jump to navigation

Of Payments, Privacy and Social Networks June 13, 2012

Posted by Heather Mark in Industry News, InfoSec & Privacy.
Tags: , , , , , ,
add a comment

By now, many of you have probably heard about the smartphone app creatively and aptly named “Girls Around Me.” For those that have not heard, it is essentially an application that aggregates the “check in” location data of women using Facebook, foursquare, and other social, location based services.  It then displays for the user the locations and names of “girls around” him (or her, I don’t think the app discriminates).  The app promises to “turn your town into a dating paradise.”  For privacy professionals, the app sparks an interesting debate.  Is privacy infringed if the person in question volunteers the information.  On one side of the argument are those that would say “no – if the user has volunteered information then privacy is not compromised by the application.”  The converse of that argument, however, is one that centers on a definition of privacy that hinges on the appropriate use of information.  If the user did not volunteer the information in an effort to join this “dating paradise” then privacy is certainly infringed.  Certainly, one can see that the application in the wrong hands has the potential for misuse.  But, what if we use the information for good, rather than evil? (more…)

“One Adam Twelve, One Adam Twelve…”: Security Theater & Doggies Doo June 11, 2012

Posted by Chris Mark in security theater.
Tags: , , , , ,
add a comment

Chris’ Dog BO

Today on Yahoo News Canada is a story in which it is claimed that Jerusalem such a problem with dog poop that they are enacting a program in which they will match offending doggy doo against a master DNA database.   According to a statement from the Jerusalem municipality: “The municipality pilot project calls for establishment of a database of dog DNA to allow us to reduce the soiling of pavements, parks and public spaces,”  In short, the city plans on DNA profiling 70-80% of the 11,000 dogs that live in Jerusalem and then, if there is a “pile” of DNA on the sidewalk, someone will pick it up, send to a lab, test it, and then the owner of the offending pooch will be fined $193.  This plan is so ridiculous that it does not merit much discussion but…for the sake of this blog let me use an example from a previous post. (more…)

Collective Security & the Payment System June 11, 2012

Posted by Heather Mark in Laws and Leglslation, PCI DSS, Politics.
Tags: , , , , , , , ,
1 comment so far

I recently attended an event focused on payment security and fraud prevention.  It was an outstanding event and the presentations and panels were incredibly valuable – not something that I frequently say about payment security events these days.  However, one term came up a couple of times that got me thinking.  That term was “collective security.”  As many of you know, I have a background in public policy and my dissertation was, in fact, on US foreign policy and our strategic interests abroad, so the mention of collective security set off my poli sci radar.  But I wondered if collective security was really an appropriate phrase for what we’re doing in the payments industry.  To address that question, it is necessary to first define collective security in its traditional sense.

Collective security was first formally introduced by the Peace of Westphalia in 1648, a series of treaties that put an end to a number of wars that had been plaguing Europe.    Very simply put, collective security is an arrangement in which all stakeholders agree that their security depends upon the security of each of the other stakeholders.  (more…)

“Al Qeada is Promoting!”- Job Duties Probably Include Getting Killed by Hellfire missiles June 8, 2012

Posted by Chris Mark in News, terrorism.
Tags: , , , , , , ,
add a comment

After killing Osama Bin Laden in 2011, the US embarked on a mission to remove any heir apparants that may have been waiting in the wings.  With this weeks’ killing of Abu Yahya al-Libi, the US has now killed 4 of the top 5 candidates for the #2 spot in Al Qeada.  Like any company in need of a new C-level to support their operations, the terrorist organization is now looking for a new #2 for their organization.   There are at least five names believed to be considered with several who have lived in the US and one American being considered.  While likely a very good job for an up and coming terrorist, it should be noted that one major job responsibility is probably going to include getting blown up by Hellfire missiles.

“There I was bro!”…a rant about Military Fakers, Poseurs, and Frauds June 7, 2012

Posted by Chris Mark in Uncategorized.
Tags: , , , , , , ,
add a comment

Sometimes I hear a story that compels me to comment on this blog even thought it is not related to risk or security.  America’s Got Talent contestant Timmy Poe stuttered his way through his interview and brought tears to many eyes with his claims of being ‘wounded’ in combat and being a decorated war veteran with a Bronze Star.  Well, wasn’t it a surprise to learn he has apparently lied about his combat experience, wounds, and decoration?  In short..no combat, no Purple Heart and no Bronze Star.  C’mon man!  There is no shame in service of any sort.  If you are a cook…own it.  If you are a cop…own it.  If you were a medic…OWN IT.

I have now worked for two different people who claimed military honors that they fabricated. (more…)