human databases :: Remember, remember, the velvet November


node:	human databases
template:	3
parent:	politika.spolocnost.media.historia .alt
owner:	drifter
viewed by:
created:	22.01.2006 - 16:59:48
updated:	10.03.2006 - 11:16:05

cwbe coordinatez:
866
1551575
2111232

ABSOLUT
KYBERIA

permissions
you:	r,
system:	public
net:	yes

vesnabesna	0
FlegiX	0
jurov	0
kocur_mosur	0
kkappabear	0
-	0
Burning A	0
mirex	0
desconocida	0
bastien33	0
zoje	0
harp	0
azzazelo	0
magus	0
ulkas	0
aarin	0
maaca	0
danger maciak	0
Toth	0
opytz	0
terorrist	0
week	0
Maverick_1	0
wasteman	0
netvor	0
pht	0
kyberbubus	0
s7	0
Ramon	0
nzajacik	0
total trash	0
ni	2
mammothica	2
cell	5
.maio	5
teflon	11
darmozrac	11
drifter	12
Best boy	12
steve_mcqueen	12
zix	12
kubriel[Lock...	12
piece_of_IT	12
OsiRi$	12
mnau	12
s	17
fefo	18
mystickeprasa	18
wern	19
jukebox	21
grimo	21
spiso	22
budha	22
lubomier.sk	22
soc	23
antimon	24
Adusik	25
C[elkom]iny	25
wsk	25
danielovic	25
kvitekmedovy	25
slivka	25
mrkqua	25
neclovek	25
Islington	25
~	25
smolkop	25
howienko	25
brnd	25
sudcadred	25
MEDVEDIK	25
pikseliahky	25
crowd control	25
freezy	25
Martini	25
roger	25
hash.meer	25
omfdzg	25
pyxel	25
4mood	25
2pug	25
deborabezh	26
A.boy	26
Corvinku	26
Rekonoiterer	26
309	26
dusanson	26
Sienar	27
acidrop	27
mandalavandal	27
drobna	28
redered[Lock...	31
galantny elegan	32
hemish	32
Joker	32
ananas	33
Harvie	34
black tatiana	34
mythea	35
..............	36
chaos walk w...	36
milec	38
Ruza	39
KAM:O)	41
bujak	41
endoza	43
Refresh	49
Blat	50
ing	51
LDuck	59
gmb	60
theresqa	60
ab5trax	61
mkrsp	62
Killswitch	63

...databazky s informaciami o nas vsetkych vznikaju a rastu a v nasledujucich rokoch to nebude inak. toto sa tyka policajnych databazach, vladnych databazach, marketingovych a inych komercnych databaz etc
co to znamena pre nas? blizi sa doba velkeho brata? vyvazia prinosy, ktore nam tento druh spolocnosti prinesie za moznu stratu sukromia, ci dokonca slobody? su data o nas dostatocne chranene proti zneuzitiu? to je len zopar issues..

toto forum by malo sluzit na zozbieranie informacii o roznych databazkach..kto vsetko zbiera o nas informacie? akym sposobom!? zabranit tomu v dnesnej dobe nemoze nikto..tak aspon vedzme kolko toho o nas vedia.)

"It doesn't always lead on to totalitarianism, but what if Adolf Hitler had sprung up with the technology we have now?" Stewart Room, information lawyer

some links:
Multistate Anti Terrorism Information Exchange
Must read
Rfid čipy - Posledná strata súkromia?

..everything with a bit of paranoia and conspiracy indeed.)

masters:marjan&a.boy

00000866015515750211123208831035

https://restofworld.org/2020/all-the-data-fit-to-sell/

The black market for data, as it exists online in India, resembles those for wholesale vegetables or smuggled goods. Customers are encouraged to buy in bulk, and the variety of what’s on offer is mind-boggling: There are databases about parents, cable customers, pregnant women, pizza eaters, mutual funds investors, and almost any niche group one can imagine. A typical database consists of a spreadsheet with row after row of names and key details: Sheila Gupta, 35, lives in Kolkata, runs a travel agency, and owns a BMW; Irfaan Khan, 52, lives in Greater Noida, and has a son who just applied to engineering college. The databases are usually updated every three months (the older one is, the less it is worth), and if you buy several at the same time, you’ll get a discount. Business is always brisk, and transactions are conducted quickly. No one will ask you for your name, let alone inquire why you want the phone numbers of five million people who have applied for bank loans.

