Remind me not to get pulled over in Utah

Posted on November 28th, 2007 in Reality, Security & Privacy, Videos by Chooch

I understand that police officers are under constant stress that they might get shot - but this cop is clearly just an asshole with authority issues. The officer may not have done anything “illegal” in his arrest, but in my opinion it is immoral. This young man with his wife and infant son were clearly no threat. No police record, no previous arrests, with a clear misunderstanding of the speed limit sign.

The cop had the option of simply writing “refuses to sign” on the citation. He decided to arrest the driver instead and clearly tells another officer “he thought he was in charge” so he “got the taser”.

What a gross misuse of authority.

Here is the video from the police cruiser

Seen on BoingBoing:

Driver tasered for refusing to sign traffic ticket

Driver tasered

Driver with his family gets pulled over. When officer won’t point out speed limit sign driver was accused of ignoring, driver refuses to sign ticket. Officer shoots man with taser, lets him fall and cut his head, then arrests him.

As the hero explained to a colleague a few minutes later, Massey [the driver] was “making me nervous as hell” by his insistence on being treated as a reasonable adult, rather than behaving like a timid child. “I was like, nah, we ain’t playing this game,” Gardner boasted to the second officer by way of justifying the Taser strike.”Good,” gloated the second tax-fed parasite. “Good for you.”

(Note: I don’t agree that police officers, even the the small minority of bad ones, should be called “tax-fed parasites.” I’m just quoting the blog entry that this video appears in.)

Link | CBS video with captions

 

Personal Firewall for everyday life

Posted on November 7th, 2007 in Geeky, Hardware, Security & Privacy by Chooch

Nowadays more and more devices are getting RFID tagged. If you have a “badge reader” at work to get into a door, or to log into your computer then you carry one along with you all day. They are now in car keys, passports, and credit cards (FastPay, FastPass, etc).

But they have a dirty little secret. Well, not so secret, but here it is: they can be read by bad guys. And those bad guys don’t have to be within a few inches of you, like the manufacturers would like you to believe.

Given that fact makes a gadget like The Guardian here a nifty idea. The article below explains it better, but basically this doodad will block random attempts by others to read the tags you are carrying around, and gives you the power to decide when your tags will and will not respond to read attempts.

From BoingBoing:

RFID Firewall

The RFID Guardian project has released the hardware and software schematics for the latest version of its personal RFID firewall. The RFID Guardian is a device that detects all the RFID tags on your person (passport, transit pass, bank-card, toll-card, car keys, etc), and interdicts them so that they can’t answer queries anymore. The Guardian can clone all of these tags, and emit their signal on demand, but unlike a dumb tag, the Guardian only emits when you tell it to, and gives you a central way to set and enforce policy about when you will be identified and by whom.

The new version is completely open, and the relaunched RFID Guardian site includes a wiki, source code repository and bug-tracker. Link (Thanks, Melanie!)

See also: Personal firewall for the RFIDs you carry

Are TSA agents asking passengers to sneak fake bombs through security?

Posted on October 21st, 2007 in Reality, Security & Privacy, Travel by Chooch

If I remember correctly (given the frequent announcements from airport PA systems and… um.. common sense) you are never supposed to take packages from other people in an airport.

Given that, this excerpt from a leaked TSA report is terrifying:

At San Diego International Airport, tests are run by passengers whom local TSA managers ask to carry a fake bomb, said screener Cris Soulia, an official in a screeners union

Someone please tell me this doesn’t actually happen. “Hi Mr. Passenger. I’m a TSA manager. You know I’m not lying to you because of this official-looking laminated badge I have. We need you to help us test airport security. Here’s a ‘fake’ bomb that we’d like you to carry through security in your luggage. Another TSA manager will, um, meet you at your destination. Give the fake bomb to him when you land. And, by the way, what’s your mother’s maiden name?”

How in the world is this a good idea? And how hard is it to dress real TSA managers up like vacationers [instead]?

You can see more info on the report at Bruce Schneier’s blog

Extra Spam, Hold the Quechup

Posted on September 1st, 2007 in Security & Privacy, Social by Chooch

Today I had heard of a new Social Networking site (ala Facebook, MySpace, Virb, etc..) called Quechup. So I joined real quick to secure my preferred username just in case it grew in popularity. Well, it offered the option of entering my username and password to my main e-mail account so that they could check if anybody I knew already had accounts… I didn’t enter mine, because I’m really paranoid, and I’m glad that I didn’t!

