In light of a recent breach of student information at a local school, I sent my comments to editorial desks in the Greater Toronto Area. Here is that press release, in its original format.
Privacy Breach at York Region School Was Entirely Preventable, May Re-occur: Expert The recent breach of the privacy of students showed improper response and failure to follow basic guidelines, but represents an opportunity for schools across the region to improve student protection and demonstrate due care.
Security assessments are always interesting. I know, I do them all the time. You can never guess what you'll find when you're investigating a breach and a federal agency recently found that to be true.
Human Resources and Skills Development Canada lost a USB key with personal information on some 5000 Canadians. As is the case with things you're looking for, those are precisely what you don't manage to find. While investigating the missing memory stick the agency discovered the disappearance of an entire hard drive containing personal information on more than half a million student loan borrowers.
I’m always impressed at the low-tech nature of today’s most brazen hacking attacks and abuses of identity. It’s inevitable that someone will lie to get at your information, then leverage that information to get access to something valuable. In other words, people will lie to get access to your data. So here’s a thought: why not employ the same strategy to combat the problem?
The Canadian Border Services Agency (CBSA) has installed equipment designed to record video and audio in Canadian airports (and possibly other ports of entry). This initiative appears to be based on the 2009 amendment to the Customs Act which allows for the creation of "Customs Controlled Areas" (CCA) to "combat organized crime and internal conspiracies". However, a CCA is only defined as an area where border services officers (BSOs) have the authority to examine goods and to question and search people. So is the bit about audio and video recording just an expensive effort to deter miscreant activity or is it a failure to respect the privacy rights of travelers that will only result in lengthy court challenges and a general distrust of Ottawa's future initiatives?
LinkedIn is "unable to confirm <this week's> breach" involving millions of user passwords but agrees that passwords belonging to "some" of their members may have been compromised. While this kind of evasiveness will not earn the publicly traded firm any sympathy, what LinkedIn fails to realize is that this breach is the ideal situation for them and comes at the right time, allowing them to gain publicity at a time when their competitors' stock is battered by regular shareholder expectations, giving them the opportunity to improve their aging code and security controls while other high profile breaches take their turn in the media spotlight.
Security assessments are always interesting. I know, I do them all the time. You can never guess what you'll find when you're investigating a breach a...
More shocking than the fact that yet another teenager has opted to take her own life as a direct result of (cyber)bullying is the public response to t...
The Canadian Border Services Agency (CBSA) has installed equipment designed to record video and audio in Canadian airports (and possibly other ports o...
What? You didn't know? Well now you do. Alan Turing had/was/exhibited one of the greatest minds in computer science. To him we owe not just artificial...