BreachExchange mailing list archives
Re: At Least 20 Big-Name Passports Breached
From: "Allan Friedman" <allan_friedman () ksgphd harvard edu>
Date: Fri, 28 Mar 2008 10:50:24 -0400
On Fri, Mar 28, 2008 at 10:38 AM, <james.kerr () ceelox com> wrote:
We have had tremendous success in protecting identities within the banking industrie by use of biometric technology. The customer can pass credentials with more safety than pin numbers and pictures of ducks.
I'd love to learn more about this, particularly how it scales across bureaucracies, particularly if the customer isn't present. I'm not thinking about public databases but large private ones that have many people with many different functions doing different things, (e.g. medical records). I'm guessing that to prevent the above mentioned passport file snooping from happening to some one not on a pre-specified watch list you would need to a) reorganize the data architecture of the entire system b) overlay a pretty strong identity layer c) introduce secure credentialing that allow a yes/no query without leaking more info d) probably some chunk of all of the above. As long as access to databases is fairly unsupervised inside the organization, you're going to see identity theft. allan _______________________________________________ Dataloss Mailing List (dataloss () attrition org) http://attrition.org/dataloss Tenable Network Security offers data leakage and compliance monitoring solutions for large and small networks. Scan your network and monitor your traffic to find the data needing protection before it leaks out! http://www.tenablesecurity.com/products/compliance.shtml
Current thread:
- At Least 20 Big-Name Passports Breached Richard Forno (Mar 26)
- Re: At Least 20 Big-Name Passports Breached Chris Walsh (Mar 27)
- Re: At Least 20 Big-Name Passports Breached Max Hozven (Mar 27)
- Re: At Least 20 Big-Name Passports Breached Allan Friedman (Mar 27)
- Re: At Least 20 Big-Name Passports Breached Max Hozven (Mar 27)
- Re: At Least 20 Big-Name Passports Breached Jim Kerr (Mar 28)
- Message not available
- Re: At Least 20 Big-Name Passports Breached Allan Friedman (Mar 28)
- Re: At Least 20 Big-Name Passports Breached Jim Kerr (Mar 28)
- Re: At Least 20 Big-Name Passports Breached Casey, Troy # Atlanta (Mar 28)
- Re: At Least 20 Big-Name Passports Breached Max Hozven (Mar 27)
- Re: At Least 20 Big-Name Passports Breached Chris Walsh (Mar 27)