<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>26 Miles &#187; Security &amp; Privacy</title>
	<atom:link href="http://26mi.com/category/security-and-privacy/feed/" rel="self" type="application/rss+xml" />
	<link>http://26mi.com</link>
	<description>Life's a marathon...not a sprint.</description>
	<lastBuildDate>Sat, 10 Jul 2010 03:03:14 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Is Joseph Stack A Terrorist</title>
		<link>http://26mi.com/is-joseph-stack-a-terrorist/</link>
		<comments>http://26mi.com/is-joseph-stack-a-terrorist/#comments</comments>
		<pubDate>Fri, 19 Feb 2010 13:57:00 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[media]]></category>
		<category><![CDATA[terrorism]]></category>

		<guid isPermaLink="false">http://26mi.com/?p=849</guid>
		<description><![CDATA[Apparently not to most of the people voting in the CNN.com poll.
Look it up people, it&#8217;s terrorism.  
Wouldn&#8217;t you say the Oklahoma City bombing was terrorism?  The news media sure did.  Joseph Stack harbored a grudge against the US Government for perceived wrongs, much like Tim McVeigh.
Several easy-to-find definitions of terrorism (although [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://26mi.com/wp-content/uploads/2010/02/cnn-quick-vote-terrorism.png"><img src="http://26mi.com/wp-content/uploads/2010/02/cnn-quick-vote-terrorism.png" alt="" title="cnn-quick-vote-terrorism" width="220" height="171" class="alignright size-full wp-image-851" /></a>Apparently not to most of the people voting in the <a href="http://cnn.com">CNN.com</a> poll.</p>
<p>Look it up people, it&#8217;s terrorism.  </p>
<p>Wouldn&#8217;t you say the Oklahoma City bombing was terrorism?  <a href="http://en.wikipedia.org/wiki/Oklahoma_City_bombing">The news media sure did</a>.  <a href="http://news.google.com/news/search?q=joseph+stack">Joseph Stack</a> <a href="http://i2.cdn.turner.com/cnn/2010/images/02/18/stack.letter.pdf">harbored a grudge against the US Government for perceived wrongs</a>, much like <a href="http://en.wikipedia.org/wiki/Timothy_McVeigh">Tim McVeigh</a>.</p>
<p>Several easy-to-find definitions of terrorism (although a widely agreed-to definition somehow <a href="http://en.wikipedia.org/wiki/Terrorism_%28definitions_of%29">still escapes us</a>).</p>
<p><a href="wordnetweb.princeton.edu/perl/webwn">Princeton.edu</a></p>
<blockquote><p>The calculated use of violence (or the threat of violence) against civilians in order to attain goals that are political or religious or ideological in nature; this is done through intimidation or coercion or instilling fear.</p></blockquote>
<p><a href="en.wiktionary.org/wiki/terrorism">Wiktionary.org</a></p>
<blockquote>
<ol>
<li>The deliberate commission of an act of violence  to create an emotional response through the suffering of the victims in the furtherance of a political or social agenda.</li>
<li>Violence against civilians to achieve military or political objectives.</li>
</ol>
</blockquote>
<p>An act of violence against civilians in the furtherance of a political or social agenda is terrorism no matter who the perpetrator is.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/is-joseph-stack-a-terrorist/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>All Subversive Organizations Now Must Register in South Carolina</title>
		<link>http://26mi.com/all-subversive-organizations-now-must-register-in-south-carolina/</link>
		<comments>http://26mi.com/all-subversive-organizations-now-must-register-in-south-carolina/#comments</comments>
		<pubDate>Tue, 16 Feb 2010 15:15:28 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[politics]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[terrorism]]></category>

		<guid isPermaLink="false">http://26mi.com/?p=834</guid>
		<description><![CDATA[Apparently All Subversive Organizations Now Must Register in South Carolina.  I&#8217;m guessing this will save the authorities countless hours of investigation time in finding criminals accused of crimes where these organizations are suspected of involvement.  Brilliant!
