October 2011
2 tags
GAO | US | Information security - Weakness... →
From ‘Information security control deficiencies place federal operations and assets at risk’ and ‘Weaknesses noted in all major categories of controls’:
“Our audits have identified information security deficiencies in both financial and nonfinancial systems, including vulnerabilities in federal systems. We have made hundreds of recommendations to agencies in fiscal...
3 tags
Bart Custers | NL | De (on)mogelijkheden van... →
De inleiding van het artikel:
“Welke technologieën gebruiken opsporingsorganisaties zoal, wat zijn hun ervaringen daarmee en welke behoeften bestaan er nog op dit vlak? Deze vragen stonden centraal in het onderzoek dat Bart Custers namens het ministerie van Veiligheid en Justitie deed naar technologie in de opsporing. Evaluaties en succesverhalen lijken vaak te ontbreken.”
2 tags
Yochai Benkler | US | WikiLeaks and the PROTECT-IP... →
Abstract:
“The WikiLeaks affair and proposed copyright bills introduced in the Senate are evidence of a new, extralegal path of attack aimed at preventing access and disrupting the payment systems and advertising of targeted sites. In this model, the attacker may be a government agency seeking to circumvent constitutional constraints on its power or a private company trying to enforce its...
2 tags
The U.S. Electronic Communications Privacy Act...
Ars Technica | US | Op-ed: The shocking strangeness of our 25-year-old digital privacy law
Wired Threat Level | US | Aging ‘Privacy’ law leaves cloud e-mail open to cops
2 tags
Websense | Security pros & "cons" - IT... →
From In Brief:
“Websense commissioned independent research firm Dynamic Markets to survey 1,000 IT managers and 1,000 non-IT employees in the UK, USA, Canada, and Australia about the latest threats to corporate and personal security, including APTs and modern malware. In the first of this three-part survey, we discuss IT managers’ attitudes towards corporate information and their Data Loss...
1 tag
Nationaal Rapporteur Mensenhandel | NL |... →
Uit 4.4 Concretisering en aanbevelingen:
“Bovenstaande bevindingen schetsen een beeld van een complex fenomeen van enorme omvang dat met louter repressieve middelen niet beheersbaar is. Binnen beleid en uitvoering worden belangrijke stappen gezet om de bescherming van het kind tegen seksueel geweld inhoud te geven, en wordt verbinding gezocht tussen zowel beleidskaders als verschillende...
2 tags
Lucas D. Introna and Helen Nissenbaum | Facial... →
From the Executive Summary:
“Facial recognition technology (FRT) has emerged as an attractive solution to address many contemporary needs for identification and the verification of identity claims. It brings together the promise of other biometric systems, which attempt to tie identity to individually distinctive features of the body, and the more familiar functionality of visual...
1 tag
EDRi | EU | EDRi-gram - Number 9.20, 19 October... →
European action week on airline passenger surveillance
The latest developments on ACTA in the European Parliament
German police accused of using a Trojan backdoor for interceptions
Berlusconi’s wiretapping law threatens online publishers
Phorm gets back on the European stage
EDPS’s Opinion on net neutrality & privacy
European Parliament legal service confirms: ACTA may or may not...
1 tag
Jure.nl | NL | LJN BT7650, Rechtbank Maastricht,... →
Inhoudsindicatie: Verweerder stelt zich op het standpunt (kort weergegeven) dat het voorschrift dat een reisdocument is voorzien van vingerafdrukken is gebaseerd op de (EG) Verordening nr. 2252/2004 van 13 december 2004 betreffende normen voor de veiligheidskenmerken van en biometrische gegevens in door de lidstaten afgegeven paspoorten en reisdocumenten (Verordening). De Verordening heeft...
2 tags
David Wright, Kush Wadhwa, Paul de Hert and... →
From the executive summary:
“This report reviews the privacy impact assessment (PIA) methodologies of seven countries and 10 PIA case studies. No other published report, to our knowledge, has done this. Thus, it represents the most complete compendium and analysis of PIA policies and practices yet compiled and published (on the PIAF website www.piafproject.eu).”
2 tags
Mobile Marketing Association | Mobile application... →
From the Goal for the Privacy Policy:
“The MMA Privacy & Advocacy Committee intends for this mobile application privacy policy to be used as a starting point for most mobile applications. The policy is designed to address the core privacy issues and data processes of many mobile applications, but should not be considered sufficient by itself to cover all types of applications. There are...
3 tags
Federal, Alberta and British Columbia Privacy... →
From the first page:
“How well is your organization protecting personal information? The personal information security requirements under the Personal Information Protection Act (British Columbia), Personal Information Protection Act (Alberta) and the Personal Information Protection and Electronic Documents Act [PIPEDA] (Canada) require organizations to take reasonable steps to safeguard the...
