Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Author: admini

California bill would ban tracking chips in IDs

Posted on April 28, 2005December 30, 2021 by admini

It’s the first bill of its kind in the nation, said its author, state Sen.

Supporters of the bill, including the American Civil Liberties Union and the Electronic Frontier Foundation, say unchecked use of the technology, known as radio frequency identification, or RFID, could trample people’s privacy and aid identity thieves.

“I have real concerns about the suitability of RFID technology for government identification documents,” said Simitian, D-Palo Alto. “I thought that it probably made sense to try to develop some kind of boundaries.” Simitian introduced the Identity Information Protection Act of 2005 in February after a rural elementary school just 40 miles north of the state capital ditched plans to outfit students with electronic IDs amid protest from parents and students. The case, which involved Brittan Elementary School in Sutter, Calif., got national media attention.

“The issue of RFID in identification documents really hit home with what happened in Sutter,” said Nicole Ozer, technology and civil liberties policy director of the ACLU of Northern California.

Brittan Elementary had issued the electronic badges to seventh- and eighth-graders in an effort to attain better class attendance records and tighten campus security.

Critics said the technology, which is also used to track livestock, was dehumanizing.

Consumer advocates also worry about the ability of data thieves to intercept RFID signals or break into databases storing the information collected by such systems. The RFID chips are designed to broadcast personal data, such as name, address and date of birth, to special receivers at close range.

The California bill also puts the state at the forefront of a national debate. The U.S. State Department plans to issue passports containing RFID chips soon, and schools and libraries across the country are experimenting with them, too.

A Republican-backed federal measure that has passed a vote in the U.S. House of Representatives proposes implanting RFID chips in driver’s licenses.

Businesses are also ratcheting up their use of the technology.

“My hope is that it will underscore the importance of these issues and prompt a wider and more thoughtful debate at a national level,” Simitian said.

Simitian’s bill would prohibit identity documents created or issued by the state containing computer chips that can be read remotely. Identity documents include driver’s licenses, ID cards, student ID cards, health insurance or benefits cards, professional licenses and library cards. It allows for some exceptions, though, including the use of electronic IDs for prisoners and for newborn babies in hospitals. It would also permit government workers to use them to access secured areas.

The bill would make any surreptitious gleaning of data from RFID chips, government-issued or otherwise, a misdemeanor punishable by up a year in jail and a $5,000 fine.

A number of lawmakers in other states, including Maryland, Missouri, Nevada, South Dakota, Utah and Virginia, have proposed RFID regulations, but few states have actually passed laws.

Even California has proved resistant to such efforts. A bill introduced there last year to regulate commercial use of the technology was killed by the state assembly after facing opposition from numerous business groups.

http://news.zdnet.com/2100-1035_22-5689358.html

Read more

Security bosses want encryption bans overturned

Posted on April 27, 2005December 30, 2021 by admini

The Jericho Forum, whose membership includes many chief security officers from FTSE 100 companies, will push for the removal of encryption restrictions within the next three-to-five years.

“This is a big problem for us,” said Nick Bleech, a member of the Jericho Forum and an IT security director for Rolls Royce. “We have 200 locations [around the world]. In industrialised countries it’s not a problem, the real problem comes from places like China. But the Chinese government is extremely keen to further new development.”

Countries such as China, Russia, Israel and Saudi Arabia, have stipulated strict rules governing the use of encryption tools, and in some cases banned the practice.

The Jericho Forum, which is looking to move away from the perimeter model for cybersecurity in favour of an approach that would make data totally secure, hinted this could cause problems for e-commerce.

“But I don’t think we’ll come up with a universal solution that will solve everything. We don’t have the clout to do that yet. We’ve got to lobby governments across borders, find out what restrictions there are and close them. At the moment it is a variable nightmare. The time frame is three to five years before this comes to fruition.”

Bleech said that governments usually respect each others’ encryption policies and make concessions for each other. Bleech was speaking at Infosecurity 2005, which ends on Thursday.

http://news.zdnet.co.uk/internet/security/0,39020375,39196486,00.htm

Read more

Be Aggressive With E-Mail Policies

Posted on April 27, 2005December 30, 2021 by admini

“In the last three years the amount of interest in e-mail hygiene has increased dramatically, especially in light of regulatory compliance issues,” said Cain, who acknowledged that message hygiene is a broad topic and spans multiple tiers. “It is more than just a security issue. Mail hygiene effects all parts of the organization, and Cain suggested that the legal department be brought in as organizations establish an overall e-mail policy. There should be a common policy engine that stitches everything all together,” said Cain who suggested that the policy-based approach is necessary to manage this very complex environment. Many regulations are specific to e-mail activity within an organization,” Cain said. “Not everyone in an organization requires the same kind of hygiene.”

There are more pushes for increased privacy and everyone wants to have encrypted messages with no effort from the user.

