Archive for category: Uncategorized

www.IDTheftSecurity.com Why Technology Won’t Prevent Identity Theft http://online.wsj.com/article/SB123125633551557469.html?mod=googlenews_wsj

Identity Theft Protection Expert Speaker Robert Siciliano www.IDTheftSecurity.com comments on;

Data protection trumps threat pursuit in SMBs’ 2009 security spending

Lovely. A “full percentage point”. Enterprise networks continue to get harder dropping millions into security. SMBs are investing a full percentage point, which if you didnt already chuckle is like saying “we are doing NOTHING”. If your financial portfolio manager told you “Im going to increase your portfolio a full percentage point” would you keep him? Its just not satisfactory. Criminal Hackers are winning and this is why.

HERE:

By Linda Tucci, Senior News Writer
06 Jan 2009 | SearchCIO-Midmarket.com

IT executives at small and medium-sized businesses (SMBs) will spend a full percentage point more of their IT budgets on security in 2009 than 2008, according to a new study from Forrester Research Inc. The change will result from a shift in security strategy from computer security threat defense to corporate data protection.

Identity Theft Expert Speaker Robert Siciliano www.IDTheftSecurity.com Comments;

Most of the comments by those polled below are legitimate concerns fraught with desperation and  lack of understanding of the problem.  The proverbial cat is out of the bag. Privacy is dead. Privacy is an illusion. While the masses say they want privacy, the reality is they want cheap goods and convenience. People will give up all their privacy for a free candy bar. While government can and should redact personal data and do what they can to sure up “private information”, the data is already out there. It is up to the individual to understand this and manage their circumstances.

The next generation is growing up via social networks. “Privacy” will be associated with words or phrases such as 8-track tape or “No Doc Mortgage”.

So when someone calls you with your dossier and they use this to extract even more data or to threaten you in some way know what is happening and how. Even if every SSN was redacted, that wouldnt stop identity theft.

HERE;

“Panel proposes expanded privacy in public records”

Iowa governments would have greater authority to black out personal information from public records under proposals recommended by a legislative committee.

Advocates say the proposals would protect citizens from identity theft.

But opponents say the unintended results could be alarming, particularly if the public is unable to differentiate between, for example, a convicted sex offender and another citizen with the same name.

“The public has more to fear from government records containing information about them of which they are unaware than the release of information pertaining to them,” said Bill Monroe, executive director of the Iowa Newspaper Association.

Lawmakers formed the Identity Theft Prevention Study Committee, which met in November, to consider how the release of personal information in Iowa could make residents vulnerable to identity theft.

Public concern heightened this year when privacy advocates complained about a land records site, IowaLandRecords.org. The Social Security numbers of thousands of Iowans from all 99 counties were listed on the site, including those of Gov. Chet Culver and Secretary of State Michael Mauro.

Administrators of the site quickly shut down the ability to view details of the records after the advocates pointed out the problem. The group says removing personal information from all the records – called redaction – will cost the state as much as $2.3 million, which includes $500,000 to update its computer programs.

Culver said in an interview this week that he agrees steps should be taken to redact personal information from public records that can be used to steal Iowans’ identities.

However, he said he was not sure how the state would pay for such efforts. County recorders, for example, have proposed increasing an electronic filing fee from $1 to $3 to pay for the redaction effort.

“I think protecting individuals’ identity is important,” Culver said. “Once it gets to the level of security risk, we should take steps to limit how far we go in terms of disclosing things like Social Security numbers.”

The committee made 11 recommendations, several of which would give governments more power to remove Social Security or bank account numbers.

Sen. Steve Kettering, R-Lake View, a member of the study committee, said there is no simple answer to the problem. Lawmakers must find the appropriate balance between protecting identities and maintaining public records that protect the public through transparent government.

“There isn’t an easy solution, and that’s the hard part,” said Kettering, who noted that detailed records are critical in his profession as president of Farmers State Bank in Lake View.

