Welcome to our community

Be a part of something great, join today!

  • Hey all, just changed over the backend after 15 years I figured time to give it a bit of an update, its probably gonna be a bit weird for most of you and i am sure there is a few bugs to work out but it should kinda work the same as before... hopefully :)

Information Security: Have we gone down the wrong rabbit hole?

It's a confusing and dangerous tightrope we choose to walk for our children...
 
Something not being properly addressed is timely resolution for those who do get their identity stolen. We've all heard the stories of the run-around people get from the credit worthiness people. Someone who has had their identity stolen are often in limbo for quite some time before getting resolution.

As for protecting oneself, an online-only credit card, lying where you can when giving your personal information (like misspelling your name, changing your age etc. when signing up for Facebook or Twitter types of services.) I was very much against Reduser requiring a real name policy, although they did leave wiggle room. There are too many bots roaming the web that can harvest that information.

1984... they only got it partly right. There's govt. Big Brother watching us... and there is Google et al.
 
I'm more interested in living anonymously from private enterprise and spyware. So it probably easier to refine the question in that context. The more replies the merrier.

Their is a really efficient script called Gohstery it block the spyes you can meet on a web page.
More importantly you get the names of those spyes aswell.
To install it you need a script manager like Greasemonkey in your navigator.
Another well known navigator extension called Adblock Plus who killed all the bannerr with add, it is highly configurable.

And then if you really want to protect your privacy, then you will have to hide your IP adress.
Their is the Tor project who take this road, it is a really old open source thingy, it use to be really slow and not worth it.
But the today version works really well it is called the Torbrotherbundle.
It is a firefox navigator revamped.
The system is simple, crypted data and use of many relais beetween you and the source of information.
It is almost impossible to track you with that one.
Here is a link to the Tor project.
https://www.torproject.org/

Cheers
 
Their is a really efficient script called Gohstery it block the spyes you can meet on a web page.
More importantly you get the names of those spyes aswell.
To install it you need a script manager like Greasemonkey in your navigator.
Another well known navigator extension called Adblock Plus who killed all the bannerr with add, it is highly configurable.

And then if you really want to protect your privacy, then you will have to hide your IP adress.
Their is the Tor project who take this road, it is a really old open source thingy, it use to be really slow and not worth it.
But the today version works really well it is called the Torbrotherbundle.
It is a firefox navigator revamped.
The system is simple, crypted data and use of many relais beetween you and the source of information.
It is almost impossible to track you with that one.
Here is a link to the Tor project.
https://www.torproject.org/

Cheers

Brice, thanks for this, it is too hard to follow all the links today, but Im keeping this thread. I was bitten by a spider in my sleep last night, just when I was supposed to be recovering from my normal illnesses. Fortunately it got me on the bone, so not much vemon got in the blood stream, and I'm still recovering. All the legal things you do you don't want all the criminals tracking you and competitors (why I put my hand up when somebody rediscoveres one of my old technologies that I am held back from developing, to establish a date that Have already been there. But I can still literally earn hundreds of trillions of dollars before I die, now to keep them safely in my head, which is getting more difficult as the parkinsons like symptoms progress and reduce my capacity).
 
Guys, I forgot to mention, last year or so, I was cconsidering starting a standards organisation to quash all this free for all spying, so we establish a reasonable level of privacy. Depending who I get to meet I might raise it with them. Personally, I dont mind if we have to pay 1c away in bit coins for every site we visit, would solve many issues and get web masters of the advertising bug. Im interested in seeing an alternative add agency setup too. There is more than enough money to be made under these things. Our biggest problem is low value advertising.

I dont mind responsible government tracking public movements on the net so much, as minding criminals tracking people and free speech to illgitimately punish people and stifle it. Im sorry, again Im not able to draw all the threads together today.
 