1 tag
Mr. R.W. de Bruin, Prof. Dr. M. de Cock Buning en... →
Uit 1.2 Inleiding en 1.4 Potentiële spanningen:
“In toenemende mate voeren overheden en kennisinstellingen een Open Access-beleid. De gedachte daarbij is dat de resultaten van onderzoek dat is gefinancierd met publieke middelen ook vrij voor het publiek ter beschikking moeten zijn. In het bijzonder wordt ernaar gestreefd publiek gefinancierde kennis vrij beschikbaar te stellen voor nieuw...
2 tags
Arbeitskreise Technik und Medien der Konferenz der... →
Guidance for cloud computing use, from the German data protection authorities.
1 tag
Change of pace...
Posts here are going to become far less frequent. Reasons are that posting with the current frequency is becoming a bit of a chore, and that this blog as a means of sharing information with co-workers - which was one of the original purposes - doesn’t really seem to be that effective.
Basically, this means that the “Something for the weekend” type of posts are going to stay, and...
1 tag
Amazon’s Kindle Fire’s Silk browser sounds privacy...
Nu.nl | Privacyzorgen over Amazonbrowser Silk
1 tag
Facebook apps and privacy
Inside Facebook | Facebook rolls out new app authentication flow that ups privacy and transparency (via)
2 tags
Apple's iOS 5 and privacy
Wired Threat Level | With iOS 5 you’ll be stalked like never before
1 tag
VeriSign demands website takedown powers (3)
IGP Blog | Of canaries and coal mines: what happened at VeriSign?
2 tags
Another example of e-mail hacking
The Guardian | How an email hacker ruined my life and then tried to sell it back to me
1 tag
FTC sues FrostWire for unfairly tricking users...
MediaPost | US | FrostWire settles with FTC over privacy default settings
2 tags
WebWereld's Lektober
WebWereld | NL | Lektober: maand van het privacylek
Computable | NL | Geen DigiD voor overheden met onveilige ICT
WebWereld | NL | Lekke gemeenten verbannen van DigiD
Nu.nl | NL | Geen DigiD bij gemeente met lekke website
WebWereld | NL | Lektober dwingt Donner tot handelen
AG | NL | Minister Donner trekt touwtjes rond DigiD aan
WebWereld | NL | Politiek witheet door Lektober, wil actie...
2 tags
Facebook to be investigated over privacy concerns...
Internetrecht | Facebook: “Uw persoonsgegevens zijn ons handelsgeheim”
2 tags
U.S. Security and Exchange Commission orders...
The Register | US | Big biz told to reveal hack attacks
HL | US | SEC issues first-ever guidance on disclosure to investors of cybersecurity risks
Inside Privacy | US | SEC’s Division of Corporation Finance issues guidance on disclosing cybersecurity risks
Data Privacy Monitor | US | SEC provides guidance on cybersecurity disclosure obligations
2 tags
German government accused of spying on citizens...
NYT | DE | Germans condemn police use of spyware (via)
1 tag
Vincent Cerf, Google's chief internet evangelist,...
NetworkWorld | Vincent Cerf on Google’s privacy practices and how getting tagged in a multitude of online media is disconcerting (page 2, page 3, via)
1 tag
Doorverkoop gegevens uit KvK-register gestopt
DePers | NL | Doorverkoop KvK-register gestopt (via)
1 tag
Schultz kijkt nader naar organisatie OV-chip
Nu.nl | NL | Schultz kijkt nader naar organisatie ov-chip (via)
AG | NL | Schultz kijkt nader naar organisatie ov-chip
1 tag
Privacy and US law
Inside Privacy | US | Video Privacy Protection Act Consent Bill passes House Committee
Inside Privacy | US | New California law restricts use of credit reports for employment purposes
2 tags
Beveiligingsinbreuken en datalekken (3)
WebWereld | NL | Onafhankelijk onderzoek naar DigiNotar debacle
Computable | NL | Onderzoeksraad gaat overheids-ICT analyseren
1 tag
U.S. Security and Exchange Commission orders...
CNet Privacy Inc. | US | SEC orders disclosure of ‘potential’ security breaches
1 tag
Amazon’s Kindle Fire’s Silk browser sounds privacy...
Ars Technica | US | Congress, wary of Amazon’s Silk browser, demands answers on privacy (via)
1 tag
Beveiligingsinbreuken en datalekken (2)
Nu.nl | NL | Onderzoek naar overheids-ICT na Diginotarhack
Tweakers.net | NL | Tweede Kamer wil ‘ict-brandweer’
WebWereld | NL | Kamer eist digitale brandweer bij ict-rampen
2 tags
U.S. Judge OKs warrantless tracking of suspect's...