Open-records advocates generally agree that some sensitive information like credit card numbers should not be released. The problem arises if governments redact information such as dates of birth, addresses or other unique identifiers, said Kathleen Richardson of the Iowa Freedom of Information Council.

Richardson said lawmakers need to establish how frequently identity theft occurs through public records. She believes the problem is rare.

“I think there needs to be a demonstrated need of why we need to vacuum public records,” Richardson said. “We also have to carefully consider what our definition of personal information is and make sure it’s not so broad that it wipes out too much information.”

Sen. Steve Warnstadt, D-Sioux City, said the committee has tried to be sensitive to the concerns brought forward by openrecords advocates when making its recommendations. The recommendations will likely be used to help draft proposals during the 2009 legislative session, which begins Jan. 12.

“The point of this is not to restrict access. The point is to prevent identity theft and personal information from being disclosed from people who don’t have a legitimate reason to have that information,” said Warnstadt, the committee co-chairman.

Robert Siciliano
POB 15145
Boston MA 02215
Ph: 1 888 SICILIANO (888 742-4542)
e-mail: Robert@IDTheftSecurity.com
Web: www.IDTheftSecurity.com
YouTube: www.YouTube.com/stungundotcom
As seen on The Today Show, CBS Early Show, CNN, MSNBC, FOX, CNBC, Inside Edition, Tyra Banks, Sally Jesse, Montel, Maury Povich, Howard Stern, and in USA Today, Forbes, Cosmopolitan, Good Housekeeping, Readers Digest, Consumer Digest, Smart Money, New York Times, NY Post, Boston Globe, Los Angeles Times, Washington Times, Washington Post, Chicago Tribune, Security Management, AP, UPI, Reuters, and Entrepreneur.

Identity Theft Expert Speaker Robert Siciliano discusses FTC Issues Report on Social Security Numbers and Identity Theft. Agency Makes Five Recommendations to Reduce Role of SSNs in Identity Theft

All of this below makes total sense. And each recommendation is a step in the right direction to solve the problem. But until all citizens are properly identified and authenticated, the problem wont go away.  Currently there isnt any accountability. With full authentication, accountability becomes possible. Further, the credit bureaus and others relying on readily accessible SSNs are exasperating the problem. Fraud alerts across the board requiring all credit applicants to authenticate will begin to solve the problem. www.IDTheftSecurity.com

HERE:

The Federal Trade Commission issued a report today recommending five measures to help prevent Social Security numbers from being used for identity theft. Principal among the report’s recommendations is that Congress consider taking action to strengthen the procedures that private-sector organizations use to authenticate their customers’ identities.

“Identity theft continues to be a major problem in this country, with victims numbering in the millions each year and out-of-pocket losses (primarily to businesses) in the billions of dollars,” the report states.

The FTC report states that adopting nationwide standards for how businesses and other organizations verify the identity of new and existing customers would make it harder for identity thieves to use SSNs and other stolen information to consummate their fraud.

“The first step in minimizing the role of SSNs in identity theft is to limit the demand for SSNs by making it more difficult for thieves to use them to open new accounts, access existing accounts, or obtain other benefits or services,” the FTC states in the report. Currently, the only private-sector organizations subject to nationwide authentication standards are financial institutions regulated by the federal banking agencies. The FTC’s report recommends that Congress consider establishing similar standards to cover all private-sector entities that maintain consumer accounts. Such standards would require organizations to adopt reasonable procedures for authenticating customers, but also would allow them to adopt a program that is compatible with their size and the nature of their business, the report states.

The FTC report also recommends that steps be taken to reduce the unnecessary display and transmission of SSNs, but noted that such restrictions must be approached carefully. A number of important functions in the U.S. economy depend on use of and access to SSNs, and the report concluded that overly restrictive attempts to limit the availability of SSNs could unintentionally curtail those functions. Finally, the report recommends steps to improve data security, increase outreach to consumers and businesses on the protection of SSNs, and enhance coordination and information-sharing among organizations that routinely use SSNs.

