Monday 28 June 2010

Celebrity hacked on facebook

Glamorous Bollywood actress Meghna Naidu has contacted the computer crime police in Mumbai, after her email and Facebook account were compromised by a hacker.

31-year-old Naidu, who is a Bollywood megastar" in the subcontinent, lodged a complant with the Cyber Crime Investigation Cell (CCIC) after friends reported receiving messages from her Gmail account claiming she was pregnant "from a fling with a guy whose name she couldn't remember".

When the messages purporting to come from the actress said that she was planning to abort the child, and used foul language about various Bollywood actors, Meghna Naidu's friends rapidly became suspicious.

"My friends realised that it wasn’t me chatting with them. Then they called me up and informed me. On Tuesday, I registered a complaint in this regard. I want to know who the hacker is and why he maligned me. The IP addresses of the computers from which the chat messages were sent have been traced to Byculla and Pune,"

Naidu was reported as saying that her Facebook account had also been hacked.

As Graham Cluley says in his blogg someone was causing mischief at the actress's expense - no doubt helped by some poor practices when it came to choosing and securing her password.

You may not have as many internet admirers as Meghna Naidu, but do look closely when you login to websites, is there additional security, is liveensure protecting you as you transact. Have you made sure that you have chosen a hard-to-crack password for your online accounts. Running up-to-date security software to defend your privacy will also help.

Website developers need to consider implementing multifactor authentication to protect their uses, if you are a webdeveloper or in the process of building a website site you can register to beta test at www.liveensure.com (Simple strong multifactor authentication).





http://www.sophos.com/blogs/gc/g/2010/06/24/meghna-naidu-pregnant-hacked/

Friday 25 June 2010

Debenhams need to review Customer Service/Online Experience

Like any other female consumer I love an email offer, first day of sale free postage. So I order online and as I have lived the last 10 years on the internet, selling it or latterly of protecting consumers using it I think I know a bit about order forms.

I had a four digit promotional code, but after three attempts could not see the box.
So ordered then sent an email, the rather dictatorial response is below, I had to scroll to the bottom of the page... in delivery page...ridiculous as the offer relates only to postage. I wonder how debenhams will fair in mobile retail as consumers do more on their phones and how they will really engage with vouchering.. I would suggest they rapidly speak to E-commera or a customer experience agency they are falling behind. Miles behind Marks and Spencer, Ocado and Next who have it so right.


Dear Ms Robertson,

Thank you for your e-mail regarding Promotional Codes when ordering on www.debenhams.com.

We have investigated your query with Debenhams technical department and cannot find any reason why the Promotional Code Box would not have been available for you to use during the time you have stated.

For your future reference, please find instructions below as to where the box is clearly located.

When selecting the method of delivery, (e.g. home delivery, collect from store) from the shopping basket, please scroll to the bottom of this section, where you will find the ?promotional code box?

Please ensure the promotional code used is entered in capital letters.

Unfortunately we are unable to honor this discount on this occasion.

Please accept our apologies for any inconvenience this may cause.

I can also confirm that both items on your order have been despatched and should be with you within 3 - 5 working days.

We hope this helps with your query; if we can be of further assistance, please do not hesitate to contact us.

Debenhams for future reference you have lost one online shopper for good.

Monday 21 June 2010

Identity Management and The Law

In online identity management and authentication there has been significant work related to the technical exchange of identity information and the actual authentication processes.

This is the cutting edge of a new area of law that is starting to get real attention. Identity Authentication.

“It varies by jurisdiction but there’s a fair amount of privacy law, particularly in the European Union, but to a lesser extent in the U.S. financial and health care sectors,” Smedinghoff says.

Case law starting is starting to ramp up...

In situations regarding identity theft, case law is beginning to emerge. Courts are starting to point the finger at businesses that did not, in their opinion, do enough to protect personal information. Businesses need to be sure to meet obligations and properly authenticate or identify individuals and make sure not to release personal or confidential information.

If a business is the identity provider within the management process, then they are making assertions about a subject to a third party or a relying party. These assertions can, in theory, be considered warranties or representations.

This is good news for online users, with new 'mashup' technologies and cloud solutions entering the market place it is simpler for website owners to secure their users with technologies like LiveEnsure™ multifactor authentication.(http://www.liveensure.com/). Consumers need to trust that online portals are protecting them to do business, the law is highlighting the need for businesses to set us security systems that do this.


Full Article:
http://www.secureidnews.com/2010/06/01/identity-management-and-the-law

Tuesday 1 June 2010

Privacy in the Digital Society

Next Tuesday sees Europes most influential data privacy conference - A fine Balance in the digital society is at Westminster.

Todays world is powered by complex digital systems that create privacy challenges alongside great opportunities.

• It is estimated that humankind created 150 exabytes (billion gigabytes) of data in 2005. In 2010 we will create 1,200 exabytes. Despite an abundance of tools to capture, process and share this information, data is continuing to multiply at such a rate we need new ways to manage who can see, access and use it.
• There is no current regulatory model for a digital society. We need new rules based on what we already know about privacy, technology and data.
• We need to educate, consult and communicate with the people whose information is on the frontline.

A Fine Balance 2010 features high-profile speakers including from the Information Commissioner's Office, the legal profession, technology companies and civil liberties experts who will debate the latest thinking on how to maintain the integrity of data in a digital world.

Delegates will have the opportunity to ask questions, vote and contribute to a report being developed to influence politicians and decision makers.

If you are transacting over the web this will bring you up to speed with the new legislation around privacy, the law has got tighter.
http://www.pdsfinebalance.com/