Category: Uncategorized
-
California to Consider Do Not Track Legislation
This afternoon the CA Senate Judiciary Committee had a brief time for proponents and opponents of SB 761 to speak about CA’s Do Not Track legislation. In general, the usual people said the usual things, with a few surprises along the way. Surprise 1: repeated discussion of privacy as a Constitutional right. For those of…
-
Oak Ridge, spear phishing, and i-voting
Oak Ridge National Labs (one of the US national energy labs, along with Sandia, Livermore, Los Alamos, etc) had a bunch of people fall for a spear phishing attack (see articles in Computerworld and many other descriptions). For those not familiar with the term, spear phishing is sending targeted emails at specific recipients, designed to…
-
Federating the "big four" computer security conferences
Last year, I wrote a report about rebooting the CS publication process (Tinker post, full tech report; an abbreviated version has been accepted to appear as a Communications of the ACM viewpoint article). I talked about how we might handle four different classes of research papers (“top papers” which get in without incident, “bubble papers”…
-
Why seals can't secure elections
Over the last few weeks, I’ve described the chaotic attempts of the State of New Jersey to come up with tamper-indicating seals and a seal use protocol to secure its voting machines. A seal use protocol can allow the seal user to gain some assurance that the sealed material has not been tampered with. But…
-
Building a better CA infrastructure
As several Tor project authors, Ben Adida and many others have written, our certificate authority infrastructure has the flaw that any one CA, anywhere on the planet, can issue a certificate for any web site, anywhere else on the planet. This was tolerable when the only game in town was VeriSign, but now that’s just…
-
Do photo IDs help prevent vote fraud?
In many states, an ID is required to vote. The ostensible purpose is to prevent people from casting a ballot for someone else – dead or alive. Historically, it was also used to prevent poor and minority voters, who are less likely to have government IDs, from voting. No one would (publicly) admit to the…
-
Google Should Stand up for Fair Use in Books Fight
On Tuesday Judge Denny Chen rejected a proposed settlement in the Google Book Search case. My write-up for Ars Technica is here. The question everyone is asking is what comes next. The conventional wisdom seems to be that the parties will go back to the bargaining table and hammer out a third iteration of the…
-
A Legacy at Risk: How the new Ministry of Culture in Brazil reversed its digital agenda
Former Brazilian president Luiz Inacio Lula da Silva has become a prominent figure in the political world. When he completed his second and last term last December, 87% of Brazilians approved his government, an unprecedented high rate. So it is not surprising that his successor Dilma Roussef, the first woman elected president in Brazil, took…
-
What are the Constitutional Limits on Online Tracking Regulations?
As the conceptual contours of Do Not Track are being worked out, an interesting question to consider is whether such a regulation—if promulgated—would survive a First Amendment challenge. Could Do Not Track be an unconstitutional restriction on the commercial speech of online tracking entities? The answer would of course depend on what restrictions a potential…
-
A public service rant: please fix your bibliography
Like many academics, I spend a lot of time reading and reviewing technical papers. I find myself continually surprised at the things that show up in the bibliography, so I thought it might be worth writing this down all in one place so that future conferences and whatnot might just hyperlink to this essay and…