online - Adriana Lukas on Diigo

02 Nov 09

19 Oct 09

McKinsey: What Matters: Will people pay for content online?

whatmatters.mckinseydigital.com/...-people-pay-for-content-online - Preview

mckinsey clayshirky publishing payment audience journalism distribution online

25 Aug 09

Information Security: Why Cybercriminals Are Smiling - Knowledge@Wharton

knowledge.wharton.upenn.edu/article.cfm - Preview

information security privacy identity cybercrime online financial

otherwise sophisticated business entities regularly fail to secure key information assets and that many companies are struggling with incorporating information security practices into their operations.
there seems to be a process-based failure under way. It's in companies' interests, internally and externally, to secure their information assets. Internally, when a company experiences a data breach, it is potentially compromising trade-secret protection on key intangible assets. Externally, it is going to get bad publicity and trust will diminish among customers, business partners and even its own employees. So securing information assets is a win/win.
18 more annotations...
- Information security [has been] generally viewed as the province of IT departments, and at one point that may have made sense. But at this point, IT security needs to have a process approach, [coming] from the top layers of a company and a culture of security [should be] filtered through the company's lower layers.
  - no shit sherlock. there is no such thing as 'security', there is data integrity, privacy and levels of exposure tolerance. Security is just an umbrella name for all these, and separating it from the core business means losing it. - on 2009-08-24
  Add Sticky Note
- When a company possesses sensitive information, each subsequent sharing of that information creates another dependency, another point of risk. A compromise anywhere in the chain of possession ... is the equivalent of a compromise along every point. So the banks in the TJX case were not pleased, the customers who had data compromised were not pleased and TJX had regulatory action [launched] against it because of that breach.
  - good point about the sharing of information creating a dependency, a point of risk. which in other words is 'weakest link' type of argument. - on 2009-08-24
  Add Sticky Note
- Twenty years ago, there weren't databases full of such rich consumer information as we have today. The ease of sharing information through the Internet generates targets for information criminals. At this point, the identity-theft economy is on par with or surpassing the [illegal] drug economy.
- In many countries where cyber criminals live, the acts that they're engaging in aren't illegal, and their governments are not going to extradite these individuals.... On top of that is the lack of a reciprocal regime for recognizing judgments in other countries, which predates the Internet.... We just never resolved the convention on jurisdiction and judgments to allow us to have our judgments in our courts efficiently enforced in other countries.
- Matwyshyn: Very much so. First, as you mentioned ... individuals voluntarily disclose a significant amount of information. But if you ask them, they'll say they're very concerned about their privacy. When [such] contradictory behavior [is combined] with difficulty in using privacy settings on websites, [people] sometimes don't realize how much information is readily available to the public.
- But there is a bit of a contradiction between users' behavior and users' stated preferences on privacy.
- A corollary concern for information security, as a result of social networks such as Facebook, is that platforms on those networks enable developers to generate interesting, fun, new applications for users to interact. There's really no information security vetting of those applications by the central platform provider, Facebook in this case. The applications request information on a users' entire portfolio of friends and then all of those people have data that is possessed by the application provider. What the application provider is using that data for and the extent of secure storage that [it] uses are unknown [to users] and Facebook or another social networking site is not going to [publicize] it. It's not in their interest to do so because they'd rather not be associated with that relationship. They just want to provide the platform. But most users don't realize or don't analyze the extent of information sharing that happens through, for example, the applications....
- So unlike [with] television, where you're reacting passively to stereotypes and roles and so forth, the Internet is a very active medium and it will likely have, if we get to research this more, the same ... [if perhaps not more] impact on children ... than parents themselves.
- the act requires verifiable parental consent for any data collection and storage from a child under the age of 13. As Diana mentioned, many children, particularly at age 13, are far more technologically adept than their parents. And what is verifiable parental consent? Originally [legislators] wanted faxed transmissions to demonstrate a parent's approval. But they created an email exception. Well, as any smart 13 year old will tell you, you can forge your parent's email about as easily as you can forge a note that you were just at the doctors to get out of study hall. Consequently the ability to verify the identity of the person giving consent is something that has been circumvented by children who [are determined] to get access to a Web service or website.
- We've distributed the information to a great extent, yet we still expect it to have the same level of confidentiality that [it once had]. [Just the] knowledge of a credit card number and its expiration date allows a criminal [for all intents and purposes to] print money at the expense of that [credit card holder]. We are essentially doing something that's not entirely consistent with the nature of the information.
- [All] security breaches are ultimately caused by a failure in a process or implementation of a security policy. But the damage [from financial information breaches] does have a unique, unusual root cause [in] that financial information cannot at once both be distributed to thousands of entities and be so valuable that mere knowledge or access to it is enough to cause monetary losses. We can't have it both ways.
  
