<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Nick Smith &#187; security</title>
	<atom:link href="http://www.nicksmith.co.uk/blog/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.nicksmith.co.uk/blog</link>
	<description>Spotlight on random items from the web</description>
	<lastBuildDate>Sun, 25 Jul 2010 21:46:06 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Digital Democracy</title>
		<link>http://www.nicksmith.co.uk/blog/2009/05/26/digital-democracy/</link>
		<comments>http://www.nicksmith.co.uk/blog/2009/05/26/digital-democracy/#comments</comments>
		<pubDate>Tue, 26 May 2009 15:25:49 +0000</pubDate>
		<dc:creator>Nick Smith</dc:creator>
				<category><![CDATA[politics]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[social]]></category>

		<guid isPermaLink="false">http://www.nicksmith.co.uk/blog/?p=104</guid>
		<description><![CDATA[The more information governments (or their agents) collect on the individual, the more power we give them. Without a digital democracy we must trust that this power is used wisely and with restraint.]]></description>
			<content:encoded><![CDATA[<p>Any new technology is always used to progress old agendas. I believe that the internet has forever changed the relationship between the individual and the state; and it is continuing to drive that change. Where once it freed the individual from geographically specific cultural and legal norms, now the web can be used to observe and control.</p>
<p>The article &#8216;<a title="Break free of this world wide delusion" href="http://technology.timesonline.co.uk/tol/news/tech_and_web/the_web/article6301123.ece">World Wide Delusion</a>&#8216; brought forward my thinking about wider society&#8217;s understanding and resulting use of the internet. As society uses and understands more about the possible applications of the net, we move through the stages of 1. Awareness; 2. Utilisation (web 2.0); 3. Control (the future). I believe the development of the web is teetering on the edge of this last stage. Web geeks and the tools they once used for impromptu liberation are now being used for control in ever more diverse applications by government and big business, who crucially have the financial and legal power to back it up.</p>
<p><a href="http://twitter.com/Oprah">Oprah Winfrey</a> and <a href="http://twitter.com/stephenfry">Stephen Fry</a>&#8216;s use of twitter exemplify celebrity endorsement and raising awareness of new technologies in the mainstream. Ignoring their status, they are simply individuals utilising the liberating aspects of web 2.0 to microblog their lives. However, the innocent liberation is coming to an end. As these technologies are popularised, governments around the world are more inclined to watch and censor our activities in a fashion that&#8217;s been most publicly performed by China. Where once we were protected by the anonymity of the web and trust in our government&#8217;s digital ignorance, we&#8217;re now facing a future where the web loses a lot of the impartiality that we once took for granted.</p>
<p>Across the world <acronym title="Internet Service Providers">ISPs</acronym> are being made responsible for the content that exists on their network. In New Zealand the so-called &#8216;<a href="http://creativefreedom.org.nz/blackout.html">Guilt Upon Accusation</a>&#8216; law allows ISPs to disconnect individuals who are perceived to have violated copyright laws. The law allows this without any evidence or the scrutiny of a court. In the EU ISPs are newly required to <a href="http://news.bbc.co.uk/1/hi/technology/7985339.stm">track connections</a> made through the net: i.e. net phone calls, the destination of emails (but not the content) and telephone calls. In the UK, business and government have recently cooperated to <a href="http://www.theregister.co.uk/2008/06/06/virgin_media_bpi_deal/">end the piracy of music</a> on the internet. ISPs are given the option to voluntarily regulate their networks or face legislation.</p>
<p>Content is now also being censored. The &#8216;<a href="http://www.greatfirewallofchina.org/">Great Firewall of China</a>&#8216; is the obvious example, but similarly in the UK content is being filtered on our behalf by the <a href="http://www.iwf.org.uk/">Internet Watch Foundation</a> (IWF). One high profile example of this included the blocking of a <a title="WF pulls Wikipedia from child porn blacklist" href="http://www.theregister.co.uk/2008/12/10/iwf_reverses_wikiban/">Wikipedia article</a> that featured an image of a semi-naked child. In a country that prides itself on freedom of artistic expression, a debate about the image as a valid piece of art allowed the decision to be overturned. However, the worrying aspect of this example is that the decision was made without consultation or a published set of criteria. A sort of digital Guantanamo.</p>
