Category Archives: Security

That’s what people do when they see a tourist attraction

Correction, that’s what people used to do. It’s ok to look, just don’t record images as it might be interpreted as intent to cause harm. Information has literally become power. The Register has the scoop:

The FBI said Monday that it had no information to indicate that the men in custody had any ties to terrorist organisations, the Associated Press reports. Nevertheless, the local police and prosecutors seem persuaded that they’ve foiled a dastardly plot, and appear prepared, for now, to go through with the prosecutions.

Additionally, photos of the five-mile long Mackinac Bridge were found in a digital camera belonging to one of the suspects, prompting local authorities to imagine it was a target.

A lawyer defending the men told the AP that the photos were tourist snapshots taken while the men were stuck in traffic. “That’s what people do when they see a tourist attraction: they take pictures,” the wire service quotes him as saying.

Microsoft drops price, paints target

Only a few days after the AusCERT announced that the top antivirus firms are the ones least able to find viruses, Microsoft has catapulted itself into the #2 sales position with…wait for it…agressive pricing. Selling for $19.99 instead of $49.99/year seems to make more people buy your software. Who would have thought? Microsoft was quoted saying:

“We see our comprehensive ‘PC Care’ approach as a new and important direction for consumer PC services and are encouraged to see that more consumers are taking steps to effectively protect and maintain their PCs,” Samantha McManus, a business strategy manager at Microsoft, said in an e-mailed statement.

Yes, it is good to see that they can sell more units at half-price the price of their competitor’s product, but do we believe they are selling better units? Can someone find anything to show that “effectively protect and maintain” translates to a reasonable boost in user safety with One Care versus other products (e.g. fair competition on quality/price) or is this just about distribution targets and sales numbers for Microsoft (e.g. price alone)? In other words, will they consider themselves most successful when they have reached the #1 antivirus product by number of users even though they are found to be the least effective against virus infections? Something about the AusCERT warning tells me the whole AV “industry-leader” ranking system needs an overhaul…

AOL apologizes, faces lawsuit

The Register has noted that AOL apologized for exposing the search data from their users:

“This was a screw-up, and we’re angry and upset about it,” AOL spokesman Andrew Weinstein said, AP reports. “It was an innocent enough attempt to reach out to the academic community with new research tools, but it was obviously not appropriately vetted, and if it had been, it would have been stopped in an instant.”

That is close to what I had expected would come out of this, as I mentioned before. But the apology is unlikely to cool the jets of the EFF, which has filed a complaint with the FTC. Perhaps most embarassing to AOL is the fact that the EFF is accusing them of violating their stated Privacy Policy. They are also arguing that AOL should not be allowed to store more than 14 days worth of search records on users. And that makes me wonder if AOL might eventually offer an interface like Scroogle for those who want to opt-out of AOL’s analytics/tracking.

TSA considers more profiling

In an article with the sensationalist title “Report: X-rays don’t detect explosives” released by the Associated Press, I found some encouraging nuggets of information about the latest TSA plans for increased security:

Among the changes the TSA is considering, according to TSA spokeswoman Ellen Howe:

_Hire more people to take baggage-handling responsibilities from screeners so the screeners can focus on security responsibilities.

_Have screeners, instead of contract employees hired by airlines, check IDs and boarding passes.

_Expand a program that trains screeners to look for unusual behavior in passengers that might indicate malicious intent. Called SPOT — Screening Passengers by Observation Technique — it’s used in at least 12 airports, Howe said.

Seems like an excellent plan to me, but will they be able to pull it off?

Those changes may require approval by Congress and agreement with airports and the airline industry, which might have to bear some of the cost, Howe said.

The airlines might go along with the plan, an industry spokesman said.

“We favor this proposal provided it doesn’t add costs to the carriers,” said David Castelveter, spokesman for the Air Transport Association.

Odd. One would think that the Air Transport Association would see that overall costs go down, and ridership goes up, if you have a more effective profiling and screening process. Makes you wonder how much of the security policy is determined by lobbyists and politicians with conflicting motives (e.g. want to sell more x-ray machines, or just believe that technology is the answer).

This reminds me of a conversation I overheard the other day: A young woman said “We get a box of fresh produce delivered from local farmers to our doorstep now. It’s really great, don’t you think?” An elderly woman asked in response “Is it organic?” The young woman started to say “Yes, it…” when the elderly woman cut her off and said “A worm in every bite, if that’s what you mean by great. I’d rather have pesticides any day than those worms you find in organic food.” I couldn’t help but wonder if the elderly woman might be an elected official backed by the pesticide industry, since who else could believe that organic food has a worm in every bite and all pesticides are good for you? Maybe she hasn’t seen the EPA site with sections like “Ways to reduce risks to children from pesticides”, or comes from a time before childrens’ health was thought to be at risk.