  It's not so much that the breaches are surprising. It's that when a breach occurs, the fact that there is no damage control and containment are impossible is a function of how we ... use financial information.
- Knowledge@Wharton: So financial information is unique in the sense that it is both confidential and widely disseminated?
  
  Paya: Exactly, that's the paradox.
- Best practice is to make sure that your secrets have short shelf lives and can be frequently renewed. That's not something generally followed with consumer data. Credit cards have multi-year expiration periods and Social Security numbers are indefinite [since] you have one for life.
- The lesson from the offline world is ... acknowledging the fact that the longer a secret exists, the greater the probability of a breach of confidentiality. So try to limit that window of time. That's a lesson that hasn't quite carried over to the consumer financial data, because much of [it] has a very long shelf life.
- The biggest mistake ... is not having a clear handle on where the information lives. The design of large systems calls for a lot of redundancy. Data is copied, duplicated, backed up, sometimes sent to different partners, data warehouses, shipped off site in case some catastrophic event destroys your data center. So data has a tendency to replicate itself. And one of the big challenges is when companies lose track of where the information is. It's very hard to point to a particular computer or a particular rack and say, "This is where all the credit cards live." .... The problem is that the more spread out they are, the more points of failure you have to worry about.... The first challenge [arises by] not having an inventory of what you're collecting, even if you know where you collect it, not knowing where exactly you put it.
- PricewaterhouseCoopers, which did a survey of chief information officers, chief security officers, high-ranking ... decision makers.... One of the startling [findings] is that a large number, approximately 30%, of the respondents could not provide information about where all of their information assets were stored and this is self-reported.
- We're talking about at the state level, resources will be coordinated to protect families and where people work, now that the genie is out of the bottle.
  - oh dear, please, let not the state be involved! - on 2009-08-25
  Add Sticky Note
- At the tactical level, my advice in terms of risk management is doing more with less. The less data you have, the less your risk is. If you don't need the data, don't collect it. If you don't need it anymore, erase it, delete it, shred it. Make sure that fewer systems have access to the data, and fewer people have access to the data. The more you can design a system so that you can do more with the same amount of data, the better you'll manage your risks.

Ad Network Fetchback Blunts Concerns About Web Privacy - Advertising Age - Digital

people may not react to the cause of privacy abuse (i.e. data being collected) but they certainly react to the result (i.e. identity theft, creepiness of behaviour targetting or 'personalised' ads). transparency about who collects data and why will go some way in addressing this gap

adage.com/...article - Preview

advertising online privacy

21 Aug 09

Don't just howl with rage. Try an idea that does away with banks altogether | Jonathan Freedland | Comment is free | The Guardian

www.guardian.co.uk/...bankers-bonuses-credit-zopa - Preview

zopa finance p2p banking online businessmodel

But for the smaller scale chunk of banks' business – the personal loan – it is perfectly possible to foresee the day when the big boys are pushed aside, priced out by ordinary people borrowing and lending at rates the banks can't manage. It's a delicious thought: rapacious institutions, currently regarded by governments as too valuable to fail and given permanent guarantees of taxpayer support, going the way of the dodo.

07 Aug 09

BBC NEWS | Magazine | The internet's conscientious objectors

not surprising there are people not wanting to use new tech. bet it was the same when cars came around, old drivers missed the connection with the horse and the sense of skill it takes to ride it or the slower pace that gives you time to drink in the sights and world around you... yadi-yadi-da. :) there is also the issue of having information filtered, approved, certified and the networked chaos of the internet would be alien to people used to authoritative filtering. Too much information is the usual complaint! What them mean is not enough guidance on what to pay attention to and believe!

news.bbc.co.uk/...8187305.stm - Preview

technology luddites generation online internet

Alan Newell, professor at the Dundee university school of computing, points out the typical computer tends "to be designed by young male computer scientists and they tend not to understand the challenges it provides for groups of people they never meet".
- Ain't that the truth! - on 2009-08-07
Add Sticky Note

04 Aug 09

Ping - The Digital Age Is Stamping Out Serendipity - NYTimes.com

this is one of those articles that hark back to 'better times'. Nostalgic would be a kind way of putting it, utter bollox captures its essence far better. on the one hand it bemoans that there is too much information, on the other any attempts to help us filter and manage it are killing serendipity. Make up your bloody mind! Argh

www.nytimes.com/...02ping.html - Preview

serendipity online socialweb FAIL information management

Ah, the techies say, no worries. We have Facebook and Twitter, spewing a stream of suggestions about what to read, hear, see and do. We come to depend on it to lead us to the funny article on TheOnion.com or the roving food cart serving goat curry. It’s useful.
But that isn’t serendipity. It’s really group-think. Everything we need to know comes filtered and vetted. We are discovering what everyone else is learning, and usually from people we have selected because they share our tastes. It won’t deliver that magic moment of discovery that we imagine occurred when Elvis Presley first heard the blues, or when Michael Jackson followed Fred Astaire’s white spats across the dance floor.
And there is just too much information. We can have thousands of people sending us suggestions each day — some useful, some not. We have to read them, sort them and act upon them.
As we pay for them with our time, the human need for surprise presents an opportunity for new businesses.