<p>In fact <a href="http://en.wikipedia.org/wiki/Guantanamo_Bay_detention_camp">Guantanamo Bay</a>, although being decommissioned, is an example of the game-changing decisions that authorities are prepared to make on our behalf. Using fear of criminality such as terrorism, governments are legitimising increased levels of tracking on and offline. <a href="http://en.wikipedia.org/wiki/British_national_identity_card">ID cards</a> and a <a href="http://news.bbc.co.uk/1/hi/programmes/whos_watching_you/8064333.stm">Police road camera network</a> are just two instances where networked technology is being used to hold information on the individual. Each time you use your car, your journey will be recorded and kept for up to two years. Since most of my real world actions leave digital footprints i.e. Oyster card travel or mobile phone use, I can in theory be tracked. But that information is usually separately stored and subject to warrant to gain access. This era of control relies on centralised databases with instant access by the state.</p>
<p>The major issue surrounding each of these control mechanisms is that they come without regulation. Political agendas are bleeding onto the web and into our digital systems and I, as an individual, do not feel consulted on whether I agree. I believe if politics and law are allowed to encroach on our digital lives then democracy needs to follow. The control and collection of information cannot be left to unelected bodies without recourse. Governments must take back control, or at least understand the social and political climate of suspicion that they are allowing us to drift into. In the same way that the <a href="http://www.guardian.co.uk/environment/series/greenagenda">green agenda</a> has been pushed to the fore, I look forward to a future election where digital control policies are a major point of debate.</p>
<p>The more information governments (or their agents) collect on the individual, the more power we give them. Without a digital democracy we must trust that this power is used wisely and with restraint. In the UK, I&#8217;m not convinced that our government will use my information for anything other than its own purposes. I&#8217;m concerned that these systems are so divorced from the political process that I have no way to affect their use.</p>
<p class="update"><strong>Update 7 June 2009:</strong> &#8220;<a href="http://news.bbc.co.uk/1/hi/uk/8087530.stm">UK &#8216;must log&#8217; phone and web use</a>&#8220;.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.nicksmith.co.uk/blog/2009/05/26/digital-democracy/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Open and Social Week</title>
		<link>http://www.nicksmith.co.uk/blog/2007/11/23/open-and-social-week/</link>
		<comments>http://www.nicksmith.co.uk/blog/2007/11/23/open-and-social-week/#comments</comments>
		<pubDate>Fri, 23 Nov 2007 16:42:57 +0000</pubDate>
		<dc:creator>Nick Smith</dc:creator>
				<category><![CDATA[@media]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[google]]></category>
		<category><![CDATA[politics]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[social]]></category>
		<category><![CDATA[usability]]></category>

		<guid isPermaLink="false">http://www.nicksmith.co.uk/blog/2007/11/23/open-and-social-week/</guid>
		<description><![CDATA[<p>My <a href="./2007/11/20/over-and-over-and-over-and-over/">previous post</a> looks like a rant. I think the events of Tuesday allowed a long running issue I had with Government (mostly web) security to spill out. The post was quickly written. I&#8217;m usually not as apparently irate,&#8230;</p>]]></description>
			<content:encoded><![CDATA[<p>My <a href="./2007/11/20/over-and-over-and-over-and-over/">previous post</a> looks like a rant. I think the events of Tuesday allowed a long running issue I had with Government (mostly web) security to spill out. The post was quickly written. I&#8217;m usually not as apparently irate, I&#8217;m quite sociable actually ;) &#8211; <em>is it conspicuous that I offer no corroboration for that?</em></p>
<p>This week I&#8217;ve found myself reading <a href="http://www.readwriteweb.com">Read/WriteWeb</a> more and more. If you&#8217;ve not seen it, they produce thought provoking articles on all sorts including some that analyse the past and offer an academic look at the possible future of the web. In the last few days I&#8217;ve been contemplating their posts on &#8220;<a href="http://www.readwriteweb.com/archives/social_software_best_practices.php">Visualizing Social Software Best Practices: Three Approaches</a>&#8221; and &#8220;<a href="http://www.readwriteweb.com/archives/social_graph_tim_berners-lee.php">Social Graph &amp; Beyond: Tim Berners-Lee&#8217;s Graph is The Next Level</a>&#8220;. These posts led me to Tim Berners-Lee&#8217;s &#8220;<a href="http://dig.csail.mit.edu/breadcrumbs/node/215">Giant Global Graph</a>&#8221; and Google&#8217;s &#8216;light-hearted&#8217; &#8220;<a href="http://code.google.com/apis/opensocial/articles/bestprac.html">Social Design Best Practices</a>&#8220;. I found these good for getting to grips with possibilities for the web&#8217;s future direction. What&#8217;s interesting is that it all seems to tie together the thought as <a href="http://www.w3.org/People/Berners-Lee/">Tim</a> quotes:</p>
<p><q>It&#8217;s not the documents, it is the things they are about which are important</q></p>
<p>Anecdotally, blue flavor alluded to this last week after <a href="http://www.blueflavor.com/blog/thinking/recapping_fowd.php" title="recapping on Future of Web Design">recapping on FOWD</a> with the statement &#8216;content is still king.&#8217;. Well actually Tim abstracts this even further by stating it&#8217;s what the content is about that&#8217;s important, but both follow similar lines by stating the importance of &#8216;situation-appropriate&#8217; web access (another quote from Tim&#8217;s post).</p>
