Snoop-happy HP promotes privacy award
26595
You'd have pretexted it HP - which faces US federal and state investigations for spying on board members and journalists - is co-sponsoring an award for "privacy innovation".â¦
79867
Networld World's Scott Bradner has gotten a good look at the Personal Data Privacy and Security Act Of 2007. He's much, much less than impressed.
537984
The real privacy issues are being raised by Google, Yahoo, AOL and others, which are tracking users in order to show them advertising targeted to their interests.
521598
A satirical look at the pretexting scandal at HP.
444987
People who use public or workplace computers for e-mail, instant messaging and Web searching have a new privacy risk to worry about: Google&#39;s free tool that indexes a PC&#39;s contents for quickly locating data.
408836
BRUSSELS, Belgium -- IP addresses, strings of numbers that identify computers on the Internet, should generally be regarded as personal information, the head of the European Union's group of data privacy regulators said Monday.
401560
A new feature called AskEraser will let users perform anonymous searches.
24218
A tool that could help in the battle against spam and phishing attacks receives industry approval.
447313
Company says it will award a free Integrity server to the owner of the oldest HP-UX installation in the country.
657815
(InfoWorld) - In one telling moment during the recent Congressional hearings onÂ the Hewlett-Packard Co. board scandal, ousted chairman Patricia Dunn offered the "everybody does it" defense. Asked by one legislator about HPâs hiring private investigators who obtained phone records under false pretenses, a practice called pretexting, to identify whoâd leaked confidential information, Dunn replied, "I believe these [pretexting] methods may be quite common at companies around the country." If so, that is chilling to business ethicist Kirk Hanson. "As an ethicist Iâm horrified that HPâs managers relied on the assertion that it was borderline, but legal, and never asked whether it was ethical," says Hanson, executive director of the Markkula Center for Applied Ethics at Santa Clara University, in Santa Clara, California. If HP adopted what Hanson called "black ops" as standard investigative practices, he wonders how many other companies have done it. HP, some of its employees and companies it hired to investigate boardroom leaks to news media still face potential civil and criminal liability for their actions. Other companies find themselves in a dilemma over how to control information within the law. Companies may have a moral or legal responsibility to respect peopleâs privacy, but they also have a legal and fiduciary responsibility to protect confidential business information. And under the federalÂ Sarbanes-Oxley ActÂ in effect the last four years, they have obligations to investigate certain leaks, Hanson says. Companies have a right to investigate their own employees if theyâre suspected of leaking information. Employees should presume no right to privacy in their use of company computers, e-mail programs or telephones. One commonly used tactic to probe security breaches doesnât even involve electronic snooping. Companies exclusively give suspected leakers seemingly important but relatively benign information. If it turns up in the media, the company has identified the leaker. But Hanson sees a bright line separating how a company can investigate its own employees and how it can investigate outsiders. The HP reaction to leaks to reporters contrasts with the recent practice of Apple Computer Inc. when proprietary information got out. Although Apple is known for its devotion to secrecy, it went to court rather than to private eyes when confidential information leaked in 2004. Apple, of Cupertino, California, sued in state court to force two Web sites to reveal sources for stories they posted about a possible new Apple product. A state appellate court ruled May 26 that the writers on those Web sites enjoy the same First Amendment rights as mainstream journalists and, thus, were protected by Californiaâs shield law from having to reveal their sources. Apple dropped the case. It did not reply to a request for comment on this story. The Sarbanes-Oxley Act requires companies to develop a whistle-blowing reporting system so employees can raise issues about improper behavior within the company, said Hanson. That has prompted companies to develop an investigative capability in the event improper or illegal activity is alleged. "So (under SOX), companies have developed much enhanced investigative capability," he said. Companies also have to keep confidential information safe because disclosure could be a criminal act or a breach of fiduciary responsibility, said Rob Enderle, senior analyst at Enderle Group, a technology market research firm. If word leaks that a board is contemplating an acquisition, for instance, the company or people in it could be prosecuted for insider trading if people used that knowledge to make stock trades. Given the potential liabilities, corporate investigations of leaks are "common," said Enderle. "The stuff with the pretexting goes to the extreme, but looking at company phone records or e-mails, that is very common. Hiring an outside contractor is also common." In fact, leak investigations enjoy broad support among corporate directors. In a September telephone survey of 226 board members at publicly traded companies in the U.S., 73 percent said a company's chairman should be empowered to use any legally available means to identify a board-level leaker, according to Ponemon Institute LLC. About 71 percent of the respondents said it would be okay for a board chairman to review the e-mail messages of other members, in addition to other types of confidential data stored on company computers. Fifty percent said that reviewing telephone records of individuals obtained via pretexting is proper as long as that approach hasn't been outlawed. But HPâs tactics of tailing reporters, attempting to install a tracer on a reporterâs e-mail program, pretexting numbers of people outside the company and even considering planting spies in newsrooms as janitors or clerical workers is "bizarre" to Rick Belluzzo. "The reaction by HP was totally out of proportion with the situation," said Belluzzo, chairman and CEO of Quantum Corp., a network storage equipment maker. His rÃ©sumÃ© includes president of Microsoft Corp. and a 23-year stint at HP, where he rose to the position of executive vice president of its computer division. While he understands the importance of keeping certain information confidential and making employees and directors sign confidentiality agreements, HP overreacted to information leaks that are sometimes going to happen anyway. "Itâs an impossible task to control information flow. Some leaks are inevitable," Belluzzo said.
