Benlog

security, privacy, transparency.

Archive for August, 2009

What about the less obvious errors?

Posted: Thursday, August 27th, 2009 @ 12:45 am in genomic, health, medical | No Comments »

The New Scientist points out a case of genotyping error by one of the consumer genomics companies, where a software bug caused a genotype to appear non-human. The article attempts to be reassuring: Before other deCODEme customers get too irate about errors in data for which they have paid almost $1000, the bug affects only [...]

Real-world usage sometimes includes things you don’t like

Posted: Tuesday, August 25th, 2009 @ 4:09 pm in web | 11 Comments »

When people criticize RDFa without much experience really working with it, I tend to ignore the comments, because they’re usually out to prove some subjective point about what they think the Web should be like (“prefixes are ugly!” “Yahoo’s RDFa support was broken once so clearly RDFa sucks!”…). But when Jeni writes about RDFa, given [...]

Schneier on self-enforcing protocols and voting

Posted: Tuesday, August 18th, 2009 @ 5:20 pm in crypto, voting | No Comments »

Bruce Schneier pens another great article on how certain protocols between people who do not trust one another can be set up to prevent cheating without third-party oversight. Of course, the gem of the article pertains to voting: Modern voting systems are rife with the potential for cheating, but an open show of hands in [...]

Quick Thoughts from EVT Day #2

Posted: Wednesday, August 12th, 2009 @ 10:02 pm in security, voting | No Comments »

I gave an invited talk on crypto voting. Ran out of time, as usual. I need to find a way to describe this stuff more efficiently. Later, I also presented MarkPledge2, joint work with Andy Neff. Olivier de Marneffe presented the UCL/Helios implementation. So much material to present there, he did a fantastic job of [...]

EVT/WOTE 2009, Day 1, Afternoon

Posted: Monday, August 10th, 2009 @ 7:08 pm in security, voting | No Comments »

I had to miss the first afternoon session of EVT/WOTE to attend WOOT (Workshop on Offensive Technologies) where Adam was presenting a paper Collin and I co-authored on hijacking bookmarklets (I wrote about this work a few months ago). Sadly, I missed what I hear were two great talks. Oh well, hopefully they’ll be on [...]

EVT/WOTE 2009, Day 1, Morning

Posted: Monday, August 10th, 2009 @ 12:34 pm in security, voting | No Comments »

I’m at the Electronic Voting Technology / Workshop on Trustworthy Elections get-together (in Montreal). A few thoughts about the day and talks. Keynote Larry Norden from the Brennan Center is proposing a few ideas about what the voting community should focus on. Voting machine security, including forensics. Thinks statistical analyses to detect fraud is going [...]

HealthEngage leaking email addresses?

Posted: Monday, August 3rd, 2009 @ 11:50 am in medical, privacy | 4 Comments »

For more than 10 years now, I’ve used custom email addresses when I log in to a web site I don’t fully trust, e.g. ben-SITENAME at adida.net. Until recently, the only time I’ve actually been able to trace emails to their source is when I saw how Democrats reused some of their mailing lists during [...]

Creative Commons and the Associated Press

Posted: Saturday, August 1st, 2009 @ 3:34 pm in uncategorized | No Comments »

Some thoughts about the recent Associated Press / Creative Commons story: When Creative Commons launched in 2002, we were often asked “is Creative Commons a form of DRM?” Our answer: no, we help publishers express their rights, but we don’t dabble in enforcement, because enforcement technologies are unable to respect important, complex, and often subjective [...]