Category Archives: Security

Identities and Cemeteries

The AP calls it a “Grave Error“. Apparently two men are being buried in a military cemetery with the same name and same social security number, one a popular family man and the other alone and homeless:

“I’ve got 200,000 people buried here, but I’ve never seen anything like this,” Calverton director Michael Picerno said. “Ninety-nine percent of the time, the family has all the information, all the documentation, so these things never happen.”

Well, 99% of 200,000 is 198,000, so that leaves 2,000 people buried without all the documentation. Seems like a sizeable number.

Officials are exploring several scenarios in trying to solve the mystery.

One is identity theft — the man who died in 2003 could have simply stolen Willie Hayes’ personal information at some point and went to his grave as an impostor.

I guess it is unlikely he stole it after he went to his grave.

Another is that the man in the grave really was named Willie Hayes — and perhaps even a veteran — but his Social Security number and personal information somehow got mixed up with those of the other Willie Hayes.

Somehow? What kind of scenario includes “somehow” as the root-cause?

I have not looked into it but I suppose there is no advantage to identity theft in death except for in the military cemeteries.

Nobel Green Prize, Culture and Security

Interesting study of how security can often be about incentives (the carrot) as much as the penalties (stick):

A Zambian man has won a prestigious Goldman Prize for helping to curb widespread elephant poaching by setting up economic projects for villagers.

Hammerskjoeld Simwinga wins $125,000 for the award, sometimes called the Nobel prize for the environment.

He helped set up bee-keeping and fish-farming projects for people in the North Luangwa valley, where elephant numbers had shown a dramatic fall.

Falling elephants? But seriously, there are some neat cultural details to the story:

Over 70% of loans are made to women and Mr Simwinga says they are the backbone of the programme.

“We deliberately pushed our resources to the womenfolk in the community because we knew that working with the women was the strongest part of persuasion,” he told Reuters news agency.

Local communities were given a grinding mill to earn money but this was withdrawn if elephants were poached in the area.

Brilliant security solutions customized to local conditions. It gives me hope that someone might be able to save others under threat of attack.

US-CERT EBK

US-CERT has released a draft of the “security essential body of knowledge” (EBK).

IT Security Competency Areas (Definitions and Functions)
2.1 Data Security
2.2 Digital Forensics
2.3 Enterprise Continuity
2.4 Incident Management
2.5 IT Security Training and Awareness
2.6 IT Systems Operations and Maintenance
2.7 Network Security and Telecommunications
2.8 Personnel Security
2.9 Physical and Environmental Security
2.10 Procurement
2.11 Regulatory and Standards Compliance
2.12 Risk Management
2.13 Strategic Management
2.14 System and Application Security

Fourteen? Maybe they wanted to differentiate from all the other guides that seem to revolve around a dozen. The authors are requesting comments now.

Another VIP RFID story

I find VIP RFID tales annoying. I am not sure why. Maybe it is because the concept of VIP lounges in loud dance clubs appeals to me as much as the restroom at a fast food restaurant.

I have been invited into them a few times, for various reasons, but something about the “free booze and food” or “free people” does not make me feel like I have really achieved anything significant enough to give up something meaningful in return. I mean would I pay a few dollars for a beer instead of being tagged as a VIP and getting the beer for free?

In that context, a BBC reporter had a chip implanted as part of a “story” on Barcelona clubbing and using a chip to pay for drinks.

The idea of having my very own microchip implanted in my body appealed. I have always been an early adopter, so why not.

Why not? Why not? This guy is a “science producer” and he can not think of any risks from radio microchips that carry financial, let alone personal, information?

The night club offers its VIP clients the opportunity to have a syringe-injected microchip implanted in their upper arms that not only gives them special access to VIP lounges, but also acts as a debit account from which they can pay for drinks.

This sort of thing is handy for a beach club where bikinis and board shorts are the uniform and carrying a wallet or purse is really not practical.

Right, because you are really a VIP if no one can recognize you without your implants. I think he should have called himself a Very Unimportant Person with a Chip (VUPC).

The story’s perspective really started to get under my skin:

With a waiver in his hand [the owner of the club] Conrad asked me to sign my life away, confirming that if I wanted the chip removed it was my responsibility.

That seems worth it, no? They get to debit money from you without any transparency and you get…drinks.

The chip responds to a signal when a scanner is held near it and supplies its own unique ID number.

The number can then be linked to a database that is linked to other data, at the Baja beach club it make charges to a customers account.

If I want to leave the club then I can have it surgically removed – a pretty simple procedure similar to having it put in.

Sounds so painless. I can think of nothing less VIP-like than needing implants linked to a database, linked to other data, that charges an account. Then again, as I said, I have never really found the VIP clubbing concept appealing. Whether whisked in on a red carpet or allowed to sneak in through the back door, I would never go with an implant chip for VIP access especially if it required waiving all rights.

The real pain was the sore head the following day after a night on an open bar tab.

Uh, yeah. I think he means the real point of the story…