]]></description>
			<content:encoded><![CDATA[<p>Apparently <a href="http://www.schneier.com/blog/archives/2010/02/all_subversive.html">All Subversive Organizations Now Must Register in South Carolina</a>.  I&#8217;m guessing this will save the authorities countless hours of investigation time in finding criminals accused of crimes where these organizations are suspected of involvement.  Brilliant!</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/all-subversive-organizations-now-must-register-in-south-carolina/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The TSA Wants You Naked</title>
		<link>http://26mi.com/the-tsa-wants-you-naked/</link>
		<comments>http://26mi.com/the-tsa-wants-you-naked/#comments</comments>
		<pubDate>Fri, 11 Jul 2008 21:13:32 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[politics]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[rant]]></category>

		<guid isPermaLink="false">http://26mi.com/?p=214</guid>
		<description><![CDATA[Rivaling only the IRS in the public&#8217;s collective derision, the Transportation Security Administration (TSA) now has a new gadget through which to extend their reign of Orwellian coercion on we, the throngs of presumed-terrorists boarding U.S. flights every day.
The new &#8220;millimeter wave scanners&#8221; rolling out in some U.S. airports &#8212; and used as part of [...]]]></description>
			<content:encoded><![CDATA[<p>Rivaling only the IRS in the public&#8217;s collective derision, the Transportation Security Administration (TSA) now has a new <a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/06/20/AR2008062002227.html" target="_blank">gadget</a> through which to extend their reign of Orwellian coercion on we, the throngs of presumed-terrorists boarding U.S. flights every day.</p>
<p>The new &#8220;millimeter wave scanners&#8221; rolling out in some U.S. airports &#8212; and used as part of the &#8220;secondary screening&#8221; on selected passengers &#8212; photograph the human body through the clothing with a high-degree of photo-realistic accuracy.</p>
<p>From the article:</p>
<blockquote><p>
&#8220;These machines, which show detailed images of a person&#8217;s naked body, are equivalent to a &#8216;virtual strip search,&#8217; &#8221; says the Electronic Privacy Information Center (EPIC). &#8220;The image resolution &#8230; is high so the picture of the body presented to screeners is detailed enough to show genitalia.&#8221;
</p></blockquote>
<p>&#8230;and&#8230;</p>
<blockquote><p>
Barry Steinhardt of the American Civil Liberties Union marvels at the government&#8217;s double standard: &#8220;If Playboy published them, there would be politicians out there saying they&#8217;re pornographic.&#8221;
</p></blockquote>
<p>The TSA has also begun handing out <a href="http://news.aol.com/story/_a/tsas-badges-are-a-sore-spot-with-cops/20080616094709990002" target="_blank">cracker-jack-box badges</a> to it&#8217;s workforce and outfitting them in blue, police-looking uniforms.  Real law enforcement officers are <a href="http://forums.securityinfowatch.com/showthread.php?t=5480&#038;page=3" target="_blank">none to happy</a> being cast in the same lot with the TSA workers.</p>
<p>Now &#8230; they want to see us naked.  Are we ready yet to say enough is enough, or will we, as we have since 9/11, simply march like lemmings through the nudie-portal and continue to let the TSA and their policies run amok, awash in excessive power and limited, ineffective oversight?</p>
<p>The TSA itself likely represents the greatest threat to aviation safety and the long-term economic viability of the airline industry.  In so poorly executing their mission, they create a very thin illusion of security when in fact it could be argued the aviation safety record of the last 7 years was achieved in spite of them, rather than because of them.</p>
<p>A serious, thoughtful discussion needs to occur about how best to understand and guard against whatever the real threat to airline safety is, and shape new policies and, if necessary, organizations around the outcomes of that discussion.  The TSA was hastily conceived during a period of fear and sorrow and since inception the divergence between real threats and their ill-conceived policies has only grown.  5 ounces of shampoo and a <a href="http://www.salon.com/tech/col/smith/2008/07/11/askthepilot283/" target="_blank">butter knife</a> do not a terrorist make.   Folks, It&#8217;s time to start over with this one.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/the-tsa-wants-you-naked/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Portrait of the Modern Terrorist as an Idiot</title>
		<link>http://26mi.com/portrait-of-the-modern-terrorist-as-an-idiot/</link>
		<comments>http://26mi.com/portrait-of-the-modern-terrorist-as-an-idiot/#comments</comments>
		<pubDate>Mon, 18 Jun 2007 12:44:48 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Business & Politics]]></category>
		<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[media]]></category>
		<category><![CDATA[politics]]></category>
