Tag: security

[ECP] NetHappeinings 3/12/19 #K12 #CPO

#NetHappenings @Nethappenings

3/12/19 #Web30 The World Wide Web turns 30 today!

Do you remember what life was like 30 years ago, pre-www,  when cyber-utopians heralded the new era of human collaboration and communication to  the underworld of social media posts called  ‘e-bile’?

Who Invented the Internet?
Who Controls The Internet?
Seven people control the system at the heart of the web: the domain name system, or DNS.

NetHappenings Where Internet Pioneer Gleason Sackmann got things started.

► @NetHappenings 

► K12PlayGround TM 
1st and oldest online K12 School directory in the World ©1993 History:
Be a part of Internet History!
Find, Edit, and Submit your K12 school information.
Join a #STEAM Project link to video project  find with #hashtags
@K12PlayGround

► EduTech of ND @EduTechND History: Where Internet Pioneer Gleason Sackmann got things started.
EduTech provides information technology services and education technology professional development to K-12 educators in ND.

https://twitter.com/edutechnd

Girls Go CyberStart. The 2019 Girls Go CyberStart program is a series of online challenges that allow students to act as cyber protection agents to solve cybersecurity-related puzzles and explore related topics such as cryptography and digital forensics.
+++++++++++++++++++++++++++++++++++++++

► NetBSD is a free, fast, secure, and highly portable Unix-like Open Source operating system. It is available for a wide range of platforms, from large-scale servers and powerful desktop systems to handheld and embedded devices.

Marcus J. Ranum, #Computer and #NetworkSecurity Researcher is now discussing our assumptions about #ComputerSecurity at #govsatcom 2019 #CyberSecurity #Luxembourg

2011 “The Internet will remain as insecure as it is possible to be and still function. ” -Marcus Ranum

► Amnesty Demands Israel Revoke NSO’s License After Haaretz Report on Firm’s Negotiations With Saudis Israeli Firm’s Spyware Was Used to Track Khashoggi

► Coinbase’s Newest Team Members Helped Authoritarians Worldwide Monitor Journalists and Dissidents H — king team
https://foreignpolicy.com/2016/04/26/fear-this-man-cyber-warfare-hacking-team-david-vincenzetti/

Never underestimate power, never underestimate fame. And our nation is run on loyalty, whether it be in Congress or your own little home, we’re positively tribal. Being rich and famous does not entitle you to break society’s rules. From time immemorial the wealthy have paid for silence, look at banks and offshore tax accounts.

+++++++++++++++++++++++++++++++++++++++

How much less California spends on each public school student than other states.
$25.4k per student in NYC, $16.7k in PA and $10.4k here in California.
How do young families keep moving  to CA?

Rankings of the States 2017 and Estimates of School Statistics 2018

California is 41st in the nation in per pupil K-12 spending, 

California is “No. 1 in per prisoner” spending.

Mostly True: You are shocked because the stats are bunk. Look at how much California teachers make (2nd highest in US) and then ask how overall spending could rank 41st? Answer: the 41st stat, like the $10.4k per student stat, has been helpfully “adjusted” to eliminate salary differences.

FALL ENROLLMENT 49,800,148 children
Average Daily Attendance 46,457,525 children

2017 High School Graduates 3,238,440 page 18

AVERAGE SALARY OF INSTRUCTIONAL STAFF 60,206 page 25
AVERAGE SALARY OF TEACHERS  58,479 page 26

How Much Federal Money follows the child out of the public school system into for profit charter follows no rules companies.

PUBLIC SCHOOL REVENUE PER STUDENT IN FALL ENROLLMENT page 29
PERCENTAGE OF COMBINED STATE & LOCAL REVENUE 49.8 page 34

The exceptions start on page 83
example: Enrollment figures only include students attending public schools and do not include those students attending private schools at public expense.

WHAT ABOUT ALL THE MONEY FROM THE LOTTERY?

Is The Lottery Shortchanging Schools?

Powerball Windfall? Schools Don’t Always Benefit From Lottery Sales

“Revenues generated from lottery have very little or no impact on overall education spending,” said Lucy Dadayan, a senior policy analyst at the Nelson A. Rockefeller Institute of Government, an Albany, New York, think tank. The reason: State legislatures often use the millions of dollars that come in from the lottery as an opportunity to reallocate other funds intended for schools from the state’s general revenue, making the overall education budget barely higher than it was before lottery money was added. “The state legislators added the funding in to the budget, and then they take it out,” said John O’Neil, communications director for the Virginia Education Association, an organization of more than 50,000 teachers and school professionals.

