Slashdot Mirror
Open Security Foundation To Maintain DataLossDB
An anonymous reader points out an announcement up at Attrition.org, that going forward their Data Loss Database will be taken over and maintained by the Open Security Foundation. From the news release: "...OSF is pleased to announce that the DataLossDB (also known as the Data Loss Database — Open Source [DLDOS] currently run by Attrition.org) will be formally maintained as an ongoing project under the OSF umbrella organization as of July 15, 2008... The project's core mission is to track the loss or theft of personally identifying information not just from the United States, but across the world. As of June 4, 2008, DataLossDB contains information on over 1,000 breaches of personal identifying information covering over 330 million records. The... DataLossDB will be free for download and use in non-profit work and research. The new website launch builds off of the current data set and provides an extensive list of new features."
Seriously? You named your project 'dildos'? You might want to rethink that acronym folks.
Someone needs to call the acronym police on them. DLDOS??
Isn't it better to just use Mysql?
Engineering is the art of compromise.
Yup, lotsa hits!
Engineering is the art of compromise.
Yes, but the problem is that it's not just data that's lost; it's information. (Data and information are, after all, not the same thing.)
Therefore, I propose the following name:
"Data/Information Loss Database - Open Source" (DILDOS).
Sample conversation: "Hey, we've got a security breach! Looks like 10,000 accounts have been compromised!" "*sigh* Okay, pack it up and send it to the DILDOS, they'll know what to do with it."
Yup. Much better already.
No need to thank me, that's my job.
The modern countries that rely so heavily on credit systems underestimate this vulnerability as a whole to the economy. With companies not taking the proper precautions, and Pvt. schmuckately looking at pr0n while online banking, there needs to be A) more awareness raised by the government(or anyone for that matter) B) stricter regulations for companies holding sensitive data, and hence stricter punishment. Im no expert of course, but that just a couple ideas. One thing I worry about though is somehow this whole mess is going to get turned into some 1984 shit were the government has to monitor all credit activity for "our own good".
"It's ok, I'm completely secure as long as my iron is off"
I've been using data loss databases for years, MSSQL, MySQL, MS Access, yup, data loss in all of them. I was quite disappointed in reading further to discover that they meant that a database of unwanted data sharing was being maintained instead of finding out where all my missing update queries went.
B) Eliminate all the stupid users. This is frowned upon by society.
I guess some people still believe the earth is flat. I know a few myself.
What?
"Global Open Access Theft Sharing Enterprise" was taken.
So if the Data Loss Database is a database of all the databases that have had data lost/exposed, if the Data Loss Database itself loses data, dose it list itself?
Now my head hurts
The Attrition guys put a lot of work into the database, it's become an authoritative archive of privacy and data security breaches used extensively by researchers in the field. They'd been considering closing it down, like they did their defacement archive. This is good news and I'd expect slashdot to see it that way, dildos or not!
When the US army raids my house in Baghdad and takes all my customers' records which I keep on my hard drive? Or should my client report me in that case?
Will they also log losses from their DB in their DB, or will a meta-foundation do that?
So Viacom doesn't get my private data.
I think that "data leakage" would be a better term for what this database represents. Loss implies that data is being destroyed.