Ultrasaur Blog

Keeping track of exciting new threats to your digital records.

Archive for February, 2009

Events with us

Friday, February 27th, 2009

Dave and I were at Startup CampWaterloo on Wednesday. We didn’t get a chance to present since there was a helicopter demo, but eql=data looked great.

We’ll also be at DemoCamp Guelph on Wednesday, hopefully I can talk Dave into demoing.

Colonial re-enactors need biometric ID

Friday, February 27th, 2009

Our business plan depends in part on the theory that regulations only increase, never decrease. So I’m conflicted when I read:

mule skinners — in this case, seasonal workers who dress in colonial garb at a historical park in Easton, Pa. [and pull a boat by mule at 2 miles per hour]– must apply for biometric Transportation Worker Identification Credentials (TWIC), according to the Transportation Security Administration, which says it is bound by federal law

This is on top of

Park officials say four or five park employees typically have Coast Guard credentials to operate the canal boat, and the extra expense of a TWIC card, which is at least an extra $100 on top of fees for Coast Guard credentials, is unwelcome.

Pens

Monday, February 16th, 2009

I wonder how many people put this much thought into what pens they use: good practice for record keeping.

Bruce Schneier’s right as always, identity theft is probably a little out there.

Affero General Public License

Monday, February 16th, 2009

Bruce Perens made an argument for reducing the number of open source licenses. I think we’re convinced, we’re leaning towards licensing our client software under GNU Affero General Public License for our non-enterprise customers. (We’re pretty flexible in how we license to our Enterprise customers).

Google: Changing paper mills into data centers

Thursday, February 12th, 2009

A sign that the “paperless office” is actually coming: Google plans data centre at old Finnish paper mill

Forensic science found wanting

Saturday, February 7th, 2009

The New York Times comments on the draft report Congress has asked for from the National Academy of Sciences on the state of the forensic techniques used in court proceedings:

In its current draft report, the National Academy wrote that the field suffered from a reliance on outmoded and untested theories by analysts who often have no background in science, statistics or other empirical disciplines.

Re: Experts question fallout from new Monster hack

Saturday, February 7th, 2009

For the second time in less than 18 months, the job-search Web site Monster.com was breached“, Money quote from Bruce Schneier:

“All the public events tell you are, these are attacks that were successful enough to steal data, but were unsuccessful in covering their tracks.”

$9 million ATM scam

Saturday, February 7th, 2009

Regarding the recent multi-person ATM scam one line stuck out as especially scary from a data integrity perspective:

Somehow the group managed to remove the daily withdrawal limits usually imposed on the cards and accounts, allowing for multiple large withdrawals to be made.

Meaning that the team that managed to hack the system, were able to change more than just the data but also the rules of the system. If they were able to do that, it’s safe to assume they may have been able to tamper with records and safety audits to cover their tracks. There may be no way to determine which records in the system are legitimate clues and which have been altered.

SWAT Record Keeping

Friday, February 6th, 2009

According to Radly Balko, apparently SWAT Teams keep poor records:

“In cases where a raid resulted in no charges, the warrants are actually often thrown out. Of course, those are the very cases we want to know about.”

It seems strange that organizations with guns (he’s refering to armed raids) are held to laxer records keeping standards than businesses.