Category Archives: Security

UK postcodes under scrutiny

The Guardian has an interesting story about postcodes in the UK:

Nearly everyone has a postal address and most householders assume they “own” it. Unlike in France, say, no law stops us removing our number and calling our home what we like. But as usual with cases highlighted by Guardian Technology’s Free our Data campaign, the truth is not so simple.

During the past seven years, disagreement between different state bodies and state-owned companies over who owns intellectual property has blocked the creation of a definitive national list of addresses. As a result, says geographer and local councillor Robert Barr, emergency responses get sent to the wrong place, council tax goes uncollected and government plans are put in jeopardy.

And apparently the postal codes are, well, encoded:

the postcode file has big gaps. According to Barr, it holds only 60% of buildings in England – the Royal Mail is not interested in structures such as churches, which do not receive mail. Because of the purpose for which they were set up, postcodes may bear little relevance to reality – the initial component, the “post town”, relates to the nearest sorting office rather than the nearest town.

Vishing

It’s about time someone came up with a name for phishing on voice technology…but seriously, here’s the downside to making international automated calling cheaper and easier:

Secure Computing has found a more sophisticated scam that avoids e-mail altogether. Instead the criminals behind this scam have programmed computers to dial a long list of phone numbers and play a recorded message to anyone that answers.

The recorded message warns that a person’s credit card has been used fraudulently and asks them to enter their card number. Significantly, those responding are also asked for the security number found on the rear of the card.

Not to be confused with vichyssoise, the plot of attacks on credit card numbers seems to be getting thicker by the minute.

Identity loopholes

The Boston Globe highlighted a DHS report that says loopholes are being exploited in the US special visa program:

The probe found numerous instances in which groups in the United States falsely claimed to be churches, and visa applicants lied about their religious vocations in order to get into the country . More than a third of the visas examined by investigators were based on fraudulent information.

Whoa. That’s a high-rate of failure but it reminds me of the visas given to Russians to escape religious persecution in the 1980s. I actually met a woman many years ago who confided she practiced Judaism because her family claimed it as their religion in order to emmigrate to the US. They continued practicing after they lived in America out of fear of being deported. Ironic, considering that the US enforced strict quotas that blocked Jews immigrating to the US during the pogroms. The Center for Immigration Studies points out how much the immigration policy has changed:

Until the Refugee Act of 1980, the United States’ definition of a refugee mostly involved persons fleeing Communist regimes. The definition since 1980 stipulated that a refugee is any person who is outside his/her country “and who is unable or unwilling to return … because of persecution, or a well-founded fear of persecution, on account of race, religion, nationality, membership of a particular social group, or political opinion.” Therefore, after 1980, Soviet emigres had to prove to an immigration officer in Rome that they had a well founded fear of persecution. Most managed to do so. Until the late 1980s, United States policy accepted all Soviet Jews as refugees.

Identity is definitely an odd thing since you never know who will define it for you and for what. Hmmm, that almost sounds like something Heidegger might say. Scary. Does the need for a democratic state to close loopholes in identity management outweigh a person’s right to control their destiny?

Homeland Security auditors who reviewed an application for a 33-year-old Pakistani man, for example, could not locate the alleged religious group listed on the petition as his sponsor, and when investigators went to the group’s address they found an apartment complex.

Perhaps we should ask whether a religious group these days would want to be discovered by federal investigators? It’s like that old Far Side cartoon where men dressed in animal pelts and carrying TVs run away from the window to their hut yelling “Quick! The Anthropologists are coming!” Also, given the history of religion in the early US (not to mention the true definition of the word “church”), is it so unusual for a modest home to be a place of practice? Is a mega-stadium of worshippers a more legitimate identity to carry than a small family gathering?

Two Arab countries

Did you notice the two exceptions to the recent announcement from the Israeli National Security Council’s Counter-Terrorism Division?

Refrain from visiting or staying in all Arab countries with the exception of Mauritania and the Comoro Islands.

I find it somewhat surprising that the term Arab instead of Islamic or Muslim is used in the warning. The Mauritanians recognized the State of Israel’s right to exist, but has the Comoros? Wonder if this means that you are more likely to find Israelis vactioning there than other non-Arab vacation spots, or it’s more symbolic and diplomatic in nature?

And how about this for advice:

Do not go to unplanned meetings alone.

Well, of course not. What’s the point of a meeting if it isn’t planned and you’re the only person who shows up? Is that like the sound of one hand clapping? A tree falling in the woods…

Just kidding. :)