Collaborate Disseminate
Interesting paper: “Anonymization and Risk,” by Ira S. Rubinstein and Woodrow Hartzog: Abstract: Perfect anonymization of data sets has failed. But the process of protecting data subjects in shared information remains integral to privacy practice and policy. While the deidentification debate has been vigorous and productive, there is no clear direction for policy. As a result, the law has been… Continue reading Anonymization and the Law
I’ve got an existing customer base. A customer has appointments. Currently they cannot access or change their appointments without contacting me directly.
I want to offer them a way to access and change their upcoming appoin… Continue reading Risks of using UUID to identify user in mobile app
This is a good summary article on the fallibility of DNA evidence. Most interesting to me are the parts on the proprietary algorithms used in DNA matching: William Thompson points out that Perlin has declined to make public the algorithm that drives the program. "You do have a black-box situation happening here," Thompson told me. "The data go in, and… Continue reading The Fallibility of DNA Evidence
Modern cars are rolling computer networks, constantly capturing data about how they’re being driven, and perhaps even, who is driving them. Continue reading Is driving style the next biometric?
People can be identified from their "driver fingerprint": …a group of researchers from the University of Washington and the University of California at San Diego found that they could "fingerprint" drivers based only on data they collected from internal computer network of the vehicle their test subjects were driving, what’s known as a car’s CAN bus. In fact, they found… Continue reading Identifying People from their Driving Patterns
Jonathan Mayer, Patrick Mutchler, and John C. Mitchell, "Evaluating the privacy properties of telephone metadata": Abstract: Since 2013, a stream of disclosures has prompted reconsideration of surveillance law and policy. One of the most controversial principles, both in the United States and abroad, is that communications metadata receives substantially less protection than communications content. Several nations currently collect telephone metadata… Continue reading Identifying People from Their Metadata
I regularly connect to public wireless APs scattered around the city, offered by my carrier. I remember reading an article that a determined owner can track you between APs and thus know your location and routine. Now I found… Continue reading Does MAC spoofing prevent identification?
Yesterday I found out that some major service provider (online rentals) that I use now requires proof of my identity if I want to continue and make a booking. I was offered 2 options:
Enter last 4 digits of my social secu… Continue reading Why do some companies ask last 4 digits of my SSN or a scan of my ID? What are my risks?
I am reading The Basics of Information Security, 2nd. Ed., Andress, Jason.
He says on p.25, “Identity verification is a step beyond identification, but it is still a step short of authentication, which we will discuss in the… Continue reading Authentication vs. Verification in General and with Biometrics
Several times I get a phone call from a company- my bank, utility companies etc. Many times they are just cold calling me, but once or twice they were calling for legitimate reasons (ie, something to do with my account).
The… Continue reading How do I deal with companies that call and ask for personal information?