Using data brokering to Take the Elderly

Data brokering is dangerous and uncontrolled
(Image used under: Creative Commons 3.0 [SRC][Mod])

You know all those times I've complained about data brokering and how companies are able to hit us where we are weakest because of all they learn and profile about us? I'm not just making this stuff up.

Mr. Guthrie, who lives in Iowa, had entered a few sweepstakes that caused his name to appear in a database advertised by infoUSA, one of the largest compilers of consumer information. InfoUSA sold his name, and data on scores of other elderly Americans, to known lawbreakers, regulators say. InfoUSA advertised lists of "Elderly Opportunity Seekers," 3.3 million older people "looking for ways to make money," and "Suffering Seniors," 4.7 million people with cancer or Alzheimer’s disease. "Oldies but Goodies" contained 500,000 gamblers over 55 years old, for 8.5 cents apiece. One list said: "These people are gullible. They want to believe that their luck can change."
Tags: , ,

The US in USDA Stands for Useless and Sloppy

Totally organic... sure
(Image used under: Creative Commons 3.0 [SRC])

What is the point of an agency that thinks it's ok to label non-organic foods as organic?

USDA's rule, in contrast, permitted products labeled "organic" to contain non-organic substances so long as producers obtained certification that organic versions of the relevant ingredients were not available. Why should it matter whether substances are on the list?

My thoughts exactly.

Tags: , , ,

The Failure of the President’s ID Theft Task Force

Federal Trade Commission - Forgot their job apparently
(Image used under: Creative Commons 2.0 [SRC])

On May 10th, 2006, President Bush signed an executive order to create an Identity Theft Task force in order to identify concrete steps to reducing the identity theft problem.

On Dec 26th, 2006, the task force put out a public call for comments to "improve the effectiveness and efficiency of federal government efforts to reduce identity theft".

Of course, I submitted details about implementing Credit Freezes and halting data abuse

There were off to a good start when the interim results of the task force included language about Credit Freezes:

For residents of states in which state law authorizes a credit freeze, consider placing a credit freeze on their credit file. This option is most useful when the breach includes information that can be used to open a new account, such as SSNs. A credit freeze cuts off third party access to a consumer’s credit report, thereby effectively preventing the issuance of new credit in the consumer’s name.

But problems started when the press release mysteriously omitted the information. They'd already failed to include it in their consumer education initiative though they're happy to recommend Fraud alerts or Credit monitoring for FREE! Well, whee! That's just great. Thanks for paying for my worthless monitoring service which will tell me in horrific real time that I'm being ripped off rather than actually do anything to stop it.

April 17th, 2007 Update

I called the FTC office of media relations and was directed to Claudia Bourne Farrell who apparently was the one who drafted the press release. She contends that credit freeze language was ~"probably stripped for brevity" and politely, but firmly persisted that the release was fine the way it was. She did provide her e-email before we concluded the call so I took one more opportunity to educate her about the issue:

Dear Ms. Bourne-Farrell,

If you understand how credit freezes work as you say, I hope you will see that they are far more effective than fraud alerts (which are optional for retailers to follow), and credit monitoring (which only alerts you to bad activity without actually stopping it). Freezes fully prevent ANY kind of check of one's credit report without express consent.

While stopping the proliferation of private data and the loss thereof is a huge part of the problem, I and all other Americans would sleep better knowing that in many cases, it doesn't matter who has the data because they can't use it for anything that requires a credit check.

Please, understand that I don't mean to be offensive when I ask this, but how is the FTC doing their job when they won't even list credit freezes as an important tool for consumers along with fraud alerts (which are temporary and of questionable effectiveness) and credit monitoring (which doesn't stop anything plus costs a monthly fee)?

Thank you for listening,

Sincerely,

Jeremy Duffy

And here is the one I sent to Alberto Gonzales, Chair of the ID Theft Task Force:

Dear Mr. Gonzales,

I have begun following some of the developments of the Identity Theft Task force and am extremely concerned. Credit Freezes are the best way to ensure consumer peace of mind, and I see that the task force has mentioned it in your interim recommendations (which is good). However, your press release didn't include it.

