Adriana Lukas's Library tagged identity → View Popular, Search in Google

Actually, I don't want a social network, I want ways to control and manage my stuff. Social may or may not be part of it, but it can't be the default, otherwise whichever platform is hosting all this depends on pushing the social aspect of their services. Facebook anyone? The 'aspects' stuff is cool, but it's still software developer's solution to the problem...

mashable.com/...diaspora-preview

- Preview

facebook diaspora privacy social open distributed aspects identity friends socialnetworks

Nov

2010

Open ID Is A Nightmare

detailed and interesting account of one business' OpenID woes

blog.wekeroad.com/...en-id-is-a-party-that-happened

- Preview

openID identity login nightmare business developers customers

Nov

2010

Identity and The Independent Web - John Battelle's Searchblog

battellemedia.com/...ntity_and_the_independent_web_

- Preview

identity web dependent independent search battelle privacy

Jan

2010

Why Facebook is Wrong: Privacy Is Still Important

necessary article about why privacy matters. struck by how privacy is so often associated with the 'vulnerable' people who have a good case to 'hide' something. That can't be right. It is integral to identity. just like without freedom there is no morality, without privacy there is no identity.

www.readwriteweb.com/...ook_is_wrong_about_privacy.php

- Preview

privacy facebook identity secret

Peterson argues that the idea that anything published ought to be understood as intended for public distribution is an antiquated understanding from the era when publishing was expensive and required a lot of effort. The opposite is true today, it's free and easy to publish - so information at different levels of appropriateness for public eyes is being published. Why not support that?
We expect our communication to go on in an appropriate context (no drinking in church or praying in the bar) and we expect to understand how our communication will be distributed.
1 more annotation(s)...
- There is a long list of people who clearly do, though, including: people who've escaped abusive relationships, people with marginalized religious or sexual preferences, people who fear losing their jobs or who've been pushed around by bullies throughout their lives. That list adds up to a very large portion of the world, in fact.
  - Adriana Lukas on 2010-01-13
    why is privacy so often associated with the 'vulnerable' ones. It is integral to identity. just like without freedom there is no morality, without privacy there is no identity.
  Add Sticky Note

