•

TJX Fires Employee for Publicizing Their Weak Security

(Image used under: Creative Commons 2.0 [SRC][Mod])

TJX, the company that is known for having the largest data breach in history (so far), has not implemented better security and might have gotten worse. The employee that blew the whistle on them has been caught and fired for it.

TJX now has a firm that scours the internet to find bad things posted about them, which is how they found the message and fired him for it. Too bad they don't appear to have hired anyone to beef up operational security or to convince people to use strong passwords.

Hey! That probably means they'll find THIS page. Sweet.

If that's the case, then here's my message to them: Stop storing all that personal data about us against our will and you won't have to pay for more security. You can't lose what you don't have, duh!

Tags: , , ,

Credit Freeze Presentation at CFP 2008

(Image is in the Public Domain)

I was given the opportunity to give a five minute talk on any topic of my choice relating to computers, freedom, or privacy preceding the conference dinner on Wednesday. Narrowing down all the things I would want to say was difficult at first, but of course had to be nothing other than credit freezes.

It drives me nuts that there's still so few people that know about this very important tool and I made sure that at least my fellow computer, freedom, and privacy advocates and peers would know. It turns out that there were many who hadn't heard of it before. After my talk, I had many people come to ask me about more details or to tell me that they spread the word to their friends and family. One even invited me to come speak at his church at a large event he's hosting in the fall!

It's a good start.

Tags: , ,

An Open Challenge to Todd Davis of Lifelock

(Image used under: Fair Use doctrine)

I have been challenging the value of Lifelock for a while based on the fact that they claim to prevent ID theft, but can't. It looks like several other people have come to that conclusion and are busy suing him for as much of his millions that they can get.

The problem is that even with CNN, Wired, and Yahoo finally getting around to spreading the word, Lifelock is still going very strong.

Even though I've been chasing lifelock postings around on the net and posting comments letting people know the truth, I don't think my efforts are going to amount to much in the long-run. That's why I've decided to challenge Todd Davis directly. He's obviously a showy type that feels comfortable challenging others so now it's time to turn the tables. I've looked into Lifelock's features and found them useful, but far from worth the money spent. But with only one feature addition, that could all change. So let's get to it:

Dear Todd Davis,

You appear at first glance to be quite the swift talker. You've promised to prevent ID Theft, but for some reason, you ignore the one and only tool that can actually do that: credit freezes.

I don't know why, perhaps you didn't know about them. But leaving your motivations and ID Theft experience aside, you can and should include credit freezes into your service immediately. Not only would you actually be able to prevent ID theft as you originally claimed, but you'd be able to help your customers in a very real way.

If you were to include both the freezing and as-needed thawing of freezes into your service, even I will agree that Lifelock has value.

Sure, I won't recommend it to everyone I know and I won't use it myself, but I would be able to honestly recommend it to people who would otherwise never get or use a freeze if they didn't have your service's help.

So pay attention Mr. Davis: If you want to turn public opinion toward your company and prevent the inevitable tide of negativity that threatens to drown you, perhaps you should consider making good on your word and actually prevent identity theft.

Sincerely,

-Jeremy Duffy Awareness Advocate

P.S. If you don't know what credit freezes are, click here.

So there you have it. What are the odds that he'll actually respond? We shall see…

Tags: , , ,

Malls Tracking Customer Movements Via Cellphones

(Image is in the Public Domain)

Lovely.

Customers in shopping centres are having their every move tracked by a new type of surveillance that listens in on the whisperings of their mobile phones.

The main point here is that business are highly interested in knowing everything they possibly can about you. The more then know, the more they can manipulate. Just wait until everything we're carrying has an RFID chip in it. That will make their jobs so much easier.

Tags: , ,

Viral Videos Replacing Ads, Generate Interest

(Image used under: Creative Commons 2.0 [SRC])

There are some companies that seem to be making videos for YouTube that don't specifically mention any products, but feature the products prominently none-the-less. At least one person has noticed the trend and reported on it in at least two videos, one that has already been proven to be an ad and the other only just released.

Obviously the new ad has the same goals as the old: to market a product without actually naming it, by appealing to the public's love of Internet stunt videos.

I don't really have a problem with this. They're getting attention for the product with legitimate interesting videos. Whether a pro company made it or not, the stunts are pretty interesting and people are watching it for that. Assuming they're not trying to give the impression that these are amateur videos anyway.

Tags: , ,

New Games Require Internet Connection or You Can’t Play (PBBBBBLLTT!)

It's a trap!
(Image used under: Creative Commons 2.0 [SRC])

Some new game manufacturers are requiring that the game system you play with have an Internet connection so the game can authenticate itself every few days. Most people are pretty adverse to being treated like criminals just to play a game much like they'd resent a screeching corporate harpy who strikes their hands with a ruler every time they do something that the company deems "unworthy".