►Public school districts large systems that serve close to or more than 100,000 students have No Chief Privacy Officers.

Who is senior-level official who is responsible for the organization’s privacy policies and data governance in your school district?

Big Education Ape: Oakland, CA: Billionaires Will Convene to Discuss New Plans for Privatizing Public Schools | Diane Ravitch’s blog

Stats already show that Charter Schools do not graduate their students from high school.

Billionaires want all the K12 Department of Education money meant for the common good, the commons, our common wealth for their own pocket. These billionaires want the tax payers money for their own private  gain just to enrich themselves.

This has NOTHING to do with the quality of K12 Education.

The big business of selling student information and they do not protect their rights to privacy.

This is the art of the Steal.

https://www.newschools.org/about-us/team/donors/

Buying and selling the Data!

Anonymous at the top of the list
Chan Zuckerberg Foundation
Charles & Helen Schwab Foundation
The Walton Family Foundation
W.K. Kellogg Foundation
Perkins Hunter Foundation (Perkins family wealth started by opium drug running pirates)
The College Board
Michael & Susan Dell Foundation
John & Ann Doerr
Omidyar Network

► THERE ARE NO CHIEF PRIVACY OFFICERS IN K-12 EDUCATION

Children’s Rights K12 School Rights vs. Students Online privacy rights.

#StudentPrivacyRights

#ChiefPrivacyOfficer #CPO #K12CPO

STUDENT RIGHTS TO PRIVACY AND K12 SCHOOL RIGHTS VS. STUDENTS ONLINE PRIVACY RIGHTS.
 and

DO YOU KNOW WHAT YOUR STATE IS COLLECTING ABOUT YOUR CHILD?There isn’t a single school district with a K-12 CPO. In fact, it is still extremely rare for districts to hire even one full-time employee dedicated to privacy.

Student Privacy Bill Protection : No Parental Consent Needed for Data Mining

Anyone who tells you they don’t need privacy because they “have nothing to hide” is a sheep that will enable a total surveillance state. Just don’t do it. Privacies protect our basic human rights.

► This story on IBM hoovering up millions of Flickr photos to power its facial recognition machine learning is fascinating and a nightmare

►Facebook Is Giving Advertisers Access to Your Shadow Contact Information

► : “Screen-grabbed from Facebook: a teacher had her students turn their phone volume up and create a collective record

Alex Stamos on Twitter: “This explains how Facebook plans to monetize a unified, 2 billion user end-to-end encrypted messaging service. I can’t think of a tech project with a more important privacy/safety balancing act than this one. I hope my friends working on it start public discussions on that.

Bob Lefsetz Zuckerberg’s Blog Post
A Privacy-Focused Vision for Social Networking
This isn’t about privacy, this is about MONOPOLY!

 

+++++++++++++++++++++++++++++++++++++++

► COLLEGE ADMISSIONS IS BRIBED

A few months ago I was interviewing a college admissions coach who told me the following about how big of a donation it takes to get a child into an Ivy no questions asked: “There’s a certain magic number. It’s way higher than people think: $10 million.”

“what it takes to break into the 1% in various countries

$25 million nationwide college admissions cheating scam

“This case is about the widening corruption of elite college admissions through the steady application of wealth combined with fraud,” Andrew Lelling, the U.S. attorney for the District of Massachusetts, said at a news conference. According to Lelling, the ringleader of the scam is William Singer, owner of a college counseling service called Key Worldwide Foundation, who accepted bribes totaling $25 million from parents between 2011 and 2018 “to guarantee their children’s admission to elite schools.”
“The parents are a catalog of wealth and privilege,” Lelling said. “They include, for example, the CEOs of private and public companies, successful securities and real estate investors, two well-known actresses, a famous fashion designer and the co-chairman of a global law firm.”
Also named as defendants in the indictment are Robert Zangrillo, founder and CEO of the private investment firm Dragon Global; Bill Glashan, a businessman and international private equity investor; and Gordon Caplan, a New York attorney.

► Former PIMCO CEO Doug Hodge Named In Fraud Complaint Alongside Aunt Becky From “Full House”
Imagine surviving years of working with Bill Gross only to be taken down by bribing your kid into college. Um, Doug? You do have to talk in code. You’re doing a fraud.
JFC, you’d think a guy who spent that much time with Bill Gross would know how to bullshit properly.