Google is developing software to track accurately the 3d movement of your phone,which means they can track you around your home, map out the rooms, what you do, where you pit things (especially with microphone or camera) were you go outside your home, even office buildings and apartment buildings (record and send data might be possible). They can already do this, but this is a super accurate version. They cam tell who you are by how you walk. I had done geometric design for my designs years ago, I realised I could tell a heap of information about limb position just from the position/orientation data of the device. A new level of scarey. They could tell of various health conditions, even if you have dernatitise, go to the bathroom often, that all can be used negatively, ein if how when where and likely who you have social engagement with (not so bad if you are married to the person) and how. This is not a statement of the intention of Google in use of the service, but what could be done by others.

http://www.google.com/atap/projecttango/

Some people I know discussed at a conference how they where commissioned to do a ultra low powered sensor reading hardware while the phone was off I think. But they found it used so little power the company opted for a more conventional design. I thought it might have been the Motorola (I think) sensor reading thing, but this fits in with it. If they had talked with me I could probably got the sensor power down enough to make the conventional solution not worth it
 
So, I've had this problem for a while and apparently it's a well known issue. I still use Safari for web browsing. Old habits are sometimes hard to break. From what I have been able to gather from doing some research, there is really no way to block sites from adding cookies, even though there is a preference pane that allows you to block all cookies. I've tried that setting, emptying cache, resetting Safari, manually deleting cookies, etc. The conspiracy theorists claim that Apple has made deals to allow this stuff through which of course they won't admit, so it's down to doing my own house cleaning to rid my system of this stuff.

Am I missing something, is there a true way to block cookies? I'm sure Firefox is better at doing this but it's yet another piece of software to install which could have its own baggage, so if there's a way to tame Safari I'd rather go there.

I'm going back to being old school about my production machines. They are being pulled off the network. Only will go online when updates are required. All other machines I'm trying to secure as much as possible but I know it's going to become harder and harder to do that. As far as i'm concerned, if the machine is connected to the outside world it's a target.

Also discovered some interesting files on my machine that were detected by Disk Warrior as being problematic and they showed up after some software had recently been installed. Research on the web gave me some clues about their origin and in some cases they were probably harmless or had intentionally strange names for security purposes but in other cases could be potentially linked to some kind of malware.

Keep tabs on your systems if you can. Do routine maintenance to see what's lurking in there. And if you can, pull your production machines off the web.
 
Been using SRWare IRON and Duck Duck Go. IRON is a browser based upon Google's Chrome core, and is supposed to have better privacy protection. Duck Duck Go is a search engine with less spam and better privacy.

See:

http://download.cnet.com/SRWare-Iron/3000-2356_4-10889248.html
https://duckduckgo.com/

Scarlet X # 1859 “Bettie Page”
“… preparing to ‘whip’ the competition …”

Zeiss Lenses:

CY 21/2.8
ZF 28/2.0
CY 35-70/3.4
CY 50/1.4
ZF100/2.0
CY 135.2.8

Nikon Lenses:
G 14-24/2.8
G 24-70/2.8
D 80-200/2.8

Tokina Lenses:

11-16/2.8
 
What we need is independently settable, active,resettable cookies and paths for each site. Apart from tore, what is out there? It should be illegal to privately track anybody except returns to the same site if the user allows it.
 
Add eBay to the list of sites where our information has been compromised. When trying to reset yet another password I received a message that they are experiencing technical difficulties. As far as I'm concerned, the internet is experiencing technical difficulties. It is increasingly becoming a less than desirable place to be between the constant marketing trap and the security compromises, I'm losing interest by the day.
 
Yep. I argued for an external payment system, say through your local bank, kiosk, or post office, to keep financial info off line. Paypal comes closest to one if my verified payment schemes. But it makes me wonder if we need an external way to transmit data. I was just considering a way to do one thing through a mobile phone before I read this post. We need a closed point to point network system feed in use as well, so that communications to a site is sealed from other sites, and legislation preventing a site sharing, we already gave such a system, it is called a telephone network.
 
So, I've had this problem for a while and apparently it's a well known issue. I still use Safari for web browsing. Old habits are sometimes hard to break. From what I have been able to gather from doing some research, there is really no way to block sites from adding cookies, even though there is a preference pane that allows you to block all cookies. I've tried that setting, emptying cache, resetting Safari, manually deleting cookies, etc. The conspiracy theorists claim that Apple has made deals to allow this stuff through which of course they won't admit, so it's down to doing my own house cleaning to rid my system of this stuff.