The Register | US | Judge OKs warrantless tracking of suspect’s cellphone
1 tag
Facebook to be investigated over privacy concerns...
The Register | US | Facebook accused of violating US wiretap law
2 tags
German government accused of spying on citizens...
Wired Threat Level | DE | Germany sought info about FBI spy tool in 2007
2 tags
Omer Tene and Jules Polonetsky | US | To track or... →
Abstract:
“The past decade has seen a proliferation of online data collection, processing, analysis and storage capacities leading businesses to employ increasingly sophisticated technologies to track and profile individual users. The use of online behavioral tracking for advertising purposes has drawn criticism from journalists, privacy advocates and regulators. Indeed, the behavioral...
2 tags
U.S. Government Accountability Office | US | Data... →
From the Conclusions:
“With a few exceptions, DHS and three component agency policies largely address the key elements and attributes needed to ensure that their datamining systems are effective and provide necessary privacy protections. However, in practice, none of the systems we reviewed received the full set of effectiveness and privacy evaluations that are both desired and required for...
1 tag
Stop Badware | Best practices for reporting... →
From Purpose and Scope:
“This document establishes best practices for reporting badware URLs at each stage in the reporting process: targeting reports, identifying contact information, assembling report contents, and delivering reports. It also specifies procedures for escalating those reports when needed. The Practices are designed to promote reporting useful to report targets and to offer...
1 tag
Nathalie Sonck en Jos de Haan | NL | Kinderen en... →
Uit de Samenvatting:
“Jongeren hebben, in tegenstelling tot wat vaak gedacht wordt, in beperkte mate te maken met internetrisico’s. Van de Nederlandse internetgebruikers van 9 tot en met 16 jaar zegt nog geen kwart online pornografische beelden te hebben gezien en zegt 15% seksuele boodschappen via het internet te hebben ontvangen (sexting). Een derde van de Nederlandse jongeren onderhoudt...
1 tag
Robert Gellman and Pam Dixon | US | Many failures... →
From the Brief Summary:
“Major efforts to create self-regulatory, or voluntary, guidelines in the area of privacy began in 1997. Industry promoted privacy self-regulation at the time as a solution to consumer privacy challenges. This report reviews the leading efforts of the first self-regulatory wave from 1997 to 2007[…] A key finding of this report is that the majority of the...
3 tags
EDPS | EU | [O]n net neutrality, traffic... →
From Focus and structure of the Opinion:
“The EDPS considers that a serious policy debate on net neutrality must address the confidentiality of communications as well as other privacy and data protection implications. This Opinion contributes to this ongoing EU debate. Its goal is threefold:
It flags the relevance of privacy and data protection in the current discussions on net neutrality....
2 tags
G-J. Zwenne | Regulering van IP-adressen (en... →
Uit de Inleiding:
“In deze bijdrage […] bespreek ik waarom het niet alleen onjuist is maar ook ongelukkig en ongewenst om het de reikwijdte van het persoonsgegevensbegrip zover op te rekken dat IP-adressen altijd daaronder vallen. Dat doet er evenwel niet aan af dat het gebruik van IP-adressen onze bewegingsvrijheid op internet kan beperken. In de afsluitende paragraaf doe ik daarom...
2 tags
ENISA | EU | Cooperative models for effective... →
From the Introduction:
“Reliable communications networks and services are critical to both public welfare and economic stability in Europe. Today’s society relies increasingly on these networks and related services. With infrastructures operated by the private sector and governments remaining responsible for the overall policy setting, a high level of network and information security can...
2 tags
German government accused of spying on citizens...
The Register | DE | German states defend use of ‘federal Trojan’
1 tag
Facebook to be investigated over privacy concerns...
Kim Cameron | 24 year old student lights match: Europe versus Facebook
ZDNet Friending Facebook | Facebook: Releasing your personal data reveals our trade secrets (via)
ZDNet Friending Facebook | Facebook: The law reasonably states you can’t have all your data
1 tag
DigiNotar
Remko de Graaf | NL | DigiNotar dwong tot gebruik privé-laptop (WebWereld, opinie)
WebWereld | NL | Notarissen vochten Diginotar-besluit aan bij rechter
Nu.nl | ‘Doden gevallen in Iran door Diginotarhack’
WebWereld | NL | Fiscus zit tot ‘ver in 2012’ vast aan DigiNotar
1 tag
Eind 2012 volgende OV-chip
WebWereld | NL | Volgende OV-chip komt eind 2012
1 tag
Individuals' access to CCTV images
HawkTalk | IE | CCTV images are accessible on subject access (or is it Durant misses the Dublin bus)?
1 tag
US privacy laws also extend to noncitizens (2)
HL | US | Ninth Circuit extends the protections of the ECPA to foreign citizens