@shamuskhan When I did my research on elite schooling, an admin officer/development person told me, “The price of admission to UPenn is $5M”; meaning that a gift of that amount would pretty much get your kid in. Other Ivies were “a bit more.” There’s been a pathway through development…
► ETHICS Labor Secretary’s @POTUS Tweets Raise Ethics Fears in Department
The question isn’t whether a Trump Cabinet member and public affairs workers running an agency Twitter account can “at” the president; it’s whether they can use social media to declare that a president seeking another term in office is responsible for new jobs and wage growth using figures the agency is tasked with compiling.
********************************************************
Agence-France Presse ( @AFP ) is 51% owned by the French government, where little #Manu is channelling #Napoleon on a crusade to ‘control’ a
In August, I showed that was mixing its lobbying activity for reform and particularly with its news reporting, which should be independent. Making the video for  @Europarl_EN is a blatant conflict of interest.
How a Bicoin Evangelist Made Himself Vanish, in 15 (Not So Easy) Steps
#10 Buy a decoy house to fool the D.M.V.
2 Billion Unencrypted Records Leaked In Marketing Data Breach
What Happened And What To Do Next
EXCERPT:
I woke up this morning to discover, yet again, that I was one of a stupidly large number of people whose personal data had been leaked in the latest mega breach. Troy Hunt’s ‘have i been pwned? https://haveibeenpwned.com/‘ service informed me that 763,117,241 people have had their records leaked by Verifications IO: including verified emails, phone numbers, addresses, dates of birth, Facebook, LinkedIn and Instagram account details, credit scoring and even mortgage data such as amount owing and interest rates being charged. Which wasn’t the best news to receive first thing on a Sunday morning. But then things got even worse, a lot worse. SC Media UK reports <https://www.scmagazineuk.com/2-billion-records-leaked-breach-triple-size-earlier-reports/article/1578429> that Andrew Martin, CEO & founder of cybersecurity company DynaRisk, has revealed the true number of leaked records is much higher. How much higher? How does a total of 2,069,145,043 unencrypted records grab you?
So, what actually happened?

► 80 million records Data Breach Bleeping Computer <https://www.bleepingcomputer.com/news/security/insecure-database-leads-to-over-800-million-records-data-breach/> an unprotected MongoDB database was discovered by security researcher Bob Diachenko. Having cross-referenced the data, sitting there in plain text, with the have i been pwned site, Diachenko was able to conclude this was fresh to the market new information and not just a dump of previously breached data as has been seen with the recent Collection 1 leak <https://www.forbes.com/sites/daveywinder/2019/02/01/2-2-billion-accounts-found-in-biggest-ever-data-dump-how-to-check-if-youre-a-victim/>. After doing some more investigative work, Diachenko was able to track the database back to the Verifications IO enterprise email validation service. This company validates bulk email lists for companies wanting to remove inactive addresses from newsletter mailouts. Diachenko reported, working alongside researcher Vinny Troia, that a total of 808,539,939 records had been leaked. The ‘mailEmailDatabase’ contained three sections: Emailrecords, emailWithPhone and businessLeads containing that data. However, Dynarisk CEO, Andrew Martin, also analyzed the data and came to the conclusion that on the one server exposed to the web there were actually four databases not just the one. He told The Register <https://www.theregister.co.uk/2019/03/08/verificationio_database_hole/>”Our analysis was conducted over all four databases and extracted over two billion email addresses. The additional three databases were hosted on the same server, which is no longer accessible.”

What data was leaked?

The security researcher who made the discovery, Bob Diachenko <https://securitydiscovery.com/800-million-emails-leaked-online-by-email-verification-service/>, says that “although not all records contained the detailed profile information about the email owner, a large amount of records were very detailed.” That detail included commonplace breach data such as email addresses and phone numbers, but went far beyond the basics as well. Information such as dates of birth, mortgages amounts and interest rates and social media accounts related to the emails in question. But it doesn’t stop there, you can also throw in basic credit scoring data, company names and revenue figures as well.

