Comments on: Rocky Mountain Bank: Rocky, Rocky Security! http://technologizer.com/2009/09/25/rocky-mountain-bank-rocky-security/ Reviews, News, and Opinion About Personal Technology by Harry McCracken & Friends Thu, 18 Mar 2010 15:03:46 +0000 http://wordpress.com/ hourly 1 By: Rocky Mountain Bank should be more solid now - Adventures of an Eternal Optimist http://technologizer.com/2009/09/25/rocky-mountain-bank-rocky-security/comment-page-1/#comment-27636 Rocky Mountain Bank should be more solid now - Adventures of an Eternal Optimist Wed, 07 Oct 2009 19:55:23 +0000 http://technologizer.com/?p=17637#comment-27636 [...] for example, Rocky Mountain Bank of Wyoming USA.  An employee of the bank emailed sensitive details about 1375 customers to the wrong Gmail user, and now the bank is suing Google to discover who this [...] [...] for example, Rocky Mountain Bank of Wyoming USA.  An employee of the bank emailed sensitive details about 1375 customers to the wrong Gmail user, and now the bank is suing Google to discover who this [...]

]]> By: Rocky Mountain Bank Acts Rationally | Technologizer http://technologizer.com/2009/09/25/rocky-mountain-bank-rocky-security/comment-page-1/#comment-26824 Rocky Mountain Bank Acts Rationally | Technologizer Tue, 29 Sep 2009 02:31:07 +0000 http://technologizer.com/?p=17637#comment-26824 [...] all:&nbspNews Rocky Mountain Bank–the institution that reportedly sent a Gmail user a list of its customers’ names, Social Security Numbers, and loan... then went to court to force Google to disable the account–has taken a step in the right [...] [...] all:&nbspNews Rocky Mountain Bank–the institution that reportedly sent a Gmail user a list of its customers’ names, Social Security Numbers, and loan… then went to court to force Google to disable the account–has taken a step in the right [...]

]]> By: Phil Howard http://technologizer.com/2009/09/25/rocky-mountain-bank-rocky-security/comment-page-1/#comment-26738 Phil Howard Sun, 27 Sep 2009 00:48:27 +0000 http://technologizer.com/?p=17637#comment-26738 In another article on this issue, bank CEO Coleman Andrews is quoted as saying "Our software is on the cutting edge of security already and is above the industry standard." Huh? This is just incredibly dumb. People like myself who work in IT security already know that security is NOT about what software or hardware you install. Security is a fundamental aspect of the entire operation. You don't become secure by installing security software. This case can prove it to the masses. But real security people have know this for many, many years. The Rocky Mountain Bank needs to do more than just an overhaul of their security software (it should have blocked this ... by scanning every outgoing email for confidential info). It needs to overhaul staff training, as well as auditing. The referenced article is here: http://www.jhnewsandguide.com/article.php?art_id=5099 In another article on this issue, bank CEO Coleman Andrews is quoted as saying “Our software is on the cutting edge of security already and is above the industry standard.” Huh? This is just incredibly dumb. People like myself who work in IT security already know that security is NOT about what software or hardware you install. Security is a fundamental aspect of the entire operation. You don’t become secure by installing security software. This case can prove it to the masses. But real security people have know this for many, many years. The Rocky Mountain Bank needs to do more than just an overhaul of their security software (it should have blocked this … by scanning every outgoing email for confidential info). It needs to overhaul staff training, as well as auditing.

The referenced article is here: http://www.jhnewsandguide.com/article.php?art_id=5099

]]> By: Dave http://technologizer.com/2009/09/25/rocky-mountain-bank-rocky-security/comment-page-1/#comment-26659 Dave Fri, 25 Sep 2009 19:05:29 +0000 http://technologizer.com/?p=17637#comment-26659 Aside from the the "who did the information go to ?" The simplest way to explain the security of email to non-technical people: email is like a postcard. Anyone along the way can read it. The internet does not provide any security for data it carries and the data can be captured by anyone along the way. The only answer is encryption. If the recipient does not have the key to the encryption then they can't read it - and it becomes moot that it was sent to them. Aside from the the “who did the information go to ?” The simplest way to explain the security of email to non-technical people: email is like a postcard. Anyone along the way can read it. The internet does not provide any security for data it carries and the data can be captured by anyone along the way. The only answer is encryption. If the recipient does not have the key to the encryption then they can’t read it – and it becomes moot that it was sent to them.

]]> By: alt-tag.com » Blog Archive » Federal judge ignores rights of individual http://technologizer.com/2009/09/25/rocky-mountain-bank-rocky-security/comment-page-1/#comment-26658 alt-tag.com » Blog Archive » Federal judge ignores rights of individual Fri, 25 Sep 2009 18:56:09 +0000 http://technologizer.com/?p=17637#comment-26658 [...] think the post from Technologizer stabs at the root issue, though: The temptation to heap scorn upon District Court Judge James Ware [...] [...] think the post from Technologizer stabs at the root issue, though: The temptation to heap scorn upon District Court Judge James Ware [...]

]]>