<<< Date Index >>>     <<< Thread Index >>>

[IP] DoJ wants ISPs to retain data - mother of all credit card data thefts





Begin forwarded message:

From: hugh-list <hugh-list@xxxxxxxxxxxxxxxxxx>
Date: June 18, 2005 9:55:54 AM EDT
To: dave@xxxxxxxxxx
Subject: Re: [IP] DoJ wants ISPs to retain data - mother of all credit card data thefts


So two of the this week's big stories are

a) Some company that concentrates and retains a lot of personal transaction data allowed some sort of computer code to access and steal the data of 40 million credit card holders.

b) The department of Justice would like to force ISPs to concentrate and retain the data generated by their customers in one place so that it is convenient for the DoJ (and data thieves ? ) to access. ( some reports mention terrorism as a factor )

So if I understand this, the DoJ would like to set up one stop shopping for identity thieves ( and terrorists ) who would be able to get an internet user's credit card info, a record of what they buy from and from who they buy it, any online airline ticket sales, a record of blogs, email, dating services and whatever else an ISP's customer does online.

One of the ways the credit card companies detect fraud is by noticing new and unusual behavior. Armed with the info they get from an ISP's retained data, fraudsters can pick the identitys of people with a history consistent with the fraud they wish to perpetrate.Now in addition to old fashioned credit card fraud a crook or terrorist could even more successfully impersonate their victim.

You want to buy 8 tones of ammonium nitrate or a thousand gallons of diesel fuel and have it delivered to the corner of a field in a remote location? What better way than to have the credit card info and address of a farmer who makes these transactions on a regular basis?

Want to get on an airplane to Washington DC but you are on one of those pesky no fly lists? Just grep the convenient ISP retained records for airline ticket sales to Washington DC, match those sales to members of online dating services, find someone who has the "paperless ticket" for a flight you want and looks like you, mug them on their way to the airport, and there you are at the gate, with a ticket and a photo ID.




-------------------------------------
You are subscribed as roessler@xxxxxxxxxxxxxxxxxx
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/