RE: University of South Carolina e-Mail Compromises Student IDs

[Blanchard_Michael () emc com]

If you ask me, your SSN should not be used for any form of ID purposes....  Hmmm, funny it says that exact thing on the 
SS card too,  "not to be used for identification purposes"... Yet how often it is, unless you complain.... 


Michael P. Blanchard 
Antivirus / Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
Office of Information Security & Risk Management 
EMC ² Corporation 
4400 Computer Dr. 
Westboro, MA 01580 
Office: (508)898-7102      
Cell:     (508)958-2780 
Pager:  (877)552-3945 
email:  Blanchard_Michael () EMC COM 

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On Behalf Of Nick FitzGerald
Sent: Friday, April 14, 2006 10:59 PM
To: funsec () linuxbox org
Subject: Re: [funsec] University of South Carolina e-Mail Compromises Student IDs

Fergie wrote:

> A department chairwoman distributing information about summer classes
> accidentally attached a database file to an e-mail she sent Sunday. The
> database included studentsTM Social Security numbers.

Something would have been practically impossible (i.e. could not happen 
for practical/pragmatic reasons, not "all but impossible") were she not 
using computer-mediated communications.

Reminds me of that aphorism "To err is human, but to really stuff 
things up you need a computer"...


Regards,

Nick FitzGerald


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.