Elamb Cybersecurity

Category: security

  • Stolen VA data may have been erased

    Stolen personal data for 26.5 million veterans and military personnel may have been erased by teenagers who sold the computer equipment, Veterans Affairs Secretary Jim Nicholson said Thursday.

    I hope this is the case.  But the real problem is that it could happen again.  If the VA doesn't make an example out of someone, it is hoped that they will at least tighten up their policy.  Its the least they can do for the Vet who have served.

    The secretary of veterans affairs, R. James Nicholson , in the spotlight because of a breakdown in data security, called yesterday for tougher penalties on federal employees who mishandle sensitive information.

    Nicholson told the House Government Reform Committee that it is “too hard, in my opinion, to discipline people in the civil service — it's too hard to impose sanctions.”

    Man, that is the truth.  I've worked closely with civil servant for about six years now and the stuff these guys get away with is insane.  The ones that are prior military are usually pretty cool, but a few that I've worked with seem to be completely above policies that guard against discrimination and sexual harasment.  It seems the worse they are the more they get promoted.  Don't get me wrong.  I've worked with some brilliant civil servants as well.  Its just that when they are bad… they are REALLY bad.

    read more | digg story

  • Your Privacy Under Siege

    The government wants Internet firms to store records about you so that it can have them if necessary for an investigation. Should you worry?

    Here is what Ben Franklin said about liberties:

    “They who would give up an essential liberty for temporary security, deserve neither liberty or security.”

    It still surprises me that so many Americans don't seem to mind that their liberties are being striped slowly but surely.  How do we continue to elect the loudest proponents of security as a reaction to fear. 

    read more | digg story

  • Social Engineering, the USB Way

    I made my way to the credit union at about 6 a.m. to make sure no employees saw us. I then proceeded to scatter the drives in the parking lot, smoking areas, and other areas employees frequented.

    I knew a professor who did something similar to this.  He and his class wanted to prove how unsecure the computer stores are so they went to CompUSA/Fry's type computer store and loaded up the display computers with malware.  But they weren't evil malware.. they were “happy malware”.  They notified the manager of what they'd done in order to give them a heads up on the lack of security.  Needless to say the store was pissed.  Gray Hats get no respect.

    read more | digg story

  • No Tolls on The Internet

    “[Congress] will decide whether the Internet remains a free and open technology fostering innovation, economic growth and democratic communication, or instead becomes the property of cable and phone companies that can put toll booths at every on-ramp and exit on the information superhighway.”

    read more | digg story

  • Google: "The Debate over Net Neutrality"

    Google is urging grassroots action in favour of net neutrality. CEO Eric Schmidt has written an open letter to Google users asking them to speak out on this issue. Call your representative in Congress at 202-224-3121.

    read more | digg story

  • Colorado Passes Bills on Computer Security, Hardware and Software Standards

    Colorado Gov. Bill Owens today signed legislation to provide greater security for the state's computer systems and increase the oversight on large computer systems developed by state agencies.

    House Bill 1157 officially creates the position of chief information security officer. Under the legislation, this officer will have control over the state's cyber security policies and procedures to protect computer systems in state agencies and the citizen information on those computers. The governor had made cyber security one of his priorities in the State of the State.

    I saw the Chief Information Security Officer at an ISSA meeting in Colorado Springs.  He was a very down to earth guy not really a political type.  I think this is a good more for Colorado.   

    read more | digg story

  • MPAA Decides Not Enough People Know About ISOhunt

    A week ago, they were crowing about how shutting down Pirate Bay was such a huge victory for the entertainment industry. Instead, the site was back up two days later, and only suffered additional outages because so many more people started using the site…

    read more | digg story

  • Basic Computer Security PSA

  • 2.2 million active-duty personnel in VA data theft

    In a new disclosure Tuesday, VA Secretary Jim Nicholson said the agency was mistaken when it said over the weekend that up to 50,000 Navy and National Guard personnel were among the 26.5 million veterans whose names, birthdates and Social Security numbers were stolen on May 3.

    Read More here.

    Apparently, their are Veteran coalition groups who are threatenting to sue but potential damage of this is worth way more than any can get from a lawsuit.

    It demands that the VA fully disclose which military personnel are affected by the data theft and seeks $1,000 in damages to each person — up to $26.5 billion total.

    What blows my mind is why these people would put a database with that kind of data on a laptop and take everywhere with them.

  • Data Theft Hit 80% Of Active Military: Concerns Raised Beyond Identity

    “The department announced that personal data for as many as 1.1 million active-duty military personnel, 430,000 National Guard members and 645,000 reserve members may have been included on an electronic file stolen May 3 from a department employee's house in Aspen Hill.”

    read more | digg story