PhoneFactor, a phone security firm, discovered a problem with the SSL (Secure Sockets Layer) protocol that protects mail servers and e-commerce sites from attacks. They tried to prevent the discovery from becoming public while they worked with the Industry Consortium for Advancement of Security on the Internet (ICASI) to fix the issue, but an engineer posted the details online last week after discovering the flaw independently. He apparently was looking for help with fixing the problem but, unfortunately, only made it worse and forced ICASI and PhoneFactor to address the issue publicly.

This is an example of someone trying to do the right thing but, as a result of their poor judgment, the personal information of millions of people could be at risk. While it is true that consumers must trust that the experts are watching out for their safety, it’s also important to make sure that we take the basic precautions to protect ourselves on an individual level.

Absolute Software co-hosts free webinar on how one K-12 school district
simplified IT asset management and reduced computer loss by 95%

Join Absolute for a FREE webinar on October 27, 2009 featuring the first-hand laptop management and theft deterrence experiences of one of the largest school systems in the U.S., Prince Georges County Public Schools (PGCPS).

Schools with computing programs need to combat computer theft or loss, comply with regulations, and find ways to efficiently and easily track and maintain a large fleet of computers. Learn why PGCPS chose to implement state-of-the-art laptop management technology and outsource key operations to Absolute Software professional services – in order to reduce costs.

When: Tuesday, October 27, 2009; 2:00pm ET/ 11:00 am PT; 60 minutes

What: Learn how PCGPS:

• Increased use of laptops in the classroom, benefiting teachers, students, and the community
• Implemented a paperless, more efficient asset tracking system, allowing IT techs to see the location of over 40,000 laptops, desktops and mobile computers county-wide
• Saved over $47,000 annually on teacher laptop hand-out/take-back tasks, representing a 30% increase in efficiency
• Reduced computer losses by approximately 95% per year, saving an estimated $93,000 in capital expenses

Who: This webinar will feature

• Chantelle Folkes, Network Engineer, Prince George County Public Schools
• Richard Fuhr, Director of Professional Services, Absolute Software

>>Register Now

Upon receiving the theft report, Absolute began to forensically mine the stolen computer for evidence. The Absolute Theft Recovery Team located the machine in a nearby neighborhood, and was able to police with the information necessary to obtain a search warrant.

A search of the residence resulted in the laptop’s recovery, along with the discovery of several other stolen items. Further investigation determined that two individuals were responsible for the theft: a young man, and his 17 year old cousin – who was enrolled to attend the victim college that fall.

The customer has been reunited with his laptop and both suspects face criminal charges.

A new article in the Financial Times says that
Twittering executives reveal too much. While many people do continue to argue that Twitter is a waste of time, most of those people haven’t given it a real shot. Though you may be getting a very personal snapshot into someone’s life, Twitter also has amazing potential as a business tool.

As Lucy Kellaway argues in the article:

I think it is potentially the best communication tool there is; the trouble is that most executives are making a complete hash of using it. Either they fill it with mundane personal detail, or they fill it with mundane professional detail – which is possibly worse. The first scores higher on embarrassment; the second on tedium.

Twitter is an incredible challenge to business: how to write something useful, interesting and informative… in 140 characters or less. Sure, it’s also about personality – about connecting with a community – but for business there needs to be a balance between all the “you” stuff (yes, we know you love your cat) and your professional persona.

So, think about what you want to do with your Twitter account. What are you hoping to achieve? Will you tweet in your name or for your company? How much of your tweets will be about “you” and how much about your company? How willing are you to get involved with your followers? And, as with blogging, set down a “rules of conduct” policy about what your employees should – and should not – be saying on Twitter!

Are we on Twitter? You bet! You can find our tweets here:
twitter.com/absolutecorp

Absolute quickly identified and contacted the laptop’s original owner, and confirmed that the computer had in fact been missing for a few weeks. Believing that the laptop was at a friend’s home, however, the owner did not report the computer stolen. 

In one of Absolute’s more simple recoveries, the laptop’s current user was put in touch with the original owner. The user arranged a meeting, and within days, had safely returned the laptop to the owner’s hands, with no further incident. 

Thanks to a savvy, good samaritan and a little help from Absolute, another stolen laptop has been successfully recovered.

On March 13th, I was on my way to work and found the back window of my Silverado broken and my LoJack for Laptops equipped Dell – along with my camera and iPod – missing. I immediately called the police and then Absolute Software to report the theft.

On March 25th, I got call informing me that Absolute had successfully led police to my laptop, and that it had been recovered from the suspect identified by the Absolute Theft Recovery Team. Police said that the suspect claimed to have purchased the laptop “on the open market”, and no charges were being filed until further investigation.

Upon receiving my laptop back, I was searching my browsing history and found that a past user had gone onto a manufacturer’s website for camera accessories – accessories for the very brand of camera that had been stolen from my truck. It just so happens that very few cameras of that make and model were sold in our area. I called the detective in charge of the case and informed him of this. He called the suspect and was given a line about checking out camera accessories for his sister. This afternoon, he called to inform me that he had recovered my camera along with many other stolen items, and that the suspect was in custody.

This would have never been possible without LoJack for Laptops protection. My first laptop was stolen and never recovered – it did not have LoJack for Laptops installed. Now I have my stolen laptop back and will never own another laptop without LoJack for Laptops.

Joe Stewart
Austin, Tx

The Absolute Recovery Team was able to quickly provide area police with information on laptop’s unauthorized user. Police were then able to positively match this name with that of a contractor employee who had been working at the same airport and had serviced the plane from which the laptop was stolen. Through the course of the investigation, the employee could not be reached as she was home on sick leave.  While home, however, she continued to use the stolen laptop, providing Absolute and police with additional evidence.

When the employee finally returned to work, police questioned her on the laptop’s disappearance. When confronted with the evidence Absolute had provided, she made full admission to the laptop theft. After handing the computer over to police, was arrested and charged with Criminal Possession of Stolen Property. The contractor was promptly fired from her position at the airport, and the flight attendant has happily reclaimed her laptop.

Learn more about the Absolute Theft Recovery process.

Please note that indictments and criminal complaints are merely unproven accusations and the accused, in all cases, are presumed innocent until proven guilty.

Go to the Consumer Alert video

“Anyone who owns a laptop today needs to be concerned with its security. Fortunately, we can all apply a few simple guidelines to significantly decrease our vulnerability”

You can listen to this segment here, as well as past segments on privacy, identity theft, and tales of the missing laptop.

Tags: absolute software, absolute, laptop security

The law requires that ‘reasonable safeguards‘ be maintained including the implementation of a security program, risk assessment, data monitoring, and data disposal. The law also has requirements for data breach notification.

There is still a significant push for the House of Representatives to adopt more stringent National security standards. Such a standard would provide consistent rules for businesses in all states to follow and provide greater identity theft protection.

For now, 37 states (including Oregon) have individual laws on data security and data breach notification in order to address the growing issue of identity theft.

For more on the Oregon identity theft law, visit the Oregon.gov website.

Via Statesman Journal Tags: oregon, identity theft, id theft, law, legislation, data breach, data protection