Adriana Lukas's Library tagged identity → View Popular

Filter:
All
Annotated

21 Oct 09

OneLiners - Social Web XG Wiki

www.w3.org/...OneLiners - Preview

dataportability projects data web technologies identity

10 Sep 09

Burton Group Identity Blog: US Government Identity News

identityblog.burtongroup.com/...-government-identity-news.html - Preview

identity openID government trust bobblakley

25 Aug 09

Information Security: Why Cybercriminals Are Smiling - Knowledge@Wharton

knowledge.wharton.upenn.edu/article.cfm - Preview

information security privacy identity cybercrime online financial

otherwise sophisticated business entities regularly fail to secure key information assets and that many companies are struggling with incorporating information security practices into their operations.
there seems to be a process-based failure under way. It's in companies' interests, internally and externally, to secure their information assets. Internally, when a company experiences a data breach, it is potentially compromising trade-secret protection on key intangible assets. Externally, it is going to get bad publicity and trust will diminish among customers, business partners and even its own employees. So securing information assets is a win/win.
18 more annotations...
- Information security [has been] generally viewed as the province of IT departments, and at one point that may have made sense. But at this point, IT security needs to have a process approach, [coming] from the top layers of a company and a culture of security [should be] filtered through the company's lower layers.
  - no shit sherlock. there is no such thing as 'security', there is data integrity, privacy and levels of exposure tolerance. Security is just an umbrella name for all these, and separating it from the core business means losing it. - on 2009-08-24
  Add Sticky Note
- When a company possesses sensitive information, each subsequent sharing of that information creates another dependency, another point of risk. A compromise anywhere in the chain of possession ... is the equivalent of a compromise along every point. So the banks in the TJX case were not pleased, the customers who had data compromised were not pleased and TJX had regulatory action [launched] against it because of that breach.
  - good point about the sharing of information creating a dependency, a point of risk. which in other words is 'weakest link' type of argument. - on 2009-08-24
  Add Sticky Note
- Twenty years ago, there weren't databases full of such rich consumer information as we have today. The ease of sharing information through the Internet generates targets for information criminals. At this point, the identity-theft economy is on par with or surpassing the [illegal] drug economy.
- In many countries where cyber criminals live, the acts that they're engaging in aren't illegal, and their governments are not going to extradite these individuals.... On top of that is the lack of a reciprocal regime for recognizing judgments in other countries, which predates the Internet.... We just never resolved the convention on jurisdiction and judgments to allow us to have our judgments in our courts efficiently enforced in other countries.
- Matwyshyn: Very much so. First, as you mentioned ... individuals voluntarily disclose a significant amount of information. But if you ask them, they'll say they're very concerned about their privacy. When [such] contradictory behavior [is combined] with difficulty in using privacy settings on websites, [people] sometimes don't realize how much information is readily available to the public.
- But there is a bit of a contradiction between users' behavior and users' stated preferences on privacy.
- A corollary concern for information security, as a result of social networks such as Facebook, is that platforms on those networks enable developers to generate interesting, fun, new applications for users to interact. There's really no information security vetting of those applications by the central platform provider, Facebook in this case. The applications request information on a users' entire portfolio of friends and then all of those people have data that is possessed by the application provider. What the application provider is using that data for and the extent of secure storage that [it] uses are unknown [to users] and Facebook or another social networking site is not going to [publicize] it. It's not in their interest to do so because they'd rather not be associated with that relationship. They just want to provide the platform. But most users don't realize or don't analyze the extent of information sharing that happens through, for example, the applications....
- So unlike [with] television, where you're reacting passively to stereotypes and roles and so forth, the Internet is a very active medium and it will likely have, if we get to research this more, the same ... [if perhaps not more] impact on children ... than parents themselves.
- the act requires verifiable parental consent for any data collection and storage from a child under the age of 13. As Diana mentioned, many children, particularly at age 13, are far more technologically adept than their parents. And what is verifiable parental consent? Originally [legislators] wanted faxed transmissions to demonstrate a parent's approval. But they created an email exception. Well, as any smart 13 year old will tell you, you can forge your parent's email about as easily as you can forge a note that you were just at the doctors to get out of study hall. Consequently the ability to verify the identity of the person giving consent is something that has been circumvented by children who [are determined] to get access to a Web service or website.
- We've distributed the information to a great extent, yet we still expect it to have the same level of confidentiality that [it once had]. [Just the] knowledge of a credit card number and its expiration date allows a criminal [for all intents and purposes to] print money at the expense of that [credit card holder]. We are essentially doing something that's not entirely consistent with the nature of the information.
- [All] security breaches are ultimately caused by a failure in a process or implementation of a security policy. But the damage [from financial information breaches] does have a unique, unusual root cause [in] that financial information cannot at once both be distributed to thousands of entities and be so valuable that mere knowledge or access to it is enough to cause monetary losses. We can't have it both ways.
  