 

Apparently once they get your addressbook they immediately spam invites to their service to everybody you know - even if you do NOT accept their terms of service/privacy policy!! Very rude, very unappreciated, and very underhanded.. So I don’t think that this will be a service that I’ll be using, and encourage you to never given them your e-mail name/password if you end up trying them out!

-{c}

 

From Justin Ryan’s Blog:

The blogsphere is abuzz this week about deceptive practices at social networking site Quechup. Apparently, the site is using customer’s propensity to scan and the tendency to rely on similar experiences in order to create a massive spam campaign.

Several dozen bloggers have posted apologies in the last couple of weeks after Quechup scammed them and spammed everyone in their address books. According to reports, the spam scam works like this:

  1. Someone you know “sends” you an invite to join Quechup. The email contains the comforting line “You received this because [name of contact who is soon to be quite perturbed] knows and agreed to invite you.” (Emphasis mine)
  2. You, your interest piqued, wander over to the site and, in a moment of weakness, sign up.
  3. During the sign-up process, you see this message: Forget searching to see if your friends are on Quechup, check your Hotmail, Yahoo, Gmail, AOL, Outlook or Outlook Express address book to see who you know on Quechup. (Users of other social networks will recognize this; you enter your login information, and the service searches for any of your contacts who are on the service.)
  4. Maybe you find someone you know, maybe you don’t. You go on to do other things, unaware.
  5. Within minutes, you start receiving out-of-office notices and angry replies from everybody you’ve ever emailed, because Quechup just spammed them all.

Apparently, in addition to using your address book to help you find your friends, Quechup also takes the opportunity to send them all a message, just like the one you received. Even worse, they have the gall to say you agreed to it!

Most social network sites have some sort of address book lookup feature. However, reputable ones report back who is and isn’t on the service, and then give you the choice to email some, all, or none of the contacts that aren’t. Quechup saves you time by skipping that bothersome “obtaining consent” step.

Some of the bloggers who have written about this have had commenters respond that there is a disclaimer about the invitations. A quick review of the privacy policy and terms of service make no mention of this practice. Below is the actual text you receive before beginning the address-book search:

Congratulations! Welcome to Quechup. Find out which of your friends are already members. Choose the address book with the most contacts and we’ll search for matches so you can add them to your friends network and invite non Quechup members to join you. By inviting contacts you confirm you have consent from them to send an invitation. We will not spam or sell addresses from your contacts. See our privacy policy.

In the strictest possible interpretation, yes, it does say they will invite non-members. Anybody who has used address book search on another social network, though, will be expecting the opportunity to select which addresses are invited. The only way to prevent someone from receiving a message from Quechup is to remove them from your address book before starting the search: That just isn’t kosher, as far as I’m concerned.

As evidenced by the large number of intelligent individuals currently issuing apologies for accidentally spamming everyone they’ve ever known, I’m going to declare this one a deceptive practice. The average user - indeed, even the above average user - is unlikely to interpret the “warning” to mean “We will send an invitation to everyone in your address book without any further action on your part.” It’s deceptive, it takes advantage of users’ good faith, and it’s creating a lot of headaches.

So, dear users, you’ve now been warned. If you receive an invite to Quechup from anyone, delete it. If you’re really outraged, drop them a message (privacy@quechup.com or spam@quechup.com). If you’re unlucky enough to have already been scammed, share your experience in the comments.

The moral of the story: Spam sucks, even if you smother it in Quechup.

 

 

Photo credit:

Spam wall by freezelight (CC-BY-SA)

 

Photo credit:

Happy St. George’s Day! by hugovk (CC-BY-SA)

 

Photo credit:

Composite by Justin Ryan

Going to Yosemite? Get Your Passport Ready!

Posted on August 19th, 2007 in Politics, Security & Privacy, Travel by Chooch

This has gotten so out of hand that I’m getting very disgusted with the direction our Government leaders are going. Yes, I know that I am far from the first person to say this (especially in the last few years) but zOMG will we be required to “show our papers” just to freely move around the friggin country now!?

