Security
Why Legislating Behavior Never Works
Earlier this year, the New York Times posted a story about the goal for California to remotely control thermostats in homes.
In concept, I can understand the reason why the energy commission would back a proposal like this.
Reducing individual customers’ electrical use — if necessary, involuntarily — could avoid that, Dr. Rosenfeld (California Energy Commission member) said. “If you can control rotating outages by letting everyone in the state share the pain,” he said, “there’s a lot less pain to go around.”
Forget about the security implications for a moment and look at the practicality of this. Take a look at what really is going to happen in the construction world should this law pass. continue reading...
Low Tech Data Security
Keep the data on your screen invisible to roving eyes. Not bad if it gets a little to bright to see your display either.

Thanks to Bekathwia for the pic. continue reading...
Give Me Your Password - I’ll Give You Chocolate
Alex at the Sunbelt Blog points us to a study in Europe that says that last year 64% of people were willing to give away their password for a chocolate bar. They indicate that this year only 21% of people were willing to give away their password
Some of the key points from the study indicate that women are more likely to give away their password than men. 45% of women were willing to give away their password but only 10% of men were willing to give theirs away.
The real question that comes to mind for me is how accurate the study really is. I almost never stop to be interviewed by someone. I am not interested. I don't want to spend the time... and I wonder about the people that take the time.
Although, it doesn't hurt if the person asking for an interview is cute. continue reading...
Are we getting too paranoid?
I mentioned that I have a new computer. Today, I needed to access my online banking from my new computer. I entered my password correctly and was taken to a screen that prompted me for the following:
I don't ever remember answering these questions before, but I must have. The problem is that I read so much that I don't know if my favorite book then is the same as my favorite book now. I don't know what city I was born in because I was born on an Air Force Base and never cared to learn more. I have a favorite movie... well I did when I was a kid, so I know that one because I have used that as an answer in many places.
So, I clicked on the "forgotten the answers link" and it told me to call.
I called. They reset my password so that I can start over. continue reading...
Does Spam De-legitimize a company?
Maybe De-legitimize isn't a word...
A couple of weeks ago I wondered if companies were less relevant if they have to use spam. Microsoft had used some comment spam on another blog I maintain. I guess it is becoming more and more common place for a legitimate company to spam other sites in order to get traffic.
Alex at the Sunbelt Blog pointed out that even security companies are starting to use spam... to give you tools to avoid spam, no less.
You know, the least they could have done was used correct spelling... or make it a little relevant to the conversation. So, the question I pose... is a company less legitimate if it has to use spam to drive traffic? continue reading...
IP Faxing and Security
Recently, I decided that, even though my work is reliant on email and the internet, I needed a fax number.
So, I decided to get an IP fax number from an online provider. A number of years ago I had done the same... in fact, I had used that number for about 4 years. In both cases, I had the same experience.
Every so often, I recieve faxed documents from various locations that shouldn't come to me. What is more... many times, those fax documents come with very private information. The most recent fax I received was for a loan application for a particular individual... containing very private information.
If I was malicious, identity theft would be easy. If you use an online provider be sure that those who are sending faxes to you are using the right fax number. If they don't have to send your private information via fax, don't do it. If you are a business that needs to send a fax, make sure the fax number you send to is the right number.
Better yet... just move to email. continue reading...