Oct

2009

OneLiners - Social Web XG Wiki

www.w3.org/...OneLiners

- Preview

dataportability projects data web technologies identity

Sep

2009

Burton Group Identity Blog: US Government Identity News

identityblog.burtongroup.com/...-government-identity-news.html

- Preview

identity openID government trust bobblakley

Aug

2009

Information Security: Why Cybercriminals Are Smiling - Knowledge@Wharton

knowledge.wharton.upenn.edu/article.cfm

- Preview

information security privacy identity cybercrime online financial

otherwise sophisticated business entities regularly fail to secure key information assets and that many companies are struggling with incorporating information security practices into their operations.
there seems to be a process-based failure under way. It's in companies' interests, internally and externally, to secure their information assets. Internally, when a company experiences a data breach, it is potentially compromising trade-secret protection on key intangible assets. Externally, it is going to get bad publicity and trust will diminish among customers, business partners and even its own employees. So securing information assets is a win/win.
18 more annotation(s)...
- Information security [has been] generally viewed as the province of IT departments, and at one point that may have made sense. But at this point, IT security needs to have a process approach, [coming] from the top layers of a company and a culture of security [should be] filtered through the company's lower layers.
  - Adriana Lukas on 2009-08-24
    no shit sherlock. there is no such thing as 'security', there is data integrity, privacy and levels of exposure tolerance. Security is just an umbrella name for all these, and separating it from the core business means losing it.
  Add Sticky Note
- When a company possesses sensitive information, each subsequent sharing of that information creates another dependency, another point of risk. A compromise anywhere in the chain of possession ... is the equivalent of a compromise along every point. So the banks in the TJX case were not pleased, the customers who had data compromised were not pleased and TJX had regulatory action [launched] against it because of that breach.
  - Adriana Lukas on 2009-08-24
    good point about the sharing of information creating a dependency, a point of risk. which in other words is 'weakest link' type of argument.
  Add Sticky Note
- Twenty years ago, there weren't databases full of such rich consumer information as we have today. The ease of sharing information through the Internet generates targets for information criminals. At this point, the identity-theft economy is on par with or surpassing the [illegal] drug economy.
- In many countries where cyber criminals live, the acts that they're engaging in aren't illegal, and their governments are not going to extradite these individuals.... On top of that is the lack of a reciprocal regime for recognizing judgments in other countries, which predates the Internet.... We just never resolved the convention on jurisdiction and judgments to allow us to have our judgments in our courts efficiently enforced in other countries.
- Matwyshyn: Very much so. First, as you mentioned ... individuals voluntarily disclose a significant amount of information. But if you ask them, they'll say they're very concerned about their privacy. When [such] contradictory behavior [is combined] with difficulty in using privacy settings on websites, [people] sometimes don't realize how much information is readily available to the public.
- But there is a bit of a contradiction between users' behavior and users' stated preferences on privacy.
- A corollary concern for information security, as a result of social networks such as Facebook, is that platforms on those networks enable developers to generate interesting, fun, new applications for users to interact. There's really no information security vetting of those applications by the central platform provider, Facebook in this case. The applications request information on a users' entire portfolio of friends and then all of those people have data that is possessed by the application provider. What the application provider is using that data for and the extent of secure storage that [it] uses are unknown [to users] and Facebook or another social networking site is not going to [publicize] it. It's not in their interest to do so because they'd rather not be associated with that relationship. They just want to provide the platform. But most users don't realize or don't analyze the extent of information sharing that happens through, for example, the applications....
- So unlike [with] television, where you're reacting passively to stereotypes and roles and so forth, the Internet is a very active medium and it will likely have, if we get to research this more, the same ... [if perhaps not more] impact on children ... than parents themselves.
- the act requires verifiable parental consent for any data collection and storage from a child under the age of 13. As Diana mentioned, many children, particularly at age 13, are far more technologically adept than their parents. And what is verifiable parental consent? Originally [legislators] wanted faxed transmissions to demonstrate a parent's approval. But they created an email exception. Well, as any smart 13 year old will tell you, you can forge your parent's email about as easily as you can forge a note that you were just at the doctors to get out of study hall. Consequently the ability to verify the identity of the person giving consent is something that has been circumvented by children who [are determined] to get access to a Web service or website.
- We've distributed the information to a great extent, yet we still expect it to have the same level of confidentiality that [it once had]. [Just the] knowledge of a credit card number and its expiration date allows a criminal [for all intents and purposes to] print money at the expense of that [credit card holder]. We are essentially doing something that's not entirely consistent with the nature of the information.
- [All] security breaches are ultimately caused by a failure in a process or implementation of a security policy. But the damage [from financial information breaches] does have a unique, unusual root cause [in] that financial information cannot at once both be distributed to thousands of entities and be so valuable that mere knowledge or access to it is enough to cause monetary losses. We can't have it both ways.
  
  It's not so much that the breaches are surprising. It's that when a breach occurs, the fact that there is no damage control and containment are impossible is a function of how we ... use financial information.
- Knowledge@Wharton: So financial information is unique in the sense that it is both confidential and widely disseminated?
  
  Paya: Exactly, that's the paradox.
- Best practice is to make sure that your secrets have short shelf lives and can be frequently renewed. That's not something generally followed with consumer data. Credit cards have multi-year expiration periods and Social Security numbers are indefinite [since] you have one for life.
- The lesson from the offline world is ... acknowledging the fact that the longer a secret exists, the greater the probability of a breach of confidentiality. So try to limit that window of time. That's a lesson that hasn't quite carried over to the consumer financial data, because much of [it] has a very long shelf life.
- The biggest mistake ... is not having a clear handle on where the information lives. The design of large systems calls for a lot of redundancy. Data is copied, duplicated, backed up, sometimes sent to different partners, data warehouses, shipped off site in case some catastrophic event destroys your data center. So data has a tendency to replicate itself. And one of the big challenges is when companies lose track of where the information is. It's very hard to point to a particular computer or a particular rack and say, "This is where all the credit cards live." .... The problem is that the more spread out they are, the more points of failure you have to worry about.... The first challenge [arises by] not having an inventory of what you're collecting, even if you know where you collect it, not knowing where exactly you put it.
- PricewaterhouseCoopers, which did a survey of chief information officers, chief security officers, high-ranking ... decision makers.... One of the startling [findings] is that a large number, approximately 30%, of the respondents could not provide information about where all of their information assets were stored and this is self-reported.
- We're talking about at the state level, resources will be coordinated to protect families and where people work, now that the genie is out of the bottle.
  - Adriana Lukas on 2009-08-25
    oh dear, please, let not the state be involved!
  Add Sticky Note
- At the tactical level, my advice in terms of risk management is doing more with less. The less data you have, the less your risk is. If you don't need the data, don't collect it. If you don't need it anymore, erase it, delete it, shred it. Make sure that fewer systems have access to the data, and fewer people have access to the data. The more you can design a system so that you can do more with the same amount of data, the better you'll manage your risks.

