full-disclosure - Re: Is Digital Due Process legit?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 1 Apr 2010 20:04:53 -0400
From: Jeffrey Walton <noloader@...il.com>
To: n3ptun3@...don.com
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Is Digital Due Process legit?

> This shit reeks of a corporate lobbying front meant to screw our rights and
> let the private infobrokers get monopolozied and put in the front seat.
Agreed.

"This murky legal landscape does not serve the government, customers
or service providers well."
Notice that the 'customer' is not emphasized by listing first, even
though the battle is over the 'customer' data. I also like how
'customer' is used rather than 'individual, 'his', or 'her. I suppose
by minimizing the individual, it will be easier to frame for their
cause.

"Companies are uncertain of their responsibilities and unable to
assure their customers that subscriber data will be uniformly
protected."
These folks may not disclose, but its not due to uncertainty. A
perfect case in point is JC Penny and the TJ Max mess. From
http://www.darkreading.com/database_security/security/attacks/showArticle.jhtml?articleID=224200824
(link posted to datalossdb mailing list): "Most organizations hit by
breaches that don't require public disclosure don't call in law
enforcement -- they consider it an exposure risk..."

On Thu, Apr 1, 2010 at 7:08 PM,  <n3ptun3@...don.com> wrote:
> From facebook police, jack bauering on your facebook, to NSL's, to the
> general laughable state of privacy laws in the United States, there's no
> mistaking we need more safeguards against the guardian's of the status quo
> going to town on all of our private stuff with no proof.
>
> www.digitaldueprocess.org
>
> It's a partnership from public advocacy groups like EFF, ACLU, (notice I
> don't see epic in there), and surprisingly, Google, Microsoft, and basically
> these datamining businesses known for handing out your data like its a
> passing triviality.
>
> Is this whole thing legit? Or are they going to end up giving us a bill that
> just privatizes and deregulates shit for Google to run amok and just
> wholesale all of their wares in a huge datamart-type app?
>
> This shit reeks of a corporate lobbying front meant to screw our rights and
> let the private infobrokers get monopolozied and put in the front seat.
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/