Skip to main content

POST Private parts

The British approach to creating a national digital identity scheme is, to say the least, unusual. Sky News recently summarised the situation well by saying “thanks to its ill-conceived porn block, the government has quietly blundered into the creation of a digital passport - then outsourced its development to private firms”. One of these private firms is Mindgeek, who run the world’s biggest porn site, Pornhub. I make no comment on them or any of the other companies that has stepping to provide digital identity and the same time that the government has stopped funding its own digital identity scheme (gov.verify) which was, in any case, not being used for the important and obvious use of age verification for adult services.

But why does Sky called the mandatory age verification for adult services “ill-conceived”? Let’s pop over to the New York Times for a quick lesson in the history of what uncharitable persons call the “Hancock Wall” because it was pushed into law by Matt Hancock when Minister over at the Department of Culture, Media and Sport (DCMS). Age verification rule grew from a Conservative party campaign promise in 2015, and came into law via the Digital Economy Act 2017, a "wide-ranging bundle” (ie, random jumble) of internet rules and regulations. As the NYT reported, “among the bill’s consequential but stultifying provisions about telecommunications infrastructure, copyright enforcement and government data sharing, the porn rule [was] hastily rubber-stamped before Britain’s 2017 general election, and questions about how exactly it would be enforced, as well as concerns about user privacy, were set aside to be dealt with later”.

The questions (from, to choose one example, me) about how to create necessary infrastructure were ignored and the government said that people could use credit cards or whatever.

xxx

lmost 800,000 account holders on porn site Brazzers have had their details breached thanks to a vulnerability in the vBulletin forum software, potentially exposing some to online extortion attempts.

Some 790,724 unique email addresses, as well as user names and plain text passwords, were exposed in the data dump

From Brazzers Porn Site Users Caught Out in Data Breach - Infosecurity Magazine.

 

 

xxx

Comments

Popular posts from this blog

new survey results from USA Technologies (USAT) suggest. The payments technology company, which enables electronic payments for self-service machines, compared consumer spending activity at 35 of its vending machines in urban areas with a high concentration of iPhone users between week one and week four of the installation of new digital signage promoting Apple Pay. Consumers made more contactless purchases: The vending machine providers saw an average contactless transaction revenue increase of 89%, implying that consumers are making more mobile payments. This was likely driven by the clear advertisement of Apple Pay. Total transactions increased: Consumers made more purchases overall. This was probably driven by an uptick in mobile payments, given the major increase in contactless transaction revenue. And the vending machines may have attracted many first-time users who were drawn in by the digital advertising of Apple Pay. Boosting awareness is key to unlocking pent-up demand amon...

David | LinkedIn

Alex Todd rather kindly called this a “most lucid explanation of digital identity management” I would highly recommend this presentation to anyone interested in understanding prospective blockchain based identity architectures From David | LinkedIn This is very kind, but as I said in the link, this is thinking out loud and far from a fully-developed solution. We’re working on parts of this for different clients and I can see that there is something there - a genuinely new way of solving some old problems - but it’s early days.

We could fix mobile security, you know. We don't, but we could

Earlier in the week I blogged about mobile banking security , and I said that in design terms it is best to assume that the internet is in the hands of your enemies. In case you think I was exaggerating… The thieves also provided “free” wireless connections in public places to secretly mine users’ personal information. From Gone in minutes: Chinese cybertheft gangs mine smartphones for bank card data | South China Morning Post Personally, I always use an SSL VPN when connected by wifi (even at home!) but I doubt that most people would ever go to this trouble or take the time to configure a VPN and such like. Anyway, the point is that the internet isn’t secure. And actually SMS isn’t much better, which is why it shouldn’t really be used for securing anything as important as home banking. The report also described how gangs stole mobile security codes – which banks automatically send to card holders’ registered mobile phones to verify online transactions – by using either a Trojan...