Wednesday, March 7, 2007

WGA Reports Back To MS Even If You Choose Not To Install - Aviran's Place Heise online reports on a very interesting action Microsoft is taking during the installation of WGA. When you start WGA setup and get to the license agreement page but decided NOT to install the highly controversial WGA component and cancel the installation, the setup program will send your info and the fact that you choose not to install WGA back to their servers. In addition to that it seems that the setup program send some information stored in your registry to http://genuine.microsoft.com/. While it does not specifically identify the user, it looks like it does send some identification of your computer and Windows version (see picture) to Microsoft servers. 1:06:01 PM

Microsoft WGA Phones Home Even When Told No. Microsoft WGA Phones Home Even When Told No. Aviran writes "When you start WGA setup and get to the license agreement page but decided NOT to install the highly controversial WGA component and cancel the installation, the setup program will send information stored in your registry and the fact that you choose not to install WGA back to Microsoft's servers." [Slashdot] 1:00:00 PM

Malware Increased 172 Percent in 2006, According to Report. Malware Increased 172 Percent in 2006, According to Report. Amount of malware detected in 2006 same as past 15 years, combined. [GT: Security and Privacy] 11:57:37 AM

Patient control of EHR data on network gets mixed reaction The Health and Human Services Department has received mixed reviews for its decision to insist that the next iteration of the Nationwide Health Information Network (NHIN) allow patients to control who sees their electronic health records on the network. Dr. Robert Kolodner, interim national coordinator of health information technology, said March 1 that trial networks funded by his office should give "people the capability to decide how they view, store and control access to their own information. A person could say how that information flows to specific entities or completely block the flow of information." "If they do what they say, it's a tremendous thing for privacy," said Dr. Deborah Peel, founder of the Patient Privacy Rights Foundation. "It's exactly what we've been talking about for a long time." Peel said she talked with Kolodner and learned that he wants to give patients the ability to control what happens to their health information, "down to the data field level." "I think his intentions are fantastic," she said. Asked whether such a network would be technically feasible, Peel said the existing technology would support that degree of granularity in controlling the flow of EHR data. But Mark Rothstein, director of the Institute for Bioethics, Health Policy and Law at the University of Louisville School of Medicine, said he doubts the HHS move will make a difference. "I don't really have a lot of confidence that it would really have any effect whatsoever," said Rothstein, a member of the official National Committee on Vital and Health Statistics. The reason Rothstein was less than enthusiastic about the HHS move: Privacy problems are primarily policy and legal issues in his view, not technology-based. Rothstein recently testified before a Senate subcommittee, criticizing HHS for failing to tackle privacy and other policy issues associated with development of the NHIN. Kolodner's announcement doesn't address many of the policy questions, he said. Kolodner's office "has indicated no prior interest in this concept," Rothstein said, suggesting that there is no way to know how committed HHS is to its plans. Others have pointed out it is one of the first HHS health IT initiatives that deviates from plans outlined by Kolodner's predecessor, Dr. David Brailer. 11:56:32 AM

Wal-Mart fires technician who recorded phone calls March 05, 2007   (Reuters) -- CHICAGO - Wal-Mart Stores Inc. said today it fired a systems technician for intercepting text messages of people who were not Wal-Mart employees and for recording telephone conversations with a New York Times reporter without authorization. Wal-Mart, the world's largest retailer, said an internal investigation found the technician had monitored and recorded phone calls between Wal-Mart public relations employees and a New York Times Co. reporter between September and January. The Bentonville, Ark.-based retailer also said the technician, who worked in its information systems division, intercepted and stored text messages that contained certain key words, including those sent by people in the Bentonville area who were not Wal-Mart employees. Wal-Mart spokeswoman Mona Williams said on a call with reporters that the technician "did this on his own." While interviews with the technician gave the retailer an idea as to why he recorded the calls, Williams said she could not disclose the reasons because the case has been turned over to federal investigators. 11:52:20 AM

Spying at Wal*Mart: Human nature run amuck? Spying at Wal*Mart: Human nature run amuck?  Does the Wal-Mart eavesdropping debacle have the potential to be this year's HP scandal? A former IT security staffer for the retailer evaluates what might have happened. [Computerworld Privacy News] 11:46:37 AM

Texas House exempts courthouse clerks from privacy laws. Texas House exempts courthouse clerks from privacy laws. The Texas House of Representatives has approved a bill that would allow local courthouse clerks to disclose "in the ordinary course of business" Social Security numbers contained in public records maintained by their offices. Computerworld Privacy News] 11:43:07 AM

Crack! Security expert hacks RFID in UK passport. Crack! Security expert hacks RFID in UK passport. The British government says that forgery of their new biometric passports is inconceivable, but a security expert has demonstrated a successful crack of the embedded RFID chip and its info. And he did it without taking the document out of its mailing envelope. [Computerworld Privacy News] 11:41:33 AM

© Copyright 2007 Paul Hardwick. Last update: 3/18/07; 10:45:53 PM.