Tuesday, March 25, 2014

Google: Another update, Pando shows that Google joined a cartel forcing down IT workers wages

According to Pando Daily, Google, Apple  and a host of other companies got together, and made a list of companies that wouldn't call each other for tech workers.  How nice.  There is even (email) evidence of at least 1 recruiter who lost his job for being overly aggressive in, umm, recruiting, at a company he wasn't supposed to touch, but wasn't told until, well, he might've got the hint at the same time he was walked out.

The whole list (from Pando again) is:
 • Apple, Inc
• Comcast Corporation
• DoubleClick
• Genentech
• IBM Corporation (Junior hires okay—also applies to subsidiaries)
• Illumita
• Intel Corporation
• Intuit
• Microsoft
• Oglivy
• WPP 
And might have gotten as far as a million workers.  There's an antitrust lawsuit in the works, scheduled for May, but things are settling out of court.  Seeing as some of this is serious, of course there are out of court settlements.

Monday, March 17, 2014

Google: That whole "don't be evil" thing is so last century!

According to Edweek.org, The latest thing in Google slide to become the great evil empire is the "Google Apps for Education".  

Apparently Google has these free applications that schools can sign up for, and then require their students to use.  Then Google scans the content learning all kinds of things about the students.

Why do I think that's a problem? Well, let's see what happens in a class action lawsuit in San Jose, which Judge Lucy H Koh denied Googles motion to dismiss the case and is not deciding whether to certify it as a class. (Google Inc. Gmail Litigation, 13-md-02430.)

 Also, there's FERPA, the "Family Educational Rights and Privacy Act", which is meant to protect students privacy, and gives the following example:
EXAMPLE 4: A district contracts under the school official exception with a provider for basic productivity applications to help educate students: email, calendaring, web-search, and document-collaboration software. The district sets up the user accounts, using basic enrollment information (name, grade, etc.) from student records. Under FERPA, the provider may not use data about individual student preferences gleaned from scanning student content to target ads to individual students for clothing or toys, because using the data for these purposes was not authorized by the district and does not constitute a legitimate educational interest as specified in the district’s annual notification of FERPA rights.
Yes, right, which is exactly what Google does with Gmail, and they state they make no secret of.  Except they're not contracting with adult users of the services, they're contracting with schools that require minor students to use the applications.

How about Microsoft Office 365?
The privacy policy for Microsoft’s Office 365, the company’s competitor product for Google Apps for Education, states “We do not mine your data for advertising purposes. It is our policy to not use your data for purposes other than providing you productivity services.” 
Score 1 for Microsoft

Friday, March 14, 2014

Cory Doctorow: Why Information Security is a public health issue

Cory Doctorow's Article in the Guardian is a really well thought-out analysis on why data security is a public health issue.

Last year, when I finished that talk in Seattle, a talk about all the ways that insecure computers put us all at risk, a woman in the audience put up her hand and said, “Well, you’ve scared the hell out of me. Now what do I do? How do I make my computers secure?”
...
If I had just stood here and spent an hour telling you about water-borne parasites; if I had told you about how inadequate water-treatment would put you and everyone you love at risk of horrifying illness and terrible, painful death; if I had explained that our very civilisation was at risk because the intelligence services were pursuing a strategy of keeping information about pathogens secret so they can weaponise them, knowing that no one is working on a cure; you would not ask me ‘How can I purify the water coming out of my tap?’

http://www.theguardian.com/technology/2014/mar/11/gchq-national-security-technology

Monday, March 3, 2014

Thursday, February 27, 2014

How about this? Make an app, for a security conference, and include all the names of the downloaders...

From the IOActive blog:

It's been half a decade since Apple launched their iPhone campaign titled "There's an app for that". In the years following, the mobile app stores (from all the major players) have continued to blossom to the point that not only are there several thousand apps that help light your way (i.e. by keeping the flash running bright), but every company, cause, group, or notable event is expected to publish their own mobile application. 

...



 Here's the best part (emphasis mine):

The RSA Conference 2014 application downloads a SQLite DB file that is used to populate the visual portions of the app (such as schedules and speaker information) but, for some bizarre reason, it also contains information of every registered user of the application–including their name, surname, title, employer, and nationality.
 

BYOD? Really? Jailbroken phones?

From the HR Examiner:

Bring-your-own-device (BYOD) approaches have been embraced by employers, because they can reduce costs and employees tend to prefer being allowed the freedom to choose their own phones and tablets.

 Of course, the freedom to purchase and use their own phones and tablets comes with a new set of challenges and, potentially, headaches.  A small, but very passionate, minority of smartphone and tablet owners choose to jailbreak  (Apple) or root (Android) their devices.

More...


 Not here, of course...

Monday, February 10, 2014

Major Password Breach at Comcast

It's not like they have millions of access points hosted by unwitting customers.  Oh wait.

Let's see the timeline:

Feb 6 I see it on the Twitters.  Violet Blue (web site NSFW) finds the problem on Pastebin.
Today, Feb 10, ZDnet publishes her article advising us to change our passwords.
?-?-2014? Comcast forces password changes with 2 factor authentication?

Perry