Industry


Ads by TechWords

See your link here


Douglas Schweitzer's picture
Douglas Schweitzer

The Security Sector

I vote for mandatory encryption

I can't believe that it's happened again - yet another laptop has been stolen. That's bad enough, but (no surprise) the data on that laptop was unencrypted. This time thieves struck in Nashville's Davidson County. Worse than just the laptop getting stolen is the fact that it contained sensitive information of all of the county's 337,000 registered voters (including Social Security numbers). Who knows whose lap this laptop will fall into - there's a good chance the thieves have/had no idea what it contained. But if they do, I'm pretty sure they're not above selling it to someone who knows just how to take advantage of it.

I'm not so naive as to think everyone is aware that sensitive data should always be encrypted - but I sure do know that anyone who requires my data better be sure they're guarding it at every turn. Election commission offices are no exception. Trusted establishments and organizations have a duty to ensure that customer/client information remains unreachable by unauthorized persons.

Of course, now that they've experienced that hassle that comes with this type of theft, Nashville's Metropolitan Government and the Davidson County IT services department are teaming up with the election commission to protect residents from incidents like this in the future. Strange how these agencies always seem to find the funds to set up good (or at least better) practices in the wake of such an event, yet not beforehand. In the meantime, they've got to lay out an estimated one million dollars to offer affected voters identity theft protection, to boot.

What People Are Saying

My regrets about laptop!

My regrets about laptop!

SS #'s AreNOT Necessary to Vote!

Why are the Davidson County electoral idiots requiring SS #'s?

No citizen is required to have a SS # as a condition of voting. In live in a small, rural NC county and we didn't have to provide any stinkin' SS #'s when we registered to vote: My wife and I simply showed our passports to the county registrar and the only information they requested was our names(s) and address. Nothing else was asked for.

Here in NC our universities and health care companies no longer request nor require SS #'s - A special ID number is issued by both to try and reduce ID theft.

So instead of a SSN your

So instead of a SSN your local govt requires a Passport to vote? LOL, awesome. Will a canadian Passport work too? Every place I've lived simply requires proof of residence like a bill, lease, deed, etc with a mailing address and a state or federal picture ID like a drivers license.

Healthcare companies likely require SSN for their records, but they don't necessarily need to identify you by it. Pretty much anyone who might pay you money has to store your SSN for tax purposes.

You have my vote.

The Davidson County breach (http://breachblog.com/2007/12/29/dcec.aspx) was one of many (way too many) that could have been easily avoided through the effective application of encryption and secure key management.

We started to track breaches in September, 2007 as a hobby and since then we have reported on 51 lost or stolen laptops without encrytion. I can only imagine how many we missed or don't know about. 10, 100, 1000 or more?