Jun

2009

Passport applicants face questions on credit history | 1 Jun 2009 | ComputerWeekly.com

so what if I don't have a credit card or something...

www.computerweekly.com/...uestions-on-credit-history.htm

- Preview

passport identity government credit financial

"This also gives us the confidence that the applicant is who they say they are and are resident at the address provided before the passport is despatched to them. Both the application form and IPS website makes it clear that we will be making this check to verify the identity of applicants."

Apr

2009

Community Contexts and Weaving the Social Web | Identity Woman

interesting, worth reading

www.identitywoman.net/communities-social-web-weaving

- Preview

identity community socialweb delicious

Mar

2009

Pushing String » To protect and to serve

eve maler's cop monkey

www.xmlgrrl.com/...to-protect-and-to-serve

- Preview

identity oauth feeds authentication mine! delicious

Mar

2009

joeandrieu.com » Blog Archive » The Identity Quartet

use for the paper?

blog.joeandrieu.com/...the-identity-quartet

- Preview

identity implementation joe VRM paper delicious

Mar

2009

Hackers produce more than software, they produce hackers

folk.uio.no/...Identity_games

- Preview

opensource software culture programming philosophy linux hacker identity reading delicious

1 - 20 of 94 Next › Last »

Showing 20▼ items per page

Selected Tags

identity

Related Tags

Top Contributors

Click in to find related links.

Groups interested in identity

Ad4dcss/Digital Citizenship

Members (438)

bookmarks (2291)
WPPS NEWS

Members (5)

bookmarks (492)
CIPP Information Privacy & Security News

Members (46)

bookmarks (910)

Related Lists on Diigo

Dissociative identity disorder research

List or resources for my res...

Items: 12 | Visits: 229

Created by: Adam Bohannon
Online identity research

Collection of resources for ...

Items: 281 | Visits: 2328

Created by: Adam Bohannon
Digital Citizenship for Educators

Some resources for educators...

Items: 15 | Visits: 180

Created by: Shelley K.

Highlighter, Sticky notes, Tagging, Groups and Network: integrated suite dramatically boosting research productivity. Learn more »

Join Diigo

Adriana Lukas's Library tagged identity → View Popular, Search in Google

Network: The Secret Life of Your Personal Data, Animated | Brain Pickings

Botgirl's Second Life Diary: Executive Chairman Eric Schmidt admits Google+ is Essentially a Trojan Horse (Identity Platform)

Identity at Mozilla

88+ Projects & Standards for Data Ownership, Identity, & A Federated Social Web « emergent by design

The Bank of Facebook: Currency, Identity, Reputation « emergent by design

United States, Intellectual Property, Privacy In The Cloud: A Legal Framework For Moving Personal Data To The Cloud - Morrison & Foerster LLP - 22/02/2011 09:00:07, Data Protection, IT & Internet

Everything the Internet Knows About Me (Because I Asked It To) - Digits - WSJ

Mozilla Proposes New Icons to Clarify Websites' Privacy Policies

Hands-on With Facebook Alternative Diaspora [PICS]

Open ID Is A Nightmare

Identity and The Independent Web - John Battelle's Searchblog

Why Facebook is Wrong: Privacy Is Still Important

OneLiners - Social Web XG Wiki

Burton Group Identity Blog: US Government Identity News

Information Security: Why Cybercriminals Are Smiling - Knowledge@Wharton

Passport applicants face questions on credit history | 1 Jun 2009 | ComputerWeekly.com

Community Contexts and Weaving the Social Web | Identity Woman

Pushing String » To protect and to serve

joeandrieu.com » Blog Archive » The Identity Quartet

Hackers produce more than software, they produce hackers

Selected Tags

Related Tags

Top Contributors

Groups interested in identity

Ad4dcss/Digital Citizenship

WPPS NEWS

CIPP Information Privacy & Security News

Dissociative identity disorder research

Online identity research

Digital Citizenship for Educators