<p>So after digesting all of that freely available info, who needs to go to conferences like <a href="http://www.vivabit.com/atmediaajax/">@mediaAjax</a>? We&#8217;ll actually I do and I was quite sociable at the after conference gathering, although I didn&#8217;t have the <a href="http://www.google.co.uk/search?source=ig&amp;hl=en&amp;rlz=&amp;q=define%3A+moola&amp;btnG=Google+Search&amp;meta=" title="moola game">moola</a> to attend the event.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.nicksmith.co.uk/blog/2007/11/23/open-and-social-week/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Over and over and over and over&#8230;.</title>
		<link>http://www.nicksmith.co.uk/blog/2007/11/20/over-and-over-and-over-and-over/</link>
		<comments>http://www.nicksmith.co.uk/blog/2007/11/20/over-and-over-and-over-and-over/#comments</comments>
		<pubDate>Tue, 20 Nov 2007 15:33:55 +0000</pubDate>
		<dc:creator>Nick Smith</dc:creator>
				<category><![CDATA[politics]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.nicksmith.co.uk/blog/2007/11/20/over-and-over-and-over-and-over/</guid>
		<description><![CDATA[<p>It happens over and over again. Today the <a href="http://news.bbc.co.uk/1/hi/uk_politics/7103566.stm" title="BBC reports Disc with 15m bank details lost">BBC reported</a> that Her Majesty&#8217;s (HM) Revenue and Customs has lost the bank details of 15 million(!) child support recipients, apparently that&#8217;s all&#8230;</p>]]></description>
			<content:encoded><![CDATA[<p>It happens over and over again. Today the <a href="http://news.bbc.co.uk/1/hi/uk_politics/7103566.stm" title="BBC reports Disc with 15m bank details lost">BBC reported</a> that Her Majesty&#8217;s (HM) Revenue and Customs has lost the bank details of 15 million(!) child support recipients, apparently that&#8217;s all of them. The story is probably going to develop over the coming days. Our government seems to be good at using technology badly. My question, how are the public supposed to have any confidence in government IT systems, some of which have web interfaces, when these situations seem to be becoming so commonplace? Listed are some of the other security bungles that have caught my attention recently:</p>
<ul>
<li><strong>&#8220;<a href="http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/11/16/nbreach116.xml">New intelligence chief reveals all on website</a>&#8220;, </strong>16 November 2007<br />
The most senior British intelligence official, appointed yesterday to oversee MI5, MI6 and GCHQ, has a website revealing his home address, phone numbers and private photographs of himself, family and friends.</li>
<li><strong>&#8220;<a href="http://www.theregister.co.uk/2007/11/13/foreign_office_data_security/">Foreign Office web security failed Data Protection Act, says info office</a>&#8220;</strong>, 13 November 2007<br />
The Foreign Office has promised to keep data safer in future, after its website exposed the details of those seeking visas for entry into the UK. An investigation by the Information Commissioner&#8217;s Office (ICO) found a breach of the Data Protection Act<em>.</em></li>
<li><strong>&#8220;<a href="http://www.theregister.co.uk/2007/11/05/standard_life_lost_cd_security_flap/">Lost CD may put pension holders in peril</a>&#8220;</strong>, 5 November 2007<br />
Thousands of customers of UK insurer Standard Life have been left at risk of fraud after their personal details were lost by HM Revenue &amp; Customs (HMRC).</li>
<li><strong>&#8220;<a href="http://www.theregister.co.uk/2007/07/26/dwp_fraud_loss/">DWP loses £2.5bn to fraud and errors</a>&#8220;</strong>, 26 July 2007<br />
Department of Work and Pensions. About £2.5bn was lost to fraud and error in benefit payments over the last year &#8230;The report identifies limited IT integration as one reason for the high level of error<em>.</em></li>
<li><strong>&#8220;<a href="http://www.theregister.co.uk/2007/04/26/docs_details_put_online/">DoH&#8217;s latest d&#8217;oh!</a>&#8220;</strong>, 26 April 2007<br />
Department of Health (DoH) has apologised for its latest IT blunder &#8211; publishing private details of applicants for junior doctor posts on an unsecured website<em>.</em></li>
</ul>
<p>Now&#8230; anyone for an <a href="http://www.homeoffice.gov.uk/passports-and-immigration/id-cards/">ID card</a>?</p>
<p><strong>Update 26 November 2007:</strong>  The total turned out to be &#8220;records for 25 million individuals and 7.25 million families&#8221;.</p>
<p><strong>Update 20 December 2007:</strong> <a href="http://www.ehiprimarycare.com/news/3328/dh_found_guilty_on_mtas_data_protection_breach">DH found guilty on MTAS data protection breach</a><em> &#8211; &#8220;The Information Commissioner requires the <abbr title="Department of Health">DH</abbr> to sign a formal undertaking to comply with the principles of the Data Protection Act.&#8221;</em> Weren&#8217;t they already required to do so by law? Will yet another document make any difference?</p>
]]></content:encoded>
			<wfw:commentRss>http://www.nicksmith.co.uk/blog/2007/11/20/over-and-over-and-over-and-over/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