00000866015515750211123208785054

https://zpravy.aktualne.cz/domaci/policiste-politici-i-jejich-rodina-cinsky-armadni-dodavatel/r~e3e18dfcf6c211ea842f0cc47ab5f122/

00000866015515750211123208774629

navrh architektury tabulkovej databazy, ktora z principu anonymizuje data, pricom stale sa nad nou daju robit analyzy. nieco podobne si spominam, ze robila nejaka doktorandka asi 5-10 rokov dozadu:
https://blogs.microsoft.com/on-the-issues/2020/06/24/differential-privacy-harvard-opendp/
https://github.com/opendifferentialprivacy/whitenoise-system

00000866015515750211123208685330

https://www.dataviper.io/blog/2019/pdl-data-exposure-billion-people/

Výskumníci našli na internete nezabezpečený Elasticsearch server, ktorý obsahoval 1.2 miliardy osobných údajov ako emailové adresy, LinkedIn či Facebook údaje.
https://www.kratkespravy.sk/2019/11/zo-sveta-it-bezpecnosti-11/

00000866015515750211123208674511

https://www.zdnet.com/article/autoclerk-database-leaked-customer-government-and-military-personal-records/

In a report shared with ZDNet, the researchers said the open Elasticsearch database was discovered through vpnMentor's web mapping project. It was possible to access the database, given it had no encryption or security barriers whatsoever, and perform searches to examine the records contained within. The team says that "thousands" of individuals were impacted, although due to ethical reasons it was not possible to examine every record in the leaking database to come up with a specific number. Hundreds of thousands of booking reservations for guests were available to view and data including full names, dates of birth, home addresses, phone numbers, dates and travel costs, some check-in times and room numbers, and masked credit card details were also exposed.

00000866015515750211123208667271

https://www.zdnet.com/article/database-leaks-data-on-most-of-ecuadors-citizens-including-6-7-million-children/

00000866015515750211123208663388

Medical images and health data belonging to millions of Americans, including X-rays, MRIs, and CT scans, are sitting unprotected on the Internet and available to anyone with basic computer expertise. The records cover more than 5 million patients in the United States and millions more around the world. In some cases, a snoop could use free software programs -- or just a typical Web browser -- to view the images and private data, an investigation by ProPublica and the German broadcaster Bayerischer Rundfunk found.

We identified 187 servers -- computers that are used to store and retrieve medical data -- in the U.S. that were unprotected by passwords or basic security precautions. The computer systems, from Florida to California, are used in doctors' offices, medical-imaging centers, and mobile X-ray services. The insecure servers we uncovered add to a growing list of medical records systems that have been compromised in recent years. Unlike some of the more infamous recent security breaches, in which hackers circumvented a company's cyber defenses, these records were often stored on servers that lacked the security precautions that long ago became standard for businesses and government agencies.
The exposed data varied depending on the health provider and the software they use. "For instance, the server of U.S. company MobilexUSA displayed the names of more than a million patients -- all by typing in a simple data query," reports ProPublica. "Their dates of birth, doctors, and procedures were also included."

"Another imaging system, tied to a physician in Los Angeles, allowed anyone on the Internet to see his patients' echocardiograms," the report adds. "All told, medical data from more than 16 million scans worldwide was available online, including names, birthdates, and, in some cases, Social Security numbers."

The authors of the report recommend you ask your health care provider or doctor if access to your images requires a login and password, and to ask if they conduct a regular security assessment as required by HIPAA.
https://arstechnica.com/information-technology/2019/09/millions-of-americans-medical-images-and-data-are-available-on-the-internet/

0000086601551575021112320866338808663419

Hodilo by sa to centralizovat a centralne zabezpecovat. Ale asi to maju velmi decentralizovane, a rozdrobene cez roznych dodavatelov.

000008660155157502111232086633880866341908663434

mam pocit, ze o prispevok nizsie mas ukazku, co sa stane, ak to vlada centralizuje

00000866015515750211123208663388086634190866343408663500

Pises to akoby uz neexistovala ziadna nadej to zabezpecit. Priklad nizsie ukazuje zle zabezpecenie v jednom bode.

