June 2011

Rep Bono Mack releases draft of data breach bill

Rep Mary Bono Mack (R-CA) released a draft of a bill that would establish national notification standards for firms that suffer data breaches that compromise customers' personal information.

The chairman of the House Commerce Committee's Manufacturing Subcommittee called the recent string of high-profile hacker attacks "a threat to the future of electronic commerce." The Subcommittee is set to hold a hearing on the Secure and Fortify Data Act (SAFE DATA Act) June 15 at Rayburn House Office building. The bill would require companies to notify the Federal Trade Commission and consumers within 48 hours of when a data breach has been secured and the scope assessed. The FTC could levy fines if companies fail to do so in a timely manner. Nonprofits and charities would also be subject to the law.

Private experts advised US on cyberattacks against Libya, study says

Private computer experts advised US officials on how cyberattacks could damage Libya's oil and gas infrastructure and rob Moammar Gadhafi's regime of crucial oil revenue, according to a study obtained by hackers.

It remains unclear who commissioned "Project Cyber Dawn" and how much of a role the US government played in it, but it shows the increasing amount of work being done by private companies in exposing foreign governments' vulnerabilities to cyberattack. "For the private sector to be making recommendations ... that's a level of ambition that you would not have seen until very recently," said Eli Jellenc, a cybersecurity expert with VeriSign who is not linked to the study or its authors. The study outlined ways to disable the coastal refinery at Ras Lanouf using a computer virus similar to the Stuxnet worm that led to a breakdown in Iran's enrichment program late last year. It catalogued several pieces of potentially exposed computer hardware used at the refinery. The study was discussed in some of nearly 1,000 e-mails stolen by hacking group Lulz Security from Delaware-based Internet surveillance firm Unveillance as part of an effort to show how vulnerable data can be. Most of the e-mails detail the day-to-day trivia of running a small technology startup, but others concern an effort to scout out vulnerabilities in Gadhafi's electronic infrastructure.

LulzSec Strikes Again, Hits Bethesda Softworks And US Senate

Having been hinting about it via Twitter all day, the hacker group LulzSec made good on its promise to release data taken from gaming publisher Bethesda Softworks, in a message posted to Pastebin. It then added a second file to its release: A server configuration file for the servers used on the US Senate’s Web site. No sensitive information was released in that message, though it’s clear from the file that it was taken from US Senate servers and indicates the group has somehow penetrated that system.

Thieves Found Citigroup Site an Easy Entry

Think of it as a mansion with a high-tech security system — but the front door wasn't locked tight. Using the Citigroup customer Web site as a gateway to bypass traditional safeguards and impersonate actual credit card holders, a team of sophisticated thieves cracked into the bank’s vast reservoir of personal financial data, until they were detected in a routine check in early May. That allowed them to capture the names, account numbers, e-mail addresses and transaction histories of more than 200,000 Citi customers, security experts said, revealing for the first time details of one of the most brazen bank hacking attacks in recent years. The case illustrates the threat posed by the rising demand for private financial information from the world of foreign hackers.

FTC: Data Mining Company Subject To Consumer Protection Laws

The Federal Trade Commission has closed its investigation into whether the company Social Intelligence violates federal credit reporting laws without commencing an enforcement action. But the FTC also said the company, which scours the Web for information about job candidates, is a consumer reporting agency and must follow fair credit laws.

"No further action is warranted at this time," Maneesha Mithal, associate director of the FTC's Division of Privacy and Identity Protection, said in a letter to Social Intelligence's law firm Nixon Peabody. "In reaching this determination, we considered information provided by Social Intelligence about its policies and procedures for compliance with the FCRA [Federal Credit Reporting Act]." The letter, quietly issued last month, drew attention when privacy researcher and former FTC staffer Chris Soghoian publicized it on Twitter.

Another Merger

[Commentary] In a filing at the Federal Communications Commission on AT&T's acquisition of T-Mobile, the Competitive Enterprise Institute said:

  • AT&T will be able to use T-Mobile cell sites and spectrum in order to address increases in traffic. This increased spectrum will also allow AT&T to expand its LTE coverage to underserved rural areas.
  • Operating system (OS) vendors and device manufacturers will constrain the power of network operators. Network operators are consolidating in order to have enough scale and power in order to fight back. (The battle is vertical, not horizontal.)
  • The special access/backhaul market is highly competitive. Don't worry about incumbents’ market power there.
  • Don't impose conditions. You'll just stifle investment. Uncertainty and delay will harm the public.

