Spire Security News and Views
Spire Security is a market research and analysis firm dedicated to bringing clarity to the information security world. This is Pete Lindstrom's blog - focused on providing analysis and insight to the happenings of the day, current security trends, and missing pieces to the information security puzzle.




Subscribe to "Spire Security News and Views" in Radio UserLand.

Click to see the XML version of this web page.

Click here to send an email to the editor of this weblog.
 

 

Thursday, July 08, 2004
 

Okay, I know this is a bit of a stretch, but I do want to point another thing out about privacy. Basically, we complain about our privacy every time something (usually tech) or somebody makes it easier to collect and distribute information about us. Most recently, I have been reading a bit about RFID and privacy. So the technology is evil because our privacy is at risk.

On the other hand, many times the same people also support things like "full disclosure" of information when it is available. But they ignore the value provided (to the bad guys) when it is used to collect and distribute this information. The basic response here is "they would have gotten the information some other way anyway."

I guess my basic complaint is that they worry about how easy technology makes some things in the case of privacy, and yet in the case of some other information (how to build a nuclear bomb) they completely discount the value associated with collection and distribution.

Of course, there are many better examples in history that demonstrate the value proposition associated with the person willing to go through the effort of collection.

It's late. I will need to think about this a bit more...


12:21:54 AM    comment []

I know there are lots of definitions of privacy-related information out there (PII and PHI are two big ones) but I would like to provide a quick taxonomy (mostly for my own purposes). I think of three different types of information that affect privacy:

1) Identity information (who I am) - general information about who a person is as well as demographic information (address, phone number, etc.). This type of information is necessary to disclose in various ways and can be used for activities like identity fraud.

2) Identifying characteristics (more about me) - information that provides insight into the person that is generally unknown. Included here is fnancial information, health information, and other sensitive information.

3) Identifying activities (what I do) - actions that provide insight into the person. For example, the clubs someone frequents, online activities, etc. 

Humans leak this personal information all the time. From a biometrics perspective, we do it without knowing it (check out CSI for details). In our personal activities, we provide insight into who we are. Everything around us - our garbage, the color of our house, the music coming out the window - all tell something about who we are.

 


12:12:14 AM    comment []


Click here to visit the Radio UserLand website. © Copyright 2004 Pete Lindstrom.
Last update: 7/23/2004; 3:55:40 PM.
This theme is based on the SoundWaves (blue) Manila theme.
July 2004
Sun Mon Tue Wed Thu Fri Sat
        1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30 31
Jun   Aug