Site Sponsor:

mcafee_logo.gif
line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

Search this site

Match case Regex search


Entries from Realtime Community | Messaging and Web Security tagged with 'privacy'


EU Proposing Software Liability Protections; Malpractice May Be Better Model

EU Commissioners are proposing stronger consumer protections for software security and efficacy. Software industry advocates want no part of this. The EU was ahead of the US on privacy protections which are common place today so it is worth watching...

Supreme Court Justice: Publishing Cybersnooping Results is Free Speech

I've come to expect more from Supreme Court justices than I found in some recent comments by Justice Scalia regarding online privacy....

Free Services Aren't So Free

Check out the detailed article in Popular Mechanics entitled When Hackers Attack: Practicing Cybersecurity at Home....

Massachusetts Data Privacy Law in Effect Jan. 1, 2009

Massachusetts is requiring a long list of security practices of companies with customers in Massachusetts....

More Reaction to Stallman and the Stupidity of the Cloud

Yesterday I posted on Richard Stallman's perplexing comments about the stupidity of cloud computing. Others are wondering about them too....

CT Attorney General on Data Breaches: "No More Surprises"

The Connecticut Attorney General is ripping into Bank of New York Mellon over missing tapes containing up to 12 million customer's personal information. In an earlier post I speculated that attorneys generals and other state officials must be getting tired...

Yet Another Consequence of Lost Data: Government Investigations

Bank of New York Mellon experienced the loss of tapes as they were transported by a third party. The bank reported the tape may have contained unencrypted data on about 4.5 million people from 700 companies. That's a bad enough...

Private, Public Sectors Look to Each Other to Solve Security Problems

The LA Times story Public, private sectors at odds over cyber security is not your typical high profile security story. Rather than focus on a single data breach or a new vulnerability, it looks at the question of how to...

Scientific American on Privacy

The September issue of Scientific American is dedicated to the future of privacy. Topics include:...

Getting Started with Governance, Compliance and Risk Management

Governance, compliance and risk management (GCR) is a broad, demanding and sometimes intimidating topic but there are strategies for getting GCR under control. This podcast describes a seven step process for getting a GCR program started with an emphasis on...

Costly Insider Attacks

The risk from insider attacks are highlighted this week by the well publicized San Francisco network admin who locked down the city's fiberWAN and also from the less noticed sentencing of a DBA for stealing and selling customer information. The...

Updated: Viacom Goes Overboard with YouTube Trolling

Viacom wants data on YouTube viewers in its suit over copyright infringements and a US court has ordered Google to turn over data, including IP address, usernames and viewing history. So much for privacy policies....

Another Improvement to Browser Security

CheckPoint has released a browser virtualization product to add a layer of security to Internet Explorer and Firefox. By blocking access to the registry and file system, the virtualized browser should prevent some malware from gaining a foot hold on...

Privacy Mandates, Search Engines and You

Search engines, regulators, legislators and privacy advocates continue to try to balance competing interests of online advertisers and consumers. In this podcast we look into evolving regulations on search engines and how they track users browsing habits and collect personally...

Basics of E-discovery

E-discovery is the process of identifying, securing and analyzing electronic data for legal reasons. IT professionals may be called on to assist their colleagues in the legal profession. This podcasts examines what we can do from an IT perspective to...

Google, Healthcare Records, and Big Brother

The company that keeps your search records for 18 months, provides you free 411 directory assistance (800-GOOG411), an may soon send you location specific ads on your Android phone now wants to manage your healthcare records. Google is getting into...

Should Your IP Address Be Treated as Private Information?

A potential privacy storm is brewing in Europe over one of the most basic methods of tracking individuals on the Internet: a computer's IP address. Now of course IP addresses aren't tied to a particular person and they aren't even...

Spies and Spooks in the Business World

Douglas Frantz's article Spy vs. Spy in Portolio.com paints a fascinating look at the role of ex-intelligence agents in the private sector. Citing examples from WalMart and Oracle, Frantz shows how spy methods have found a home in the business...

Web 2.0 Identity Theft

Web 2.0 technologies can be exploited for identity theft in a couple of different ways. First, there is a harvest model of collecting information that is voluntarily posted to sites, such as MySpace, Facebook and LinkedIn; and second, there is...

Sears Privacy Problems: Those Who Can Not Remember the Past and All That

You expect to start the new year with fresh ideas, big plans and maybe a resolution or two. What we don't want is a re-run of last years stories but it looks like that is just what we are getting....

Pew Survey: Online Identity Not Much Concern but What About Phishing?

The Pew Internet & American Life Project just released a survey entitled Digital Footprints: Online identity management and search in the age of transparency (pdf) that finds not much concern about personal information available online. From a release about the...

Improved Privacy Protection in Ask.com

Ask.com has taken a major step in the right direction for allowing users to protect their privacy. The search engine will provide a feature called AskEraser that will (mostly) erase their search queries. It's not a completely anonymous search service,...

