data security

Enterprises must ensure that they can trust their IT workers with sensitive data, but is secretly reading and analyzing employee emails going too far?

An apparently increasing number of employers and university administrators believe they have the right to demand usernames and passwords to Facebook and other social networks to check up on you. Facebook Peeping is so obviously invasive and abusive it's shocking that even non-geeks don't immediately raise alarms about it.

Once seen as, if anyone could be, the one honest, clean rider in cycling, Floyd Landis had theTour de France taken away, got banned, lost friends and got convicted of hack at French lab. Long trip for a Mennonite kid.

If banks can put dye packs and broadcasting GPS units that signal cops where stolen moneybags are being taken, why can't you do that for data? Honeypot technology shows you how, but existing honeytokens have to be better at sending calls for help.

Citigroup has been hacked twice in recent weeks. One was an old-fashioned assault; the other was the hot new threat: an insider who walked out the door with data hackers could never get themselves. Oh, and it also lost $20M to embezzlers, one who went undetected for 8 years.

NSA's chief lawyer thinks spy agencies can track U.S. citizens without permission, but not all the wrinkles are worked out. They know where to find us when they figure it out, though.

Breached despite good security, Citigroup hack drives home how great the need has become for consistent requirements on how to store personal data securely.

Bad enough to put personal records on a public server unencrypted, but then to leave them there for a year?