Should you be worried?
Yes, of course you should. This was, after all, a massive leak of the kind of personal information that would be a goldmine for the phishers and spammers of this world. However, that concern can be diluted by a number of factors. Not least there’s the small matter that nobody has found any compelling evidence that the data has actually been used for any criminal purpose as of yet. Although the databases were accessible for some time, as soon as the problem was disclosed to Verifications IO the service was taken offline and remains so. Which means that bad guys alerted by this news won’t be able to exploit it. What’s just as important as what was in the breach is what wasn’t. So, there were no social security numbers, no credit card numbers, no passwords. And, importantly, this was a leak not a hack: white hat researchers found the data was accessible rather than black hats looking to exploit it.
Can you mitigate your risk?…

► And they call crypto “magic money”
@ecb The European Central Bank is the central bank for Europe’s single currency, the euro. Its main task is to maintain the euro’s purchasing power.
Praet: As a central bank, we can create money to buy assets.
Kinda like ‘counterfeiting’ eh?!
Central bank monetary intervention of this distorted magnitude is the equivalent of mankind attempting to manipulate the weather….it likely has catastrophic consequences in the end.
Come on people, just let them do god’s work.  Goldman Sachs’ Blankfein on Banking: ‘Doing God’s Work’
HSBC warned of BOV hackers last year
Dozens of companies leaked sensitive data thanks to misconfigured Box accounts
Hospitals have ‘holy grail of personal data, ‘ yet their spending lags on 
digital security
Car alarms with security flaws put 3 million vehicles at risk of hijack
Drop Huawei or See Intelligence Sharing Pared Back, U.S. Tells Germany
Defense tech founded by Trump’s most prominent Silicon Valley supporters wins secretive military AI contract
Dreamers and Dropouts: Stories From Stanford, Cradle of Unicorns: The Good and the Bad of Stanford’s Massively Successful Startup Scene
Yes: a flying, jet-powered motorcycle As spec’ed out, the commercial speeder will weigh 231 lbs and be powered by four jet engines fueled with kerosene, diesel or Jet-A fuel. An ultralight version of the speeder will fly 60mph and won’t require a pilot’s license; alternatively, an experimental version of the craft will be able to fly over 150mph, but will require a formal license to fly. That aircraft should also have 30 minutes of flight time with 1200lbs of max thrust and a flight ceiling of 15,000 feet, though JetPack fully admits that most of its customers won’t need that…
Cyberization means it’s not your daddy’s war anymore: Kurdish rebels are exploiting an app to befriend and get information from Turkish soldiers. Reminiscent of the dating apps used by Hamas recently to spy on Israeli soldiers.

 NYC Media Lab newletter – https://nycmedialab.org/data/
How AI Will Rewire Us
Nicholas A. Christakis, Sterling Professor of Social and Natural Science at Yale and author of Blueprint: The Evolutionary Origins of a Good Society, believes AI is the only general purpose technology (GPT) that will fundamentally change our relations towards each other. If you look at any other GPT – the steam engine, electricity, the internet – these have changed everything around us except our “love, friendship, cooperation, and teaching” – what Christakis calls our evolutionary social suite. In this Atlantic piece, he explores how AI will be the first GPT to affect our social suite. Christakis noticed some peculiar things at his Yale lab. For one, when you include a cheerful bot who admits to occasional mistakes in a group assignment, the humans in the group work better together, vs. groups with bland robots. This holds true in larger experiments, with thousands of participants: “groups with mistake-prone bots consistently outperformed groups containing bots that did not make mistakes”. ~ Joly MacFie

John Gilmore  **Copyright seizure approaching** SpaCCS 2019 CFP (10+SIs): The 12th International Conference on Security, Privacy and Anonymity in Computation, Communication and Storage

Don’t submit your paper to this conference!  When researchers refuse to
supply their papers to the publishers who extort monopoly fees from
academic librarians, they have found the easiest way to tear down these
monopolies.

If you submit any paper to this conference, you will be forced
to assign your entire copyright in the paper to “Springer Nature
Switzerland AG”, now and forever, for their profit and your loss
and the public’s loss (see below).

Jun Feng is a program chair.  He should know to warn authors that
the whole conference is a scam on academic authors, which steals their
copyrights in order to extract large fees from academic libraries.  But
perhaps he did not mention this because he’s helping to run the scam.

I recommend publishing your work in Open Access conferences and journals in which (1) you are free to retain your copyright and control your
rights, and (2) the public is free to read your paper without paying
exhorbitant fees to a walled-garden publisher that prevents public
access to your scholarship.  See
https://en.wikipedia.org/wiki/Open_access . 

