Category Archives: Security

Red Lights and Bicycles

Bicycles rarely sit and stare at a red light when there is no traffic around. Some states apparently think decriminalizing this behavior is a good idea:

An idea is gaining momentum to allow bicyclists to pedal through stop signs, without stopping.

Bicyclists claim that it can be tough to stop a bike at a red light or a stop sign, only to start pedaling all over again.

The state of Idaho changed its law, and now California is considering the same idea. The vehicle code would be modified to allow what’s known as a “stop and roll.” Bicyclists could treat stop signs as yield signs instead, and red lights as stop signs.

Makes sense to me, but I am a long-time avid cyclist who sees no point is standing around and waiting for a light if there is no traffic. An even better solution would to dedicate a full lane with overpasses for cyclists that allow them to avoid mingling with the cage-drivers altogether. Since that probably will never happen in America (I first saw a system like this in the early 1980s in Stockholm) the stop and roll sounds like a suitable alternative.

The article has a funny “dumb-guy” quote from someone in opposition to the new law:

I just don’t think that should work. I mean, they should obey traffic laws like the rest of us

Um, if they change the law then cyclists would still be obeying when they stop and roll — it no longer would be considered against the law.

Here’s another quality comment from the same guy:

I can just see lawsuits if a bicyclist does that and then gets hit by a car and who’s going to be at fault?

Is this really any different than today? I mean you have traffic laws, and if there is a collision then the parties involved, etc. make a statement and police do an investigation. What would change? Nothing. So why would there be lawsuits from this any more than from current traffic laws? There would not be, but I think some people just throw out the word “lawsuit” to chill conversation. It reminds me of people saying “if you do this then the boogeyman will get you” or maybe “don’t resist, this is for your own safety”.

Update to Best Western story

I wrote about the Best Western case yesterday, but something in today’s news caught my eye. Newsday.com reports this nugget of information:

The company said it purges guests’ credit card and other data from its systems within seven days of their checkout.

Seven days? They are prohibited by PCI from storing sensitive data after authorization, so what credit card data are they referring to here?

Was it just the PAN? Although seven days might seem short compared with a year of data, card information is meant to be masked, hashed or truncated immediately. Sensitive data has to be securely wiped as soon as a card has been authorized. How do they explain the reason for a seven day procedure that leaves card data exposed, since they say they are PCI-compliant?

Non-new twists in Information Security

How strange that bankinfosecurity let this get past its editors:

“Whitelisting” is a new twist on information security. Instead of trying to find a software solution that keeps all of the potential bad guys out of your systems, whitelisting allows you to establish a protection layer that grants access to only your finite list of good guys – individuals or applications.

New twist? Firewalls are the very definition of whitelisting and have been around since the dawn of information security theory. Although I occasionally find a non-security administrator trying to use blacklisting to segment a network, security professionals always start with whitelisting where possible.

46mpg 4WD Toyota RAV4

I seem to be helping a lot of friends find new vehicles and I just noticed a D-4D Diesel Engine for the RAV4:

Urban mpg 31.7

Extra-Urban mpg 46.3

Combined mpg 39.8

4WD, compact and high mpg. Sounds ideal for someone I am helping right now. Too bad they would have to go somewhere else in the world to buy one.

Meanwhile, back in America people wax poetic about new cars pushing 26 mpg. Please, forget anything under 35 mpg. A model T in the 1920s could get high 20s in mileage. GM is sorely mistaken if it thinks 26 mpg is newsworthy while other car companies are releasing full-size vehicles with numbers closer to 50 and even 60.