660407
A new feature in Internet Explore 7 displays Web sites with security certification in a green-filled address bar.
285558
By Michelle Kessler  SAN FRANCISCO -- Hewlett-Packard's snooping scandal has besmirched the company's reputation -- but many other things are going great for the computer giant, tech analysts say.
468054
By MATT SLAGLE   Associated Press writer  HOUSTON -- Hewlett-Packard Co.
634236
The internet depends on strong crypto, Zimmerman says Interview PGP (Pretty Good Privacy), the encryption software package created by privacy advocate Phil Zimmermann, celebrated its fifteenth birthday last week.â¦
443241
Hewlett-Packard bolstered its security portfolio Tuesday, announcing availability of an identity management product for enterprises and a security management initiative for small and midsize businesses.
628765
By HOPE YEN WASHINGTON - A White House privacy board has determined that two of the Bush administration's controversial surveillance programs - electronic eavesdropping and financial tracking - do not violate citizens' civil liberties.
535452
Hewlett-Packard has launched the FOSSology Project, a tool for tracking and monitoring the use of free and open-source software within an IT environment.The project stems from governance work done in-house at HP, according to the Web site set up for the project.&quot;We needed a tool that would quickly and accurately describe how a given open-source project was licensed,&quot; a statement on the site reads. &quot;Rather than simply collecting a project&#39;s advertised license (as given at their website or in their documentation), this tool needed to analyze all of the source code for a given project and intelligently report all of the licenses being used based on the license declarations and tell-tale phrases that identify software licensing.&quot;FOSSology is available under the terms of the GPL (GNU General Public License) version 2 and currently has support on most GNU/Linux platforms, according to the site.It is not clear from the site how HP plans to make money through the initiative. A company spokeswoman declined comment and said Friday that more details will be announced next week.Companies like Black Duck Software are already in the FOSS-tracking business.HP&#39;s entry brought a warm welcome from Black Duck CEO Doug Levin. Levin may feel HP&#39;s involvement will help the market expand overall. &quot;We can now officially welcome HP to our market,&quot; Levin wrote on his blog . &quot;FOSSology is a nice tool for developers. It will result in software developers being better informed about their use of GPL. That makes it a very worthy tool.&quot;Right now, the FOSSology project has modules for license analysis, MIME type identification and for extracting metadata, according to the site.The site said the tool already generates detailed results: &quot;More than simply reporting, &#39;Package X uses license Y,&#39; the FOSSology tool attempts to analyze every file within the package to determine its license. The license report is thus an aggregate of all of the different licenses found to be in use by a package.&quot;FOSSology&#39;s analyses aren&#39;t foolproof, however, a statement on the site concedes: &quot;In general, the analysis results are very good guesses but should not be considered authoritative. (Or to say it simply: We&#39;re not lawyers. The code tries its best, but leave the legal decisions up to your own attorneys.)&quot;Over time, FOSSology is meant to be far more than an open-source license tracker, according to the site. Future capabilities could address bug fixes and patches, security alerts, and code reuse, as well as analysis of all types of software.The effort prompted praise on Friday from Michael Cote, an analyst with Redmonk. &quot;It&#39;s free and open source, which is nice,&quot; Cote said. &quot;So if the data is reliable and well-fed, it could be of help for people who don&#39;t want to work with Black Duck ... and others who have commercial ways to scan for open-source licenses.&quot;&quot;The interesting thing will be to see how open the resulting data is and how much reporting people do with it,&quot; he added. &quot;There&#39;s a sort of cloudy idea of how much open source is used in the enterprise, and having more accurate, free numbers would be great for the community, and more importantly, enterprises that want to get a feel for how widely used open source software is.&quot;The availability of free open-source usage data &quot;will help people make much better -- and affordable -- decisions about what open source to use and not use,&quot; Cote said.