Archive for January, 2007

Federal Government Plans to Greatly Expand DNA Database

// January 21st, 2007 // No Comments » // Security & Privacy

Included in a bill signed last year by President Bush reauthorizing the Violence Against Women Act was a provision allowing the federal government to greatly expand the federal DNA database.

Language commonly used in promoting it’s use include “crime fighting database”, “fighting terrorism”, and “catching immigration violators”. The “with-us-or-against-us” mentality among some in law enforcement will inevitably paint those raising their voices in protest as “pro-crime”, “pro-terrorism”, and “pro-illegal-immigration”. The nuances of privacy and the potential abuse of this information are lost on them.

Efforts to include DNA in criminal records has momentum and isn’t likely to wane, but close oversight of the collection, storage, and use of DNA is critical.

From the article: “Caroline Fredrickson, director of the American Civil Liberties Union’s Washington office, say such mass seizures of DNA violate privacy and do little to improve law enforcement.”

The public rarely recognizes how the privacy violations of those they consider bad people (e.g., “criminals”) chip away at privacy for all of us. It is often done against the backdrop of something no rational, half-thinking person can argue against, such as “fighting crime”. Fear language is used to silence and marginalize critics, and too often the “authorities” succeed in achieving their narrow goal — such as building heavily armed and rarely-used SWAT programs or chasing the ghosts of the drug trade — without the benefit of public discourse reflecting on the downsides.

In this case, the “downsides”, like so much other law enforcement pork projects, are wasted dollars on security theater and a massive invasion of personal privacy with little effort spent to ensure that the program will protect the privacy of not only the innocents but the accused as well.

Judiciary To Monitor Spy Program

// January 18th, 2007 // No Comments » // Security & Privacy

The Bush Administration has agreed to judicial oversight of it’s domestic spying program (which I’ve discussed previously).

In other words, the Administration has (finally) agreed to allow the FISA court to do it’s job, rather than subverting it as they’ve done for the past 5 years.

It’s amazing how little has been done by Congress and the Judiciary – even in the age of frigid Presidential job approval ratings – to reign in the gross excesses of executive power that have been foisted on the American people since 9/11.

It’s encouraging to hear this news and hope that it is the beginning of a tide-shift in reclaiming the civil liberties lost these last few years.

Daily WTF’s Humorous Screenshots

// January 18th, 2007 // No Comments » // Life

I always get a kick out of the Daily WTF’s humorous screenshots.

Outlook 2007 To Render HTML Emails Using Word

// January 14th, 2007 // 1 Comment » // Technology

Outlook 2007Campaign Monitor and MSDN report that the new Microsoft Outlook 2007 will use Microsoft Word to render HTML emails instead of Internet Explorer.

Given the huge market share of both Outlook and IE, this is quite a blow to legitimate email marketers as it cuts out many of the better features of HTML emails, such as CSS, support for div tags and background images.

For those of you offering a hooray in the hopes it will somehow impact the volume of SPAM you receive, don’t be naive, it won’t.

It’ll only make it harder to produce a decent looking HTML email or to have the volumes already created by corporate campaigns read as they were intended.

As a side note, I was able to get an early release of the Office 2007 product and have been using it for several weeks now. I’m a full-time GMail user now, but previously used Mozilla Thunderbird exclusively. I use Outlook 2003 at work because, well, I have to. But the other Office 2007 products have a radically different menuing system from the previous two releases. Many of the options you previously had to search a text menu for you now have visually represented with icons in a larger menu at the top (another Apple ripoff). But so far it’s just been confusing to me.

I’m forcing myself to learn the new system but much like the subject of this post, it’s another example of Microsoft making things tougher on us — because they can. The fact that so many of the much-touted, new-and-improved features of Vista appear to be straight copies of the Apple Mac OS X interface demonstrates a fundamental lack of innovative capacity in Redmond. That’s not to say they don’t innovate, it’s just shocking given their size and wealth that they can’t leapfrog even Apple in terms of the quality of product delivered. In truth they could, it seems they just don’t want to — probably because so far, they haven’t had to.

Choosing Secure Passwords

// January 13th, 2007 // No Comments » // Security & Privacy

Bruce Schneier has written an excellent essay on choosing secure passwords. This isn’t an anecdotal finger-shaking exercise, it’s specific technical advice on what composes a secure password and how to create one.

As he points out, the best password in the world won’t stop an attacker from exploiting the inherent security weakness of the underlying operating system, but hey, at least you did your part, right?

What I’d like to see is another article on a viable system to actually record/encrypt/remember the hundreds of passwords many people have to remember. I use a PGP-encrypted text file. The weakness there is I have to have a copy of my password file, PGPFreeware, and my private PGP key installed on whatever PC I need to retrieve my password on. So this works great for systems I access regularly and control access to. Not so great when I’m offsite somewhere or working with third-party systems. It’s also highly-technical and labor-intensive for the average person so this method would never be widely adopted.

Of course there are lots of software solutions. But I’d like to see someone do an exhaustive report on the methods and software solutions of saving passwords and what’s both reasonable and works best for the non-techie population.