0000086601551575021112320866338808663419086634340866350008663518

nejde o to, ide o vseobecnu paradigmu, ktora plati v kyber bezpecnosti. neexistuje ziaden agnosticky pristup, anispecificka architektura a riesenie, ktore ti zarucuje bezpecnost. jedina kyber bezpecna moznost je byt odpojeny od siete (aj to nie na 100%, prikladom su stare CRT monitory a meranie reliktoveho ziarenia v miestnosti).

vsetko ostatne je len obfuskacia, cize v principe ano, ziadna nadej nie je. mozes len rozumne zabezpecit system tak, aby sa to nikomu financne neoplatilo prelomit.

samozrejme, ze vsetky tieto zlyhania su do neba volajuce, otvorene neautorizovane pristupy atd. na druhu stranu, kolko inych systemov je rovnako otvorenych len su chranene nejakym chabym menom heslom atd.

kazdopadne, co som chcel povedat, ze bojim sa dat statu moznost centralne spravovat vsetky citlive udaje. kedysi sa vravelo, ze prakticky jedine institucie schopne bezpecnosti boli banky, az nakoniec narazila kosa na kamen a vera pohlova by mohla vypravat. ale imho toto asi stale plati doteraz, ze banky a top tech hraci (amazon, paypal, google) su toho schopne do urcitej miery. ale osobne nie som presvedceny o centralizacii ako vobec o vhodnej architekture. ked uz, tak otvoreny kryptovany blockchain, ktory sice vie citat hocikto, ale dekryptovat iba ten, komu to ty svojou penazenkou dovolis ty sam.

000008660155157502111232086633880866341908663434086635000866351808667568

paradox je ze top tech hraci su schopni bezpecnosti citlivych udajov len preto ze zaroven su pre nich citlive udaje (v urcitom stupni statistickej anonymizacie), zaroven zdrojom prijmov ktory tuto ochranu citlivych udajov financuje, a tym aj motivuje, lebo je to prenich asset, produkt. chrania citlive udaje preto ze ich v urcitom stupni (ktory ani sami nedokazu posudit) anonymizuju (alebo aj nie, podla ponuky) a predavaju. ta anonymizacia je tam len forma encrypcie ktora brani tomu aby data niekto skopiroval a odstavil ich de facto od prijmu a moznosti ich predavat.
Keby bola moznost dat kluce k enduser datam len niekomu, moznost spenazit tie data by sa presunul blizsie k tomu kto ich produkuje, ako keby sa zemiak sam predaval po tom co je vyorany :D ale to je tiez moznost, v kazdom pripade je potrebny traktor/infrastruktura ktora tie data spristupnuje a dokaze z nich robit asset, lebo jeden konkretny zemiak z pola nikoho nezaujima, zatial.

00000866015515750211123208663388086634190866343408663500086635180866756808667583

ono je viacero konceptov, ako by toto technicky islo robit a giganti by az tak netratili.

predstav si, ze si zapojeny do facebooku, ale svoj profil a data si hostujes sam (pripadne delegujes niekomu dalsiemu), pricom mas pre FB otvoreny interface, ktorym si to moze on citat. v principe by FB fungoval rovnako ako doteraz, odhliadnuct od nejakej rychlosti nacitavania co sa da stale vyriesit casom.

iny koncept napriklad online marketingu - teraz sa pekne zbieraju data centralne ohladom uzivatelskej aktivity, potom sa z toho klasifikuju kadejake kategorie a modeluju sa skupiny ludi, ktorym sa potom nuka reklama, na zaklade tych pozbieranych dat. nejaky ind spravil davnejsie koncept taky, ze ty si tie svoje data drzis u seba, a samotnemu providerovi posielas len ten svoj profil samotny, tj do akych skupin spadas. cize tie data su realne u teba a provider ma stale rovnaky biznis model, na ktorom zaraba.

je to vsetko aj technicky realizovatelne, ale osobne sa tu skor bavime o bezpecnosti, cize je jedno aky mas koncept tak ci onak ho niekto nabura a dostane sa k tym citlivym datam. preto osobne by som bol skor za to nezavislejsie sifrovanie, kde kluce od miesacky drzi len samotny uzivatel (teda bavime sa o statnych registroch, kde nie je potreba instant odpovede. v online reklame to potrebujes hned).

