Archive

Posts Tagged ‘security’

A Transparent Society

January 3rd, 2009

Back in 1999, David Brin released a book called The Transparent Society: Will Technology Force Us to Choose Between Privacy and Freedom? Many of my friends and I thought that it was perhaps a bit alarmist, but I’ll admit that I had rosy glasses on then. I thought that it was still possible to right the wrongs that technology was imposing and allowing.

Fast forward to September 2007, when Law Professor and privacy activist Michael Geist was giving the closing talk at an International Privacy conference.

There’s no stopping it: we are increasingly living in a transparent society.

Coaching moment: In the book and in the video, both men talk about leaving fingerprints behind and being tracked by surveillance cameras and databases, and the consequent changes that this activity entails. On a personal level, many of us are uncomfortable with this level of involuntary disclosure. It’s as if we suddenly had a digital firefly attached to us.

On one hand, if everything and everyone is being tracked, who will have time to make sense of it all? On the other hand, we are quickly developing the computing power to visualize all kinds of activities and behaviors. It’s only when the tracking is focused on one single person that it becomes troublesome.

What would you do differently if you knew you were always being watched?

UPDATE: There’s an important essay written by noted security expert Bruce Schneier called The Myth of the “Transparent Society” that is a must read for everyone that thinks that increasing transparency is alright. The problem at its core is the imbalance of power between the disclosing and using parties.

future, records , , , , , , , , , , ,

On Managing One’s Identity

December 7th, 2008

This video, an Introduction to Digital Identity by Stefan Brands is from the Google Tech Talk series. This talk was held about a year ago (Jan. 25, 2007). Its an hour long, so get your drinks and munchies ready. As Google Tech Talks go, this one is not overly technical.

Note: the volume is a bit unstable in this video. It starts out loud, about 5 minutes in goes quiet, and continues to change periodically.

Google Tech Talks
January 25, 2007

ABSTRACT

Identity management is increasingly recognized as a cornerstone of electronic communication and transaction systems. Applications such as electronic commerce, social networking, electronic health record management, government online, and enterprise identity and access management all critically rely on the ability to manage, provision, and authenticate the “identities” of people, devices, processes, and other entities. Three approaches to identity management can be distinguished: silo identity management, federated identity management, and user-centric identity management. Each of these has unique characteristics with regards to security, privacy, …

Coaching moment: In this video, you see an introduction to user-based identity. You’ll also hear that this is where the friction starts to develop as people and corporate interests start to disagree on how to implement the future. If you’d like to have a say in one future or another, learn more about the topics of single sign-on, user-centric or user-driven services, and tools to control your digital domain. Talk with your friends about it so the terms become familiar. The stronger our collective personal voice, the harder it will be to erase our personal interests.

records, tools , , , , , , , , , , , ,

Tools: Verisign Labs Personal Identity Portal (PIP)

November 26th, 2008

Verisign Labs offers a beta version of Personal Identity Portal (PIP) to “manage your online identity without compromising your privacy.” Verisign, the mother ship, offers SSL certificates to make sure web sites have appropriate trust credentials. With PIP, Verisign is also boosting their “trust” model: use your PIP identity to access web sites, protect your identity, and share your profile data.

Using PIP

First, create an account with PIP. As with other identity providers, your user name becomes part of your OpenID. This account is like others: you’ll need a user name and password.

PIP offers a Firefox plugin that makes signing in to certain sites easy. Verisign says the “sites include Amazon, Facebook, LinkedIn, and many major retailers.” (Amusingly, they call it an OpenID Seatbelt. Huh? Keeping me safe in my chair?) The plugin remembers your user name, but you’ll need to provide the password when you use it.

PIP lets you create your own identity page(s). When you’re done, PIP allows you to see your OpenID page with a carousel of your various sites:

Verisign Labs PIP Personal Page

In the Help and Support area, there’s a video on setting up your personal identity page. (These guys didn’t make it easy to find more information about their service. They have an FAQ and more videos about how one click (a password manager) works in the Help and Support area.)

Once you’ve set up your various services, you have a nice carousel that people can flip through and click on to visit that site.

tools , , , , , , ,

USACM’s take on Total Info Awareness (2003)

January 25th, 2003

Perhaps you’ve heard of TIA: the Department of Defense’s Total Information Awareness, a plan to gather all available information, from database everywhere, about every person in the U.S., ostensibly to counter “terrorism through prevention.” Heh. More like “government as a terrorist organization” these days, against their own citizenry.

The USACM, the public policy group of the Association for Computing Machinery (ACM, a member-based professional organization), has written a great letter with an offer to help:

Because of serious security, privacy, economic, and personal risks associated with the development of a vast database surveillance system, we recommend a rigorous, independent review of these aspects of TIA. Such a review should include an examination of the technical feasibility and practical reality of the entire program. USACM would be pleased to assist in such an effort.

A good outline of why we should be worried about this Orwellian plan.

Coaching moment: Sometimes the government is doing the surveillance. Once it starts, it’s hard to go back. Note that this article was from 2003. What do you think the government knows about you? Can you correct information if it is wrong? Why might you want to?

history , , , , , , , , , , , ,

Switch to our mobile site