<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.3.2" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>
<channel>
	<title>Comments for Predictable is Preventable</title>
	<link>http://blog.jwwinter.com</link>
	<description>Real world security advice for real world businesses.</description>
	<pubDate>Fri, 30 Jul 2010 06:23:25 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.2</generator>
		<item>
		<title>Comment on Technology vs. Privacy by Fred Carter</title>
		<link>http://blog.jwwinter.com/technology-vs-privacy/#comment-16</link>
		<dc:creator>Fred Carter</dc:creator>
		<pubDate>Wed, 08 Jul 2009 18:48:52 +0000</pubDate>
		<guid>http://blog.jwwinter.com/technology-vs-privacy/#comment-16</guid>
		<description>Better late than never... 
Three points in response to your blog posting;

1. WRONG PRIVACY ACT! Claims of "solid ground" compliance with the federal "Personal Information Protection and Electronic Documents Act, 2000", or PIPEDA, says *nothing at all* about compliance with the Ontario (Municipal) Freedom of Information and Privacy of Personal Information Act (FIPPA/MFIPPA) - acts over which the Ontario Commissioner has authority (to receive, investigate complaints, issue orders, etc)

2. WRONG MOTIVE: You don't need to have impure, bad or totalitarian motives to invade privacy. The biggest threats to privacy often come from incremental changes at the margins of information systems by well-meaning bureaucrats/employees in pursuit of other legitimate but non-privacy objectives (let's save money and save lives!). Mission/function creep means that video cameras put in place for one defined purpose eventually become more numerous, more ubiquitous and used for novel, secondary purposes.  Why not add remote control panning and zooming?  How long before sound recording is added?  What about retaining/archivingg the videos indefinitely for future uses?  Could we add facial recognition to the feeds?  Why not a public video feed so the public can watch too??  

3. VVTC EFFICACY UNPROVEN: I am unaware of any study documenting, in empirical, measurable terms, the security claims of using CCTV in public (or private) spaces. In actual practice, the single most compelling use of CCTV is to preserve evidence in the event of an incident, which may have some deterrent/displacement value.  Almost no one actually watches live CCTV feeds as this is too mind-numbingly boring an task for anyone to do credibly beyond 15-20 minutes. SO I take some issue with your four listed reasons for using CCTV.

My $0.02</description>
		<content:encoded><![CDATA[<p>Better late than never&#8230;<br />
Three points in response to your blog posting;</p>
<p>1. WRONG PRIVACY ACT! Claims of &#8220;solid ground&#8221; compliance with the federal &#8220;Personal Information Protection and Electronic Documents Act, 2000&#8243;, or PIPEDA, says *nothing at all* about compliance with the Ontario (Municipal) Freedom of Information and Privacy of Personal Information Act (FIPPA/MFIPPA) - acts over which the Ontario Commissioner has authority (to receive, investigate complaints, issue orders, etc)</p>
<p>2. WRONG MOTIVE: You don&#8217;t need to have impure, bad or totalitarian motives to invade privacy. The biggest threats to privacy often come from incremental changes at the margins of information systems by well-meaning bureaucrats/employees in pursuit of other legitimate but non-privacy objectives (let&#8217;s save money and save lives!). Mission/function creep means that video cameras put in place for one defined purpose eventually become more numerous, more ubiquitous and used for novel, secondary purposes.  Why not add remote control panning and zooming?  How long before sound recording is added?  What about retaining/archivingg the videos indefinitely for future uses?  Could we add facial recognition to the feeds?  Why not a public video feed so the public can watch too??  </p>
<p>3. VVTC EFFICACY UNPROVEN: I am unaware of any study documenting, in empirical, measurable terms, the security claims of using CCTV in public (or private) spaces. In actual practice, the single most compelling use of CCTV is to preserve evidence in the event of an incident, which may have some deterrent/displacement value.  Almost no one actually watches live CCTV feeds as this is too mind-numbingly boring an task for anyone to do credibly beyond 15-20 minutes. SO I take some issue with your four listed reasons for using CCTV.</p>
<p>My $0.02</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Credit Card Fraud: Tips to Protect Yourself by Roger Wheatley</title>
		<link>http://blog.jwwinter.com/credit-card-fraud-tips-to-protect-yourself/#comment-13</link>
		<dc:creator>Roger Wheatley</dc:creator>
		<pubDate>Wed, 25 Feb 2009 22:37:07 +0000</pubDate>
		<guid>http://blog.jwwinter.com/credit-card-fraud-tips-to-protect-yourself/#comment-13</guid>
		<description>Great post. I think in many respects (I'm just a guilty) people think of some of the points (above) as silly or not important. It's criminals (I think) that garner the greatest rewards from such thinking. I know myself I've not been as diligent and fortunately I've been luck.

