Motorola Tablet Goof: 4 Security Lessons For Users – Informationweek (Eric Zeman)

Motorola alerted customers on Friday that it shipped about 100 refurbished Xoom tablets that were not completely cleared of the original owner’s data prior to resale. The tablets were sold between October and December of 2011 through Woot.com. Oops.

According to Motorola, some of the compromised data potentially includes user names and passwords for email and social media accounts, as well as other password-protected sites and applications, and possibly even photographs and documents.

First, Motorola is offering customers who purchased a Motorola Xoom Wi-Fi tablet between March and October 2011–and then returned it–a complimentary two-year membership of Experian’s ProtectMyID Alert to mitigate any risks. Experian provides access to consumer credit data, and can be used as a tool to make sure the accidentally shared data is not put to nefarious use. The Xoom was available from a number of retailers during that period, including Amazon.com, Best Buy, BJ’s Wholesale, eBay, Office Max, Radio Shack, Sam’s Club, Staples, and others. If you bought one from the aforementioned retailers and returned it, best give Motorola (and Experian) a call.

via Motorola Tablet Goof: 4 Security Lessons For Users – Security – Mobile Security – Informationweek.

French Data Protection Authority Launches Public Consultation on Cloud Computing : : Privacy and Information Security Law Blog

On October 17, 2011, the French Data Protection Authority (the “CNIL”) launched a public consultation on cloud computing (the “Consultation”). The Consultation seeks to gather opinions from stakeholders (clients, providers, consultants) regarding cloud computing services for businesses, to identify legal and technical solutions that address data protection concerns while taking into account the economic interests involved.

  • The Consultation addresses several specific topics about personal data protection in the cloud computing context, including:
  • The definition of cloud computing
  • Cloud computing providers as data processors
  • Applicable law (i.e., what law applies to cloud computing stakeholders?)
  • Regulation of data transfers (e.g., what legal instruments are best suited to regulate cloud computing? Would binding corporate rules for data processors be an appropriate legal mechanism for transferring personal data to cloud computing service providers?)
  • Data security (e.g., cloud-specific risks and proposed security measures)

via French Data Protection Authority Launches Public Consultation on Cloud Computing : : Privacy and Information Security Law Blog.

U.S. can conduct offsite searches of computers seized at borders, court rules – Computerworld

Laptop computers and other digital devices carried into the U.S. may be seized from travelers without a warrant and sent to a secondary site for forensic inspection, the U.S. Court of Appeals for the Ninth Circuit ruled last week.

The ruling is the second in less than a year that allows the U.S. government to conduct warrantless, offsite searches of digital devices seized at the country’s borders.

A federal court in Michigan last May issued a similar ruling in a case challenging the constitutionality of the warrantless seizure of a computer at the Detroit Metropolitan Airport. The defendant in a child pornography case also contended that a subsequent search of the device at a secondary computer forensic facility violated the Fourth Amendment of the Constitution.

Several other courts, including the Ninth Circuit itself, have ruled that warrantless, suspicion-less searches of laptops and other digital devices can take place at U.S. border locations.

The issue of border searches is an important one for businesses because corporate travelers often carry laptops holding sensitive company data across U.S. borders.

Privacy advocates and travel groups have expressed concern that searches of such laptops could expose such sensitive corporate or customer information, especially citing the Department of Homeland Security’s policy of copying or downloading the data if necessary.

The American Civil Liberties Union (ACLU) said that according to government documents it has obtained, U.S. customs officials searched electronic devices belonging to about 6,600 travelers between October 2008 and June 2010. The ACLU also said that U.S. officials confiscated more than 220 devices between October 2008 and June 2009.

via U.S. can conduct offsite searches of computers seized at borders, court rules – Computerworld.

Former TSA Contractor Gets Two Years for Damaging Data – PCWorld Business Center

A former U.S. Transportation Security Administration contractor will serve two years in prison for messing with sensitive government databases used to identify terrorists as they try to enter the U.S.

James Duchak, 47, pleaded guilty in October to charges that he messed with code at the TSA’s Colorado Springs Operations Center in October 2009. Prosecutors say he tried to damage the TSA’s vetting database, just a week after learning that he was to be let go from his job.

Duchak deleted important code, used to properly format the birth dates of people entered into the system.

Duchak had been working as a data analyst at the TSA for about five years at the time of the incident. His job was to update TSA servers with data scraped from the government’s terrorist screening database and the United States Marshals Service Warrant Information Network.

The former contractor’s replacement — who Duchak was training at the time of the incindent — noticed the code changes, and the TSA shut down the database immediately.

via Former TSA Contractor Gets Two Years for Damaging Data – PCWorld Business Center.

UK Introduces Practice Direction 31B Addressing the Disclosure of Electronic Documents : Electronic Discovery Law

Effective October 1, 2010, the UK has introduced Practice Direction 31B addressing in detail the disclosure of electronic documents.  According to the Ministry of Justice, this new Practice Direction “aims to focus the parties on the sources of electronic material and give guidance to those with less experience of dealing which such issues.”  A comprehensive discussion, the Practice Direction addresses a myriad of topics, including preservation, topics for discussion between the parties, reasonable searching, keyword and automated searching, the disclosure of metadata, and the format of production.

via UK Introduces Practice Direction 31B Addressing the Disclosure of Electronic Documents : Electronic Discovery Law.

eDiscovery analysis reveals companies struggle most with preservation | Messaging Architects

Companies are continuing to struggle with the preservation stage of the eDiscovery process, according to the results of a data management company’s analysis of 84 prominent cases.

