Court Says Minor Can Be Prosecuted for Sexting

A law designed to protect minors from child pornography was used to prosecute a Maryland high school student for sexting During the 2016-17 school year, a high school student with the initial S.K. posted in a group chat for her cell phone a one-minute… Continue reading Court Says Minor Can Be Prosecuted for Sexting

Biometrics, Facial Recognition, Privacy, Security and the Law

The danger in using biometrics and facial recognition is that they’re not always accurate. A recent article in the L.A. Times indicated that facial recognition software proposed to be used for police bodycams falsely indicated that about 20% of … Continue reading Biometrics, Facial Recognition, Privacy, Security and the Law

Should GitHub Be Liable for the Capital One Hack?

Probably the dumbest questions you can ask a lawyer—particularly in the wake of a massive data breach—is, “Can I sue?” The answer is almost always, “Yes.” And what would you sue for? Answer. “A real long time.” In the aftermath of the Capital One data… Continue reading Should GitHub Be Liable for the Capital One Hack?

What’s in YOUR Wallet? A Tepid Defense of Capital One

It started with an e-mail to a Capital One “responsible disclosure” email address early Wednesday, July 17, at 1:25 a.m. The note was short and cryptic. It simply said that “there appears to be some leaked s3 data of yours on someone’s github/gist.” T… Continue reading What’s in YOUR Wallet? A Tepid Defense of Capital One

Face Off: Privacy Issues Not Confined to FaceApp

The internet and the security community is up in arms and shocked, shocked to see that a web developer is collecting data that you share with them and processing that data in the cloud. In this case, the app is FaceApp, an application developed by an … Continue reading Face Off: Privacy Issues Not Confined to FaceApp

Criminalize Ransomware Payment? A Bad Solution for a Bad Problem

On June 24, the Washington Post came up with a simple solution for the ransomware problem that is plaguing the U.S. critical infrastructure in general, and municipalities in particular. The Post opined that the solution to malicious ransomware was for… Continue reading Criminalize Ransomware Payment? A Bad Solution for a Bad Problem

Court Rules Airline Not Bound By Privacy Policy

An airline’s privacy policy isn’t an enforceable contract and it can use customer data for any purpose, a California court has ruled. If a company promises it will only use your data for one purpose and it will protect your data, then suff… Continue reading Court Rules Airline Not Bound By Privacy Policy

The Legality of Waging War in Cyberspace

In cyberwar, there is a fine line between acts of war and espionage On June 14, the New York Times reported that U.S. active cyber agents had demonstrated their ability to penetrate the security of a Russian power utility system and had inserted U.S.-… Continue reading The Legality of Waging War in Cyberspace

Supreme Court Cell Privacy Ruling Thwarted

If the government wants to track your location for hours, days, weeks, months or even years, it has various tools at its disposal: It can commit the resources of teams of detectives to follow you around. It can install a beeper tracker into some devic… Continue reading Supreme Court Cell Privacy Ruling Thwarted

Security Lessons From the CPB Biometric Data Breach

On June 10, the U.S. Customs and Border Protection (CPB) announced that it—well, a contractor of its—had suffered a data breach involving photographs of persons and license plates of cars at its ports of entry. There are a bunch of lessons to be learn… Continue reading Security Lessons From the CPB Biometric Data Breach