain="http://securityratty.com/tag/dna database">dna database</category>
      <category domain="http://securityratty.com/tag/risk factor analysis">risk factor analysis</category>
      <category domain="http://securityratty.com/tag/individual child aged">individual child aged</category>
      <category domain="http://securityratty.com/tag/recent report">recent report</category>
      <category domain="http://securityratty.com/tag/public policy research">public policy research</category>
      <category domain="http://securityratty.com/tag/report">report</category>
      <category domain="http://securityratty.com/tag/whichever bright spark">whichever bright spark</category>
      <category domain="http://securityratty.com/tag/cognitive behavioural therapy">cognitive behavioural therapy</category>
      <source url="http://www.schneier.com/blog/archives/2008/03/the_continuing.html">The Continuing Slide Towards Thoughtcrime</source>
    </item>
    <item>
      <title><![CDATA[Laptop bought on eBay contained "highly confidential" Home Office disk]]></title>
      <link>http://securityratty.com/article/542dae17dbc72823ffb04451ce5a44c0</link>
      <guid>http://securityratty.com/article/542dae17dbc72823ffb04451ce5a44c0</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
2/28/07

Organization
The Home Office (UK

The Home Office is the government department responsible for leading the national effort to protect the public...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/homeoffice.jpg" align="right" height="98" width="125"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>2/28/07<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.homeoffice.gov.uk/"> The Home Office (UK)</a>*<br><br><font size="1">*"The Home Office is the government department responsible for leading the national effort to protect the public from terrorism, crime and anti-social behaviour." - Source <a href="http://www.homeoffice.gov.uk/about-us/">Home Office About Us</a> page </font><br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.leapfrogcomputers.co.uk/index.php"> Leapfrog Computers</a> <br><br><span style="font-weight: bold;">Victims:</span><br>N/A<br><br><span style="font-weight: bold;">Number Affected:</span><br>N/A<br><br><span style="font-weight: bold;">Types of Data:</span><br>Unknown - labeled "Home Office - highly confidential"<br><br><span style="font-weight: bold;">Breach Description:</span><br>A laptop reportedly purchased through eBay contained a CD marked "Home Office - highly confidential" under the keyboard and above the circuit board.&nbsp; The purchaser brought the computer to Leapfrog Computers in Westhoughton (UK) for repair where the technician discovered the encrypted compact disc.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.boltoneveningnews.co.uk/display.var.2079685.0.home_office_disc_found_in_laptop_by_pc_firm.php">The Bolton Evening News</a> <br><a href="http://news.bbc.co.uk/2/hi/uk_news/england/manchester/7269965.stm">BBC News</a> <br><a href="http://ap.google.com/article/ALeqM5g9x80l8GCsodMpoObmu7ydfXYhkAD8V3FF5O0">Associated Press</a> <br><a href="http://www.leapfrogcomputers.co.uk/support/index.php?_m=news&amp;_a=viewnews&amp;newsid=21">Leapfrog Computers online statement</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Lee Bevan, Leapfrog Computers, brought to the attention of The Breach Blog by an informed reader<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>A highly confidential Home Office disk was found hidden in a laptop computer sold on eBay.<br><br>The CD was found between the keyboard and circuit board of the laptop by computer repair technicians<br><span style="font-style: italic;">[Evan] Obviously the CD was put under the laptop on purpose.&nbsp; But why and by whom?</span><br><br>Technicians at the shop called police who sent around anti-terrorist officers to confiscate the machine<br><br>The Home Office said investigations were under way into the incident.<br><br>The laptop had been taken into the Leapfrog Computers store by a customer who bought it on the internet auction site.<br><br>When engineers took off the keyboard they found a CD marked "Home Office - highly confidential".<br><br>Managing director Lee Bevan said: "I thought it was a spoof at first - I just figured someone was having a joke."<br><br>Mr Bevan put the disk into the drive to check it and found it was encrypted.<br><span style="font-style: italic;">[Evan] I understand how curiosity can drive someone to put the disk in the drive to find out what is/was on it, but I wouldn't suggest doing this if it's marked "Home Office - highly confidential".&nbsp; Thankfully the disk was encrypted because this could have been a different story for Mr. Bevan had it not been.</span><br><br>Founder and managing director Lee Bevan contacted police, who spent three hours interviewing him.<br><br>Officers from Greater Manchester Police took the laptop and disk away but have now concluded their investigation<br><br>The Home Office — the government body responsible for maintaining law and order and fighting terrorism — confirmed the disc was genuine and said it was investigating the incident.<br><br>A Home Office spokesman said: "Both the laptop and the disk were encrypted, thus safeguarding any information that might be stored on them. <br><br>"Investigations are now under way. It would be inappropriate to comment further while they are ongoing."<br><br>Staff at Leapfrog are being finger-printed and having DNA swabs to rule them out of the investigation.<br><span style="font-style: italic;">[Evan] Think the Home Office is taking this seriously?&nbsp; Uh, yeah I would say so.</span><br><br>Mr Bevan, aged 36, said: "The disc had been put inside the laptop on purpose. As soon as we found it, we contacted the police, who came immediately.<br><br>"I'm just glad it's turned up here rather than landing in the wrong hands.<br><br>"I don't know where the disc has come from. I have never seen a disc stored in this way before."<br><br><span style="font-weight: bold;">Commentary:</span><br>This is very interesting and mysterious.&nbsp; How did the disk get there, who put it there, and for what purpose?&nbsp; I wonder if the disk was put under the laptop keyboard in order to get it out of a building or other secure facility without being noticed.&nbsp; Some high security organizations will actually check baggage and drives for the existence of disks, thumb drives and other mobile media.&nbsp; <br><br>Q.&nbsp; What could have made this much worse?<br>A.&nbsp; If the data on the disk is/was actually "highly confidential", the disk was not encrypted, and someone with bad intentions found it.&nbsp; Encryption is a very good thing, but only as good as the key management process that goes along with it.&nbsp; For instance, full disk encryption can easily be defeated on a laptop with a Post-It note that says "Username: john.doe, Password: G3tMy!-Key".&nbsp; Get what I am saying? <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/02/28/homeoffice.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Thu, 28 Feb 2008 13:10:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/home office">home office</category>
      <category domain="http://securityratty.com/tag/disk">disk</category>
      <category domain="http://securityratty.com/tag/laptop">laptop</category>
      <category domain="http://securityratty.com/tag/source home office">source home office</category>
      <category domain="http://securityratty.com/tag/home office spokesman">home office spokesman</category>
      <category domain="http://securityratty.com/tag/director lee bevan">director lee bevan</category>
      <category domain="http://securityratty.com/tag/lee bevan">lee bevan</category>
      <category domain="http://securityratty.com/tag/highly confidential">highly confidential</category>
      <category domain="http://securityratty.com/tag/leapfrog computers">leapfrog computers</category>
      <source url="http://breachblog.com/2008/02/28/homeoffice.aspx">Laptop bought on eBay contained "highly confidential" Home Office disk</source>
    </item>
    <item>
      <title><![CDATA[SmartWater Works]]></title>
      <link>http://securityratty.com/article/ec07ee537d6b783194da2e32bce8f10e</link>
      <guid>http://securityratty.com/article/ec07ee537d6b783194da2e32bce8f10e</guid>
      <description><![CDATA[Almost three years ago I blogged about SmartWater: liquid imbued with a uniquely identifiable DNA-style code. In my post I made the snarky comment: The idea is for me to paint this stuff on my...]]></description>
      <content:encoded><![CDATA[<p>Almost three years ago I <a href="http://www.schneier.com/blog/archives/2005/02/smart_water.html">blogged about</a> SmartWater: liquid imbued with a uniquely identifiable DNA-style code.  In my post I made the snarky comment:</p>