The firm studied litigation that occurred between January 1 and October 31 of this year and found failure to follow email archiving best practices was a prevailing trend.

Thirty-nine percent of cases studied dealt with sanctions. Of those, 49 percent pertained to preservation and spoliation issues. Another 2 percent of cases addressed preservation and spoliation issues, but not in terms of sanctions.

All told, sanctions were levied in 23 of the 33 cases in which they were addressed, according to the report.

“Information management and discovery protocols and processes are far from clear for most organizations,” said Michele Lange, an eDiscovery expert with the company that conducted the analysis.

via eDiscovery analysis reveals companies struggle most with preservation | Messaging Architects.

AppleInsider | Apple adds 12 more patents to lawsuit against Motorola

Apple has amended its lawsuit against Motorola to include 12 more patents, bringing the total count of patents that Apple accuses Motorola of violating to 24, while Motorola alleges that Apple has infringed on 18 of its patents.

Motorola first sued Apple in October in what many believe was a preemptive move after Apple sued HTC for violation of smartphone patents that the company holds. Motorola and HTC are two of the most prominent makers of Android-based smartphones.

"We can sit by and watch competitors steal our patented inventions, or we can do something about it," Apple Chief Executive Steve Jobs said of his company’s case against HTC. "We’ve decided to do something about it."

In its suit against Apple, Motorola accused the iPhone maker of refusing to pay a license after "lengthy negotiations." Motorola also claims Apple infringed upon patents relating to technologies that include 3G, GPRS, 802.11 wireless and antenna design.

After Motorola sued Apple, the Cupertino, Calif., company quickly responded with a countersuit. Last week, the U.S. International Trade Commission announced that it was launching a formal investigation of Motorola in response to Apple’s allegations.

Apple’s motion this week to add an additional 12 patents to its lawsuit against Motorola counters a preemptive request filed by Motorola in October for a declaratory judgment that would block Apple from using those patents against Motorola in court. The declaratory judgment references 11 patents that Apple used in its suit against HTC, but had yet to use against Motorola.

via AppleInsider | Apple adds 12 more patents to lawsuit against Motorola.

Sprint and Clearwire switch on WiMAX 4G in NYC, Tampa Bay, and four more | Wireless News – Betanews

Keeping true to the promises made by Sprint and Clearwire in October, the New York City WiMAX network was “switched on” today, along with Tampa, Florida, Trenton and New Brunswick, New Jersey, and Hartford and New Haven, Connecticut.

“Sprint is the first national wireless carrier to make 4G a reality for our customers and with the addition of these six new markets we are now in 61 cities, including Chicago, Baltimore and Houston, and are growing. By the end of the year Sprint 4G plans to light up several major new markets including Los Angeles, San Francisco, Miami, Denver and Washington DC to name a few,” Matt Carter, president of Sprint 4G said in a statement today.

Both New York state and Florida had prior WiMAX deployments go live earlier this year, but these are the first ones for Connecticut and New Jersey.

via Sprint and Clearwire switch on WiMAX 4G in NYC, Tampa Bay, and four more | Wireless News – Betanews.

BBC – US ambassador questioned on EU data sharing

The US ambassador to the EU has said that security must be protected as well as privacy, during an evidence session with the European Parliament’s Civil Liberties Committee on 25 October 2010.

William Kennard was speaking to MEPs as part of negotiations into a new “umbrella agreement” on the sharing of data with the US authorities.

There have been concerns that using the data of travellers to the US could constitute a breach of privacy.

Under the new proposal being negotiated, sensitive information such as religious beliefs – revealed by meal preferences – or health conditions would only be given in “very exceptional circumstances.”

The European Commission is also offering passengers the right to be informed about the processing of their data.

Earlier in the year MEPs blocked a similar agreement on the transfer of financial data – the so-called SWIFT agreement.

A new agreement had to be struck between the EU and the US that contained increased privacy safeguards.

Ambassador Kennard told the committee that the US had the same values as the EU on data privacy, but admitted that the two blocs had “different approaches”.

He expressed concerns about the retroactive aspect of any new agreement, saying it would be difficult to update existing bilateral agreements with various member states.

via BBC – Democracy Live – US ambassador questioned on EU data sharing.

Verizon Wireless to offer $15 data promotion | Reuters

Verizon Wireless, the biggest U.S. mobile operator, will start offering a lower priced mobile data service with limited downloads on October 28, according to a person familiar with the matter.

The move by the venture of Verizon Communications (VZ.N) and Vodafone Group Plc (VOD.L) follows smaller rival AT&T Inc’s (T.N) elimination of unlimited data service plans earlier this year, when AT&T also introduced a choice of lower-priced plans with limited downloads of items such as email or games.

Verizon Wireless has said recently it would move to tiered pricing but the company declined to comment on Tuesday.

via Verizon Wireless to offer $15 data promotion | Reuters.