00000866015515750211123208662907

The personal records of most of Ecuador's population, including children, has been left exposed online due to a misconfigured database, ZDNet reported Monday. From the report:
The database, an Elasticsearch searver, was discovered two weeks ago by vpnMentor security researchers Noam Rotem and Ran Locar, who shared their findings exclusively with ZDNet. Together, we worked to analyze the leaking data, verify its authenticity, and contact the server owner. The leaky server is one of the, if not the biggest, data breaches in Ecuador's history, a small South American country with a population of 16.6 million citizens. The Elasticsearch server contained a total of approximately 20.8 million user records, a number larger than the country's total population count. The bigger number comes from duplicate records or older entries, containing the data of deceased persons.
https://www.zdnet.com/article/database-leaks-data-on-most-of-ecuadors-citizens-including-6-7-million-children/

00000866015515750211123208653138

pekny napad:

1282.jpg?width=620&quality=85&auto=format&fit=max&s=0d28339440c5f7ac3bd1177d59d3e235

https://www.theguardian.com/world/2019/aug/13/the-fashion-line-designed-to-trick-surveillance-cameras

00000866015515750211123208601908

Kradeze toaletneho papiera vyriesili jeho vydavanim az po rozoznani tvare.
https://www.nytimes.com/2017/03/20/world/asia/china-toilet-paper-theft.html

00000866015515750211123208598724

https://www.zdnet.com/article/chinese-company-leaves-muslim-tracking-facial-recognition-database-exposed-online/

keby si niekto myslel, ze je to stale len koncept a nie realne nasadenie. tak tunak je trackovanie populacie cez IPTV kamery, okrem ineho. rozpoznavanie tvare v dave ludi. aktivne pokryta cca 3milionova mensina v krajine.
https://kyberia.sk/id/8598677

00000866015515750211123208585371

https://gizmodo.com/facebook-knows-how-to-track-you-using-the-dust-on-your-1821030620

prehlad niektorych zaujimavych sposobov ako si vytvorit metadata o ludoch.
https://kyberia.sk/id/8583864/

00000866015515750211123208581552

filter nenašiel ani nikde na kypči, ale práve som náhodne objavil na internetoch vecičku menom MyLife.com, ktorá funguje už cez 10 rokov, akurát vyzerá že iba v rámci USA - je to stránka, ktorá zbiera verejne dostupné údaje každého človeka, a na ich základe ho hodnotí hviezdičkami ako na imdb.
takže ak zadáš do googlu nejaké meno človeka z USA, ktorý nie je natoľko verejne exponovaný, toto je jeden z prvých výsledkov, ktoré ti vyhodí.
https://en.wikipedia.org/wiki/MyLife
https://medium.com/@tamaragane/how-to-remove-your-information-from-sites-like-mylife-77f89aff1aff
https://www.brighthub.com/internet/security-privacy/articles/110978.aspx

×÷ßßß$ˇ~[☼◙ş→☻ü84ó♀ÇüŮń§►♫☺♀♂ć☺<ˇ

00000866015515750211123208533850

From laboratory in far west, China's surveillance state spreads quietly
https://www.reuters.com/article/us-china-monitoring-insight/from-laboratory-in-far-west-chinas-surveillance-state-spreads-quietly-idUSKBN1KZ0R3

The scanners are hand-held or desktop devices that can break into smartphones and extract and analyze contact lists, photos, videos, social media posts and email.

Hand-held devices allow police to quickly check the content of phones on the street. Liu, the Beijing software developer, said the police were able to review his data on the spot. They apparently didn’t find anything objectionable as he was not detained.
--
In Shanghai, China’s gleaming international port city, two districts budgeted around 600,000 yuan each to purchase phone scanners and data-ripping tools. Beijing’s railway police budgeted a similar amount, the documents show.

“Right now, as I understand it, only two provinces in the whole country don’t use these,” said a sales representative at Zhongke Ronghui Security Technology Co Ltd, a Shaanxi-based firm that produces the XDH-5200A, one of the scanners detailed in several police procurement documents.