Should You Use Online Replacements for Desktop Applications? 12 Things to Consider Before Making the Move

If you are considering Google Apps, Zoho, ThinkFree or other online applications to replace or complement Microsoft Office, here are 12 things to consider before making the move. This podcasts groups the 12 topics into 3 broad categories: functionality, technical...

Social Network Not All Bad for Enterprise

Rebecca Harold outlines common concerns about social networking in her post More Organizations Are Blocking Social Networking Sites To Address Information Security and Privacy Concerns. Most of the concerns center around security and confidentiality but Harold sees this is not...

Privacy Policies Coming Under Scrutiny

The Federal Trade Commission is delving into questions of online privacy and advertising. The problem stems from the complexity of the policies and the fact that they can change at any time. Critics are voicing their concerns and getting more...

Canadians Moving on Identity Theft

The Canadian government is staking steps to reduce the threat of identity theft according to Epoch Times: To combat this growing problem, Justice Minister Rob Nicholson announced last week that the government plans to criminalize identity theft and give police...

Securing Your Own Data On Line

The New York Times article Securing Very Important Data: Your Own raises a number of interesting points about attitudes and privacy. It starts with how we are ready to trade personal information for convenience: But the newest generation of these...

How Much is Known About You? Protecting Privacy Online

Are you concerned about protecting your privacy online? This podcast provides tips on practices you can use your reduce the risk leaking private information while online as well as tools that can help protect against information collection techniques you might...

Google/Doubleclick Deal: Control Your Own Privacy with Anonymizers

The Google/DoubleClick merger continues to plod along. Obviously privacy is a big issue and there is little consensus on this. Privacy advocates are rightly concerned about the abilities of a combined Google/DoubleClick behemoth tracking our Web activities. Google's answer, or...

OpenID and the Phishing Gold Rush

A major French Telecom yesterday announced support for the OpenID lightweight identity management standard. Some people are really excited about this. I'm sorry to say a lot of those are probably phishers who are thinking the great Phishing Gold Rush...

Privacy Train Wrecks: Embarrassing Email Leaks, Anonymous Server Admin Arrested

Did you ever think privacy on the Internet is just on big crap shoot? And the only reason your own personal information hasn't been leaked or monitored is that it competes with so many other's personal information for attention? That...

Microsoft Patents Privacy Policy Notification Mechanism

InformationWeek is reporting on a new patent awarded to Microsoft for notifying users when the privacy policy of an service changes. The article notes that Microsoft won't user personal data if you don't accept the new policy. What it doesn't say is how your service might degrade if you don't. Will we lose features that "require" higher levels of disclosure? Here's the description of the process: The patented system automatically informs users if there is a change to the way in which Microsoft intends to use personal data embedded in the application, and then

Microsoft Hell Bent on Advertising; To Hell with Privacy

Microsoft CEO Steve Ballmer told Microsoft share holders to be patient, they are going to make a ton of money by monitoring you and pushing targeted advertising your way. Actually, he didn't say the part about monitoring you, the Microsoft...

Taking Responsibility: Don't Blame P2P Vendors

The Post I.T. blog at the Washington Post is reporting the U.S. Congress is getting into P2P file sharing security. It seems some in Congress are ready to lay the blame for security leaks and data loss on the makers...

This Week in Data Breaches: More Losses, More Regulation?

Laptop theft gets a lot of press because it is so easy to detect. More stealth thefts from databases aren't always as obvious; see the new article on 5 Things You Need to Know about SQL Injection Attacks. This hasn't...

Data Loss Prevention and PCI Data Security Standard

The Payment Card Industry Data Security Standard (PCI DSS) is a good case study of security standards that try to address the wide breadth of security requirements while providing sometimes detailed implementation specifications. This podcasts examines the nature of PCI...

Billing for Data Breach at TJX

The TJX data breach saga continues. This has become a classic case study in how not to handle a data breach. There was the late disclosure about the breach, the rush to consultants to create a security strategy to prevent...

Controlling Spyware in the Enterprise

With estimates of 80% of all PCs infected with an average of 24 pieces of spyware, controlling spyware in the enterprise is a top priority in IT security. This podcast describes the spyware threat and five methods for controlling spyware....

Digg Revolt Shows Need to Temper Majority Rule in Web 2.0

Many of the articles and posts I've read on the Digg/HD-DVD encryption story sound as polarized as American politics these days. In some cases this is either a victory of a "power to the people" movement or it's mob rule....

The Digg Meltdown, Censorship and Privacy

Digg removing posts with a key for HD-DVD rights management struck a raw nerve. The comments around the Internet range from the "you can't copyright a number" to "its about censorship". Some of the best comments I saw are at...

Yes, We Can Protect Privacy

Granted, there is plenty of bad news on the information security front, but it isn’t all bad. Security researchers are working on some fundamental issues, like privacy, in ways that should provide us with more tools in the (hopefully not...

Feed Subscription

If you use an RSS reader, you can subscribe to a feed of all future entries tagged 'privacy'. [What is this?]

Subscribe to feed Subscribe to feed

Other Tags

Other tags used on this blog: