<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for Rossander's Security Reader</title>
	<atom:link href="http://rossander.org/infosec/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://rossander.org/infosec</link>
	<description>an Information Security blog for the rest of us</description>
	<lastBuildDate>Fri, 30 Jul 2010 17:13:57 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>Comment on CBS story on copier hard-drives is overblown by John Juntunen</title>
		<link>http://rossander.org/infosec/2010/07/cbs-story-on-copier-hard-drives-is-overblown/comment-page-1/#comment-6314</link>
		<dc:creator>John Juntunen</dc:creator>
		<pubDate>Fri, 30 Jul 2010 17:13:57 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=648#comment-6314</guid>
		<description><![CDATA[Wow, did you miss this one. &quot;Poor man&#039;s disk wipe&quot;. In case you didn&#039;t know copiers store images of copies, prints, scans, emails and fax jobs. New copiers have 40 -80gb hard drives and we routinly recover thousands of documents and most are not from the last few days of the copiers life. These can not be easily cleared by overwriting with other copies or prints and you can&#039;t just pull the hard drive and wipe it clean either. The hard drive contains the firmware and code required to run the machine. Since 90% of copiers are leased and the machine must be returned in working order any attempt to clean the hard drive could be costly. 

You were right that not ever copy is stored and there is a finite area but they can hold tens of thousands of documents. Simply running copies of your cat or the phone book isn&#039;t going to clear this information. You would also have to print and scan pictures of your cat. 

Your recommendation to put the copier under the IT department and make policies that contol the return of the copier is very important, thanks for mentioning it. 

What about this statment &quot;Unless you are protecting DoD nuclear secrets, I wouldn’t worry more than that about copiers&quot;. One page of persons medical record left on a copier could cost a company $1.5 million, or in the case of the insurance company in the CBS story the cost of sending out 406,000 breach notifications. This company had 17 machines and only one of them ended up on TV. There are many laws that cover release of employee and customer confidentional information. There are currently 46 states that have breach notification laws on the books and most have very stiff penalties.

The new copiers have capabilities, that are either standard or available as an opiton, that will clear the hard drive but these features were not available on earlier machines (2002-2007) and these are the machines that are being traded in today.

If you need more information call me.]]></description>
		<content:encoded><![CDATA[<p>Wow, did you miss this one. &#8220;Poor man&#8217;s disk wipe&#8221;. In case you didn&#8217;t know copiers store images of copies, prints, scans, emails and fax jobs. New copiers have 40 -80gb hard drives and we routinly recover thousands of documents and most are not from the last few days of the copiers life. These can not be easily cleared by overwriting with other copies or prints and you can&#8217;t just pull the hard drive and wipe it clean either. The hard drive contains the firmware and code required to run the machine. Since 90% of copiers are leased and the machine must be returned in working order any attempt to clean the hard drive could be costly. </p>
<p>You were right that not ever copy is stored and there is a finite area but they can hold tens of thousands of documents. Simply running copies of your cat or the phone book isn&#8217;t going to clear this information. You would also have to print and scan pictures of your cat. </p>
<p>Your recommendation to put the copier under the IT department and make policies that contol the return of the copier is very important, thanks for mentioning it. </p>
<p>What about this statment &#8220;Unless you are protecting DoD nuclear secrets, I wouldn’t worry more than that about copiers&#8221;. One page of persons medical record left on a copier could cost a company $1.5 million, or in the case of the insurance company in the CBS story the cost of sending out 406,000 breach notifications. This company had 17 machines and only one of them ended up on TV. There are many laws that cover release of employee and customer confidentional information. There are currently 46 states that have breach notification laws on the books and most have very stiff penalties.</p>
<p>The new copiers have capabilities, that are either standard or available as an opiton, that will clear the hard drive but these features were not available on earlier machines (2002-2007) and these are the machines that are being traded in today.</p>
<p>If you need more information call me.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Who owns your contacts? by Mike Rossander</title>
		<link>http://rossander.org/infosec/2010/06/who-owns-your-contacts/comment-page-1/#comment-6294</link>
		<dc:creator>Mike Rossander</dc:creator>
		<pubDate>Mon, 26 Jul 2010 22:31:59 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=640#comment-6294</guid>
		<description><![CDATA[answered off-line...]]></description>
		<content:encoded><![CDATA[<p>answered off-line&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Who owns your contacts? by David McCann</title>
		<link>http://rossander.org/infosec/2010/06/who-owns-your-contacts/comment-page-1/#comment-6292</link>
		<dc:creator>David McCann</dc:creator>
		<pubDate>Mon, 26 Jul 2010 19:45:44 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=640#comment-6292</guid>
		<description><![CDATA[Mike -- I&#039;m a writer for CFO magazine. I&#039;d like to talk to you about this. Could you please contact me? Thanks.]]></description>
		<content:encoded><![CDATA[<p>Mike &#8212; I&#8217;m a writer for CFO magazine. I&#8217;d like to talk to you about this. Could you please contact me? Thanks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on CreditKarma.com is an interesting new site by Jimm</title>
		<link>http://rossander.org/infosec/2009/08/creditkarma-com-is-an-interesting-new-site/comment-page-1/#comment-4311</link>
		<dc:creator>Jimm</dc:creator>
		<pubDate>Fri, 22 Jan 2010 13:48:01 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=496#comment-4311</guid>
		<description><![CDATA[I love your article. Nice post! thank you for sharing for free. You&#039;d better optimize more your blog, so more people will visit and enjoy your nice posts. If you don&#039;t mind, please also comment on my blog: &lt;a href=&quot;http://overviu.com&quot; rel=&quot;nofollow&quot;&gt;overviu.com&lt;/a&gt;. Thanks.]]></description>
		<content:encoded><![CDATA[<p>I love your article. Nice post! thank you for sharing for free. You&#8217;d better optimize more your blog, so more people will visit and enjoy your nice posts. If you don&#8217;t mind, please also comment on my blog: <a href="http://overviu.com" rel="nofollow">overviu.com</a>. Thanks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Not going to be home for the holidays? by Skin Smart</title>
		<link>http://rossander.org/infosec/2009/12/not-going-to-be-home-for-the-holidays/comment-page-1/#comment-3551</link>
		<dc:creator>Skin Smart</dc:creator>
		<pubDate>Tue, 15 Dec 2009 00:28:23 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=546#comment-3551</guid>
		<description><![CDATA[&lt;strong&gt;Great Post on this Blog...&lt;/strong&gt;

I saw this really good post today....]]></description>
		<content:encoded><![CDATA[<p><strong>Great Post on this Blog&#8230;</strong></p>
<p>I saw this really good post today&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on 10 rules for talking to a reporter by ヴィトン バッグ</title>
		<link>http://rossander.org/infosec/2009/11/10-rules-for-talking-to-a-reporting/comment-page-1/#comment-3411</link>
		<dc:creator>ヴィトン バッグ</dc:creator>
		<pubDate>Sun, 06 Dec 2009 05:34:59 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=531#comment-3411</guid>
		<description><![CDATA[That is the best article i have seen,Thank you  a lot]]></description>
		<content:encoded><![CDATA[<p>That is the best article i have seen,Thank you  a lot</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on CreditKarma.com is an interesting new site by Tony Walton</title>
		<link>http://rossander.org/infosec/2009/08/creditkarma-com-is-an-interesting-new-site/comment-page-1/#comment-2795</link>
		<dc:creator>Tony Walton</dc:creator>
		<pubDate>Wed, 16 Sep 2009 14:26:19 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=496#comment-2795</guid>
		<description><![CDATA[Nice review.  Objective.  Informative.

One possibly important thing for your own personal knowledge is FICO doesn&#039;t calculate the same amount of emphasis on having more credit lines as Credit Karma&#039;s formula for middle to lower scores.]]></description>
		<content:encoded><![CDATA[<p>Nice review.  Objective.  Informative.</p>
<p>One possibly important thing for your own personal knowledge is FICO doesn&#8217;t calculate the same amount of emphasis on having more credit lines as Credit Karma&#8217;s formula for middle to lower scores.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on How not to look like spam by Tania</title>
		<link>http://rossander.org/infosec/2008/09/how-not-to-look-like-spam/comment-page-1/#comment-21</link>
		<dc:creator>Tania</dc:creator>
		<pubDate>Mon, 02 Mar 2009 13:52:03 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=20#comment-21</guid>
		<description><![CDATA[Hi,
rossander.org - da best. Keep it going!

Have a nice day
Tania]]></description>
		<content:encoded><![CDATA[<p>Hi,<br />
rossander.org &#8211; da best. Keep it going!</p>
<p>Have a nice day<br />
Tania</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Google Latitude and privacy erosion by Mike Rossander</title>
		<link>http://rossander.org/infosec/2009/02/google-latitude-and-privacy-erosion/comment-page-1/#comment-20</link>
		<dc:creator>Mike Rossander</dc:creator>
		<pubDate>Sat, 28 Feb 2009 17:26:27 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=393#comment-20</guid>
		<description><![CDATA[You&#039;re right that the government has been able to subpoena cell phone records for a while now (though the roll-out of 911 traceability is still largely only implemented in urban areas - according to my local police dept, they haven&#039;t been able to implement it properly even in our suburban township).

The difference here, I think, is one of degree.  It will now far easier than it used to be.  My local township no longer has to develop any technical skills because Google has solved it for them.  That pushes the ability to be intrusive to many more agencies.  It also opens up the traceability to non-governmental agencies.  Big Brother is bad enough - now we have to worry about little brother (other businesses and even individuals), too.]]></description>
		<content:encoded><![CDATA[<p>You&#8217;re right that the government has been able to subpoena cell phone records for a while now (though the roll-out of 911 traceability is still largely only implemented in urban areas &#8211; according to my local police dept, they haven&#8217;t been able to implement it properly even in our suburban township).</p>
<p>The difference here, I think, is one of degree.  It will now far easier than it used to be.  My local township no longer has to develop any technical skills because Google has solved it for them.  That pushes the ability to be intrusive to many more agencies.  It also opens up the traceability to non-governmental agencies.  Big Brother is bad enough &#8211; now we have to worry about little brother (other businesses and even individuals), too.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Google Latitude and privacy erosion by Geoff</title>
		<link>http://rossander.org/infosec/2009/02/google-latitude-and-privacy-erosion/comment-page-1/#comment-19</link>
		<dc:creator>Geoff</dc:creator>
		<pubDate>Sat, 28 Feb 2009 15:50:51 +0000</pubDate>
		<guid isPermaLink="false">http://rossander.org/infosec/?p=393#comment-19</guid>
		<description><![CDATA[&quot;I am extremely uncomfortable with the thought that anyone could so easily monitor my movements.&quot;  I think you&#039;re being a little naive.

The government doesn&#039;t need Google&#039;s Latitude to do this, the cellphone providers do it for them already.

All cellphones have been &#039;trackable&#039; for a few years, ostensibly to allow 911 calls to be located. 

Big Brother is watching you, get used to it! Just remember that if it&#039;s the government doing it they&#039;ll lose the file or screw it up anyway. 

If you want to complain about something, save yourself for when you start getting targeted ads directing you to businesses according to your location, oh wait, Google and Yahoo already do that. :-)]]></description>
		<content:encoded><![CDATA[<p>&#8220;I am extremely uncomfortable with the thought that anyone could so easily monitor my movements.&#8221;  I think you&#8217;re being a little naive.</p>
<p>The government doesn&#8217;t need Google&#8217;s Latitude to do this, the cellphone providers do it for them already.</p>
<p>All cellphones have been &#8216;trackable&#8217; for a few years, ostensibly to allow 911 calls to be located. </p>
<p>Big Brother is watching you, get used to it! Just remember that if it&#8217;s the government doing it they&#8217;ll lose the file or screw it up anyway. </p>
<p>If you want to complain about something, save yourself for when you start getting targeted ads directing you to businesses according to your location, oh wait, Google and Yahoo already do that. <img src='http://rossander.org/infosec/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
</channel>
</rss>