		<category><![CDATA[rant]]></category>
		<category><![CDATA[terrorism]]></category>

		<guid isPermaLink="false">http://26mi.com/security-and-privacy/portrait-of-the-modern-terrorist-as-an-idiot/</guid>
		<description><![CDATA[Bruce Schneier has an excellent article that aligns exactly with how I feel every time I hear news of a new &#8220;terrorist plot&#8221; that has been disrupted.  Inevitably, the story that follows paints a picture of a marginalized, incompetent set of characters who had little chance of carrying out a mass-casualty attack, and who [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.schneier.com">Bruce Schneier</a> has an excellent <a href="http://www.schneier.com/blog/archives/2007/06/portrait_of_the.html">article</a> that aligns exactly with how I feel every time I hear news of a new &#8220;terrorist plot&#8221; that has been disrupted.  Inevitably, the story that follows paints a picture of a marginalized, incompetent set of characters who had little chance of carrying out a mass-casualty attack, and who often hadn&#8217;t progressed beyond the &#8220;yelling-at-the-TV&#8221; phase of their so-called &#8220;plot&#8221;.</p>
<p>I&#8217;m sure there is real investigation going on and real plots are being uncovered and disrupted.  But the ones that seem to get the most attention are the ones that revolve around sensational targets or the potential, however remote, of mass-casualties, regardless of the actors&#8217; operational capacity.</p>
<p>As he says in his article: &#8220;[...] in this country, while you have to be competent to pull off a terrorist attack, you don&#8217;t have to be competent to cause terror.&#8221;</p>
<p>Perhaps these stories are the security equivalent of an opiate for the masses.  The appearance that the security folks are &#8220;on the job&#8221; and &#8220;getting things done&#8221;.  The reality sometimes seems so different.  </p>
<p>There are real terrorists out there that pose a real threat to us.  Too often, the ones you see <a href="http://abcnews.go.com/US/wireStory?id=3239125">getting arrested on TV</a> or <a href="http://www.slate.com/id/2108634/">simmering in their cages at Gitmo</a> aren&#8217;t the ones we should worry about.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/portrait-of-the-modern-terrorist-as-an-idiot/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Stop (Some) Junk Mail</title>
		<link>http://26mi.com/stop-some-junk-mail/</link>
		<comments>http://26mi.com/stop-some-junk-mail/#comments</comments>
		<pubDate>Tue, 12 Jun 2007 13:43:07 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[minutiae]]></category>

		<guid isPermaLink="false">http://26mi.com/security-and-privacy/stop-some-junk-mail/</guid>
		<description><![CDATA[I saw this on CNN.com the other day (can&#8217;t find the article now, glad their internal search works so well).
From their site:
[...]
&#8220;OptOutPreScreen.com is the official Consumer Credit Reporting Industry website to accept and process requests from consumers to Opt-In or Opt-Out of firm offers of credit or insurance.&#8221;
[...]
In short, the site allows you to opt-out [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.optoutprescreen.com"><img hspace="10" border="1" title="OptOutPreScreen.com" alt="OptOutPreScreen.com" src="http://26mi.com/wp-images/optoutprescreen.jpg" align="right" /></a>I saw this on <a href="http://cnn.com">CNN.com</a> the other day (can&#8217;t find the article now, glad their internal search works so well).</p>
<p>From their site:<br />
[...]<br />
&#8220;<a href="https://www.optoutprescreen.com">OptOutPreScreen.com</a> is the official Consumer Credit Reporting Industry website to accept and process requests from consumers to Opt-In or Opt-Out of firm offers of credit or insurance.&#8221;<br />
[...]</p>
<p>In short, the site allows you to opt-out from (for 5 years or permanently), or opt-in to, the &#8220;&#8230;lists used by creditors or insurers to make firm offers of credit or insurance that are not initiated by you&#8230;&#8221;.</p>
<p>About 50% of the junk mail I receive are from credit card companies offering credit lines or cards with teaser rates for balance transfers.  If this will stop 50% of my junk mail, I&#8217;ll be one happy camper.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/stop-some-junk-mail/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Childhood Risks Perceived and Real</title>
		<link>http://26mi.com/childhood-risks-perceived-and-real/</link>
		<comments>http://26mi.com/childhood-risks-perceived-and-real/#comments</comments>
		<pubDate>Mon, 11 Jun 2007 13:26:48 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[Family]]></category>
		<category><![CDATA[media]]></category>
		<category><![CDATA[rant]]></category>

		<guid isPermaLink="false">http://26mi.com/security-and-privacy/childhood-risks-perceived-and-real/</guid>
		<description><![CDATA[I ran across a timely article that may help assuage the collective parental panic that inevitably follows news of the loss of a child in an apparently random act of violence.