  It's not so much that the breaches are surprising. It's that when a breach occurs, the fact that there is no damage control and containment are impossible is a function of how we ... use financial information.
- Knowledge@Wharton: So financial information is unique in the sense that it is both confidential and widely disseminated?
  
  Paya: Exactly, that's the paradox.
- Best practice is to make sure that your secrets have short shelf lives and can be frequently renewed. That's not something generally followed with consumer data. Credit cards have multi-year expiration periods and Social Security numbers are indefinite [since] you have one for life.
- The lesson from the offline world is ... acknowledging the fact that the longer a secret exists, the greater the probability of a breach of confidentiality. So try to limit that window of time. That's a lesson that hasn't quite carried over to the consumer financial data, because much of [it] has a very long shelf life.
- The biggest mistake ... is not having a clear handle on where the information lives. The design of large systems calls for a lot of redundancy. Data is copied, duplicated, backed up, sometimes sent to different partners, data warehouses, shipped off site in case some catastrophic event destroys your data center. So data has a tendency to replicate itself. And one of the big challenges is when companies lose track of where the information is. It's very hard to point to a particular computer or a particular rack and say, "This is where all the credit cards live." .... The problem is that the more spread out they are, the more points of failure you have to worry about.... The first challenge [arises by] not having an inventory of what you're collecting, even if you know where you collect it, not knowing where exactly you put it.
- PricewaterhouseCoopers, which did a survey of chief information officers, chief security officers, high-ranking ... decision makers.... One of the startling [findings] is that a large number, approximately 30%, of the respondents could not provide information about where all of their information assets were stored and this is self-reported.
- We're talking about at the state level, resources will be coordinated to protect families and where people work, now that the genie is out of the bottle.
  - oh dear, please, let not the state be involved! - on 2009-08-25
  Add Sticky Note
- At the tactical level, my advice in terms of risk management is doing more with less. The less data you have, the less your risk is. If you don't need the data, don't collect it. If you don't need it anymore, erase it, delete it, shred it. Make sure that fewer systems have access to the data, and fewer people have access to the data. The more you can design a system so that you can do more with the same amount of data, the better you'll manage your risks.

04 Jun 09

Passport applicants face questions on credit history | 1 Jun 2009 | ComputerWeekly.com

so what if I don't have a credit card or something...

www.computerweekly.com/...uestions-on-credit-history.htm - Preview

passport identity government credit financial

"This also gives us the confidence that the applicant is who they say they are and are resident at the address provided before the passport is despatched to them. Both the application form and IPS website makes it clear that we will be making this check to verify the identity of applicants."

23 Apr 09

Community Contexts and Weaving the Social Web | Identity Woman

interesting, worth reading

www.identitywoman.net/communities-social-web-weaving - Preview

identity community socialweb delicious

24 Mar 09

Pushing String » To protect and to serve

eve maler's cop monkey

www.xmlgrrl.com/...to-protect-and-to-serve - Preview

identity oauth feeds authentication mine! delicious

14 Mar 09

joeandrieu.com » Blog Archive » The Identity Quartet

use for the paper?

blog.joeandrieu.com/...the-identity-quartet - Preview

identity implementation joe VRM paper delicious

06 Mar 09

Hackers produce more than software, they produce hackers

folk.uio.no/...Identity_games - Preview

opensource software culture programming philosophy linux hacker identity reading delicious

05 Mar 09

Schneier on Security: Privacy in the Age of Persistence

"Being constantly scrutinized undermines our social norms; furthermore, it's creepy. Privacy isn't just about having something to hide; it's a basic right that has enormous value to democracy, liberty, and our humanity."

www.schneier.com/...privacy_in_the.html - Preview

privacy data security technology identity future information freedom surveillance schneier society delicious

27 Feb 09

Startup for the slaughter - Identity

include in the paper, after figuring out what's being discussed

blip.tv/1814234 - Preview

identity paper VRM delicious

25 Feb 09

Why Social Networks Are Good for the Kids

www.techcrunch.com/...networks-are-good-for-the-kids - Preview

psychology techcrunch children facebook web2.0 stupid identity paper delicious socialnetwork