31 Jul 09

The Pushbutton Web: Realtime Becomes Real - Anil Dash

dashes.com/...web-realtime-becomes-real.html - Preview

pushbutton PubSub realtime rss technology online web

Pushbutton systems rely on the web's fundamental HTTP protocol for communication between these component parts. The architecture of Pushbutton message delivery is also simple to understand. Before Pushbutton, in today's systems, when you create a message (a blog post, tweet or other update) that's published in your RSS or Atom feed, every application or site that wants updates from you has to repeatedly request your feed to know when it's updated.
That's because Pushbutton-enabled applications will improve upon the current state of affairs by proactively delivering not just the notification that there's a new message, but the content of the message itself.
1 more annotations...
- a hub server

26 Jul 09

Diller Calls Free Web Content a ‘Myth, Joins Refrain (Update1) - Bloomberg.com

oh dear.

www.bloomberg.com/...news - Preview

journalism media online businessmodel FAIL

The media and technology executive, whose company runs the
Ask.com search engine and the Match.com dating service, said
it’s “mythology” to view the Internet as a system of free
communications.

“It is not free, and is not going to be,” Diller said
today at the Fortune Brainstorm conference in Pasadena,
California.
The Burbank, California-based company has opportunities to
increase sales from the Web, Iger said. Online advertising can
be improved, and marketers can target consumers by tracking
their activities and interests. Subscription products are
particularly promising to the company.

17 Jul 09

Teens Not Into Twitter, TV, Radio, or Newspapers, Reports Young Morgan Stanley Intern

good commentary on the splash made by a 15 year old intern. nothing new or shocking to web savvy people, but plenty to annoy the media/corporate/banking lot

www.readwriteweb.com/...witter_tv_radio_newspapers.php - Preview

socialmedia twitter teenagers media online

16 Jun 09

The Hidden Cost of Privacy - Forbes.com

the problem is that privacy is an externality for those who 'manage' it for us. until we are in charge of our own data, privacy will remain a problem.

www.forbes.com/...ch-hidden-cost-of-privacy.html - Preview

Privacy externality online data intermediary

15 Jun 09

The Revolution Will NOT Be Twittered | techPresident

agreed. digerati sounds more like a bunch of narcissistic voyeurs rather than revolutionaries in any sense. social & political events more complex than lotsa noise. though noise certainly has an important role.

techpresident.com/...volution-will-not-be-twittered - Preview

iran election politics online activism revolution

05 Jun 09

Targeted online advertising casts the shadow of privacy concerns

www.mad.co.uk/...hadow-of-privacy-concerns.html - Preview

advertising privacy online behaviour data

04 Jun 09

Google Is Top Tracker of Surfers in Study - Bits Blog - NYTimes.com

well, at least this is non-news. anotehr of the google BAAAD articles. Not saying there isn't reason for concern sometimes, but this ain't it.

bits.blogs.nytimes.com/...op-tracker-of-surfers-in-study - Preview

privacy google stupid data online tracking

18 May 09

http://www.conservatives.com/expenses/expensesPopup.html

hm, wonder if too much info makes for a meaningful perspective but once the data is out, it can be processed and analysed to offer such.

Conservative expenses in real time - Preview

politics expenses online transparency

17 May 09

Digital Domain - Just Browsing? A Web Store May Follow You Out the Door - NYTimes.com

www.nytimes.com/...17digi.html - Preview

shopping online marketing privacy data metrics

Abandonment Tracker Pro addresses a longstanding fear of lost business represented by the supposedly grave problem of “shopping cart abandonment.” “Up to 70 percent of shopping carts, registrations, quotes and online forms are abandoned before they’re complete,”
here were many reasons that customers might not complete a purchase. And the rate of cart abandonment rose substantially from 2005 to 2008, he said, a reflection of intensified comparative shopping that visitors carry on with many sites simultaneously.
- i often go as far as checkout in order to find information that's not easily available i.e. delivery cost and timing etc. so the statistic about shopping cart abandonment is not only about lack of marketing or pull but simply about not having the right information displayed or accessible. another example of trouble with interpreting metrics - on 2009-05-17
Add Sticky Note