BBC News has an article reflecting on the shrinking boundaries within which parents limit their children.  Parents today can easily be overwhelmed by compelling [...]]]></description>
			<content:encoded><![CDATA[<p><img hspace="10" border="1" title="" alt="" src="http://26mi.com/wp-images/kids-playing.jpg" align="right" />I ran across a timely article that may help assuage the collective parental panic that inevitably follows news of the <a href="http://www.kelseysarmy.com/">loss of a child</a> in an apparently <a href="http://edition.cnn.com/2007/US/06/08/missing.teen.ap/">random act of violence</a>.</p>
<p><a href="http://news.bbc.co.uk">BBC News</a> has an article <a href="http://news.bbc.co.uk/2/hi/uk_news/education/6720661.stm">reflecting on the shrinking boundaries within which parents limit their children</a>.  Parents today can easily be overwhelmed by compelling and tragic stories of losing a child &#8212; to illness, accidental death, kidnapping or worse.  There are people whose careers are built around keeping attention focused on these tragedies (<a href="http://www.amw.com/">some</a> I prefer to <a href="http://www.cnn.com/CNN/Programs/nancy.grace/">others</a>). </p>
<p>The result of this deluge of despair is a cadre of parents who feel feel that &#8212; to keep from having to bear the weight of a similar tragedy firsthand &#8212; they must take all possible steps to protect and sanitize their kids experiences from not only real threats, but from all possible threats they (with the help of 24-hour-global-news) can imagine.  The result is an ever-shrinking bubble of pseudo-reality parents attempt to craft for their kids that may ultimately do more harm than good.  </p>
<p>The BBC article discusses this trend, and it&#8217;s possible impact on childhood development.</p>
<p>From the article:<br />
[...]<br />
&#8220;There is increasing concern that today&#8217;s &#8216;cotton-wool kids&#8217; are having their development hampered.  They are likely to be risk-averse, stifled by fears which are more phobic than real.  Their lack of unsupervised play may also reduce the opportunity to form deep friendships in early years.&#8221;<br />
[...]</p>
<p>There remain cultural differences as well.  Many American&#8217;s (including me I&#8217;ll admit) were shocked to hear that <a href="http://www.cnn.com/2007/WORLD/europe/05/17/portugal.missing.child.ap/">Madeleine McCann</a> was taken from her bed in a Portugal resort while her parents were having dinner 50 meters away.</p>
<p>I&#8217;ve written about <a href="http://26mi.com/family/secure-kids/">kids and security</a> before.  I rarely watch &#8220;mainstream&#8221; news simply because &#8212; as my wife says &#8212; it doesn&#8217;t improve my life or make me happier.  But stories like <a href="http://abcnews.go.com/US/wireStory?id=3257336">this</a> have a way of bringing themselves into focus, despite my intentional ignorance.</p>
<p>It&#8217;s something to think about &#8212; most all of us do it to some degree.  Always keeping our kids uber-clean, on a short leash, loaded-up with vitamins, and in the air conditioning may help us sleep better at night.  But many of our concerns are really just pop-phobias, and our preoccupation with them may be keeping our kids from living open, imaginative lives unencumbered by our own fears, both real and imagined.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/childhood-risks-perceived-and-real/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Bruce Schneier Facts</title>
		<link>http://26mi.com/bruce-schneier-facts/</link>
		<comments>http://26mi.com/bruce-schneier-facts/#comments</comments>
		<pubDate>Thu, 12 Apr 2007 12:29:11 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://26mi.com/security-and-privacy/bruce-schneier-facts/</guid>
		<description><![CDATA[You know you&#8217;re a real security geek when you can&#8217;t flip through these because you&#8217;re wiping away tears of laughter.
