The Globe and Mail: German high court says telecom, e-mail data cannot be retained
“Nearly 35,000 Germans had appealed to the court to overturn the law, which stems from a 2006 European Union anti-terrorism directive requiring telecommunications companies to retain phone data and Internet logs for a minimum of six months in case they are needed for criminal investigations.”
Wired: Cyberwar Hype Intended to Destroy the Open Internet
“He’s talking about changing the internet to make everything anyone does on the net traceable and geo-located so the National Security Administration can pinpoint users and their computers for retaliation if the U.S. government doesn’t like what’s written in an e-mail, what search terms were used, what movies were downloaded. Or the tech could be useful if a computer got hijacked without your knowledge and used as part of a botnet.”
Krebs on Security: Talking Bots with Japan’s ‘Cyber Clean Center’
“Participating ISPs that have customers with botted PCs may send those users an e-mail — and in some cases a letter via postal mail — instructing them to visit the CCC’s Web site, and download and run a cleanup tool….”
EDRI: French Court says an IP address is not enough for a user's identification
“The Paris Appeal Court has recently ruled that an IP address does not allow the identification of an Internet user and therefore needs no prior authorization from CNIL (National Commission for Information Technologies and Civil Liberties) to be collected.”
New York Times: Rethinking the Protection of Online Privacy
“…policy and privacy experts agree that the relentless rise of Internet data harvesting has overrun the old approach of using lengthy written notices to safeguard privacy.
These statements are rarely read, are often confusing and can’t hope to capture the complexity of modern data-handling practices. As a result, experts say, consumers typically have little meaningful choice about the online use of their personal information — whether their birth dates, addresses, credit card numbers or Web-browsing habits.”
nCircle: How does a consumer report PCI non-compliance?
“As an attempt at a good-hearted gesture, he gave me some free breadsticks along with the printed email containing my entire credit card and address information.”
Messaging News: Security and Collaboration Systems: Let's Not Forget the Simpler Actions
“…what happens if we make perfect investments in securing our collaboration systems, only to have end-users lose the devices they use to access those systems? With the proliferation of laptop- and smartphone-toting end-users, we have the makings of a disaster, if these devices are lost or compromised. What can we do to minimize these risks?”
techPresident: "Do Not Ask": Lessig's Plan to End Fundraising Emails
“Larry Lessig, ever creative, is trying out what does seem to be a new one as far as the field of email techniques goes. Lessig is giving people on his Fix Congress First email list a chance to opt out — forever and ever — from fundraising emails sent from his organization…. You can still stay opted in for…informational emails.”
Krebs on Security: Microsoft Ambushes Waledac Botnet, Shutters Whistleblower Site
“The software giant orchestrated a legal sneak attack against the Web servers controlling the Waledac botnet, a major distributor of junk e-mail. In an unrelated and more controversial move, Redmond convinced an ISP to shutter a popular whistleblower Web site for hosting a Microsoft surveillance compliance document.”
Zero Day: 10 things you didn't know about the Koobface gang
“Some are funny, others are disturbing, the majority indicate a cybercrime ecosystem that actively keeps itself up-to-date with the very latest research profiling it, by reading the blogs of security vendors and researchers.”
Freedom to Tinker: Web Certification Fail: Bad Assumptions Lead to Bad Technology
“When you connect to a web site, and your browser displays an https URL and a happy lock or key icon indicating a secure connection, the odds that you’re connecting to an impostor site, despite your browser’s best efforts, are uncomfortably high. …Today I want to explore the root cause: today’s system is based on wildly unrealistic assumptions about organizations and trust.”
Krebs on Security: N.Y. Firm Faces Bankruptcy from $164,000 E-Banking Loss
“A New York marketing firm that as recently as two weeks ago was preparing to be acquired now is facing bankruptcy from a computer virus infection that cost the company more than $164,000.”
UX Magazine: Streams of Content, Limited Attention
“…now that we’re seeing Web 2.0 go mainstream, we’re seeing all sorts of folks get into the game. What they’re doing often looks different than what early adopters were doing. And the business folks are all trying to turn the Internet into a new broadcast channel (don’t worry, they’re failing). But we need to talk about these shifts so we can talk about what innovation needs to happen.
If folks are going to try to get in-flow with information, we need to understand how information flows differently today. Let me highlight four challenges, points where technological hope and reality collide.”
(This is not, actually, different from email.)



