On Wednesday 03 September 2014 03:11 PM, Vickram Crishna wrote:
> Regardless of whether men are boorishly ignorant of a potential feminist
> angle to nude photography, this particular case seems to be clearly of
> personal photographs being privately shared.
> 
> It seems to me that if damages and compensation are a fallout, the sites
> (Instagram was mentioned, I think) ought to be liable unless some
> personal malfeasance (i.e. a disgruntled employee) is at play.

It was iCloud and it is hilarious or rather fraudulent when they portray
it as a password breaking and suggest setting two factor authentication
as a solution.

It is clearly a server breaking as deleted photos were shared, if it was
just breaking passwords then those photos won't be available.

It is sad when our newspapers blindly print the same advice (I think it
was economic times which suggested setting two factor authentication as
a solution). They clearly fail to understand the real issues, ie, the
data is being stored on a different entity's server and there are many
ways to access that data from the server than just entering the password.

I remember a story that KK told me of someone taking his door to market.
People asked him if he is going to sell the door, he said he just want
to fix the lock. So they asked him what about his home, what if thieves
enter his home while he is away. He confidently says he has the door
with him!

People think setting strong passwords and two factor authentication can
secure their data when there is clearly many open doors in the home.

Another story I remember is about Gabbar saying,

"Gabbar ke thap se tume sirf ek hi insan bacha sakta he, khud Gabbar."

Which translates to "Only one person can save you from Gabbar, Gabbar
himself".

In the same way, Only Zuckerberg can protect you from Zuckerberg. Your
data is safe until it reaches us, no one can break your data before it
reaches me. But once your data reaches me, its all fair game how I use
it or misuse it.

> This should be a red alert for anyone planning to collect personal data
> or links to personal data from the public. It should also be a golden
> opportunity for mapping a data-securing process as a blueprint, one part
> for service vendors, the other for users.
> 
> We should discuss how to organise tech-centric workshops in Mumbai and
> other places, leading off from the initiative Praveen described.o Off 
> Specifics can be discussed offlist, naturally. I also have in mind a
> community venue in Bandra, where a nice talk can be organized on a
> weekend, for users.

Lets plan this meetup for next weekend. 13 or 14 September. We can
discuss privacy as a concept and technologies available to users to
ensure privacy like OTR. Also we can have demos of apps like text
secure, chat secure and using gpg for emails.

Please confirm the venue so we can spread the word widely.

We can plan the details over here
http://www.meetup.com/Diaspora/Mumbai-IN/1205392/

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
network mailing list
[email protected]
http://lists.fosscom.in/listinfo.cgi/network-fosscom.in

Reply via email to