Category Archives: Security

OC Register on Prop 8

The OCRegister.com has a nicely written opinion piece on California’s Proposition 8:

The state Supreme Court ruled that the right to marry is a fundamental individual right that must be provided equally to all people desiring to marry. Allowing same-sex couples to share in this right does not denigrate or degrade the marriages of the vast majority of people who enter into the traditional man-woman form of marriage. It strikes us as simple fairness.

[…]

In an ideal world, the state would have little or no role in defining or regulating so intimate a relationship as marriage. However, the state has inserted itself into all too many aspects of our private lives. Given that it has done so, it is only fair that it afford equal protection to all who choose to make loving lifelong commitments to one another. We recommend a “no” vote on Prop. 8.

They raise a good point. Interesting to see such a notoriously “conservative” community paper take a stand for progress. Given that, why should a regulatory body be asked to deny equal-protection by constitution? What harm, or risk, is being addressed by Proposition 8? The Proposition seems like a colossal waste of time and energy, to me, especially compared with more pressing issues of real economic and social consequence like privacy, health care and education.

Legal protection of natural-entities

Just like corporations have come to assume rights like people under law, The Guardian reports Ecuadorians are facing a vote on whether to assign similar rights to natural-entities:

The South American republic of Ecuador will next week consider what many countries in the world would say is unthinkable. People will be asked to vote on Sunday on a new constitution that would give Ecuador’s tropical forests, islands, rivers and air similar legal rights to those normally granted to humans. If they vote yes – and polls show that 56% are for and only 23% are against – then an already approved bill of rights for nature will be introduced, and new laws will change the legal status of nature from being simply property to being a right-bearing entity.

Note, legal rights are granted to corporations as well and not just granted to humans. This appears to me the foundation for this action. Apparently the impact of pollution by multi-national corporations is such that Ecuador is looking for a way to offset and recoup the national security budget.

The Tragedy of the Well-Deserved

This is the tragic story of Thomas and Jackie Hawks:

Fresh from two years of plying the waters of the Sea of Cortez, the Hawkses were believed to have been killed Nov. 15, 2004, after being tricked into a test sail of their 55-foot yacht, the Well-Deserved. They had put the boat up for sale because they wanted to move back to Arizona to be closer to their newborn grandchild.

[…]

Machain testified that he helped Deleon cover the couple’s eyes and mouths with duct tape as Jackie Hawks cried. The Hawkses were taken up to the main cabin one at a time to sign and fingerprint title transfer documents for the boat, he testified.

Jackie Hawks was told that if she cooperated she would be released, Machain recalled.

[…]

Deleon lifted the anchor and threw it overboard as Kennedy pushed the couple into the water, Machain said.

Deleon then turned the yacht around and the men collected cash, jewelry and other valuables, Machain said. Kennedy cracked open a beer, grabbed a fishing rod and fished all the way back to Newport Harbor, he said.

So cruel, so sad. Pirates in America.

US Privacy Bill Battles

Just in case anyone is curious, here’s some background on the current battle in America over regulating privacy and identity information:

Schwarzenegger just vetoed AB 1656, the Consumer Data Protection Act. The bill passed by 34-3 in the Senate, and 74-1 in the Assembly. Here are his main arguments from the veto statement:

  1. notification requirement too broad, which will cost business
  2. too static, best practices change
  3. distraction/confusing with more comprehensive industry standards
  4. penalty laws already exist and should be modified if necessary, instead of replaced

Basically he said (again) the Payment Card Industry is ok self-regulating:

In a statement explaining his reasons for refusing to sign the bill last fall, Schwarzenegger in fact appeared to agree with such arguments. The bill – which was known as AB 779 in its previous incarnation – “attempts to legislate in an area where the marketplace has already assigned responsibilities and liabilities that provide for the protection of consumers,” Schwarzenegger said.

The point of the bill was to give the public more pressure to coax payment card entities into compliance, especially retailers and merchants, but merchants argued it was too much in the favor of financial entities (true, and the reason consumer advocates liked it).

Incidentally, Avivah Litan at Gartner is completely 100% wrong on this and her quotes in the above article are awful.

It’s also a bad idea for states to legislate data security issues in the first place, according to Litan. “Governments should stay out of the security business,” she said.

No, no, no. I cringe when I read her analysis, and am happy to explain how/why, but I’ll leave it alone for now.

The Governor also vetoed SB 364, “Personal information: privacy” because “this bill could lead consumers to believe that all data breaches result in identity theft. Further, this would place an additional unnecessary cost on businesses without a corresponding consumer benefit”

On the other hand, following disclosure that Schwarzenegger and his wife had their personal health records exposed in a UCLA breach, the Governor signed new legislation issuing fines:

“Repeated violations of patient confidentiality are potentially harmful to Californians, which is why financial penalties are needed to ensure employees and facilities do not breach confidential medical information,” Schwarzenegger said in a statement.Assemblyman Dave Jones (D-Sacramento), the author of one of the bills, AB 211, emphasized that they protect all patients, not just famous ones. “Your private medical information shouldn’t be flapping in the breeze like an open hospital gown,” he said. The other measure, SB 541, was written by Sen. Elaine Alquist (D-Santa Clara).

Similarly, President Bush just signed the Identity Theft Enforcement and Restitution Act of 2008 into law, which allows courts to prosecute across state lines, lowers the bar for damages that can be used to bring charges (used to be $5K minimum), and aims restitution money more toward victims.

So in conclusion, the California Governor and American President have agreed to stronger penalties and fines in some cases but not others and they remain weak on detection and prevention guidance for public safety.