Bruce Schneier

Schneier demonstrates poor airport security to The Atlantic

I just love this story!

Not at all certain I would dare to try it myself. Reading how Schneier uses fake boarding passes, and brings 24oz of not identified liquid through the airport security is like reading a Ken Follet novel!

And you all know what I think of airport security!

CCTV - the secret

Bruce offers a well worth read on CCTV today.

Corporate spying


Bruce Schneier covers corporate spying today - you know, when your employer or your shop uses spying methodology to learn to know you better. I only wish this was new - government trained security specialists have crossed over to private business since the dawn of time.

Since you do not have to work for the government to have a license to kill - it is enough to be a hired gun - and the number of specialists increases, it is only natural that some accepts tempting offers from the corporate world.

What is more - there is nothing strange in a company - big or small; to protect itself. The challenge is to be able to draw the line - where do you stop? Is it OK to have Wall-Mart or HP to install wiretaps on you (or someone else)? If not - when would it be OK? If you think it is just fine, when would it NOT be OK anymore?

We know that most companies today use computers to track everything related to it's production, logistics and sales. Why is it so chocking to read that they are using computers to analyze and track that information too? After all, Business Intelligent and Data warehousing is nothing new under the sky.

From the article:

"If you try to buy more than three cell phones at one time, it will be tracked," he (David Harrison) reportedly told the audience.

The fact that they let you know some of their thresholds may raise a few eyebrows, but again - if you are a smart criminal, you would not use a clean ID to buy your batch of prepaid phones, now would you? Most likely you would use someone else's CC?

When your company is large enough, you start spending money on security. And security in this sense means you put into action counter-measures and information gathering. When your company is larger than some countries, it would be quite expected that you use some of the same measures to protect your assets.

I think it is unavoidable. We keep introducing tools that facilitate the collection, storing and analyzing of data. Obviously some will collect and analyze more data than others. Surely this will continue. And most importantly, most people do not care.


Farewell Privacy, says Donald Kerr

Wow, this is crazy. This deputy director must be a lunatic. We are moving fast forward into a society where multicorporate companies safeguard my privacy data.

Because I should no longer expect anonymity.

All my personal secrets will be revealed and kept at safe storage at the local governmental office, and (notice - not OR) at any corporation that believes they need to cater my privacy.

"Privacy no longer can mean anonymity, says Donald Kerr, the principal deputy director of national intelligence. Instead, it should mean that government and businesses properly safeguard people's private communications and financial information."

And we all know just how safe corporations keeps my secrets. Like the TJX. And just about any other corporation out there.

I do not like it. I still want to keep my door closed when I go to the toilet. You see, I expect anonymity - even if you all know what I am doing in there. And I would like things to continue that way. So no thank you, Mr. Kerr, I will not leave my anonymity so you can control my privacy.

Thanks to Bruce who brought this news to my attention.

Security on letterhead

Bruce Schneier has a very nice post today which explains one of the challenges of the ever increasing speed of adopting new technology. 

This is a real challenge - behavior is one of the hardest things to change.

 

Navigation

Recent comments

Recent blog posts


The blogger is Kai Roer, a European Information security professional.

View Kai Roer's profile on LinkedIn

Lijit

Resources

Archive

Explore Security Bloggers Network (a FeedBurner Network)