My favorite&#8230; &#8220;Bruce Schneier once proved the infinitude of twin primes &#8212; by enumeration.&#8221;
For those of you who aren&#8217;t familiar with Bruce Schneier, read on.
Also, be sure to get the t-shirt.
]]></description>
			<content:encoded><![CDATA[<p><img hspace="10" border="1" title="Bruce Schneier" alt="Bruce Schneier" src="http://26mi.com/wp-images/bruce-schneier.jpg" align="right" />You know you&#8217;re a real security geek when you can&#8217;t flip through <a href="http://geekz.co.uk/schneierfacts/">these</a> because you&#8217;re wiping away tears of laughter.</p>
<p>My favorite&#8230; &#8220;Bruce Schneier once proved the infinitude of twin primes &#8212; by enumeration.&#8221;</p>
<p>For those of you who aren&#8217;t familiar with Bruce Schneier, <a href="http://www.schneier.com">read on</a>.</p>
<p>Also, be sure to <a href="http://geekz.co.uk/shop/store/show/schneier-tshirt">get the t-shirt</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/bruce-schneier-facts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Recovering From Identity Theft</title>
		<link>http://26mi.com/recovering-from-identity-theft/</link>
		<comments>http://26mi.com/recovering-from-identity-theft/#comments</comments>
		<pubDate>Thu, 29 Mar 2007 13:28:45 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://26mi.com/security-and-privacy/recovering-from-identity-theft/</guid>
		<description><![CDATA[With identify theft on the rise, I&#8217;ve often wondered where I&#8217;d start if it ever happened to me.
YourCreditAdvisor.com has a 24-point checklist for recovering your identity that seems pretty comprehensive.
Needless to say, if it ever happens to you, you&#8217;ll be one busy individual trying to recover it.
Establishing a pattern of always paying with cash as [...]]]></description>
			<content:encoded><![CDATA[<p>With identify theft on the rise, I&#8217;ve often wondered where I&#8217;d start if it ever happened to me.</p>
<p><a href="http://www.yourcreditadvisor.com">YourCreditAdvisor.com</a> has a <a href="http://www.yourcreditadvisor.com/blog/2007/03/your_identity_h.html">24-point checklist for recovering your identity</a> that seems pretty comprehensive.</p>
<p>Needless to say, if it ever happens to you, you&#8217;ll be one busy individual trying to recover it.</p>
<p>Establishing a pattern of always paying with cash as much as possible can be one step in minimizing your exposure.  Spending money you already have &#8211; instead of charging it &#8211; is always a good idea as well, and apparently when you pay with cash, you&#8217;re more inclined to <a href="http://abcnews.go.com/Business/story?id=2987831&#038;page=1">spend less than when using a credit card</a>.</p>
<p>Identity theft happens to real people.  I found out last weekend a house behind ours was purchased using a stolen identity.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/recovering-from-identity-theft/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Welcome To Boston!  Let&#8217;s Blow-Up Something!</title>
		<link>http://26mi.com/welcome-to-boston-lets-blow-up-something/</link>
		<comments>http://26mi.com/welcome-to-boston-lets-blow-up-something/#comments</comments>
		<pubDate>Fri, 02 Mar 2007 22:30:08 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[media]]></category>
		<category><![CDATA[rant]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[terrorism]]></category>

		<guid isPermaLink="false">http://26mi.com/security-and-privacy/welcome-to-boston-lets-blow-up-something/</guid>
		<description><![CDATA[If you haven&#8217;t been following the various terrorism false alarm stories in the last few months, you&#8217;ve been missing what has to be both one of the funniest and saddest security stories of the year.