“I’m not sure that magical target will ever be reached, but you do need something sitting at the gateway that recognizes key words,” he said. “From a regulatory compliance perspective, archiving has been a particularly fascinating topic over the last 12 months, and there has been quite a bit of acquisition activity and consolidation in this market, according to Cain, who points out that finding the right vendor is not easy. Too many organizations focus on the initial cost of software and fail to consider the whole lifecycle and resultant storage costs,” he said.

“Budgets need to be expanded to accommodate growing hygiene and management complexity. Policy driven e-mail services are required to lower overall costs.”

Before introducing his company’s product mail security product Pure Message, Mark Borbas discussed the role of archiving and content management since e-mail has become de-facto record storage. “E-mail architecture has been restructured in the last five years. Very few of us delete e-mails and we are asking a system to do a lot more than it was designed for,” Borbas said.

Organizations are looking to automated identity management systems to fulfill the privacy and access requirements of regulations like HIPAA and Sarbanes-Oxley.

http://www.compliancepipeline.com/showArticle.jhtml?articleID=161601086

Read more

Intoto Introduces Multi-Service Security Software

Posted on April 26, 2005December 30, 2021 by admini

The new iGateway software integrates Secure Socket Layer-VPN, anti-virus (AV) and anti-spam (AS) functionality, to enhance its existing firewall, intrusion prevention and Web filtering solutions for improved secure access, threat management and productivity assurance.

Intoto’s new multi-service security software platforms allow OEMs to deliver integrated security appliances and converged business gateways, two of the most rapidly growing networking product segments. “OEMs are looking for more integrated security functionality in their next-generation designs,” said Doug Makishima, vice president of marketing at Intoto.

According to In-Stat, the integrated security appliance market is poised for explosive growth, reaching $3.3 billion by 2009, while the business gateway, a new integrated networking product type that serves the entire data, security, and voice communications needs of small businesses and branch offices, may capture a significant portion of the total SME equipment market forecasted to grow to $16B in 2008.

http://www.zdnetindia.com/news/pr/stories/121012.html

Read more

Wi-Fi-proof sheet gets UK government approval

Posted on April 26, 2005December 30, 2021 by admini

The blast-proof film, called Spyguard, can be laminated or fitted inside windows to prevent remote eavesdroppers penetrating rooms with infrared or Wi-Fi signals to steal information or access private networks.

To stop Wi-Fi signals “leaking” from a room, the walls are also covered with a layer of paint that contains the same metals as the SpyGuard film. The film can even prevent hackers from stealing information from light flicker emitted from computer monitors and reflected on a window, claims GlassLock UK, a company that sells the film in the UK.

“The film is developed by the US National Security Agency,” said John Hall, managing director of GlassLock UK. “The only way you can get hold of it here is through us.” CESG (the Communications-Electronics Security Group), the information assurance arm of GCHQ, has backed the product, but the intelligence community is keeping an eye on who buys it. “We have to get permission to sell it,” said Hall. “We have to tell MI5 who we sell it to. It’s no problem unless they’re known terrorists.”

GlassLock is demonstrating the product at Infosecurity Europe 2005 in London.

http://news.zdnet.co.uk/communications/0,39020336,39196444,00.htm

Read more

Microsoft reveals hardware security plans

Posted on April 25, 2005December 30, 2021 by admini

The software giant plans to deliver encryption features and integrity checks to insure that computers, such as notebooks, that are disconnected from a network are not affected by malicious programs.

Called Secure Startup, the feature will appear in Microsoft’s forthcoming version of its operating system, known as Longhorn, and represents a much smaller subset of the security features that the software giant had originally intended to build into the system software.

“We remain fully committed to the vision of creating new security technology for the Microsoft Windows platform that uses a unique hardware and software design to give users new kinds of security and privacy protections in an interconnected world,” Selena Wilson, director of product marketing for Microsoft’s Security Business and Technology Unit, said in statement.

While the technologies, once known as Palladium and now called the next-generation secure computing base (NGSCB), will help companies and consumers lock down their computers and networks, concerns remain that the hardware security measures could also be used to lock-in consumers to a single platform and restrict fair uses of content. Innovation could suffer if reverse engineers are locked out from tinkering with devices, said Dan Lockton, a graduate student at the University of Cambridge whose thesis focuses on the effects of technologies created for controlling information. The fear is that “we’re moving to a stage where the customer no longer has control over the product he or she has bought or the products (created) using that device,” Lockton said.

http://www.theregister.co.uk/2005/04/26/microsoft_hardware_security_plans/

Read more

Posts pagination

  • Previous
  • 1
  • …
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • …
  • 421
  • Next

Recent Posts

  • Boards Are Pricing Cyber Risk In. The IT Function Isn’t Keeping Up.
  • AI News – Mon, 17 Nov 2025
  • CSO News – Mon, 17 Nov 2025
  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14

Archives

  • April 2026
  • November 2025
  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2026 CyberSecurity Institute | Powered by Superbs Personal Blog theme