Well since the company can't afford to train and assign a corporate harpy to each and every player, they instead put restrictive software that calls home and says, "yup, this guy's still ok". Should the software not be able to call home, like a spy under strict orders to lie low, the game will refuse to operate until given an Internet connection by which to phone home to command.

The funny thing about this is that most of their market will happily and quickly buy their games, but when they put in the screws, those same customers will refuse. However, being avid gamers and fans, when presented with the ability and opportunity to download a cracked copy, they are much more likely to do so since they will still want to play the game.

A not-so-suprising reaction from the gaming community: Penny Arcade Comic
Tags: ,

Chrysler’s 2.99 Gas Deal is No Deal

(Image used under: Creative Commons 3.0 [SRC])
Simply put, you get a special credit card when you buy a new Dodge (not every new Dodge, but most). You can use this credit card to buy fuel for $2.99 a gallon at any service station for three years following your date of purchase, regardless of the actual market price. Sounds great right?

Well it's not. Check out this article explaining why it's actually WORSE to take advantage of this deal than to buy a car normally.

Tags: ,

Youtube Champions Scientology Over Anonymous

(Image used under: Fair Use doctrine)

Anonymous posts anti-scientology videos on Youtube. They get canceled. They start a new account in order to try again and perhaps not get canceled this time. They get canceled.

Apparently Youtube policy is that if you've been banned, you get no second chances. Any new account you create will be destroyed…. Unless you're paying money as in the case of the Cult of Scientology.

And yet Scientology is back on YouTube. This time, it's paying for the account. It's also paying for ads on the site, looking to drive some traffic onto its new channel. "Get the facts," the ads say.
Tags: , ,

Lady Sued Exquifax and Handed Them Their Butts

(Image used under: Fair Use doctrine)

Not only did a lady win almost $3 million for suing equifax, but now they have to pay another half million in attorney fees. The story is that Equifax refused to fix her credit report after she was a victim of identity theft.

Tags: , ,

Lending Tree Has Data Breach – Offers Poor Advice to Victims

Bad play Lending Tree. Bad play.
(Image used under: Creative Commons 2.0 [SRC])

Apparently a Lending Tree employee gave internal passwords to external lenders without permission. This resulted in people being offered loans by lenders who shouldn't have been able to see their data. While Lending Tree doesn't believe that this particular activity is likely to lead to ID theft, it is a problem nonetheless.

I wasn't going to cover this story because it's so typical of what's happening recently, but this stuck in my craw. In a letter shared with the Consumerist by a reader, Lending Tree is recommending that people get fraud alerts on their accounts as a precaution.

Fraud alerts are practically worthless! Don't even bother. Get a freeze and you'll actually be protected.

Tags: , ,

Loading...

If you want to learn more about my professional background, click here to learn more.

Check out one of my guides/tutorials:

internet safety Tutorial
|INDEX|next: Online Addiction

General Safety

Avoid fake and nasty websites with my search engine trick.
Watch out for online addiction. Getting lost in fun online activities can be just as addiction as any drug.
So you want to write, publish, or share information online? Be careful. Things you say may be lost or forgotten, but things put on the Internet never are.
Don't fall for the well-known (or the new scams either) bad guys use to trick you into give away data or money.

Account Protection

Want to make an account with some online service? Read this first!
The newest, biggest risk online? Account hijacking! Don't become a victim by allowing your account to be taken over and learn to recognize when someone else has been.
Be sure transmission security is active before entering a name, password, credit card number, or other important information online.

... or check out any of my other guides and tutorials by clicking here!

How to Avoid Bogus Websites

There are bogus websites out there hoping you'll hit them by accident or using phishing to trick you into coming to them. Learn my simple trick to avoid these sites!

[Click for full description]

Online Addiction

Concerned about online addiction? You should be. Learn the types, the signs, and the preventions.

[Click for full description]

The Consequences of Posting Online

It's fun to post online. What you think, what you feel. But words typed and posted on the Internet can come back to bite you more than anything you could say with your mouth.

[Click for full description]

Tricks and Scams

Just because you won't willing give up data doesn't mean that I can't trick you out of it. Don't fall for these well known tricks!

[Click for full description]

Account Creation Tips

When you create an account with an online site, you should know a few things first.

[Click for full description]

Account Hijacking

One of the newest threats we face is the risk of someone getting control of your online account and using it against you and the people you know. Do everything you can to prevent that from happening!

[Click for full description]

Using HTTPS For Secure Login and Payment Online

Making online accounts is useful and fun, but doesn't mean much if someone can capture your login information and use it against you. Make sure to use this simple trick to prevent that from happening.

[Click for full description]