Nice to see this kind of "heads up" post. How will this change with the coming new "touch" card technology? No swiping, signatures or such? Any thoughts on that?</description>
		<content:encoded><![CDATA[<p>Great post. I think in many respects (I&#8217;m just a guilty) people think of some of the points (above) as silly or not important. It&#8217;s criminals (I think) that garner the greatest rewards from such thinking. I know myself I&#8217;ve not been as diligent and fortunately I&#8217;ve been luck.</p>
<p>Nice to see this kind of &#8220;heads up&#8221; post. How will this change with the coming new &#8220;touch&#8221; card technology? No swiping, signatures or such? Any thoughts on that?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why Home Builders play into the hands of Criminals! by RW</title>
		<link>http://blog.jwwinter.com/why-home-builders-play-into-the-hands-of-criminals/#comment-11</link>
		<dc:creator>RW</dc:creator>
		<pubDate>Tue, 23 Sep 2008 15:43:14 +0000</pubDate>
		<guid>http://blog.jwwinter.com/why-home-builders-play-into-the-hands-of-criminals/#comment-11</guid>
		<description>In my opinion you've raised a very pertinent issue. I know that for new home and business buildings the focus appears to be more on ensuring that Internet access (cabling) is pre-wired. While this is a great feature (which increases saleability and profitability), I myself realize that I've purchased a home with no thought whatsoever to the security issues.

Quite frankly this has cost me money as a result of damage due to crime. Had I considered the external security of my property, I might not have had to incur wasted expense (and aggravation).

Another aspect is the ever growing trend of home owners with a home based business. I know there are also residential/commercial subdivisions being built in this area (the properties have been zoned as residential AND commercial properties where each business also has a residence in it). Needless to say this and the common home business trend, may lead to a more lucrative opportunity for crime.
Your link to that audit is a great tool.

One thing I'm considering is the installation of motion detectors and a CCTV surveillance system. Do you have any insights on this?</description>
		<content:encoded><![CDATA[<p>In my opinion you&#8217;ve raised a very pertinent issue. I know that for new home and business buildings the focus appears to be more on ensuring that Internet access (cabling) is pre-wired. While this is a great feature (which increases saleability and profitability), I myself realize that I&#8217;ve purchased a home with no thought whatsoever to the security issues.</p>
<p>Quite frankly this has cost me money as a result of damage due to crime. Had I considered the external security of my property, I might not have had to incur wasted expense (and aggravation).</p>
<p>Another aspect is the ever growing trend of home owners with a home based business. I know there are also residential/commercial subdivisions being built in this area (the properties have been zoned as residential AND commercial properties where each business also has a residence in it). Needless to say this and the common home business trend, may lead to a more lucrative opportunity for crime.<br />
Your link to that audit is a great tool.</p>
<p>One thing I&#8217;m considering is the installation of motion detectors and a CCTV surveillance system. Do you have any insights on this?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on CCTV Controversy? Or Not? by JakeD</title>
		<link>http://blog.jwwinter.com/cctv-controversy-or-not/#comment-7</link>
		<dc:creator>JakeD</dc:creator>
		<pubDate>Fri, 09 May 2008 13:51:19 +0000</pubDate>
		<guid>http://blog.jwwinter.com/cctv-controversy-or-not/#comment-7</guid>
		<description>Well thought out perspective. I think one issue business owners should be aware of is that the days of bars, window coating, etc. are over. Such visible security is a clear sign to would be perpetrators that there's something of value for them.

