[Sigia-l] Tagged: Malicious Social Network

[Peter Van Dijck]

"(providing your own email address *and* the password to it 'voluntarily'?)"

Many users aren't that sophisticated to see this as a problem.

Peter

On 4/23/07, James Aylett <james.aylett at tangozebra.com> wrote:
> Ziya Oz wrote:
>
> >> in the signupfunnel they ask for your emailpassword. Then they get
> >> your contact list.
> >
> > I still don't get it (providing your own email address *and* the
> > password to it 'voluntarily'?)
>
> Most people don't understand privacy or security. Apparently [1] only 48% of UK web users consider protection of their personal information to be their responsibility. Fewer still will understand what is actually required to protect personal information online to the extent needed to make reasonable decisions about whether to provider this kind of information to a web site.
>
> None of this is made any easier by the information made available for people. For instance, the BBC's article on the subject [2] talks about viruses, direct attacks (requiring firewalls), spyware/malware, and operating system updates, but doesn't mention caution with divulging personal data at all (as far as I can see). Perhaps others do better - but at least some people in the UK will assume that if the BBC has written up an article about it,  there isn't anything else they need to know.
>
> And when mobile operators ask for personal data when they have no right or need for it [3], you have to wonder if this is solvable at all...
>
> [1] <http://news.bbc.co.uk/1/hi/technology/6472723.stm> -- but no indication of statistical error, although a sample of 2441 should be enough to estimate the population well providing there isn't too much bias
>
> [2] <http://news.bbc.co.uk/1/hi/technology/5414992.stm>
>
> [3] <http://paulannett.co.uk/a-stupid-way-to-combat-fraud>
>
> James
>
> --
> James Aylett
>  Chief Technical Officer, Tangozebra
>  t +44 20 7183 9334
>
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> ______________________________________________________________________
>
> ------------
> IA Summit 2008: "Experiencing Information"
> April 10-14, 2008, Miami, Florida
>
> -----
> When replying, please *trim your post* as much as possible.
> *Plain text, please; NO Attachments
>
> Searchable Archive at http://www.info-arch.org/lists/sigia-l/
> ________________________________________
> Sigia-l mailing list -- post to: Sigia-l at asis.org
> Changes to subscription: http://mail.asis.org/mailman/listinfo/sigia-l
>


-- 
blog: http://poorbuthappy.com/ease/
work: http://petervandijck.net
US: (+1) 201 467-5511
Belgium: (+32) 03/325 88 70
Skype id: peterkevandijck