Source: http://centennial-man.blogspot.com/2019_06_09_archive.html
Timestamp: 2020-05-27 12:18:39
Document Index: 448884890

Matched Legal Cases: ['art 1', 'art 2', 'art 3', 'art 4', 'art 5', 'art 6']

Centennial Man: 2019-06-09
A caution for my students working in the defense industry.
Learning from other laws?
[Other points:
… based on the risk of harm, “the owner or licensee of the computerized data shall notify the individual of the breach.”
… if the business that incurs the security breach is not the owner or licensee of personal information, that business may not charge the relevant owner or licensee for information necessary to carry out the owner or licensee’s notification obligations under Maryland’s breach law. [This must have happened once? Bob]
What App(s) in the US do the same thing?
http://nautil.us/issue/73/play/wechat-is-watching
Learning about stalkers…
Part 1 discusses the harms which are associated with a person being targeted by stalkerware
Part 2 undertakes a technical assessment of specific stalkerware applications.
In Part 3, we evaluated how companies which sold stalkerware, and software which could be repurposed as stalkerware, marketed their products to prospective customers.
Part 4 of the report undertook a content assessment of companies’ user-facing public policies.
In Part 5, we conducted an assessment of stalkerware companies’ business practices through the lens of Canada’s federal commercial privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA).
In Part 6, we collect our major findings from our multidisciplinary research and propose a range of recommendations
New tech, new law.
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3392379
The purpose of this introductory chapter is twofold. First, it outlines some of the most urgent ethical and legal issues raised by the use of self-learning algorithms in Artificial Intelligence (AI) systems and (smart) robotics. Secondly, it provides an overview of several key initiatives at the international and European levels on forthcoming AI ethics and regulation.
Marketing is like politics?
No consequences, no security? Now how about senior management?
Mr. Paranoia says: Probably an individual attack. Possibly a ‘proof of concept’ military exercise.
https://hotforsecurity.bitdefender.com/blog/aircraft-component-maker-asco-hit-by-ransomware-shuts-down-global-production-21336.html
… The company has plants in Belgium, Germany, Canada and the US, as well as office representation in Brazil and France. A week later, the plants are still closed and an investigation by external experts seeks to determine the actual damage caused. The infection occurred at the production plant in Belgium, but the plants in the rest of the locations were shut down as a precaution to prevent the ransomware from spreading across the entire network.
Interesting question. Would the FBI then make it public or allow the recipient to make it public or require the recipient to ignore it unless they can confirm it independently?
https://www.justsecurity.org/64560/to-congress-if-russians-seek-to-provide-dirt-make-it-a-requirement-to-report/
Shockingly – if anything shocks anymore – President Donald Trump told ABC news Wednesday that he need not tell the FBI if the Russians once again reached out with an offer of “dirt” on his opponents in the race for president. When Trump was told that Christopher Wray, the FBI director the president himself appointed, said last month that this kind of attempted foreign election interference was something that should be reported to federal law enforcement, Trump’s response was: “The FBI Director is wrong.”
The good news is that Congress is already working on this issue. The Anti-Collusion Act, introduced Wednesday by Rep. Tom Malinowski (D-N.J.), would require everyone running for federal, state, or local office to report offers of assistance from a foreign government or agent of a foreign government to the Department of Justice.
Why are political reactions so often over reactions? “We gotta do something” overrides “let’s think about this.”
Ignore this if you’re certain you are not impacted, but expect lawsuits when you find out you are.
https://www.hldataprotection.com/2019/06/articles/news-events/webinar-invitation-operationalizing-the-california-consumer-privacy-act/
… explore the impact of the CCPA including:
… To register for the webinar, click here.
Alabama is in the forefront?
https://www.al.com/business/2019/06/state-commission-to-study-artificial-intelligence-technology.html
… The Alabama Commission on Artificial Intelligence (AI) and Associated Technologies will make policy recommendations to advance AI’s growth in the state’s tech sector.