Am I missing something, is there a true way to block cookies? I'm sure Firefox is better at doing this but it's yet another piece of software to install which could have its own baggage, so if there's a way to tame Safari I'd rather go there.

I'm going back to being old school about my production machines. They are being pulled off the network. Only will go online when updates are required. All other machines I'm trying to secure as much as possible but I know it's going to become harder and harder to do that. As far as i'm concerned, if the machine is connected to the outside world it's a target.

Also discovered some interesting files on my machine that were detected by Disk Warrior as being problematic and they showed up after some software had recently been installed. Research on the web gave me some clues about their origin and in some cases they were probably harmless or had intentionally strange names for security purposes but in other cases could be potentially linked to some kind of malware.

Keep tabs on your systems if you can. Do routine maintenance to see what's lurking in there. And if you can, pull your production machines off the web.
Steve,
give a try to Gohstery for Safari. Don't download it from the Apple Store. ;-)

And yes +1 for Duck duck go, because they don't keep your research in a cache,
Duck duck go doesn't use a stupid algorithm like Google who try to guess what you prefer in the research engine.
Best
B.
 
I've had my credit card stolen 4-5 times. It's never been from a hack, it's always been a dishonest card skimmer at a restaurant somewhere. I know someone who had like 3 cards in a couple months stolen--turned out to be the same restaurant/corrupt waiter who eventually got caught.

This is why we have insurance. It's just part of the cost of doing business. Credit card companies don't charge 2% because that's how much it costs to do a simple transaction (if so banks would be broke). Credit card companies charge 2% because they are insuring all transactions against fraud. Our economic system is at the point now where it's more efficient for there to be a good bit of fraud at the cost of convenience. If we are 4% more efficient but lose 2% to fraud we're still a more efficient economic system. The important thing is to just ensure that the 2% aren't socked for 100% and that we all share in the loss. If even 1% was at risk of losing all of their savings to fraud then we would see 100% of the people abandon the system--it's in everyone's best interest to just keep paying the credit pirates and carry on as before. We didn't panic when Harddrives were unreliable, we just assumed every hard drive was unreliable and engineered our system to take it into account (RAID).
 
Hmm, but when you have to spend months (and even over a year with identify theft) it is hardly convenient and their insurance becomes less relevant.

We run an insecure net, that could easily be much more secure, and we could do things differently to make it more secure.

What is known us that criminal organisations have so many peoples credit cards on line (read most) that they don't know what to do with it, as using it would damage the system. Now take a step back and consider what everybody else is doing, particularly certain countries, and what smaller timed criminal /organizations would do if they managed to get the level of access to credit card numbers the current ones do. House of glass cards.
 
Isn't the cc chip (already in use in some European countries) supposed to cut down on cc theft?
 
You normally cant use the chip online. They are also introducing mandatory pin number, now they can steal your pin number as well.

There isn't many solutions out there.

My idea was that the seller could set up an ecommerce account entry for a purchase, you then go to your bank or post office to read the statement of transaction. and pay it, giving you proof and totally breaking the internet chain. Email and phone could be used so it could be done at home.
 
You normally cant use the chip online. They are also introducing mandatory pin number, now they can steal your pin number as well.

There isn't many solutions out there.

My idea was that the seller could set up an ecommerce account entry for a purchase, you then go to your bank or post office to read the statement of transaction. and pay it, giving you proof and totally breaking the internet chain. Email and phone could be used so it could be done at home.

Or for Internet purchasing, just do a credit card that you can transfer funds into before making an online transaction, and allow for no overlimit spending? Hopefully the chip protects your credit card for everyday transactions.
 
Yep Elsie, we can use one of those, but they can still make a living getting what they can from a lot of people. We need robust systems to stop them.
 
http://en.wikipedia.org/wiki/DARPA_LifeLog

http://en.wikipedia.org/wiki/Regina_E._Dugan

https://play.google.com/store/apps/details?id=com.sonymobile.lifelog


n37yg2.png



:emote_popcorn:
 
Back
Top