This Blog Is Not For Reading

A blog, just like any blog, only more so

  • Subscribe

  • Categories

  • RSS Bob Jonkman’s Microblog

    • Favorite 29 August 2020
      bobjonkman favorited something by eloquence: Disturbing reports that Google Play is threatening to kick out Mastodon apps. See:https://mastodon.social/@Gargron/104763960269049818https://toot.fedilab.app/@fedilab/104765191594914330App stores have a track record of acting capriciously & are also easy targets for gov't censors (including Trump). This is why alternatives like @fdroidorg are so important for user freedom.If unfamiliar: F-Droid is a free & open […]
    • bobjonkman repeated a notice by eloquence 29 August 2020
      RT @eloquence Disturbing reports that Google Play is threatening to kick out Mastodon apps. See:https://mastodon.social/@Gargron/104763960269049818https://toot.fedilab.app/@fedilab/104765191594914330App stores have a track record of acting capriciously & are also easy targets for gov't censors (including Trump). This is why alternatives like @fdroidorg are so important for user freedom.If unfamiliar: F-Droid is a free & open source app you […]
    • New note by bobjonkman 25 August 2020
      I do like the taste of onion bagels. When the other bagels in the bag acquire an onion flavour it's a poor experience at best, almost certainly leading to the purchase of a *real* onion bagel. #AOBFS #AcquiredOnionBagelFlavourSyndrome
    • bobjonkman repeated a notice by lnxw48a1 25 August 2020
      RT @lnxw48a1 @bobjonkman @blacksam Would that still be true if you actually liked onion bagels? Asking because, although I don't eat bagels at all, it seems to me that you're probably unusually sensitive to the flavor of onion ... which would likely be the case if you disliked that flavor.
    • New note by bobjonkman 24 August 2020
      If there is one onion bagel in a bag of bagels, they're *all* onion bagels...
    • bobjonkman repeated a notice by blacksam 24 August 2020
      RT @blacksam How come no matter what flavor bagel you buy from the bakery, it's always, to some extent, an onion bagel? #bagels #onions #wtf
    • Favorite 24 August 2020
      bobjonkman favorited something by blacksam: How come no matter what flavor bagel you buy from the bakery, it's always, to some extent, an onion bagel? #bagels #onions #wtf
    • Favorite 24 August 2020
      bobjonkman favorited something by lnxw48a1: #TIL: Gravity keyhole https://en.wikipedia.org/wiki/Gravitational_keyhole and Roche limit https://en.wikipedia.org/wiki/Roche_limit
    • Favorite 31 May 2020
      bobjonkman favorited something by atarifrosch: @bobjonkman: Das habe ich heute bekommen, wiederum 2 Monate später …
    • bobjonkman repeated a notice by fsf 24 May 2020
      RT @fsf Remote education has provided an unfortunate opportunity for privacy-invading proprietary software to invade students' lives. Learn how many people are fighting back: https://u.fsf.org/32h

Archive for November, 2012

Simon Phipps on Free, Open and Liberty

Posted by Bob Jonkman on 18th November 2012

This is so simply and beautifully stated:

Simon Phipps:

“Free” is the ethical construct; “Open” is the practical method; “liberty” is the shared objective.

 

18 November 2012 from web at Southampton, England, United Kingdom of Great Britain and Northern Ireland in context

Simon Phipps is President of the Open Source Initiative, blogs at Wild Webmink and writes a column at Infoworld.

Tags: , , , , , , ,
Posted in FLOSS | Comments Off on Simon Phipps on Free, Open and Liberty

Shutting down ServiceOntario kiosks could be Considered Harmful

Posted by Bob Jonkman on 9th November 2012

Service Ontario kiosk with "Temporarily shut down" notice

ServiceOntario kiosk

The Ontario government has announced it is shutting down the ServiceOntario kiosks.

Closing the kiosks won’t do any good if the web site is no better secured. ServiceOntario had control over the hardware and software running on the kiosks, but they have no control over the computers people use to access the ServiceOntario web site. User PCs will have all sorts of malware running on them, and malusers can far more easily spend time breaking into a web site than a kiosk. Unless ServiceOntario has much better security on their web site, it is far more vulnerable than a kiosk.

In his article Government to discontinue ServiceOntario kiosks, Sameer Vasta asks if the ServiceOntario web site is ready to pick up the slack. His conclusion is yes, and although the web site user experience could be improved, he considers closing the kiosks a prudent move. But if the kiosk interface was so much easier to use, then the web site could use that interface too. Security isn’t created by the user interface — security needs to be built into the servers. Malusers are unlikely to use the web interface to launch their attacks; they’ll have more sophisticated tools to try to break into the servers.

Of course, since the ServiceOntario web site was already in place while the kiosks were operational it has been a potential vector for attack all along. Closing the kiosks doesn’t increase that vulnerability. And the vulnerability that prompted the government to shut down the kiosks was card skimming, which is not an issue on a Web site accessed from home. But shutting down a fully managed kiosk to be replaced by home users’ PCs that are full of malware does not look like a prudent move to me.

However, it should be cheaper to manage security on one web site than on 72 kiosks. The government reports that shutting the kiosks will save taxpayers about $6.3 million in one-time upgrading costs and $2.2 million in annual maintenance costs. The Star reports that Minister of Government Services Harinder Takhar says the kiosks cost $4 million to deploy, and it will cost $250,000 to remove them.

And shutting down the kiosks has one other benefit: If a security breach occurs as a result of using our own computers then ServiceOntario has successfully shifted blame, hasn’t it? Surely there will be a disclaimer in the fine print on the website somewhere!

–Bob.


ServiceOntario kiosk "Permanently Closed" notice

“Permanently Closed” notice Service Ontario kiosk.

The picture above shows a ServiceOntario kiosk with a notice indicating the kiosk is temporarily shut down. A new notice has been posted, which reads:

ServiceOntario Kiosks Are Now Permanently Closed.

After a thorough investigation into the safety and security issues surrounding ServiceOntario kiosks, it has been decided to permanently shut down the network.

All former kiosk services are conveniently available online, including:

  • License plate sticker renewal
  • Address change
  • Driver abstract

Fermeture permanente des kiosques ServiceOntario.

À la suite d’une enquête approfondie sur les problèmes de sécurité survenus dans les kiosques ServiceOntario, il a été décidé de fermer le réseau de façon permanente.

Tous les services anciennement founis dal les kiosques son offerts en ligne, notamment les suivants:

  • Renouvellement de la vignette d’immatriculation
  • Changement d’addresse
  • Résumé de dossier de conducteur.

We look forward to serving you.
For these services, and more than 40 other online services, or for a complete list of our locations and available services, please visit ServiceOntario.ca

Au plaisir de vous servir.
Pour ces services, et plus de 40 autres services en ligne, ou la liste complète de nos centres et de leurs services, visitez ServiceOntario.ca

Images courtesy of lothlaurien.ca used under a CC BYCreative Commons Attribution 2.5 Canada License license.

Thanx to my friend RW for the idea for this post, and her contributions.

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,
Posted in considered harmful, Politics, security | 4 Comments »

 
Better Tag Cloud