I have contacted the FTC's media relations department and am unsure if my message will be acted on. I am hoping that they will not repeat this mistake in the release of your final recommendations, but I am doubtful. Please make sure, for all our sakes, that the Task Force's message of credit security freezes is heard loud and clear, not just in the full documents, but the press releases as well.

Thank you for your time,

Jeremy Duffy

Failing to include credit freeze information was nothing short of incompetence.

Sadly, on release of the final recommendations some time later, freezes were only barely mentioned and even then, discouraged. This is hardly the first time I've seen government incompetence up close, but considering the importance of the issue, it was still discouraging. Bottom line, the FTC and in particular Ms. Bourne Farrell and Alberto Gonzales failed the President and the citizens they are supposed to serve.

Tags: , , , , ,

Microsoft “Dirty Tricks” Archive

(Image used under: Creative Commons 2.0 [SRC])

The Register has been following the story of a massive archive of "dirty tricks" that Microsoft performed during a lawsuit. Recently, the archive disappeared from the Internet, but now it's back in the form of torrents.

Tags: , ,

Bluetooth Spam is Coming

Hijacking your Bluetooth headset to send ads is apparently ok in some countries with lax regulations
(Image used under: Creative Commons 2.0 [SRC])

Slashdot points to an article about companies who have figured out a way to send commercials to nearby bluetooth devices. So now if you're walking near a fast food spot, you get a instant message on your phone offering a lunchtime special.

According to the article, the Netherlands (where the practice is widespread) has refused to classify it as Spam giving advertisers the legal green light to start jumping unsuspecting bluetooth phone users. Coming soon to America.

Tags: , , ,

Pretexting Becomes Illegal

From the Ars Technica article:

Under the new law, anyone attempting to "knowingly and intentionally" acquire the phone records of a third party by making false representations to a phone company or selling such illegally obtained records will face up to ten years in prison and fines.

Is it just me or does this seem really wrong? Why did we have to make a law about this? Wasn't it obviously a bad thing already?

Tags: ,

Sony Settles for $4.5 Million for their Illegal CD-Virus

Sony literally hacked US citizens and got a slap on the wrist.
(Image used under: Creative Commons 2.0 [SRC][Mod][Comp])

Consumer Affairs reports a settlement with 39 states for Sony's use of a "rootkit" to try and prevent users from copying their music. This forced DRM was detected by computer experts and quickly raised a stir.

Most importantly,

Sony said it was "pleased" with the settlement and said it would stop using copy-protection software that cannot be easily removed from consumers' PCs
Tags: , , , , ,

Loading...

If you want to learn more about my professional background, click here to learn more.

Check out one of my guides/tutorials:

passwords Tutorial
|INDEX|next: Password Tips and Tricks

Making Good Passwords

To understand what makes a good password, let's talk about what makes a bad one first.
Making good passwords can be complex, but here are some tips and tricks that will make it easier.

Password Protection

Once you've taken the trouble to make a good password, the next step is to keep it safe!
Now that you've done all this work, you have to learn the most important rule of all: DON'T GIVE THEM AWAY!

... or check out any of my other guides and tutorials by clicking here!

Credit Freeze

Setting a credit report freeze is the fastest and most effective way to actually block and reduce your risk of ID Theft. And it's free.

[Click for full description]

Credit Freeze

Setting a credit report freeze is the fastest and most effective way to actually block and reduce your risk of ID Theft. And it's free.

[Click for full description]

Bad Passwords

To understand what makes good passwords, first check out some of the worst passwords out there and what makes them so bad.

[Click for full description]

Password Tips and Tricks

It's impossible to expect someone to make good passwords by just giving them some rules. There are tricks that make your passwords secure and easy for you all at the same time.

[Click for full description]

Password Protection

It's really a skill to come up with secure passwords that you can remember. Once you've learned how, remember that it doesn't matter how good you are if you don't protect your password properly.

[Click for full description]

Password Mugging

A disturbing new practice among websites and services is where they ask you for your user name and password to other sites. I call this "Password Mugging"

[Click for full description]