As a good Federal Employee am I going to be required to get one of these flawed IDs -putting all of my personal and private information into another massive Government database (well, lets be honest, another contracted database) with another chance to get leaked and my identity stolen- or else bring a passport to get into my work building!

Arrgh.. I wonder if they can use English-only speaking IT Managers in Sweden. Its clearly time to learn a new language.

From Slashdot:

rev_media writes to tell us that CNN has a few updates to the Real ID act currently facing legislators. The Real ID acts mandates all states to begin issuing federal IDs to all citizens by 2008. Costs could be as much at $14 billion, but only 40 million are currently allocated. Several states have passed legislation expressly forbidding participation in the program, while others seem to be all for it. The IDs will be required for access to all federal areas including flights, state parks and federal buildings. People in states refusing to comply will need to show passports even for domestic flights

Is Vista Allowing The Government To Spy On Our Computers?

Posted on July 22nd, 2007 in Security & Privacy by Chooch

Paris The Pirate writes “This article at Whitedust displays some very interesting logs from Vista showing connections to the DoD Information Networking Center, United Nations Development program and the Halliburton Company; for no reason other than the machine was running Vista. From the article ‘After running Vista for only a few days — with a complete love for the new platform the first sign of trouble erupted. I began noticing latency on my home network connection — so I booted my port sniffing software and networking tools to see what was happening. What I found was foundation shaking. The two images below show graphical depictions of what has and IS trying to connect to my computer even in an idle state’.”

Seen on Dvorak and Slashdot

Executive Order Overturns US Fifth Amendment

Posted on July 20th, 2007 in Politics, Security & Privacy by Chooch

Part of the Fifth Amendment is “private property be[ing] taken for public use, without just compensation”, for those of you playing at home. And yeah, I had to look it up :o)

RalphTWaP writes:
Tuesday, there wasn’t even a fuss. Wednesday, the world was a little different. By executive order, the Secretary of the Treasury may now seize the property of any person who undermines efforts to promote economic reconstruction and political reform in Iraq. The Secretary may make his determination in secret and after the fact.”

There hasn’t been much media notice of this; the UK’s Guardian has an article explaining how the new authority will only be used to go after terrorists.

I am absolutely speechless on this one.. I think its truly time to purchase one of the Disappearing Bill of Rights coffee mugs. Unless that’s deemed unpatriotic and they take it away from me. I’m not a Bush-basher, but seeing how many of our hard-earned freedoms have gone down the toilet and how we really aren’t any safer than we were on 9/11; I gotta wonder just what the hell is going on and where we’re going to end up.

Found on Slashdot

Vista Makes Forensic PC Exam Easier for Lawyers

Posted on July 14th, 2007 in Geeky, Security & Privacy by Chooch

Not a good news day for Microsoft:

Katharine writes “Jason Krause, a legal affairs writer for the American Bar Association’s ‘ABA Journal’ reports in the July issue that Windows Vista will be a boon for those looking for forensic evidence of wrongdoing on defendants’ PC’s and a nightmare for defendants who hoped their past computer activities would not be revealed. Krause quotes attorney R. Lee Barrett, ‘From a [legal] defense perspective, [Vista] scares me to death. One of the things I have a hard time educating my clients on is the volume of data that’s now discoverable.’ This is primarily attributable to Shadow Copy, TxF and Instant Search.”

from Slashdot

Will Microsoft Put The Colonel in the Kernel?

Posted on July 14th, 2007 in Geeky, Security & Privacy by Chooch

This is absolutely repugnant. If we needed more reasons to stop moving to new versions of Windows, this is certainly it!

theodp writes “The kernel meets The Colonel in a just-published Microsoft patent application for an Advertising Services Architecture, which delivers targeted advertising as ‘part of the OS.’ Microsoft, who once teamed with law enforcement to protect consumers from unwanted advertising, goes on to boast that the invention can ‘take steps to verify ad consumption,’ be used to block ads from competitors, and even sneak a peek at ‘user document files, user e-mail files, user music files, downloaded podcasts, computer settings, [and] computer status messages’ to deliver more tightly targeted ads.”

From Slashdot