Don't get me wrong, I'm not suggesting everything should be hidden either. Instead I'm suggesting that visible systems such as CCTV cameras clearly say:

"I have a record of you, that will be followed up if needed. This is not the time to participate in a crime."

Older methods such as bars, etc. instead may give the following message:

"There's something of value here... and there is probably nobody around when you get past the bars."</description>
		<content:encoded><![CDATA[<p>Well thought out perspective. I think one issue business owners should be aware of is that the days of bars, window coating, etc. are over. Such visible security is a clear sign to would be perpetrators that there&#8217;s something of value for them.</p>
<p>Don&#8217;t get me wrong, I&#8217;m not suggesting everything should be hidden either. Instead I&#8217;m suggesting that visible systems such as CCTV cameras clearly say:</p>
<p>&#8220;I have a record of you, that will be followed up if needed. This is not the time to participate in a crime.&#8221;</p>
<p>Older methods such as bars, etc. instead may give the following message:</p>
<p>&#8220;There&#8217;s something of value here&#8230; and there is probably nobody around when you get past the bars.&#8221;</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on The Risks Involved When Logging onto Your Financial Institution from Your Office Computer! by Roger Wheatley</title>
		<link>http://blog.jwwinter.com/connecting-to-your-business-from-a-public-access-computer/#comment-5</link>
		<dc:creator>Roger Wheatley</dc:creator>
		<pubDate>Sat, 08 Mar 2008 21:52:20 +0000</pubDate>
		<guid>http://blog.jwwinter.com/connecting-to-your-business-from-a-public-access-computer/#comment-5</guid>
		<description>One thing I often find people are not aware of, are the social engineering aspects of garnering data from people. In this case the video is a good example of people being fooled into providing sensitive information, unknowingly.
</description>
		<content:encoded><![CDATA[<p>One thing I often find people are not aware of, are the social engineering aspects of garnering data from people. In this case the video is a good example of people being fooled into providing sensitive information, unknowingly.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Technology vs. Privacy by Roger Wheatley</title>
		<link>http://blog.jwwinter.com/technology-vs-privacy/#comment-4</link>
		<dc:creator>Roger Wheatley</dc:creator>
		<pubDate>Mon, 04 Feb 2008 21:55:41 +0000</pubDate>
		<guid>http://blog.jwwinter.com/technology-vs-privacy/#comment-4</guid>
		<description>In my opinion there's perhaps a bit of political maneuvering? After all, there's a fair bit of money involved in a (CCTV) project of this scope. Do I need to connect the dot's? Just my opinion...</description>
		<content:encoded><![CDATA[<p>In my opinion there&#8217;s perhaps a bit of political maneuvering? After all, there&#8217;s a fair bit of money involved in a (CCTV) project of this scope. Do I need to connect the dot&#8217;s? Just my opinion&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on VoIP Security Issues by Roger Wheatley</title>
		<link>http://blog.jwwinter.com/voip-security-issues/#comment-2</link>
		<dc:creator>Roger Wheatley</dc:creator>
		<pubDate>Tue, 22 Jan 2008 22:42:29 +0000</pubDate>
		<guid>http://blog.jwwinter.com/voip-security-issues/#comment-2</guid>
		<description>One thing for viewers to keep in mind is that they have greater power to help control such issues. Of particular note is the availability of knowledge (easily searched via Google) and therefore easily beneficial to any business owner. Needless to say, when we have questions, ask a professional. In many cases there are simple answers which are often free of charge.</description>
		<content:encoded><![CDATA[<p>One thing for viewers to keep in mind is that they have greater power to help control such issues. Of particular note is the availability of knowledge (easily searched via Google) and therefore easily beneficial to any business owner. Needless to say, when we have questions, ask a professional. In many cases there are simple answers which are often free of charge.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
