Ultrasaur Blog

Keeping track of exciting new threats to your digital records.

Posts Tagged ‘news’

Fingerprints fade from cancer treatment

Friday, May 29th, 2009

We often assume that everyone will have fingerprints (as in the literal prints made from people’s fingers), bu from Reuters

A Singapore cancer patient was held for four hours by immigration officials in the United States when they could not detect his fingerprints — which had apparently disappeared because of a drug he was taking.

Although 4 hours is not exactly an impressive delay from an American airport and capecitabine is not a common drug, it raises interesting issues. Namely that when a simple process works in 99% of cases, we really aren’t prepared for that 1% of outliers. In this case, I’m curious what the Americans With Disabilities Act says about treatment of finger/hand/arm amputees in fingerprinting situations.

CIA vs Senator, records disagree

Friday, May 15th, 2009

Another “He-said-he-said” argument making news, this time between the CIA and Sen. Bob Graham. In this case the CIA’s records indicate that they told Graham the details about waterboarding but Graham’s records indicate that they didn’t. Or rather, that’s what both party claims, so in the absence of verifiable records, it relies on which party you trust more, which isn’t obvious.

From former presidential speechwriter to Jimmy Carter James Fallows:

Graham also has a specific reputation for keeping detailed daily records of people he met and things they said. He’s sometimes been mocked for this compulsive practice, but he’s never been doubted about the completeness or accuracy of what he compiles…
So if he says he never got the briefing, he didn’t.

Hacking: Pornography through Wars

Tuesday, May 12th, 2009

In a clarification of their position on armed conflict, the United States will “not rule out a kinetic response to a cyber attack.“. Meaning that the US may consider hacking (presumably by a foreign power) as an attack similar to a physical attack on a bridge or a dam.

At the other end of the spectrum, a court has upheld the “hacking” conviction of a man for for misusing his computer at work to upload pornography.

Rasch said the problem stems from an amendment that was made to the federal Computer Fraud and Abuse Act — the federal anti-hacking law — that states have added to their own statutes.

“The early statute only talked about unauthorized access — which is breaking into computer,” he said. “But then they amended it to say ‘or exceeding the scope of authorization to access a computer’.”

“I have your s**t! In my possession”

Wednesday, May 6th, 2009

According to a claim at WikiLeaks, a hacker has taken “8,257,378 patient records and a total of 35,548,087 prescriptions” from the Virginia Health Professions Database (website is down).

Any intrusion should call the current records into question (we often talk about what could happen if a hacker changes your financial documents, but a bad prescription can kill).

The hacker claims:

Also, I made an encrypted backup and deleted the original.

However, according to the Washington Post:

Sandra Whitley Ryals, director of the Department of Health Professions, said in a statement Wednesday that the program’s computer system has been shut down since last Thursday’s breach, but all data was backed up and those files have been secured.

Authentication: expensive, difficult and rare

Friday, April 24th, 2009

Another reminder that authentication is expensive, difficult and rare.

Expensive: Review of grants costs more than the grants themselves

the $40,000 (Canadian) cost of preparation for a grant application and rejection by peer review in 2007 exceeded that of giving every qualified investigator a direct baseline discovery grant of $30,000 (average grant)

Difficult: Baseball Fights Fakery With an Army of Authenticators

“No one touch it until the authenticator gets there,” a Yankees official instructed.

Authenticators carry rolls of high-tech hologram stickers. A bullet-shaped one is placed on the object. Removing it leaves polka dots of the decal attached and renders the removed sticker unusable. A second sticker, with a matching number and a bar code, is scanned by a hand-held unit, instantly recording the item into M.L.B. computers. The authenticator types in details — who hit the ball and when, for example.

Rare: Ebay leads to more fake antiques:

Our greatest fear was that the Internet would democratize antiquities trafficking and lead to widespread looting… It appears that electronic buying and selling has actually hurt the antiquities trade.

risk of arrest–is also removed by eBay fakes, since you can’t be arrested for importing forgeries. Should you import what you think is an illegal antiquity but it turns out to be a fake, you run little risk of prosecution

those dealers that provide private sales are some of the forgers’ best customers, knowingly or otherwise. In fact, the workshops reserve their “finest” pieces for collectors using the same backdoor channels