The representative said police stations across the whole country could consult a centralized repository of extracted data. “Almost every police station will have the equipment.”

00000866015515750211123208528369

A Surveillance State Unlike Any the World Has Ever Seen

In western China, Beijing is using the most modern means available to control its Uighur minority. Tens of thousands have disappeared into re-education camps. A journey to an eerily quiet region.
http://www.spiegel.de/international/world/china-s-xinjiang-province-a-surveillance-state-unlike-any-the-world-has-ever-seen-a-1220174.html

00000866015515750211123208405586

fórum o digitálnom Sauronovi : ako a prečo vznikol, ako sa vyvíja a ako a prečo nakoniec natrčí kopytá

00000866015515750211123208395569

The state of Illinois, which has six blockchain pilots underway, will partner with Utah-based Evernym for a birth registry pilot meant to individualize and secure identities... The endeavor, one of six distinct blockchain explorations Illinois began last summer with a working group, is expected to utilize the Sovrin Foundation's publicly available distributed identity ledger and expand upon accomplishments of the W3C Verifiable Claims Task Force, the state said... Recognizing that identity -- and, now, digital identity -- begin at birth, the state will explore using these technologies to create "a secure 'self-sovereign' identity for Illinois citizens during the birth registration process," it said in the announcement.

More from the Illinois Blockchain Initiative site:
Self-sovereign identity refers to a digital identity that remains entirely under the individual's control. A self-sovereign identity can be efficiently and securely validated by entities who require it, free from reliance on a centralized repository. Jennifer O'Rourke, Blockchain Business Liaison for the Illinois Blockchain Initiative commented, "To structurally address the many issues surrounding digital identity, we felt it was important to develop a framework that examines identity from its inception at child birth... Identity is not only foundational to nearly every government service, but is the basis for trust and legitimacy in the public sector."

In the proposed framework, government agencies will verify birth registration information and then cryptographically sign identity attributes such as legal name, date of birth, sex or blood type, creating what are called "verifiable claims" or attributes. Permission to view or share each of these government-verified claims is stored on the tamper-proof distributed ledger protocol in the form of a decentralized identifier... This minimizes the need for entities to establish, maintain and rely upon their own proprietary databases of identity information.

Evernym's "Chief Trust Officer" sees the program as "a major contribution to the larger effort of solving the online identity problem."
http://www.govtech.com/data/Illinois-Announces-Key-Partnership-in-Birth-Registry-Blockchain-Pilot.html

0000086601551575021112320839556908395573

All the blockchain ideas are incredibly stupid. It's like a law of nature. Just take any idea, add "blockchain", "sovereign", "decentralized" and it becomes instantly trendy.

No, blockchain won't help you to establish your identity. It's your private key that you use to sign blockchain updates that establishes it. And if your key is stolen then it's game over for you - somebody ELSE will be owning your identity. Forever. With no recourse for you.

All realistic proposals (including the one in TFA) include key revocation protocols through some kind of central authority (i.e. government), at which point the whole system becomes indistinguishable from a simple centralized database.

0000086601551575021112320839556908395570

Actually, since we're talking about data that can be changed and/or corrected over time, it is vital to store all this data as an initial set, accompanied by precisely timestamped changes. Because if something occurred when the data was incorrect, or with a previous version of the data, then that exact situation needs to remain preserved for posterity.

If I sign my name to a contract today and I legally change my name tomorrow, then that contract needs to remain valid. Having a tamper-proof ledger that correctly records what my name was at the time of the signing, and what my name is right now, means that no-one can claim the contract is no longer valid just because of the name change.

00000866015515750211123208390329

Facebook doesn't only know what its 2 billion users "Like." It now knows where 7.5 billion humans live, everywhere on earth, to within 15 feet. From a report:
The company has created a data map of the planet's entire human population by combining government census numbers with information it's obtained from space satellites, according to Janna Lewis, Facebook's head of strategic innovation partnerships and sourcing. The mapping technology, which Facebook says it developed itself, can pinpoint any man-made structures in any country on earth to a resolution of five meters. Facebook is using the data to understand the precise distribution of humans around the planet.
https://www.cnbc.com/2017/09/01/facebook-has-mapped-human-population-building-internet-in-space.html

topic trochu clickbait, v principe spravili rozpoznavanie obrazu - fotografii zeme zo satelitov, a vedia tam rozoznat clovek postavene veci vacsie ako 5 metrov.

