Nov 022008
 

Today we woke up to learn of yet another UK government data leak. Apparently a memory stick was left in a pub car park. Of course as always, not is all quite as it seems; the person who actually left the memory stick where it was, actually worked for a private sector company doing contracting work for the government. So was this really a UK government data leak at all ?

Well yes, the data was government data and it does not matter who leaked it. From memory (i.e. I am too lazy to hunt down the links to check) this is not the first time that government data leaks have been caused by private contractors. Perhaps the government should stick to doing their own work when it comes to working with data that contains personal information; if there is anything more aggravating than being slated for your own stupidity it is being criticised for someone else’s stupidity.

Of course most people will be under the impression that data leaks pretty much only occur when the government is involved; somehow data leaks from private sector companies never seem to hit the headlines in quite the same way. For instance the headlines for this morning’s leaks were all about the government role in the data loss and no mention of the private sector firm involved :-

  • “Government memory stick found in pub” – Independent on Sunday.
  • Government passwords left at pub” – Guardian; also “Fears for personal data after government passwords left in pub car park”.
  • Brown says government cannot ensure data safety” – Times.

I have left out a few … I could not find the story on a few websites belonging to the gutter press, and lost interest after one too many pages with lurid colours and half-naked women popping out at me. But it’s all “the government” in those headlines; although they do in the end point out that it was a private contractor who lost the data.

Anyone reading (and trusting!) the media would be under the impression that the Government cannot be trusted with our personal information whereas private sector companies can because they rarely end up as front-page stories for losing data. Well I am not totally convinced that the Government has a monopoly on stupidity; there seems more than enough to go around.

Hunting down stories about private sector data leaks is kind of tedious because there does not appear to be that much out there, but a few stories did show up (not linking to anything before 2007) :-

The last story is particularly interesting – 56 reported data leaks from financial firms in 2008 (who are not required to report data leaks). In a report by Verizon, it is estimated that of all private sector data leaks, only 14% of leaks are from financial firms; doing a little arithmetic indicates that there have been at least 400 data leaks this year.

So is the private sector any better or worse than the public sector ? They are probably just the same – woefully irresponsible. People rarely care about information security of others in their daily lives; in fact they are often also completely naive about their own information security.

So why does the government come in for so much criticism in comparison to the private sector ? Partially it is simply that we do not get a choice in the matter of whether to do business with the government or not. And partially it probably makes for a better media story. Or perhaps the media just wants to attack the government.

Perhaps some journalist can take a proper look at the private sector leaks, do the job properly and just for once the private sector can get some justified criticism. They might also want to take a closer look at the media’s preference for attacking the government on this matter.

Onto another matter; encryption. The government response was that the only personal data leaked in this case was encrypted as though that would protect the data. Well maybe, but only if it was strong encryption. Most people who use encryption are not aware of whether the encryption method is strong or not. For instance a quick google for “Word document password recovery” returns a huge list of choices for applicatiosn which will break the encryption on Word documents – making the encryption built into Word completely pointless. But how many people who use this encryption know that they are getting a false sense of security ?

Oct 202008
 

It was announced today (on the news at least … Sony may have announced it earlier) that Sony have released a game called “Little Big Planet” that has a music track that may annoy some Muslims. The track in question (please send corrections if I’m wrong) is a Mali language track, and quotes from the Koran. Apparently the singer is himself a devout Muslim. Sony in their not-so-infinite wisdom have announced that they are delaying the launch of the game, recalling all issued game disks, and re-mastering a version without the track in question.

Glossing over whether this music track really is offensive, it is perfectly reasonable for Sony to do something about this. But to do a full recall of the game disks already in the distribution channels? That’s pretty costly, and I would be pretty miffed if I were a Sony shareholder.

Why not simply issue a groveling apology, point out that it was a genuine mistake, promise to remaster all future game disks without the track in question, and issue an online patch to remove the track from disks that have already been distributed ?

Incidentally the track in question (Tapha Niang) is available at the artist’s website :-

http://www.worldcircuit.co.uk/#Toumani_Diabate::Boulevard_de_lIndependance

To “excuse” this mistake, if Muslims cannot agree on what is and what is not appropriate and Islamic, how can the rest of us avoid making mistakes like this ?

Oct 152008
 

We all know that street furniture that clutters our streets … signposts, street lights, traffic lights, etc. The majority of this furniture is for providing information to motorists. So why is it all planted in the pavements where it gets in the way of pedestrians?

The obvious answer is that one or two signposts do not matter that much and avoiding the street reduces the risk of accidents. Well maybe that was true when it was just a few signposts, and on quiet pavements without much foot traffic.

But all too frequently that is not the case. Rather than plonk down the poles for that street furniture right in the middle of the pavement, why not put them right on the edge of the road ? Or perhaps reduce the amount of signage where it isn’t necessary.

Oct 152008
 

Tomorrow (16th October), London will host a parade of the UK’s Olympic Games medal winners. It is not something that personally excites me, and I will not be going. Not that I have any problem with the athletes getting a parade – why not?

But why is it on a weekday? And this does not seem to be an isolated case; there seems to be an assumption that if you really want to go, you will find a way of doing it. But what if you are a weekday worker (and most of us are) who might like to go, but cannot take a day off work to get there ? Why should we be excluded ?

It sometimes seems that there is some sort of conspiracy to keep working people away from certain celebrations. Perhaps we would lower the tone.

Oct 132008
 

Now that the UK government has ‘obtained’ a large stake in Lloyds, and RBS, the question is whether we should sell off that ownership when things improve. Hopefully we will be hanging onto the banks until we can make a decent profit from helping them out. But what would happen if we kept hold of them ?

Well we would essential lose the capital (or more accurately it would be locked into the investment), but we would get paid dividends every year. Or every year they are paid.

We would also have a greater influence on keeping the banks and bankers well behaved. Given the behaviour of the banks in the past, it would seem to be worth having a “finger in the pie” to keep an eye on their future behaviour.

Some are complaining that the government (and thus the taxpayer) is taking unfair advantage of the shareholder because we are getting a huge number of shares at a very much reduced price. Tough. Those same shareholders were taking advantage of unsound banking practice in the past when they should have been insisting that the banks were properly run.