Help - Search - Members - Calendar
Full Version: Really Ignorant Lawmakers
BleepingComputer.com > Security > Breaking Virus & Security News
   
Security Geek
QUOTE
Reprinted from an article at NIST.org with permission.


I use the term "ignorant" quite mercifully. Some of our politicians are just down right stupid. I define "stupid" as ignorant people that really have no interest in learning or trying to over come their ignorance. The politicians in this MSNBC story must actually be stupid and the CIO doesn't seem any better.

I'm not even going to argue the merits of a law requiring wireless encryption, which is what I think they're wanting. They discuss hackers "grabbing data traveling through the air" and the goal is to prevent people from monitoring credit card information. Their solution? "The law requires each business to install a firewall or change the default SSID, the name that identifies a wireless network, if the personal information stored has not already been encrypted." What is a firewall or changing the SSID going to do? Nothing! You can still see the SSID, you can still associate with the access point, you can still sniff the network. And just because the data is "stored" encrypted doesn't mean its encrypted going through the air. What a joke.

Ok, I thought maybe I, or the story's author, misunderstood them. But the story goes on to say "Jacknis" the county's chief information officer "said easily available firewalls would protect credit card transactions, for example, from being detected by a hacker posted outside a dry cleaner that uses a wireless network." Ok, tell us how? He goes on to say "At most, he said, installing firewall protection — or just turning on the encryption and other security measures available — would take an hour of a consultant's time." Ok, now you're getting warm. Maybe that encryption thing would be a good idea. And rather than requiring the firewall on the router maybe require it on PC or server. At least this way once the hackers associated to the access point they might have a harder time breaking in to the computer and stealing the data.

I thought things were bad enough with incompetent CIO's at the helm of businesses and government agencies (those CIO's that know me; I'm not talking about you :-) But having them assisting in writing law is very scary. I would rather have no law at all than totally inept law.

Can someone living in Westchester County NY please talk to these folks before they make laughing stocks of themselves (ok yea, too late for that).
Jacee
Not all identity theft comes from the internet. An example.....

My father-in-law is/was living in an adult foster home. He has one credit card for any medications he needs through his provided care insurance.

Recently, he fell and broke his hip...he's now undergoing physical therapy in a rehabilitation center.

My husband is taking care of his bills and we were totally shocked to see his credit card was used to purchase electronic equipment as well as a bouquet of flowers (??) amounting to over $500.00 US dollars.
This purchase was done over the internet, while he was in the hospital undergoing surgery.

Someone stole his personal information from either his adult foster home or his insurance company.

Try as one will to legislate data, the unethical will still find a way to get it.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.