Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Comments
Security, Privacy & The Democratization Of Data
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
Li Tan
Li Tan,
 User Rank: Apprentice
1/3/2014 | 3:39:16 AM
Re: Reputation Management
This fact holds true across different races and tribal groups. It's quite common in China as well - the people build the rudimentary mutual trust from traditional ancestral relationships. The people living around the same community become a kind of gang. This is not common in modern cities nowadays but still holds true in those rural area and small villages.
byock981
byock981,
 User Rank: Apprentice
1/2/2014 | 8:56:22 PM
Controlling our online reputation profile?
In addition to democratization of data another reason it is easy for governments, companies and other citizens to form these "reputation profiles" is because we do not currently have great ways of controlling our online presence.  The Internet2 Scaleable Privacy Project is attempting to help citizens protect their privacy and strength the nations identity ecosystem.  It is attempting to put the "Informed" into Informed Consent with creation of privacy manager tools.  With these types of privacy manager tools our reputation profiles will become more targeted and relevant depending on the context of our digital interactions.  Without them I worry our digital interactions will be mis-understood and hence our reputations tarnished. 
Marilyn Cohodas
Marilyn Cohodas,
 User Rank: Strategist
1/2/2014 | 10:54:00 AM
Re: Reputation Management
That doesn't surprise me. My husband is a financial investigator who works for an arm of the judicial system that investigates white collar crime by lawyers against clients. He sees a lot of cases that exploit that tribal mentality of trust, where "no one  in my (fill in ethnic group) would take advantage of me or steal from me." 

 
MartinL923
MartinL923,
 User Rank: Apprentice
1/2/2014 | 10:34:52 AM
Re: Reputation Management
Marilyn: A few years ago I had the honour of conversing with a law enforcement officer who was investigating a gang of internet fraudsters. The gang only recruited members from a specific ethnic group who spoke a particular dialect and whose family origin could be verified. This made infiltration  by law enforcement almost impossible since their reliance on tribal ties facilitated the detection of imposters. Even in this day and age, internet fraudsters abusing the global village rely on their ancestral villages to filter out imposters.

Martin Lee
Marilyn Cohodas
Marilyn Cohodas,
 User Rank: Strategist
1/2/2014 | 10:09:47 AM
Re: Reputation Management
I really like the comparison between our ancestral village and today's connected global village. Back in the day when people knew each other because they lived next door, or went to the same school, or were related through marriage and family friendships that crossed generations, reputations were well known and frequently entrenched and hard to change when they were wrong). Today many of our personal and professional relationships start with email or social media: a resume to a prospective employer, a response to a rental listing on Craigslist,  a comment on a product review.

While it is fairly easy undertake a rudimentary reputation check through LinkedIn, Facebook Google, etc. the con artists, predators and bullies are expert at creating attractive --and false -- public personas. So in addition to making sure our personal digital reputation is, like Caesar's wife, above reproach. We must also make sure that those we encounter in our virtual village are who they say they are. 
WKash
WKash,
 User Rank: Apprentice
1/2/2014 | 10:03:59 AM
Re: Reputation Management
 
Rate It
50%
50%
 

MartinL923 

MatiniL923, I agree. It's worth noting how safety regulations evolved in the auto industry and with the likes of Underwriters Laboratory. It's not a perfect example, I know, since flaws in software and online systems don't kill people. But there is an argument that people need more safeguards and resources to protect themselves in cyberspace than the commercial market currently provides them.  
MartinL923
MartinL923,
 User Rank: Apprentice
1/2/2014 | 4:55:13 AM
Re: Reputation Management
Every advance has its disadvantages too. Your comments are entirely correct. Unfortunately the remedies for the downsides of inventions tend to lag. We're still trying to come up with ways to remedy many of the unforeseen consequences of the Internet, the importance of security being one of these. I'm sure that our future successors will wonder at how we could possibly work and live without invention X that solves problem Y which currently plagues our existence. The good news is that fame and hopefully fortune awaits the person who does invent and build the tools that will help us solve these issues.
WKash
WKash,
 User Rank: Apprentice
12/31/2013 | 1:12:30 PM
Reputation Management
The democratization of digital tools may be make it easier to assess the reputation of individuals and businesses, but it also creates new opportunities for abuses that we're not yet fully equipped to deal with. One of the sad undercurrents of this digital democratization is the amount of social media trashing and abuse being inflicted today on teens by their peers -- sometimes with tragic effect.  Then there are the challenges of setting the records straight after having your digital identity stolen.  In both cases, reputations can be completely and wronglfully compromised. Yet we still lack the tools needed to help individuals recover quickly when the digital ill-will of others strikes us or our kids.
asksqn
asksqn,
 User Rank: Ninja
12/30/2013 | 11:20:49 PM
Hot diggety
Imagine the day when Americans are able to browse the vast digital dossiers kept on us by the NSA.
MartinL923
MartinL923,
 User Rank: Apprentice
12/30/2013 | 5:55:07 PM
Re: Reputation Management
I agree entirely. I think as the world got bigger doing that due diligence became more difficult. However I suspect that technology advances are going to make following someone's history a whole lot easier.
Page 1 / 2   >   >>


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Everything You Need to Know About DNS Attacks
It's important to understand DNS, potential attacks against it, and the tools and techniques required to defend DNS infrastructure. This report answers all the questions you were afraid to ask. Domain Name Service (DNS) is a critical part of any organization's digital infrastructure, but it's also one of the least understood. DNS is designed to be invisible to business professionals, IT stakeholders, and many security professionals, but DNS's threat surface is large and widely targeted. Attackers are causing a great deal of damage with an array of attacks such as denial of service, DNS cache poisoning, DNS hijackin, DNS tunneling, and DNS dangling. They are using DNS infrastructure to take control of inbound and outbound communications and preventing users from accessing the applications they are looking for. To stop attacks on DNS, security teams need to shore up the organization's security hygiene around DNS infrastructure, implement controls such as DNSSEC, and monitor DNS traffic
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-33196
PUBLISHED: 2023-05-26
Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. This issue has been fixed in version 4.4.7.
CVE-2023-33185
PUBLISHED: 2023-05-26
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
CVE-2023-33187
PUBLISHED: 2023-05-26
Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when a password html input is switched to `type="text"` via a javascript "Show Password" button. This differs from the expected behavior which always obfuscates `ty...
CVE-2023-33194
PUBLISHED: 2023-05-26
Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Old CVE fixed the XSS in label HTML but didn’t fix it when clicking save. This issue was...
CVE-2023-2879
PUBLISHED: 2023-05-26
GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file