Republican Presidents and Jobs
http://nyti.ms/NfQshn
Labels: Outrageous, Policy, Stimulating
Items of interest in computer and network security, privacy, voting, public policy, etc., plus a few that just tickled my fancy or provoked my outrage.
Labels: Outrageous, Policy, Stimulating

Labels: Outrageous, Policy, Stimulating
Labels: Outrageous, Privacy, Risks
Election officials in a small county in California discovered by chance last week that the tabulation software they used to tally votes in this year's general election dropped 197 paper ballots from the totals at one precinct. The system's audit log also appears to have deleted any sign that the ballots had ever been recorded.Yes, the vendor was Premier Election Solutions (formerly known as Diebold), and yes, it was (at least) a software bug that persisted over numerous versions of their system.
Labels: EVoting, Outrageous, Policy, Risks
In June, 2005, Bernanke was sworn in at the Eisenhower Executive Office Building. One of his first tasks was to deliver a monthly economics briefing to the President and the Vice-President. After he and Hubbard sat down in the Oval Office, President Bush noticed that Bernanke was wearing light-tan socks under his dark suit. “Where did you get those socks, Ben?” he asked. “They don’t match.” Bernanke didn’t falter. “I bought them at the Gap—three pairs for seven dollars,” he replied. During the briefing, which lasted about forty-five minutes, the President mentioned the socks several times.If you can fully occupy your mind with the color of officials' socks, what need to clutter it up with information about the nation's economy?
The following month, Hubbard’s deputy, Keith Hennessey, suggested that the entire economics team wear tan socks to the briefing. Hubbard agreed to call Vice-President Cheney and ask him to wear tan socks, too. “So, a little later, we all go into the Oval Office, and we all show up in tan socks,” Hubbard recalled. “The President looks at us and sees we are all wearing tan socks, and he says in a cool voice, ‘Oh, very, very funny.’ He turns to the Vice-President and says, ‘Mr. Vice-President, what do you think of these guys in their tan socks?’ Then the Vice-President shows him that he’s wearing them, too. The President broke up.”
Labels: Amusing, Assorted, Outrageous, Policy
Labels: Assorted, Outrageous, Policy, Risks, Stimulating
Presumably the reason that Java, Reader, and Flash are distributed free is that they want people to use them. You'd think they'd make it at least as convenient to download them as software that is for sale, wouldn't you?
And presumably the reason that Adobe has a website is that they want people to visit it, not avoid it like the plague because it will gobble their CPU cycles and incapacitate their browswers?
Of course, it's entirely possible that I've broken one of the 60,000 settings in my Windows Registry in some subtle way, but who or what can tell me which one, and how to fix it? I think I'm malware-free, thanks to the combined efforts of Norton, Spybot S&D, the corporate firewalls and filters, and my own caution about clicking on links in emails, but who knows? Maybe I've shot myself in the foot.
But in some sense, it scarcely matters what the root fault was: I'm just as upset with all the companies involved (for not making it possible to find and fix the problem) as I am when the airlines send my baggage to another continent without showing much enthusiasm for finding it.
Alienating your customers is almost never a sound business strategy.
PS Websites in other domains still seem to work normally. Without exhaustive testing, there's no way to tell if Adobe.com is the only domain exhibiting this behavior.
Labels: Assorted, Outrageous, Risks
Last June, the Department of Homeland Security leaked a video documenting a disturbing experiment. Using only digital means, researchers hacked into a power plant's generator and caused it to cough and shake before shutting down in a cloud of black smoke.Meanwhile, the states are chafing under pressure from the federal government to do more to protect their roads from improvised explosive devices (IEDs)...
That clip, demonstrating what has since become known as the Aurora vulnerability, served as a wake-up call for regulators, highlighting the need to guard against cyber-security threats to critical infrastructure like power plants and the telecom system. But at a hearing Wednesday, members of the House Committee on Homeland Security warned that those regulatory bodies aren't moving fast enough.
"I think we could search far and wide and not find a more disorganized response to a national security issue of this import," said Rep. James Langevin (D-R.I.), chairman of the Subcommittee on Emerging Threats, Cybersecurity and Science and Technology...
The subcommittee hearing also highlighted a new example: a report by the Government Accounting Office released Wednesday reveals a litany of cyber-security vulnerabilities in the systems of Tennessee Valley Authority, the nation's largest public power company. The GAO report said that that TVA had failed to implement simple security measures like updated firewall and anti-virus software. Many access points to the company's network lacked password protection, and some insecure systems connected to TVA's systems for controlling power generation, GAO director of information security Greg Wilshusen told the subcommittee.
Labels: Outrageous, Policy, Risks, Security
Just imagine if one day in the near future the FBI comes to your enterprise with warrants that allow them to seize and remove any computer-related equipment, utility bills, telephone bills, any addressed correspondence sent through the U.S. mail, video gear, camera equipment, checkbooks, bank statements and credit card statements. The first question you'd ask is, "Who has done what?"
