Showing posts with label Wikileaks. Show all posts
Showing posts with label Wikileaks. Show all posts

Saturday, December 3, 2011

For users of iPhones, Blackberries, Androids and/or Skype


We live in an age that's nothing short of Orwellian.

There's a new industry that secretly vacuums up your data and preserves it forever on high-end servers that hold many petabytes (a million gigabytes) of information.

WikiLeaks has just released the Spy Files – a trove of almost 300 documents from these companies that shine a light into this industry.

One, a brochure from SS8 of Milpitas, California, touts its Intellego product that allows its owner to see (in real time, if it wants) such things as your draft-only emails, attached files, pictures and videos.

State agencies have expanded their data-collecting to include data on water and sewage billing, visitor logs from parks and recreation facilities and much more.

To read more about this subject, click here for Wikileaks: The Spy Files 2011-12-01

NB: Several posts to this blog have been on the subject of security. I feel that The Spy Files need to be part of any consideration of this subject.

= = = = = = = = =

It turns out that spyware is running on hundreds of millions of smartphones and tablets.

The carriers explain their use of this spyware program in a way that makes it sound harmless. However, it only sounds harmless until you see, among other things, that it is capturing your every key stroke.

With iPhones, which have the program in them, turning off the spyware program is sometimes easy.

If you’re running iOS 5.x, just head to:

Settings > General > About > Diagnostics & Usage

and click “Don’t Send” on.

If you’re running iOS3 or 4, however, I don’t know of any current way to disable the service.

With Android phones, it’s much trickier, but it can be done. The story on BlackBerries is a bit murky.

Hopefully, because this practice has received a lot of attention recently, the carriers will soon make it simple to disable this spyware for those of you who don’t want to share everything you do on your phones with your phone companies.

Monday, February 7, 2011

Wikileaks and EHR Security

As far as the leaked US cables are concerned, the fury of the US administration and of certain US politicians was, for a time, positively comical. It stopped being funny when they began talking about prosecuting Julian Assange for "espionage", given the draconian penalties that a conviction would carry. But the State Department's indignation over the leaks of allegedly valuable secrets was, and remains, preposterous.

Why? Because there is absolutely no way that a huge database containing 250,000 "secret" documents that can be lawfully accessed by more than a million officials can ever be secure. Any security engineer will tell you that it cannot be done: if you want to keep things secret online then the only way to do it is by compartmentalizing the system. Huge, monolithic computer systems are intrinsically insecure.

So, I believe that what is true of Wikileaks is true of Electronic Health Records (EHR) in so far as security (confidentiality) is concerned. Actually, as any reader of his or her hometown newspaper or local TV news knows, all computer systems are potentially insecure.
Caveat emptor.