For our non-geeks?
https://www.bespacific.com/nyt-has-a-course-to-teach-its-reporters-data-skills-and-now-theyve-open-sourced-it/
and for our geeks.
https://www.bespacific.com/semantic-sanity-a-personalized-adaptive-feed/
Perspective. This could be difficult for my smartphone using students. Maybe there’s an App for that?
https://news.microsoft.com/europe/features/more-than-a-feeling-teaching-empathy-to-artificial-intelligence/
… Now, thanks to advancements in technology, we’re at a stage where we can think about the importance of empathy in machines. Artificial intelligence (AI) is becoming an ever-increasing presence in our daily lives, whether it’s the voice assistant on your phone, or the complex algorithms used to fight diseases.
It’s my understanding that they don’t teach this in high school.
Regular reports of “who can access” and “who did access” should go to every manager of people or data. And they should look at them!
Ca: Privacy breach at Queen Elizabeth Hospital spurs surveillance of an employee’s access to health charts
Brian Higgins reports:
P.E.I.’s privacy watchdog wants Health PEI to keep closer tabs on one of its employee’s use of patient health records, following a privacy breach last year at Queen Elizabeth Hospital.
That’s according to a new report by Information and Privacy Commissioner Karen Rose, posted May 30.
According to the report, in March 2018, a patient received a copy of their electronic patient chart from Health PEI. That chart included a log showing who had accessed the patient’s health information, and when.
If you offer a tool to anyone potentially threatening the state, the state will react. (Best description of DDoS I have ever seen!)
https://www.securityweek.com/telegram-hit-cyber-attack-ceo-points-hk-protests-china
… "Historically, all state actor-sized DDoS (200-400 Gb/s of junk) we experienced coincided in time with protests in Hong Kong (coordinated on @telegram)," he tweeted.
… "Imagine that an army of lemmings just jumped the queue at McDonald's in front of you -– and each is ordering a whopper," it said, referring to the flagship product of Burger King.
https://www.securityweek.com/senators-question-fbi-russian-hack-voting-firm
VR Systems has said it believes it is the company referred to in the report. The Tallahassee, Florida-based company has maintained, however, that its system was never penetrated. It told Wyden in a letter last month that the cybersecurity firm Fire Eye conducted a security audit and found no evidence of a breach.
… The Department of Homeland Security said last week that its computer experts will examine North Carolina polling equipment supplied by VR Systems , at the state’s request. The forensic analysis will look at laptops and replicas of computer hard drives that were used in heavily Democratic Durham County to determine whether hacking was responsible for malfunctions on election day in 2016.
(Related) ...and it’s going to get worse.
… Senator Ron Wyden, the Oregon Democrat who sits on the Intelligence Committee, predicts that the 2020 election will make what happened in 2016 “look like small potatoes.” “It’s not just the Russians,” he told me. “There are hostile foreign actors who are messing with two hundred years’ worth of really precious history.” Wyden recently reintroduced the pave Act, a wish list of election-security provisions that failed to get through the Senate last year. The measure includes the use of hand-marked paper ballots and a prohibition on wireless modems and other kinds of Internet connectivity, all of which have been advocated by computer scientists and other election experts for years.
But with the Senate Majority Leader, Mitch McConnell, making it clear that he will not advance any election-security legislation
https://teachprivacy.com/profiling-and-the-gdpr-an-interview-with-mark-singer-and-raf-sanchez/
This is huge. Warwick Ashford reports:
Allow me to clearly state my obfuscation with the simplest of bemused befuddlement. (Amusing graphic)
… Only Immanuel Kant’s famously difficult “Critique of Pure Reason” registers a more challenging readability score than Facebook’s privacy policy.
… Google’s privacy policy evolved over two decades — along with its increasingly complicated data collection practices — from a two-minute read in 1999 to a peak of 30 minutes by 2018.
… And if states continue to draft their own data protection laws, as California is doing with its Consumer Privacy Act, privacy policies could balloon with location-specific addendums.
