Re: Free Download of Matt Ivester's Book Available Now (until Jan. 30)!

[John Ladwig <John.Ladwig () SO MNSCU EDU>]

I need to look over the descriptions of DPD, to see to what degree they cover the issue of the current massive trend of 
providers/developers/etc offering "free" - which actually isn't free, because they're collecting data which they 
reuse/resell/etc in order to cover costs.  Like yesterday's massive Google thread mentioned a time or two.

I haven't dug down deeply into Amazon's Kindle and other user/privacy agreements, at least not in long enough that 
they've no doubt "evolved."  I suspect that Amazon, like Apple, will generally have enough use internally for 
monetizing "customer" (or, "product" in the case of those on the Facebook end of the continuum) data that they're not 
doing bulk-reselling or partner-ad networks.  But I'd wager a pitcher of real ale that getting an ebook onto a 
Kindle/-app and reading it discloses or links to rather more than an IP address and a User-Agent string.  And that, for 
at least some of us, makes it a privacy consideration. 

Didn't mean in any way to criticize DPD, anyone involved in it, or the author of what seems like it could be a very 
helpful book.

   -jml

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Derek K. 
Tonkin
Sent: Friday, January 27, 2012 2:27 PM
To: The EDUCAUSE Security Constituent Group Listserv; John Ladwig
Subject: Re: [SECURITY] Free Download of Matt Ivester's Book Available Now (until Jan. 30)!

I apologize for the tone, I shouldn't have been so direct.  I suppose where I'm confused is that I view Data Privacy 
Day as a time to educate users on where it is appropriate for them to divulge information and what information it is 
reasonable for companies, organizations, etc. to be asking for.  I had not thought of it as teaching users to never 
disclose information.

I'm curious what the stance is of others on the list.  As someone who participated in the Educause working group for 
DPD I'd like to be sure that my approach more or less aligns with the rest of the Educause Security community so that 
we are headed in the right direction for next year.  We have a DPD post-mortem meeting coming up and I'd like to have 
some information as to where you all stand on what the purpose of DPD is.  If you'd like to reply directly I'll 
summarize and report back to the list with the results.

Thanks,

-------------Baylor University------------- Derek Tonkin Information Security Analyst Information Technology Services - 
Security derek_tonkin () baylor edu        254-710-7061 ---------------Sic 'em Bears---------------

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Don M. 
Blumenthal
Sent: Friday, January 27, 2012 2:10 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Free Download of Matt Ivester's Book Available Now (until Jan. 30)!

I have an Amazon account from which I download Kindle books regularly for a Kindle, iPad, and Android phone,  and have 
no reason to question Amazon's security or privacy practices.

I'm also part of the "security community" but I intend what' s to follow merely as an observation, not a criticism. I 
intend to download the book but, despite the fact that I can understand why free distribution is being done this way, I 
still find it ironic that I must disclose information in order to get something that's being made available at no 
charge in honor of DPD.

Don


On Jan 27, 2012, at 2:30 PM, Tonkin, Derek K. wrote:

> John,
>
> Pardon the rant but what is the irony here?
>
> I mean I suppose you were hoping that you could just download an ePub copy, right?  So far as I can tell the author 
> hasn't produced the book in that format.
>
> It is Kindle-only which is not my preference but for goodness sakes as "security people" must we always find 
> something to complain about?  I'm not sure what privacy concerns you have with Amazon but it didn't take much info at 
> all to create an account and download the app (an e-mail address, which doesn't even require verification; a name 
> which you can make up; and a password).  What privacy are you giving away, your IP and user-agent?  As a security 
> community we'd probably get a lot more traction with our users if we didn't come off as negative, know-it-alls.
>
> Done ranting,
>
> -------------Baylor University------------- Derek Tonkin Information 
> Security Analyst Information Technology Services - Security
> derek_tonkin () baylor edu        254-710-7061
> ---------------Sic 'em Bears---------------
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv 
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of John Ladwig
> Sent: Friday, January 27, 2012 1:22 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Free Download of Matt Ivester's Book Available Now (until Jan. 30)!
>
> And, you can't download the free book without logging in to Amazon.   And, near as I can tell, it's Kindle- or 
> Kindle-apps-only.
>
> In honor of Data Privacy Day.  
>
> The irony, it drips.
>
>   -jml
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv 
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Valerie Vogel
> Sent: Friday, January 27, 2012 12:34 PM
> To: The EDUCAUSE Security Constituent Group Listserv; John Ladwig
> Subject: [SECURITY] Free Download of Matt Ivester's Book Available Now (until Jan. 30)!
>
> Starting today (through January 30), you can download Matt Ivester's book - "lol...OMG! What Every Student Needs to 
> Know About Online Reputation Management, Digital Citizenship, and Cyberbullying" - for free from Amazon in honor of 
> Data Privacy Day:
> http://www.lolomgbook.com/#!vstc5=ebook
>
> Matt Ivester will also be joining us for a special EDUCAUSE Policy 
> webinar next Monday, January 30, 1-2 pm EST.
> http://www.educause.edu/policy/dataprivacy
>
> We hope you'll have a chance to read the book and join us for a lively discussion on Monday!
> Thanks,
> Valerie
> _______________
>
> Valerie M. Vogel
> Program Manager, EDUCAUSE
> office: (202) 331-5374
> e-mail: vvogel () educause edu
> _______________
>
> Follow us on Twitter! @HEISCouncil