Privacy

Indiana passes blogger-written data breach bill

With a stroke of the Governor's pen on Monday, Indiana became one of the few states in the country to provide strong incentives for businesses to encrypt sensitive customer data. Unlike many of the laws that pass through state legislatures - this one was not ghost written by lobbyists or special interests. It was co-written by a tech-savvy state legislator, and a blogger constituent .... me.

One of the biggest problems in the hundreds of data breach and data loss incidents that have been reported over the past few years is that so little of the data is encrypted. If … Read more

FBI posts fake hyperlinks to snare child porn suspects

The FBI has recently adopted a novel investigative technique: posting hyperlinks that purport to be illegal videos of minors having sex, and then raiding the homes of anyone willing to click on them.

Undercover FBI agents used this hyperlink-enticement technique, which directed Internet users to a clandestine government server, to stage armed raids of homes in Pennsylvania, New York, and Nevada last year. The supposed video files actually were gibberish and contained no illegal images.

A CNET News.com review of legal documents shows that courts have approved of this technique, even though it raises questions about entrapment, the problems … Read more

Flaws emerge in Facebook's new privacy controls

Facebook launched a bunch of new privacy controls today, and has received a significant amount of positive press as a result. The praise is perhaps not so deserving--as the new privacy controls can be easily evaded.

The new privacy settings allow users to customize which friends can view specific details in their own profile. Users can lock down specific bits of information to their friends, friends of friends, or even particular individuals.

There is, however, a significant design flaw present in this new feature. Facebook users can select which types of strangers can view their profile. That is, a student … Read more

DEA agent caught twisting facts in wiretap request

When police ask a judge to grant a wiretap order, there's no defense lawyer present to raise objections. The judge has a limited amount of information, all provided by the cops and prosecutors, who in theory will take this solemn responsibility seriously and never lie or twist the facts.

Which brings us to U.S. v. Romero, a relatively routine case in Massachusetts in which Alberto Romero and 17 others were charged with conspiracy to manufacture and distribute crack cocaine.

To get a wiretap against the alleged crack cocaine ring, Drug Enforcement Administration agent Joao Monteiro filed an affidavit … Read more

Google: We didn't help the NSA (or did we?)

Google is now the first of the major search engines and e-mail providers to make a firm statement on the issue of the National Security Agency's wholesale surveillance of Internet content.

Google has stated it didn't help the NSA search your e-mails. More specifically the company denies participating in the NSA's Terrorist Surveillance Program. But the company's carefully worded denial might not be enough to reassure savvy readers.

The Wall Street Journal recently revealed the true extent of the NSA's surveillance system:

"According to current and former intelligence officials, the spy agency now monitors … Read more

House votes 213-197 to reject retroactive telecom immunity

The U.S. House of Representatives on Friday narrowly approved an electronic surveillance expansion without immunization for any telecommunications companies that illegally opened their networks to intelligence agencies.

The 213-197 split, with most Democrats voting in favor of the bill (PDF) and most Republicans opposing it, hardly means that the political tussle over retroactive immunity is over. It now shifts to the Senate, where Majority Leader Harry Reid, a Democrat, said he was "encouraged" to see the House vote.

But the primary obstacle remains President Bush, who has threatened a veto. The White House circulated a statement after … Read more

Inspector general: FBI not embracing privacy safeguards

The FBI has wielded the Patriot Act's extraordinary surveillance powers to unlawfully collect information about American citizens and has resisted some efforts to impose additional privacy safeguards, according to the U.S. Department of Justice's inspector general.

Inspector General Glenn Fine, in a pair of reports released on Thursday reviewing the 2006 calendar year, acknowledged the FBI's top management has been receptive to the points he raised in his first report a year earlier. But he indicated that there was nevertheless resistance to increased oversight and better record-keeping, which would help to prevent further abuses.

The longer … Read more

Security guide to customs-proofing your laptop

If you travel across national borders, it's time to customs-proof your laptop.

Customs officials have been stepping up electronic searches of laptops at the border, where travelers enjoy little privacy and have no legal grounds to object. Laptops and other electronic devices can be seized without reason, their contents copied, and the hardware returned hours or even weeks later.

Executives have been told that they must hand over their laptop to be analyzed by border police--or be barred from boarding their flight. A report from a U.S.-based marijuana activist says U.S. border guards browsed through her … Read more

California takes small step away from Real ID

The State of California has for years been a supporter of Real ID, if not an altogether enthusiastic one. Now that may be about to change.

California State Assembly member Pedro Nava, the influential Democratic chairman of the transportation committee, has introduced an anti-Real ID resolution. It asks the state's congressional delegation in Washington, D.C., to "support measures to repeal Real ID."

"I quite frankly think the Legislature will support this measure, my resolution, because there are too many unanswered questions," Nava, who represents part of Santa Barbara and Ventura counties, said in an … Read more

NSA shifts to e-mail, Web, data-mining dragnet

The National Security Agency was once known for its skill in eavesdropping on the world's telephone calls through radio dishes in out-of-the-way places like England's Menwith Hill, Australia's Pine Gap, and Washington state's Yakima Training Center.

Today those massive installations, which listened in on phone conversations beamed over microwave links, are becoming something akin to relics of the Cold War. As more communications traffic travels through fiber links, and as e-mail and text messaging supplant phone calls, the spy agency that once intercepted telegrams is adapting yet again.

Recent evidence suggests that the NSA has been … Read more