For example, the USENIX
Association runs many respected conferences and does Open Access
publication of their proceedings (https://www.usenix.org/).  The Public
Library of Science journals are also Open Access
(https://www.plos.org/).  Open access publishing increases your impact,
because all potential readers can actually read your paper.  Many
funders and academic institutions *require* that your work be published
with open access, because they have seen how the academic publishing
monopoly has damaged academic libraries (and science in general).

For general info about the highly profitable scams around academic
publishing, see:
https://en.wikipedia.org/wiki/Academic_publishing#Publishers_and_business_aspects

Jun Feng <ju********@***il.com> wrote:

Papers must be clearly presented in English, must not exceed 14 pages (or
up to 20 pages with the pages over length charge) in Springer LNCS format (
https://www.springer.com/gp/computer-science/lncs/conference-proceedings-guidelines),

Zuckerberg reportedly has a secret escape chute beneath his conference room

Mark Zuckerberg reportedly has a secret escape chute beneath his conference room

#DeleteFacebook

Facebook CEO Mark Zuckerberg and COO Sheryl Sandberg have 24/7 security details

Facebook’s board of directors in July 2018 approved a $10 million security allowance for Zuckerberg and his family for 2018.
Facebook’s executive-protection team consists of more than 70 people. Led by former US Secret Service special agent Jill Leavens Jones, the team provides Zuckerberg and Chief Operating Officer Sheryl Sandberg with a 24/7 security detail.
Zuckerberg works at a desk in an open space at Facebook although the area below his desk – an underground parking lot – is sectioned off due to fears of car bombs. There are even rumors that a conference room, one with large bullet-proof glass walls, features a secret “panic chute” that can be used to evacuate the executive in the event of an emergency.
https://www.businessinsider.com/facebook-global-security-mark-zuckerberg-executive-protection-2019-3

Individual 1 Trump Organization, Trump Tower Moscow Project

Individual 1 Trump Organization and his Family involved with the Trump Tower Moscow Project

Trump Knew and directed the negotiation during the presidential campaign.

The American population needs to know what happened.

Laurence Tribe: President Donald Trump Can Be Indicted For Federal Crimes

The get out of jail free card.

If no indictment then Trump can be pardoned by Pence and get to keep all the profits!!!

Harvard’s Laurence Tribe: Impeach Donald Trump Now
Constitutional law professor Laurence Tribe explains why it is critically important to put the impeachment process in motion now, before it is too late.

President Donald Trump, Ivanka Deny Special Treatment For Jared Kushner

White House announces Kushner met with Saudi crown prince as Cohen testifies

FEBRUARY 27, 2019
Donald Trump’s senior adviser Jared Kushner met with Saudi Arabia’s crown prince Tuesday in their first face-to-face encounter since the October 2018 murder of journalist Jamal Khashoggi. Crown Prince Mohammed bin Salman, who sources have told CNN the CIA assesses with high confidence ordered Khashoggi’s murder, met Kushner along with his father King Salman
https://www.nytimes.com/2019/02/27/world/middleeast/kushner-Mohammed-bin-Salman.html

House panel demands Kushner clearance details from White House
A Democratic-led congressional panel on Friday demanded that the White House comply with requests for documents and witnesses for a probe into alleged security clearance abuses involving President Donald Trump’s son-in-law Jared Kushner and others.
https://www.reuters.com/article/us-usa-trump-kushner/house-panel-demands-kushner-clearance-details-from-white-house-idUSKCN1QI5CU

I’ll take venal hypocrites for $1,000 please Alex.

Missouri Rep Demands Public ID of Anyone Suing Over Separation of Church and State

Missouri Rep Demands Public ID of Anyone Suing Over Separation of Church and State

Missouri Representative Hardy Billington (R-Poplar Bluff) is on a mission from God. Unfortunately, it’s not the type of mission that requires driving to Chicago at night while wearing sunglasses, but rather one to make the separation of church and state just a bit less separate. In a House committee hearing Tuesday, Billington presented a bill that would force plaintiffs advocating for the separation of church and state — those suing to stop the public display of crosses on government property, or seeking to block prayer in public schools — to disclose their real names. No more Jane Doe or Jane Roe. In these cases, and only these cases, Billington would require the legal system to out the person suing.

The foundation has been busy in Missouri. In 2016, its complaint and threat of a lawsuit forced the Tipton school district to prohibit staff from leading prayers in school. In 2017, the nonprofit targeted a 60-foot long cross in a public park in Neosho — the city opted to sell a chunk of the park to a private entity rather than remove the enormous religious symbol.