24 Feb 09

A load of Twitter - Times Online

this is bad, really bad, in terms of report and science, which is appallingly off the mark. social web is about ability to drive your own identity, rather than settle for the one defined by third parties, invariably authorities. that's why people like Oli

women.timesonline.co.uk/...article5747308.ece - Preview

identity twitter times microblogging psychology stupid fail paper delicious socialnetwork

18 Feb 09

joeandrieu.com » Blog Archive » Kynetx takes on Structured Browsing

need to deconstruct for obvious errors and fallacies.

blog.joeandrieu.com/...x-takes-on-structured-browsing - Preview

VRM identity joe delicious

17 Feb 09

Burton Group Identity Blog: Relationship Paper Now Freely Available

use for paper on identity

identityblog.burtongroup.com/...aper-now-freely-available.html - Preview

identity relationships paper bobblakley delicious

16 Feb 09

Links » Identification Is Not Security

www.links.org/?p=538 - Preview

security internet benlaurie stanford NYT identity identification delicious

12 Feb 09

Burton Group A Relationship Layer for the Web . . . and for Enterprises, Too

bob blakley's paper on relationship and identity

www.burtongroup.com/...RelationshipLayerWeb.aspx - Preview

relationships identity paper research bobblakley delicious

Drstarcat

identity guy referred by bob blakley on a post about his relationship paper

drstarcat.com - Preview

identity xri delicious

08 Feb 09

Equals Drummond » Blog Archive » Bob Blakley on The Relationship Layer

marc canter linked to this also. use for the paper on identity, based on extensive notes about bob's paper.

www.equalsdrummond.name/?p=129 - Preview

identity relationships openID writing paper bobblakley delicious socialnetwork

04 Feb 09

GOOD » The Quantified Self: You Are Your Data»

interesting....

www.good.is/?p=15247 - Preview

technology internet identity individual data Mine! delicious

26 Jan 09

MyId.is | FAQ

another identity/authentication 'real estate'. gimme a break

dev.myid.is/FAQ.aspx - Preview

identity authentication applications delicious

1 - 20 of 82 Next › Last »

Showing 20▼ items per page

Selected Tags

identity

Related Tags

Top Contributors

Click in to find related links.

Groups interested in identity

WPPS NEWS

Members (5)

bookmarks (438)
CIPP Information Privacy & Security News

Members (9)

bookmarks (785)
Digital Ethnography at Kansas State University

Members (137)

bookmarks (1640)

Related Lists on Diigo

Dissociative identity disorder research

List or resources for my re...

Items: 12 | Visits: 222

Created by: Adam Bohannon
Online identity research

Collection of resources for...

Items: 277 | Visits: 2314

Created by: Adam Bohannon
Digital Citizenship for Educators

Some resources for educator...

Items: 15 | Visits: 177

Created by: Shelley K.

Diigo is about better ways to research, share and collaborate on information. Learn more »

Join Diigo

Adriana Lukas's Library tagged identity → View Popular

OneLiners - Social Web XG Wiki

Burton Group Identity Blog: US Government Identity News

Information Security: Why Cybercriminals Are Smiling - Knowledge@Wharton

Passport applicants face questions on credit history | 1 Jun 2009 | ComputerWeekly.com

Community Contexts and Weaving the Social Web | Identity Woman

Pushing String » To protect and to serve

joeandrieu.com » Blog Archive » The Identity Quartet

Hackers produce more than software, they produce hackers

Schneier on Security: Privacy in the Age of Persistence

Startup for the slaughter - Identity

Why Social Networks Are Good for the Kids

A load of Twitter - Times Online

joeandrieu.com » Blog Archive » Kynetx takes on Structured Browsing

Burton Group Identity Blog: Relationship Paper Now Freely Available

Links » Identification Is Not Security

Burton Group A Relationship Layer for the Web . . . and for Enterprises, Too

Drstarcat

Equals Drummond » Blog Archive » Bob Blakley on The Relationship Layer

GOOD » The Quantified Self: You Are Your Data»

MyId.is | FAQ

Selected Tags

Related Tags

Sponsored Links

Top Contributors

Groups interested in identity

WPPS NEWS

CIPP Information Privacy & Security News

Digital Ethnography at Kansas State University

Dissociative identity disorder research

Online identity research

Digital Citizenship for Educators