The Commission vote to issue the report was 4-0. The report was developed pursuant to a recommendation of the President’s Identity Theft Task Force, which was established in May 2006 to develop a coordinated plan to prevent identity theft, prosecute identity thieves, and help victims recover from the crime.

The report is based on extensive fact-finding by the FTC and other federal agencies, including public comments and a workshop the FTC conducted on December 10-11, 2007. The workshop provided a forum for public-sector, private-sector, and consumer representatives to discuss the various uses of SSNs by the private sector, the necessity of those uses, alternatives available, the challenges faced by the private sector in moving away from using SSNs, and how SSNs are obtained and used by identity thieves.

The report issued by the FTC today focuses on the use of SSNs in the private sector. The Task Force agencies have undertaken a series of measures to curtail the use of SSNs by federal agencies as well. Information on those efforts can be found in the President’s Identity Theft Task Force Report, http://www.idtheft.gov/reports/IDTReport2008.pdf, issued in September 2008, which summarizes the steps taken to implement the Task Force recommendations.

The Federal Trade Commission works for consumers to prevent fraudulent, deceptive, and unfair business practices and to provide information to help spot, stop, and avoid them. To file a complaint in English or Spanish, visit the FTC’s online Complaint Assistant or call 1-877-FTC-HELP (1-877-382-4357). The FTC enters complaints into Consumer Sentinel, a secure, online database available to more than 1,500 civil and criminal law enforcement agencies in the U.S. and abroad. The FTC’s Web site provides free information on a variety of consumer topics.

(BOSTON, Mass. – Dec. 17, 2008 – IDTheftSecurity.com) Earlier this month, sensitive, unique data records again fell prey to criminals, when a laptop computer belonging to Oregon Health and Science University (OHSU) went missing to theft. According to widely televised and quoted personal security and identity theft expert Robert Siciliano, had the stolen computer been equipped with laptop tracking and data retrieval technology such as that provided by MyLaptopGPS, OHSU could have sidestepped the mass mailing of warning letters to the nearly one thousand patients whose information is suspected to be on the stolen machine.

"Simple measures to secure laptop computers can spare smart organizations from the headaches they otherwise must endure in the wake of laptop theft," said Siciliano. "A solution that not only tracks the stolen mobile computer, but also allows the rightful owner at once to delete and retrieve her information from the machine is ideal. Few systems combine all this capability."

CEO of IDTheftSecurity.com and a member of the Bank Fraud & IT Security Report‘s editorial board, Siciliano leads Fortune 500 companies and their clients through presentations that explore security solutions for businesses and individuals. Author of "The Safety Minute: 01" and a longtime identity theft speaker, he has discussed data security and consumer protection on CNBC, NBC’s "Today Show," FOX News Network, and elsewhere.

On Dec. 12, OHSU announced that one of its laptop computers, left in an unattended hotel room, had gone missing to theft earlier that week. The school subsequently mailed warning letters to 890 patients whose information such as birthdates, telephones, medical diagnoses and treatment categories may have been on the stolen machine, reported The Oregonian and The Portland Tribune.

"Laptop theft is readily mitigated with the proper technology," said MyLaptopGPS’ chief technology officer, Dan Yost, who invited readers to visit the MyLaptopGPS blog and discuss the impact of the OHSU laptop theft. "And this technology need not be expensive to be effective. Besides, the alternative—lost data records of untold value and the constant specter of customer retribution, including class action lawsuits—is certainly cost-prohibitive. The clear course of action is to equip laptop computer fleets with technology designed to thwart would-be thieves."

MyLaptopGPS, a laptop security company mentioned in the August 2008 issue of Inc. Magazine, maintains the Realtime Estimated Damage Index (REDI™), a running tally of highly publicized laptop and desktop computer thefts and losses. The REDI also assesses those losses’ associated costs by drawing on estimates from the FBI and other sources that reflect the likelihood that identity theft and other crimes will occur whenever a computer is misplaced or stolen. At its website, MyLaptopGPS also keeps a log of these high-profile laptop thefts.