A post on cracked.com says that the rich are underserved by monopolistic carriers; poor/rural are often unserved. Internet access is more essential than phone services ever were, because quality of life/livelihoods/access to services depend on it. Offline equivalents are disappearing.
Think of all the jobs we could create with a combination of regulatory reforms and a major open-fiber infrastructure project nationwide for areas that aren't served. Not just the jobs that have to do with digging up the streets (although we'd have a lot of those). We'd be building a basic building block for the country’s future. Instead, because we think there is little we can do, we do little. Other than merge.

Africa and the Internet: a 21st century human rights issue?

[Commentary] Many in Africa are yet to see the Internet as a basic right. Yet Ben Scott, Sec of State Hillary Clinton’s policy adviser on innovation called the Internet “the first truly 21st Century human rights issue.” We were looking at Internet freedom and before I had asked how this basic right would be realized for many in Africa. Scott said that just like mobile banking (MPesa, Mobile money) is doing tremendously well in Africa, Internet access will continue to be tied to mobile telephone penetration in Africa. He indicated that Africa’s mobile phone penetration has surpassed Europe’s yet it’s still at 40 percent. This makes the Internet and mobile phone market pose both an economic and political opportunity. [Kagumire is a Kampala-based journalist who blogs on East African affairs at Rosebell's Blog]

Italy’s $3.5 Billion Spectrum Sale at Risk as Broadcasters Dispute Payment

Italy, trying to cut its deficit, may be thwarted in a bid to raise 2.4 billion euros ($3.5 billion) by auctioning frequencies, as broadcasters and phone companies resist the “chaotic” sale. Local television channels, who occupy most of the frequencies to be sold, say they may refuse to free the spectrum if the government doesn't offer higher compensation.

Mobile- phone operators, the likely buyers, say the frequencies aren't worth the price if the broadcasters don't allow immediate access. The Italian auction has been handled in “a quite chaotic way,” Tommaso Valletti, a professor of economics at London’s Imperial College, said in an interview. “There’s been a bit of the ‘Wild West’ in the Italian frequency sector. It won't be easy to disentangle.” The broadcasters’ resistance may hamper the country’s deficit-cutting plans and expansion ambitions of mobile-phone operators. Italy, whose credit-rating outlook was lowered on May 21 to negative from stable by Standard & Poor’s, included the expected auction proceeds in its 2011 budget. Operators such as Telecom Italia and Vodafone Group need bandwidth to meet surging data demand as clients use smartphones to watch films and surf the Web.

GOP Candidates Run Against Regulation

Republican presidential hopefuls pressed for the dismantling of government regulations drawn up over 40 years, using a candidates' debate here to call for the scaling back or elimination of environmental, labor, financial and health-care rules.

The seven candidates on stage at Saint Anselm College avoided challenging each other, a benefit for front-runner Mitt Romney, former governor of Massachusetts. It was the second debate of the 2012 election season, but the first to include Romney, who leads in national polls and in New Hampshire and Iowa, the first states in the nominating process. A Boston Globe poll released Sunday gave him a 32-point lead over other GOP candidates in New Hampshire, with no other candidate breaking out of single digits. Standing next to Romney, the other contenders sought to raise their stature and establish themselves as plausible alternatives to the front-runner, who despite his poll numbers is seen by many analysts as having liabilities. In so doing, each pressed for dramatic change to what Rep Ron Paul (R-TX) called "a Keynesian bubble that's been going on for 70 years." Rep. Michele Bachmann (R-MN), who announced her presidential candidacy as the debate began, called for rolling back the Environmental Protection Agency, which she said should be renamed "the job killing organization of America." Former House Speaker Newt Gingrich (R-GA) called for de-funding the National Labor Relations Board. Romney suggested the functions of agencies such as the Federal Emergency Management Agency be handed to state governments, or if possible, the private sector.

Open-government groups want E-Gov fund restored

A coalition of transparency and good-government groups wrote to the leadership of the House Appropriations Committee's Financial Services subpanel urging them to restore funding for websites such as USASpending.gov, Data.gov and the IT Dashboard.

The groups, which include OMB Watch, the Sunlight Foundation and the New America Foundation asked the lawmakers to restore funding for the Electronic Government (E-Gov) Fund, which they argue has produced projects that have increased the government's efficiency and transparency. A budget agreement reached earlier this year slashed funding for fiscal 2011 from $34 million to $8 million, jeopardizing many of the sites' futures. The groups argue that a failure to restore funding could end up costing the government more money in the long run.