Cybersecurity Brainstorming - Revision history

BerkmanSysop: UTurn to 1267401600

2024-08-14T19:57:09Z

UTurn to 1267401600

Show changes

192.168.10.74 at 01:21, 9 May 2022

2022-05-09T01:21:40Z

Show changes

Jharrow at 02:26, 29 January 2010

2010-01-29T02:26:21Z

← Older revision		Revision as of 02:26, 29 January 2010
Line 1:		Line 1:
	This page reflects the brainstorming and discussion of the cybersecurity group in [http://en.wikipedia.org/wiki/Jonathan_Zittrain Jonathan Zittrain]'s Cyberlaw: Difficult Problems Class.		This page reflects the brainstorming and discussion of the cybersecurity group in [http://en.wikipedia.org/wiki/Jonathan_Zittrain Jonathan Zittrain]'s Cyberlaw: Difficult Problems Class.

	Note: This page was just a scratch-pad for our ideas. Our final project is [[Cybersecurity Project\|here]].		'''Note: This page was just a scratch-pad for our ideas. Our final project is [[Cybersecurity Project\|here]].'''

	''For the Mozilla-icon-privacy project see: [[Terms of Service Brainstorming]].''		''For the Mozilla-icon-privacy project see: [[Terms of Service Brainstorming]].''

66.31.19.121 at 02:25, 29 January 2010

2010-01-29T02:25:49Z

← Older revision		Revision as of 02:25, 29 January 2010
Line 1:		Line 1:
	This page reflects the brainstorming and discussion of the cybersecurity group in [http://en.wikipedia.org/wiki/Jonathan_Zittrain Jonathan Zittrain]'s Cyberlaw: Difficult Problems Class.		This page reflects the brainstorming and discussion of the cybersecurity group in [http://en.wikipedia.org/wiki/Jonathan_Zittrain Jonathan Zittrain]'s Cyberlaw: Difficult Problems Class.

			Note: This page was just a scratch-pad for our ideas. Our final project is [[Cybersecurity Project\|here]].

	''For the Mozilla-icon-privacy project see: [[Terms of Service Brainstorming]].''		''For the Mozilla-icon-privacy project see: [[Terms of Service Brainstorming]].''

140.247.225.117: /* Stop Badware */

2010-01-26T17:05:56Z

Stop Badware

← Older revision		Revision as of 17:05, 26 January 2010
Line 31:		Line 31:
	==Stop Badware==		==Stop Badware==
	We propose a Firefox plug-in that would incorporate an improved Stop Badware database and automatically warn users when they attempt to access websites that are suspected of including malware or have been known to do so recently. We also propose this is included in search engines. While Firefox 3 and Google have recently implemented similar ideas, we would like to display more granular data (i.e., 99% of visitors to this site report no problems, 90% of visitors to that site), with better timing information, and automatically build in reporting of malware to the database.		We propose a Firefox plug-in that would incorporate an improved Stop Badware database and automatically warn users when they attempt to access websites that are suspected of including malware or have been known to do so recently. We also propose this is included in search engines. While Firefox 3 and Google have recently implemented similar ideas, we would like to display more granular data (i.e., 99% of visitors to this site report no problems, 90% of visitors to that site), with better timing information, and automatically build in reporting of malware to the database.

			StopBadware goes independent: http://news.cnet.com/8301-27080_3-10440210-245.html

	==Distress Password==		==Distress Password==

Rnagarajan: /* "Safeword" */

2010-01-21T08:31:25Z

"Safeword"

← Older revision		Revision as of 08:31, 21 January 2010
Line 21:		Line 21:
	*using recaptcha or pictures (esp game), etc as dual key for all passwords		*using recaptcha or pictures (esp game), etc as dual key for all passwords
	*perhaps regulation requiring financial institutions to only accept strong or dual-key passwords		*perhaps regulation requiring financial institutions to only accept strong or dual-key passwords

			NYT article on bad password security: http://www.nytimes.com/2010/01/21/technology/21password.html?hp

	==Mesh Network Vaccination==		==Mesh Network Vaccination==

Style at 00:26, 16 January 2010

2010-01-16T00:26:41Z

← Older revision		Revision as of 00:26, 16 January 2010
Line 34:		Line 34:
	:(1) secure password -- shows all emails, all data		:(1) secure password -- shows all emails, all data
	:(2) distress password -- shows limited data (like limited profile), only showing safe data		:(2) distress password -- shows limited data (like limited profile), only showing safe data

			==Password Picture==
			Have a dual key mode of authentication for various web services: one would be the typical password, and the second would be a series of pictures. For example, when creating an account on a website for the first time, you would choose a password and choose keywords for pictures, like "animal" or "tree". Logging in would require you to enter a password as well as, from a series of pictures, choose your 1, 2, or 3 pictures that show your keyword. This would prevent robots from being able to try and guess your password, and would also prevent keystroke detectors from being fully functional.