You're going to be presume your CEO has been involved in some outrageous stock manipulation, or maybe your CFO has been cooking the books. But no, the agent in charge says: "Someone here clicked on a Web link, and we're going to find out who did it."
A link?! Clicking on a link can now be a federal offense?! Was it a link to the truth about JFK's assassination (which we all know the CIA was responsible for ... or was it the Moonies?). Was the link going to launch an ICBM at the Kremlin? Nope, it was a link to a nonexistent cache of kiddie porn that was created specifically by the FBI to attract pedophiles.
As is often said at moments like these, I am not making this up; this is exactly what happened to a doctoral student at Temple University who was also a history professor at La Salle University named Roderick Vosburgh...
According to federal law, attempts to download child porn, whether successful or not, can result in prison sentences of up to 10 years, and a court found Vosburgh guilty of just that, "attempting" to follow a link, a link set up specially by the FBI to trap pedophiles...
The fact that the action might not have been done by you personally is, apparently, not an issue...
The second issue concerns browser add-ons that attempt to pre-cache the content of links on a page. These add-ons are to improve perceived performance, but imagine that you run a Web search and wind up on a page that links to one of these FBI honeypots: Your browser will access the link and, unless you are masking what you do through something like the Tor network, the Feds will get your IP address. Before you know what's going on, there will be a knock on your door, you'll be hurled to the ground, cuffed, Mirandized, and all of your computer gear, financial records and leftover Chinese food will be en route to the local FBI office.
But what if an employee's browser pre-caches the contents of one of these FBI links, or the employee actually clicks on it? Can you imagine the chaos and insanity that would result from the FBI paying your company a visit? Work would grind to a halt, PCs and other gear would be impounded, records taken and your business would be dead in the water.
Labels: Outrageous, Policy, Risks
Labels: EVoting, Outrageous, Policy, Risks, Security
New technical details about its Webwise system have since emerged, and it’s not just privacy that now seems to be at risk. The report exposes a system that actively degrades user experience and alters the interaction with content providers. Even more importantly, the Webwise system is a clear violation of the sacred end-to-end principle that guides the core architectural design of the Internet.This is a deal-breaker. If Comcast starts providing this "service," I will be moving to a new ISP (and a new video provider).
Labels: Outrageous, Privacy, Risks
Labels: Outrageous, Privacy, Risks, Security
Labels: Outrageous, Policy, Risks
Labels: Outrageous, Privacy, Risks, Security
"Cyberwarfare is already here.... It's one of our major challenges," said Defense Deputy Secretary Gordon England on Monday at the annual National Community Service and Legislative Conference of the Veterans of Foreign Wars.
"I think cyberattacks are probably analogous to the first time, way back when people had bows and arrows and spears," he said. "And somebody showed up with gunpowder and everybody said, 'Wow. What was that?'"
England made his comments the same day that the Pentagon released a report saying that the 2007 cyberattacks against its networks and those operated by other governments around the world "appear" to come from China.
During a Senate Armed Services Committee hearing last week, Sen. John Thune, D-S.D., asked National Intelligence Director Michael McConnell if the United States was prepared to deal with threats against military and civil networks and information systems. "We're not prepared to deal with it," said McConnell, identifying both China and Russia as adversaries who are attempting to penetrate U.S. information systems.
Army Lt. Gen. Michael Maples, director of the Defense Intelligence Agency, agreed with McConnell and told the panel that a key threat facing this country is the "sophisticated ability of select nations and nonstate groups to exploit and perhaps target for attack our computer networks."
Labels: Outrageous, Policy, Risks, Security
Managing an $11 billion initiative is a daunting task and unforeseen problems are inevitable. Nonetheless, the GAO, going back to January, 2005, repeatedly identified significant procurement, management, and operational risks associated with this project. For reasons unknown, the Census Bureau chose not to follow these recommendations.An accurate census in 2010 is of enormous importance, affecting (among other things) the allocation of Congressional seats and funds in many federal programs for the next decade.
Labels: Outrageous, Risks
Labels: Outrageous, Policy, Privacy, Risks, Security
Three major UK ISPs apparently are in advanced talks with a company called Phorm, intending to let Phorm monitor all unsecured web traffic to and from their users. The expressed intent is to offer an "improved browsing experience" through better targeted web advertising, and anti-phishing protection - thereby "improving" one's internet security. One, BT, has already trialed the system...Edited on 4/9/08 to add: Phorm is also seeking deals with US ISPs. For more technical detail on what Phorm is doing and why it is pernicious, see "Phorm's All-seeing Parasite Cookie."
Phorm claim the data is summarized and anonymized; regular readers of RISKS will I'm sure be aware that true anonymization is exceedingly difficult--and in fact this scheme would give ready access to identities should anyone take the trouble. Quite apart from being a breach of trust by the ISPs involved, it appears to drive a coach, horses and a whole army through protection offered by assorted UK legislation, including the Data Protection Act, Computer Misuse Act, Regulation of Regulatory Powers Act, etc, etc. It will if nothing else provide a central point for cracking to obtain information about these ISPs' users.
Labels: Outrageous, Policy, Privacy