09 May 09

Bruce Schneier and Marcus Ranum Face-Off: Should We Have an Expectation of Online Privacy? - Information Security Magazine

Marcus: privacy offline has always been exclusive why should it be different online
Bruce: lack of control over your data is a legal problem

searchsecurity.techtarget.com/...96894,sid14_gci1354832,00.html - Preview

privacy data government online ownership control

I'm pretty sure that, if I joined the tinfoil hat brigade, I'd be able to quickly assemble a communications system that was so secure it'd be practically unusable.
People who are using public data networks to do naughty, terroristic, or counter-revolutionary things have simply got to protect themselves. To a government or business, privacy looks indistinguishable from sedition or crime.

Privacy has always been something special, enjoyed by those who are wealthy and powerful enough to afford guards, walls and lawmakers. It speaks well of techno-geek society that we tried--and tried hard--to democratize the data networks and protect their users, but the end-game was inevitable. From one side, you're either a member of the tinfoil hat brigade or an activist Cypherpunk. Seen from the other side, you're a pre-selected terrorism suspect or a blob of marketing data waiting to be analyzed and sold.
3 more annotations...
- Which are you?
  - definitely the former! privacy may be exclusive or hard to come by but well worth pursuing - on 2009-05-09
  Add Sticky Note
- This loss of control over our data has other effects, too. Our protections against police abuse have been severely watered down. The courts have ruled that the police can search your data without a warrant, as long as others hold that data. If the police want to read the e-mail on your computer, they need a warrant; but they don't need one to read it from the backup tapes at your ISP.
- We should be able to control our own data, regardless of where it is stored. We should be able to make decisions about the security and privacy of that data, and have legal recourse should companies fail to honor those decisions.

08 May 09

The rigors of life unplugged - Los Angeles Times

fascinating, even though hardly surprising. I think we are still looking for balance after giving in to the explosion of technological innovation. The answer is not to turn back or ignore it, but to find ways of subdueing it to other priorities.

www.latimes.com/...2009may06,0,560029,full.column - Preview

technology connectivity experiment children addiction online

07 May 09

News Corp will charge for newspaper websites, says Rupert Murdoch | Media | guardian.co.uk

"The current days of the internet will soon be over." Well, I am not holding my breath.

www.guardian.co.uk/...pert-murdoch-charging-websites - Preview

newspapers murdoch businessmodel media journalism online

06 May 09

Teblog: Hoard or share? Your call.

sharing is always better than hoarding. I think it's a matter of finding a way to make money because of something, not with something, especially if that something is knowledge. Much harder to do when it is knowledge. :)

teblog.typepad.com/...hoard-or-share-your-call.html - Preview

knowledge tebbo sharing online JP ownership

Adriana Lukas's Library tagged online → View Popular

Free Movies Online: Where to Watch Them | Open Culture

McKinsey: What Matters: Will people pay for content online?

Information Security: Why Cybercriminals Are Smiling - Knowledge@Wharton

Ad Network Fetchback Blunts Concerns About Web Privacy - Advertising Age - Digital

Don't just howl with rage. Try an idea that does away with banks altogether | Jonathan Freedland | Comment is free | The Guardian

BBC NEWS | Magazine | The internet's conscientious objectors

Ping - The Digital Age Is Stamping Out Serendipity - NYTimes.com

The Pushbutton Web: Realtime Becomes Real - Anil Dash

Diller Calls Free Web Content a ‘Myth, Joins Refrain (Update1) - Bloomberg.com

Teens Not Into Twitter, TV, Radio, or Newspapers, Reports Young Morgan Stanley Intern

The Hidden Cost of Privacy - Forbes.com

The Revolution Will NOT Be Twittered | techPresident

Targeted online advertising casts the shadow of privacy concerns

Google Is Top Tracker of Surfers in Study - Bits Blog - NYTimes.com

http://www.conservatives.com/expenses/expensesPopup.html

Digital Domain - Just Browsing? A Web Store May Follow You Out the Door - NYTimes.com

Bruce Schneier and Marcus Ranum Face-Off: Should We Have an Expectation of Online Privacy? - Information Security Magazine

The rigors of life unplugged - Los Angeles Times

News Corp will charge for newspaper websites, says Rupert Murdoch | Media | guardian.co.uk

Teblog: Hoard or share? Your call.

Selected Tags

Related Tags

Sponsored Links

Top Contributors

Groups interested in online

Online Tools

MASTERLISTBUILDER

Casual Games

Online identity research

Collaborative Projects