MyLaptopGPS’ anti-laptop theft technology combines Internet-based GPS tracking — more effective than other forms of GPS for tracking and retrieving stolen laptops — with other functionalities to secure mobile computing devices. A user launches MyLaptopGPS’ features remotely, protecting data even while the machine is in a criminal’s hands. Once connected to the Internet, the software silently retrieves, and then deletes, files from machines as it tracks the stolen or missing hardware — at once returning the data to its rightful owner and removing it from the lost computer.

Additionally, MyLaptopGPS offers SafeRegistry™, a comprehensive system for inventorying entire fleets of mobile computers, as well as a full line of highly renowned SafeTags™, which are police-traceable property tags designed to secure iPods™, cell phones, BlackBerry™ devices, and other mobile property.

Readers may download a demo of MyLaptopGPS. A white paper is also available.

"Our laptop fleet was certainly worth protecting," said Jim Sullivan, the network, systems and security administrator for FastForms, Inc. "We had procedures in place to help secure the machines, but we realized that we needed some key, additional layers of security, such as covert tracking and remote-controlled data recovery and destruction. MyLaptopGPS’ solution is very easy to use, and we are quite satisfied. We would recommend MyLaptopGPS to any business seeking a simple solution to secure their laptops and data."

The YouTube video below shows Siciliano on FOX News Network, where he discussed this year’s data security breach at Hannaford Bros. and provided consumers affected by the theft with the tips they needed to avoid paying for fraudulent charges to their bank accounts and credit accounts. To learn more about identity theft, a major concern for anyone who’s lost a laptop computer to thieves, readers may go to video of Siciliano at VideoJug.

###

About MyLaptopGPS

Since 1984, Tri-8, Inc. (DBA MyLaptopGPS.com) has specialized in complete system integration. From real-time electronic payment processing software to renowned mid-market ERP implementations, the executive team at MyLaptopGPS has been serving leading enterprises and implementing world-class data systems that simply work. With MyLaptopGPS™, Tri-8, Inc. brings a level of expertise, dedication, knowledge and service that is unmatched. MyLaptopGPS™’s rock-solid performance, security, and reliability flow directly from the company’s commitment to top-notch software products and services for almost 25 years.

About IDTheftSecurity.com

Identity theft affects us all, and Robert Siciliano, CEO of IDTheftSecurity.com and member of the Bank Fraud & IT Security Report‘s editorial board, makes it his mission to educate Fortune 500 companies and their clients. A leader of personal safety and security seminars nationwide, Siciliano has been featured on "The Today Show," CNN, MSNBC, CNBC, "FOX News," "The Suze Orman Show," "The Montel Williams Show," "Maury Povich," "Sally Jesse Raphael," "The Howard Stern Show," and "Inside Edition." Numerous magazines, print news outlets, and wire services have turned to him, as well, for expert commentary on personal security and identity theft. These include Forbes, USA Today, Entrepreneur, Woman’s Day, Mademoiselle, Good Housekeeping, The New York Times, Los Angeles Times, Washington Times, The Washington Post, Chicago Tribune, United Press International, Reuters, and others. For more information, visit Siciliano’s Web site, blog, and YouTube page.

The media are encouraged to get in touch with any of the following individuals:

John Dunivan
MyLaptopGPS Media Relations
PHONE: (405) 747-6654 (direct line)
jd@MyLaptopGPS.com
www.MyLaptopGPS.com

Robert Siciliano, Personal Security Expert
CEO of IDTheftSecurity.com
PHONE: 888-SICILIANO (742-4542)
FAX: 877-2-FAX-NOW (232-9669)
Robert@IDTheftSecurity.com
www.idtheftsecurity.com

Brent W. Skinner
President & CEO of STETrevisions
PHONE: 617-875-4859
FAX: 866-663-6557
BrentSkinner@STETrevisions.com
http://www.STETrevisions.com
http://www.brentskinner.blogspot.com