	=Presentational ideas=		=Presentational ideas=

Rnagarajan: /* Presentational ideas */

2010-01-15T23:27:28Z

Presentational ideas

← Older revision		Revision as of 23:27, 15 January 2010
Line 51:		Line 51:

	End with "The More You Know" music and logo? (like at the end of this stupid clip: http://www.youtube.com/watch?v=3eazYHO3Hsg&feature=related).		End with "The More You Know" music and logo? (like at the end of this stupid clip: http://www.youtube.com/watch?v=3eazYHO3Hsg&feature=related).

			Spot 2:
			Magic Michael is seated, looking directly at the camera. "Hi, i'm internationally-recognized (and renowned) magician Michael Feldman. I can make many things disappear (hand gesture, and poorly patched together video making something disappear). But there's one thing that even I can't make disappear: the cybersecurity problem. (Michael attempts to make something symbolizing cybersecurity disappears, but fails). Remember, kids, installing random programs isn't magic. It's stupid."

Rnagarajan: /* Presentational ideas */

2010-01-14T08:24:44Z

Presentational ideas

← Older revision		Revision as of 08:24, 14 January 2010
Line 41:		Line 41:
	*PSA Announcement featuring Internationally Recognized Magician Michael Feldman		*PSA Announcement featuring Internationally Recognized Magician Michael Feldman
	*Lessig-style keynote presentation (as part)		*Lessig-style keynote presentation (as part)

			Spot 1: Ham Sandwich (Live).

			Magic Michael is happily doing a magic trick. Suddenly, he makes a ham sandwich appear out of nowhere. He asks an audience member, "And now, who would like to eat this ham sandwich?" People in the audience (kids?) react angrily. One says, "But, where did that ham sandwich come from?"

			CUT TO Magic Michael, now sitting on a stool, talking to the camera: Everyone knows not to eat a mysterious ham sandwich that I make appear out of nowhere. But why do some people install software when they don't know where it came from? Hi, I'm internationally-recognized magician Michael Feldman, and I'm here to remind you how important it is to keep your computer safe. When in doubt about whether or not you should download and install a piece of software, just follow the ham sandwich rule; if it came from a stranger and you're not sure when or where it was made, don't install it - or eat it!

			(looks great -- I just want some more magic puns, like "if it were a rabbit sandwich, maybe that's ok" or "installing random programs isn't magic. it's stupid.")

			End with "The More You Know" music and logo? (like at the end of this stupid clip: http://www.youtube.com/watch?v=3eazYHO3Hsg&feature=related).

Rnagarajan: /* Problems to Tackle */

2010-01-14T08:22:28Z

Problems to Tackle

← Older revision		Revision as of 08:22, 14 January 2010
Line 5:		Line 5:
	=Problems to Tackle=		=Problems to Tackle=

	~~These are~~ the three ~~basic~~ projects that ~~we have talked about working on~~. We may also be interested in working on the [[Terms of Service Brainstorming \| Mozilla Privacy issue]].		Misaligned incentives have prevented industry, users, and government from solving many of the problems of cybersecurity. We're proposing three projects that will allow (power) users to increase the security of their data, as well as improve security for other people, and maybe even for the network as a whole. We may also be interested in working on the [[Terms of Service Brainstorming \| Mozilla Privacy issue]].

	=="Safeword"==		=="Safeword"==
Line 20:		Line 20:
	*encrypted password storage within browser		*encrypted password storage within browser
	*using recaptcha or pictures (esp game), etc as dual key for all passwords		*using recaptcha or pictures (esp game), etc as dual key for all passwords
			*perhaps regulation requiring financial institutions to only accept strong or dual-key passwords

	==Mesh Network Vaccination==		==Mesh Network Vaccination==
Line 27:		Line 28:

	==Stop Badware==		==Stop Badware==
			We propose a Firefox plug-in that would incorporate an improved Stop Badware database and automatically warn users when they attempt to access websites that are suspected of including malware or have been known to do so recently. We also propose this is included in search engines. While Firefox 3 and Google have recently implemented similar ideas, we would like to display more granular data (i.e., 99% of visitors to this site report no problems, 90% of visitors to that site), with better timing information, and automatically build in reporting of malware to the database.

	==Distress Password==		==Distress Password==