Categories
Security Uncategorized

Physical security maxims and sippy cups

Bay Area Rapid Transit (BART) managers admonished for ridiculous linking of sippy cup usage to terrorism.

Added Director Tom Radulovich, “If somebody wants to break the law and bring flammable liquids on, they can. It’s not like al Qaeda is waiting in their caves for us to have a sippy-cup rule.”

Directing his comments to BART administrators, he said, “You know, it’s just fearmongering and you should be ashamed.”

[via]

Perhaps they should have read these security maxims. [via]

Really excellent list and a must read for anyone interested in issues of security, most are applicable to IT security too.

Categories
Computing Surveillance

Government super-database of communication data

Current Home Secretary Jacqui Smith says that in order to keep up with technology that the police and security services need new powers and that an expansion of surveillance is necessary.

The proposed database will hold for two years details of all communications, not however the content just data about the communications i.e. who, when and how long.

BBC News: Giant database plan ‘Orwellian’

The Telegraph: Social networking sites to be snooped on by security services

Chris Huhne, Liberal Democrat home affairs spokesman, added: “The Government’s Orwellian plans for a vast database of our private communications are deeply worrying. I hope that this consultation is not just a sham exercise to soft-soap an unsuspecting public.”

Guy Herbert, from campaign group NO2ID, said: “The Home Secretary talks about ‘principles’ but the only principle she appears to be acquainted with is convenience for the stalker state.

I too have concerns about this proposal. Presumably the idea is that criminals and terrorists even if they are smart enough not to discuss their illegal activities over telephones or via email will communicate with their associates. The database will allow investigators to map these networks of associates and open up new areas of investigation and discover new suspects.

But the vast majority of Britons are not terrorists or criminals so the database will mostly consist of data that is of no use to the police or the security services but would be to criminals who could use the data to aid in identity theft. Frankly I have no faith in the government’s ability to safeguard this data.

Categories
Security Uncategorized

How to tap a phone line

Hollywood depicts phone surveillance as the thankless work of sweaty cops hunched over a pair of headphones. In the real world, setting up a wiretap is actually a snap. Regardless of which side of the law you’re on, here are the steps to becoming a landline hacking super sleuth. [via]

Categories
Security Surveillance Uncategorized

Surveillance Unlimited: How We’ve Become the Most Watched People on Earth

Excellent new book has been published about how the UK has become a surveillance society.

SURVEILLANCE UNLIMITED is a gripping examination of the erosion of personal privacy and a disturbing look at the relationship between technology and society in modern daily life.

Nineteen eighty-four’s all-seeing eye is now a reality. Britain is a surveillance society, but in ways that Orwell could never have imagined. Your car is satellite-tracked, your features auto-identified on video, your e-mails, faxes and phone calls monitored. You are secretly followed via transmitters implanted in your clothes, via your switched-off mobile and your credit card transactions. Your character, needs and interests are profiled by surveillance of every website you visit, every newsgroup you scan, every purchase you make. Big Brother is here, quietly adding to your files in the name of government efficiency and the fight against organised crime and terrorism.

A review of the book has been posted on spyblog.org.uk

Categories
Surveillance Uncategorized

Police chief calls for universal DNA database

The Telegraph reports that Scotland’s most senior police office has called for the creation of a DNA database of the entire population.

I can understand the logic that leads people to think that instituting massive surveillance systems or creation of large databases that hold information about every single citizen. If a little of something is good then a lot of that thing must surely be a great thing.

It is believed that because we derive benefits from the current DNA database that increasing the size of that database will derive a commensurate increase in benefits. But that is not the case and any little increase in benefit is I believe far outweighed by the costs both in terms of privacy but also financial.

As a database increases in size the number of errors in that database increase which could lead to mismatches and criminal acts erroneously linked to innocent people.

Categories
Computing Security

Social Engineering 101

Social Engineering 101: Mitnick and other hackers show how it’s done

Categories
Security Uncategorized

The Guardian Series: What liberty means to me

Rachel North: We are each other’s best security

But as any parent knows, it is not always possible to keep those you love safe, and a person who is always safe is a person who never knows freedom and who has no life.

