3 ms·

I think tptacek might be using the socratic method or else he is just messing with you but I can't watch it any longer. The regulatory function you are talking

by dfc 14y ago

I think tptacek might be using the socratic method or else he is just messing with you but I can't watch it any longer. The regulatory function you are talking about falls under the purview of the FTC, not the FCC. "Path Social Networking App Settles FTC Charges it Deceived Consumers and Improperly Collected Personal Information from Users' Mobile Address Books Company also Will Pay $800,000 for Allegedly Collecting Kids' Personal Information without their Parents’ Consent"[1] [1] http://www.ftc.gov/opa/2013/02/path.shtm http://www.ftc.gov/opa/2013/02/path.shtm

tptacek 14y ago
For the record: I genuinely do not know the answer to the question I just asked, although obviously I'm skeptical about this underlying claim.
- dfc 14y ago
  I am equally skeptical about the SHA-1 claim. I am just commenting that as a general rule customer protection falls under the purview of the FTC. There are certainly corner cases where industry specific regulations introduce additional oversight when it comes to customer information protection, e.g. OCC/OTS/NCUA and GLBA[1], or HHS and HIPPA[2]. [1] http://www.occ.gov/news-issuances/news-releases/2005/nr-ia-2005-35.html http://www.occ.gov/news-issuances/news-releases/2005/nr-ia-2... [2] http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/index.html http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachno... Side Bar: If you are bored and want to get your wonk on search regulations.gov for sha-1[a]. It looks like most of the proposed rules mentioning SHA-1 come from HHS, FRA (Federal Railroad Administration) and the NIGC (National Indian Gaming Commission). However there is one reference to SHA-1 in an FCC rule about the Commercial Mobile Alert System[b]: CMAC-digest Optional element. The code representing the digital digest (``hash'') computed from the resource file. Calculated using the Secure Hash Algorithm (SHA-1) per [FIPS 180-2]. Alert Gateway uses the CAP digest element to populate this element. [a] http://www.regulations.gov/#!searchResults;rpp=25;po=0;s=sha-1;fp=true;ns=true http://www.regulations.gov/#!searchResults;rpp=25;po=0;s=sha... [b] http://www.regulations.gov/#!documentDetail;D=FCC-2008-0002-0001 http://www.regulations.gov/#!documentDetail;D=FCC-2008-0002-...
harryh 14y ago
Doh! You're right about the FTC vs FCC. TLA fail on my part! Though I think that sometimes the FCC gets involved in these sorts of things too? Though maybe not? I am now officially out of the realm of where I know what I'm talking about.

by dfc 14y ago

tptacek 14y ago

For the record: I genuinely do not know the answer to the question I just asked, although obviously I'm skeptical about this underlying claim.

dfc 14y ago
I am equally skeptical about the SHA-1 claim. I am just commenting that as a general rule customer protection falls under the purview of the FTC. There are certainly corner cases where industry specific regulations introduce additional oversight when it comes to customer information protection, e.g. OCC/OTS/NCUA and GLBA[1], or HHS and HIPPA[2]. [1] http://www.occ.gov/news-issuances/news-releases/2005/nr-ia-2005-35.html http://www.occ.gov/news-issuances/news-releases/2005/nr-ia-2... [2] http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/index.html http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachno... Side Bar: If you are bored and want to get your wonk on search regulations.gov for sha-1[a]. It looks like most of the proposed rules mentioning SHA-1 come from HHS, FRA (Federal Railroad Administration) and the NIGC (National Indian Gaming Commission). However there is one reference to SHA-1 in an FCC rule about the Commercial Mobile Alert System[b]: CMAC-digest Optional element. The code representing the digital digest (``hash'') computed from the resource file. Calculated using the Secure Hash Algorithm (SHA-1) per [FIPS 180-2]. Alert Gateway uses the CAP digest element to populate this element. [a] http://www.regulations.gov/#!searchResults;rpp=25;po=0;s=sha-1;fp=true;ns=true http://www.regulations.gov/#!searchResults;rpp=25;po=0;s=sha... [b] http://www.regulations.gov/#!documentDetail;D=FCC-2008-0002-0001 http://www.regulations.gov/#!documentDetail;D=FCC-2008-0002-...

harryh 14y ago

Doh! You're right about the FTC vs FCC. TLA fail on my part! Though I think that sometimes the FCC gets involved in these sorts of things too? Though maybe not? I am now officially out of the realm of where I know what I'm talking about.