<blockquote>The idea is for me to paint this stuff on my valuables as proof of ownership. I think a better idea would be for me to paint it on <i>your</i> valuables, and then call the police.</blockquote>

<p>That remark aside, a new <a href="http://www.physorg.com/news119812166.html">university study</a> concludes that it works:</p>

<blockquote>The study of over 100 criminals revealed that simply displaying signs that goods and premises were protected by SmartWater was sufficient to put off most of the criminals the team interviewed.

<p>Professor Gill said: "According to our sample, SmartWater provided a strong projected deterrent value in that 74 per cent of the offenders interviewed reported that they would in the future be put off from breaking into a building with a SmartWater poster/sign displayed.</p>

<p>"Overall, the findings indicate that crime reduction strategies using SmartWater products have a strong deterrent effect. In particular, one notable finding of the study was that whilst 'property marking' in general acts as a reasonable deterrent, the combination of forensic products which SmartWater uses in its holistic approach increases the deterrent factor substantially."</p>

<p>When scored out of ten by respondents in regard to deterrent value, SmartWater was awarded the highest average score (8.3 out of a score of 10) compared to a range of other crime deterrents. CCTV scored 6.2, Burglar Alarms scored 6.0 and security guards scored 4.9.</blockquote></p>

<p>Of course, we don't know if the study was sponsored by <a href="http://www.smartwater.com/">SmartWater</a> the company, and we don't know the methodology -- interviewing criminals about what deters them is fraught with potential biases -- but it's still interesting.</p>

<p>Also note that SmartWater is not only sprayed on valuables, but also sprayed on burglars and criminals -- tying them to the crime scene.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=0M0NfPD"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=0M0NfPD" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=VjjgbdD"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=VjjgbdD" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=ymcelsD"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=ymcelsD" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Mon, 21 Jan 2008 09:17:39 +0000</pubDate>
      <category domain="http://securityratty.com/tag/smartwater">smartwater</category>
      <category domain="http://securityratty.com/tag/smartwater products">smartwater products</category>
      <category domain="http://securityratty.com/tag/deterrent">deterrent</category>
      <category domain="http://securityratty.com/tag/smartwater postersign">smartwater postersign</category>
      <category domain="http://securityratty.com/tag/reasonable deterrent">reasonable deterrent</category>
      <category domain="http://securityratty.com/tag/deterrent factor">deterrent factor</category>
      <category domain="http://securityratty.com/tag/study">study</category>
      <category domain="http://securityratty.com/tag/strong">strong</category>
      <category domain="http://securityratty.com/tag/strong deterrent effect">strong deterrent effect</category>
      <source url="http://www.schneier.com/blog/archives/2008/01/smartwater_work.html">SmartWater Works</source>
    </item>
  </channel>
</rss>