That said, it has given us some quality satire and art to reflect the humor we find in collective paranoia and [...]]]></description>
			<content:encoded><![CDATA[<p><img hspace="10" border="1" title="Mooninites" alt="Mooninites" src="http://26mi.com/wp-images/athf.jpg" align="right" />If you haven&#8217;t been following the various <a href="http://www.boston.com/news/globe/city_region/breaking_news/2007/01/suspicious_obje_1.html">terrorism</a> <a href="http://www.thebostonchannel.com/news/10890113/detail.html">false</a> <a href="http://www.schneier.com/blog/archives/2007/02/is_everything_a.html">alarm</a> stories in the last few months, you&#8217;ve been missing what has to be both one of the funniest and saddest security stories of the year.</p>
<p>That said, it has given us some quality <a href="http://www.bbspot.com/News/2007/03/boston-police-blow-up-suspicious-looking-man.html">satire</a> and <a href="http://digitalfury.popmartian.com/images/20070202/paranoia.jpg">art</a> to reflect the humor we find in collective paranoia and overreaction.</p>
<p>But sadly, these stories represent more about what we lost after 9/11 than what we gained.  Stories of Homeland Security pork begging to be spent are available for <a href="http://www.heritage.org/Research/HomelandDefense/wm715.cfm">almost</a> <a href="http://www.boston.com/news/local/articles/2007/02/09/firefighters_windfall_comes_with_a_catch/">daily </a> <a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2006/02/19/INGDDH8E311.DTL">digestion</a>.  </p>
<p>Our perceived threat matrix has become far too broad and our methods for dealing with diverse threat vectors too narrow (e.g., &#8220;blow it up!&#8221;).  While blowing things up is unquestionably fun and makes for great TV, it&#8217;s not cheap and worse, when not outright embarrassing, does little to quell public fear about the authorities&#8217; ability to prevent whatever real threat there may be.</p>
<p>This even reached me personally last year at our neighborhood elementary school.  One of the children had left their backpack outside after school was dismissed for the day.  Eventually someone noticed it and (of course) phoned 911.  The bomb squad from a neighboring community was called in to show off their toys.  The media also came, complete with a helicopter overhead to observe what would inevitably be a dramatic detonation of the suspicious backpack.  The police robot gently tugged at the backpack and dragged it away from the building, then, however they do these things, the backpack was blown up on live TV.  </p>
<p>Scattered across the schoolyard were the guts of what used to be some poor kids backpack &#8212; books, multi-colored folders, etc., and what remained of the backpack.  It was all very exciting, and all very ridiculous to most any casual observer&#8230;.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/welcome-to-boston-lets-blow-up-something/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Protecting Your Users Data With a Privacy Wall</title>
		<link>http://26mi.com/protecting-your-users%e2%80%99-data-with-a-privacy-wall/</link>
		<comments>http://26mi.com/protecting-your-users%e2%80%99-data-with-a-privacy-wall/#comments</comments>
		<pubDate>Fri, 23 Feb 2007 23:13:38 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Security & Privacy]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://26mi.com/security-and-privacy/protecting-your-users%e2%80%99-data-with-a-privacy-wall/</guid>
		<description><![CDATA[Brad Greenlee has a good article in his blog about the data security architecture he designed and that&#8217;s used by Wesabe to protect the company&#8217;s sensitive data.
In essence, they abstract the connection between a user and their sensitive data by using a cryptographic hash rather than a foreign key. The result is that should the [...]]]></description>
			<content:encoded><![CDATA[<p><img hspace="10" border="1" title="Protecting User Data" alt="Protecting User Data" src="http://26mi.com/wp-images/protecting-data.jpg" align="right" /><a href="http://blog.footle.org/">Brad Greenlee</a> has a good article in his blog about the <a href="http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/">data security architecture</a> he designed and that&#8217;s used by <a href="http://www.wesabe.com/">Wesabe</a> to protect the company&#8217;s sensitive data.</p>
<p>In essence, they abstract the connection between a user and their sensitive data by using a cryptographic hash rather than a foreign key. The result is that should the data fall into the wrong hands, the data is readable but not traceable back to its owner. So in a bank for example, the bad guys would know that somebody has $500k in their account and somebody else has $500, but they wouldn&#8217;t know which one is me (well, anyone who knows me would, but&#8230;).</p>
<p>The design does have a few drawbacks, which he addresses, and additional measures would be required for very-high security applications (like a bank maybe). But it&#8217;s good to see smart people putting some good thought into designing simple, effective security into application and database architectures (which I&#8217;ve always felt was the most-overlooked and easiest-to-exploit of the generally accepted data security threats), and protecting users data from what is arguably it&#8217;s biggest threat &#8211; internal compromise.</p>
]]></content:encoded>
			<wfw:commentRss>http://26mi.com/protecting-your-users%e2%80%99-data-with-a-privacy-wall/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