…For no government can keep us safe, even if they watch over us and film us and check our emails and internet use and hold our most intimate data and fill hundreds of prison cells with people who are merely suspected of, but not charged with, any crime.

Rachel has great insight of this issue I think.

Categories
Surveillance Uncategorized

Estimate of 8.6 million CCTV cameras in UK by 2018

According to SecurityPark.net the number of CCTV cameras in the UK is expected to double by 2018.

Mirasys polled 150 delegates during IFSEC who came from different vertical sectors including banking, government, public sector and retail. Delegates estimated that the number of CCTV cameras in the UK would more than double by 2018.

The poll of security professionals estimated that an average of 8.6 million CCTV cameras will be in place by 2018, compared with the current figure of 4.2 million cameras. This figure includes deployments at people’s homes as well.

This is quite an astonishing number, it seems that everyone wants more surveillance to protect their property and ensure their security even though the actual efficacy is in doubt.

Categories
Surveillance Uncategorized

Councils warned after overzealous use of surveillance

BBC News: Councils warned over spying laws

Sir Simon Milton, chairman of the Local Government Association, has warned councils that the powers granted to them under the Regulation of Investigatory Powers Act should not be used for “trivial offences” such as dog fouling.

The Regulation of Investigatory Powers Act was designed to regulate the powers of public bodies to carry out surveillance and investigation for the purpose of detecting crime, and was pushed through parliament under the banner of combating acts of terrorism and organised crime.

Categories
Security Uncategorized

The War on Kids

The War on Kids continues apace with a scared-straight exercise designed by officials of an El Camino High School to dramatize the consequences of drinking and driving. Highway patrol officers were asked to come to the school and announce that several students had been killed over the weekend in car accidents. The students reacted as you might expect they wept and some became hysterical.

Michelle de Gracia, 16, was in physics class when an officer announced that her missing classmate David, a popular basketball player, had died instantly after being rear-ended by a drunken driver. She said she felt nauseated but was too stunned to cry.

However throughout that day news spread that in fact no car accidents had occurred and no one had died, it was merely an exercise to scare the students into not drink driving. Students were understandably shocked and angry upon learning the truth.

“You feel betrayed by your teachers and administrators, these people you trust,” said 15-year-old Carolyn Magos.

I think the only lesson that the kids will learn from this is that authority figures are not to be trusted and that they will lie to you.

ColdChef a commenter at Metafilter describes a similar but I think more effective method to reduce drink driving amongst teenagers.

Every year, around prom time, my family funeral home participates in a “mock accident” that is staged in front of the local high school. The students are called into an assembly, and while they’re in the building, and with the assistance of local government and law enforcement, we arrange crashed cars on the roadway in front of the school. Every effort is made to make the accident as realistic as possible, including fake blood and (admittedly) crappy make up.

When the students come outside, they see the wreck, which is usually peppered with popular students for maximum effect. At first there’s some laughter and gawking at the students they recognize. They are given a moment to take in the scene, and then police and firemen arrive, with lights and sirens, securing the perimeter. An ambulance comes, removes the bodies from the cars, attempts treatment and then pronounces them dead.

Then, it’s my turn. My brother and I drive up in the hearse, solemn and grave-faced–full black suits. Much more serious than we would be at an actual wreck. First, we cover the body with a white blanket. We gently lift the body of the student onto our cot, into a zippered black bag. We slowly zip it up, place the body into the back of the hearse and drive off.

At no point does anyone try to pass this off as reality. It’s a tableau…something to stick in their minds. This past year, they included as part of the scene a hysterical mother, arriving at the scene and going apeshit at the sight of her “dead” daughter. And, just like all of the kids there, I knew it was all fake, but it still affected me. The mother played the part well. She screamed and cried and fought the police officers to get to her child, finally collapsing into a heaving heap on the asphalt.

I’m sure that the imagery of such a tableau along with the reaction of the ‘mother’ is something that would affect teenagers and would stay with them for a long time and thus would be a far more effective deterrent. [via]