0000086601551575021112320839032908390348

Asi vstupim k Vesmirni lide
Cipova totalita

00000866015515750211123208386124

https://arxiv.org/abs/1407.6981
Randomized Aggregatable Privacy-Preserving Ordinal Response, or RAPPOR, is a technology for crowdsourcing statistics from end-user client software, anonymously, with strong privacy guarantees. In short, RAPPORs allow the forest of client data to be studied, without permitting the possibility of looking at individual trees. By applying randomized response in a novel manner, RAPPOR provides the mechanisms for such collection as well as for efficient, high-utility analysis of the collected data. In particular, RAPPOR permits statistics to be collected on the population of client-side strings with strong privacy guarantees for each client, and without linkability of their reports. This paper describes and motivates RAPPOR, details its differential-privacy and utility guarantees, discusses its practical deployment and properties in the face of different attack models, and, finally, gives results of its application to both synthetic and real-world data.

ako rozumne celoplosne zbierat statisticke data od uzivatelov a pritom nevediet presne urcit, od koho to prislo, respektive co bolo obsahom od neho. firefox to chce teraz nasadit:

Mozilla preto použije techniku diferenciálnej ochrany súkromia. Pri týchto metódach sa dáta pred odoslaním spracujú tak, aby ich bolo možné hromadne analyzovať ale matematicky preukázateľne, do istej miery, neohrozovali súkromie jednotlivých užívateľov.

Spoločnosť konkrétne využije open source projekt Rappor od Google. Ten dáta pred odosielaním náhodne modifikuje tak, že modifikované dáta neumožňujú zistiť presné reportované dáta daného užívateľa.

Konkrétne k tomu používa najskôr tzv. Bloomov filter a následne dvojkrokové náhodné modifikovanie jednotlivých bitov zasielaných dát. Detailný technický popis Rappor je možné nájsť v článku Google.

Z počítača užívateľa tak odchádzajú dáta, ktoré neobsahujú priamo reportovanú hodnotu a túto úplne presne nie je možné z odosielaných dát ani zistiť.

Vzhľadom na spôsob akým sú dáta ale modifikované, pri štatistickom spracovaní zaslaných dát od mnohých užívateľov je možné zistiť štatistiky skutočných reportovaných dát veľkej skupiny užívateľov.

Táto metóda je tak lepšia ako zber dát bez snahy chrániť súkromie takýmto spôsobom. Reálna miera ochrany súkromia ale závisí na spôsobe a parametroch použitia tejto metódy, keď pri nevhodnom návrhu môže stále prezrádzať pomerne veľa. V minulom roku známy kryptológ Matthew Green napríklad upozorňoval, že metódy diferenciálnej ochrany súkromia zatiaľ neboli používané v reálnych produktoch, sú vždy kompromisom medzi presnosťou a ochranou súkromia a on zatiaľ nevidel takýto kompromis s dobrými výsledkami.

00000866015515750211123208374270

The data breach exposed the names, photos and home addresses of millions of Swedish citizen, including fighter pilots of Swedish air force, members of the military's most secretive units, police suspects, people under the witness relocation program, the weight capacity of all roads and bridges, and much more
https://thehackernews.com/2017/07/sweden-data-breach.html?m=1

mnam mnam mnam. kolko to malo gb?

00000866015515750211123208333344

http://eterni.me/

nejakym cudesnym sposobom chcu spravit vecneho avatara, alebo nejaky digitalny opis uzivatela. moze byt fajn. ja som uz dlho zvazoval nieco, ako doplnok do wikipedie, kde by sa spisal kratky zivotopis kazdeho cloveka, nech sa na neho nezabudne

0000086601551575021112320833334408501909

https://replika.ai/

story: https://classic.qz.com/machines-with-brains/1018126/lukas-replika-chatbot-creates-a-digital-representation-of-you-the-more-you-interact-with-it/

0000086601551575021112320833334408501635

axone forumz
axone big brother & ako funguje
axone datasets