For my summer Security Compliance class.
https://www.bespacific.com/regulating-big-tech-legal-implications/
Not the best target to irritate…
Another way to defy ransomware.
https://www.securityweek.com/radiohead-defies-hackers-releases-trove-stolen-music
Security is complicated. Third parties can help, but it’s still your responsibility.
Liisa Thomas, Sarah Aberg, Kari Rollins, and Katherine Boy Skipsey write:
Read more on SheppardMullin Eye on Privacy.
https://www.zdnet.com/article/cybersecurity-these-are-the-internet-of-things-devices-that-are-most-targeted-by-hackers/
… Research from cybersecurity company SAM Seamless Network found that security cameras represent 47 percent of vulnerable devices installed on home networks.
… Figures from the security firm suggest that the average device is the target of an average of five attacks per day, with midnight the most common time for attacks to be executed – it's likely that at this time of the night, the users will be asleep and not paying attention to devices, so won't be witness to a burst of strange behavior.
Leading to a full Privacy law?
As we recently noted, Washington state amended its data breach notification law on May 7 to expand the definition of “personal information” and shorten the notification deadline (among other changes ). Not to be outdone by its sister state to the north, Oregon followed suit shortly thereafter— Senate Bill 684 passed unanimously in both legislative bodies on May 20, and was signed into law by Governor Kate Brown on May 24. The amendments will become effective January 1, 2020.
Among the changes effected by SB 684 is a trimming of the Act’s short title—now styled the “Oregon Consumer Information Protection Act” or “OCIPA” (formerly the “Oregon Consumer Identity Theft Protection Act” or “OCITPA”). Apart from establishing a much more palatable acronym, the amended short title mirrors the national (and international ) trend of expanding laws beyond mere “identity theft protection” to focus on larger scale consumer privacy and data rights.
… This morning, Meeker highlighted slowed growth in e-commerce sales, increased internet ad spending, data growth, as well as the rise of freemium subscription business models, telemedicine, photo-sharing, interactive gaming, the on-demand economy and more.
… We’ll be back later with a full analysis of this year’s report. For now, here’s a look at all 333 slides. You can view the full internet trends report archive here.
How very James Bond. “Q” would be delighted.
… The deepfake video of Mark Zuckerberg was created for an art installation on display in Sheffield called Spectre. It is designed to draw attention to how people can be monitored and manipulated via social media in light of the Cambridge Analytica affair - among other scandals.
How many can we trust?
https://www.bespacific.com/number-of-fact-checking-outlets-surges-to-188-in-more-than-60-countries/
https://singularityhub.com/2019/06/11/whats-behind-the-international-rush-to-write-an-ai-rulebook/
30 years is near.
https://hbr.org/podcast/2019/06/ais-near-future
… In this conversation, Jürgen and Azeem Azhar discuss what the next thirty years of AI will look like.
https://www.schneier.com/blog/archives/2019/06/rock-paper-scis.html
Will we need to delete the data and then retrain our AI? Expensive if necessary.
… Virtually every modern enterprise is in some way or another collecting data on its customers or users, and that data is stored, sold, brokered, analyzed, and used to train AI systems. For instance, this is how recommendation engines work—the next video we should watch online, the next purchase, and so on, are all driven by this process.
Perspective. My search for why.
https://www.cnbc.com/2019/06/11/makan-delrahim-speech-lays-groundwork-for-antitrust-versus-big-tech.html
… Delrahim’s speech, as transcribed on the DOJ’s website, argues existing antitrust laws are strong enough to regulate tech.
… One way of evaluating whether a company has violated antitrust law is through what Delrahim called the “no economic sense test.” A monopoly that makes a decision that makes no economic sense except for “its tendancy to eliminate or lessen competition” would fail the test, according to Delrahim’s definition.
Acaution for my students working in the defense in...
Noconsequences, no security? Now how about senior...
Regularreports of “who can access” and “who did ac...
Not the best target to irritate…Acomputer virus ha...
If you gather data, you becomea target for hackers...
Failure by design. https://www.cpomagazine.com/cyb...
An interesting look at the location data Apps are ...