Discussion on:

eReaders: They're reading us while we read them

Personally I just see things like this as More Of The Same and is part of the reason why I don't play in areas like this.

The same with using Plastic to pay for things when you do the Banks who issue the Plastic get a full list of everything you have just paid for and use these lists as they see fit. The E Book sellers are just doing more of the same and as far as I can see no one cares that they have willingly given their Privacy Away.

Last week we had an interesting thing happen here the Feds arrested people in a different country for Credit Card Fraud where the people concerned broke into Sellers systems stole the Credit Card Details of about .5 of a Million People where they used their Plastic to pay for things like Petrol Groceries and so on and then using somewhere around 30,000 of these Credit Cards promptly ran up 30 Million $ of bills on those cards. Worked out that each Hacked Credit Card was good for about a Million $ in fraudulent sales.

There where many people complaining that they had been hit but as the Banks covered the Loss for the Individual and passed the losses back to the sellers they really didn't care overly much.

What I did find interesting was the banks boasting how their system had not been compromised it was the sellers systems which did introduce a new area into the use of Plastic where the users need to understand how vulnerable that they actually are. Though personally I see this just as the beginning where the end crime will be Identity Theft on a Grand Scale that will not so easily be cured or prevented.

So I still use Cash for every purchase and upset the sellers who have to accept it and don't get to pass on the data to anyone else.

http://www.heraldsun.com.au/news/law-order/police-smash-global-gang-behind-500000-aussie-credit-card-thefts/story-fnat7jnn-1226526111909

Col

And thank you for that information. I read about it, but had no idea it was that extensive. Are those Chip and Pin cards?

They are all types of cards as the Data was stolen after the sale was made from what is stored/transmitted on the Sellers System.

The sellers themselves had their systems hacked and where effectively giving a live feed of every transaction to the Criminals as they occurred.

I thought this story may interest you.

Col

I was curious as a while back I wrote about how some English academics were able to crack a Chip and PIN PoS device -- supposedly not possible.

I'm betting the next step is to move to RFID PoS devices. They will say it's safer than card PoS devices, as it can be encased -- making the bad guys chuckle.

In the Darknet, it is rather easy to find (if you search well) for sale list of valid credit card numbers (in large quantities). They allow to perform purchase on the Net for instance, or to recreate some swipe cards. Usually, banks detect these frauds rather quickly by using pattern analysis. When your purchasing scheme deviates from your usual habits, banks react and check. Be aware that the card numbers are not only collected by breach in merchant servers, but also by skimming cards during legitimate transactions.
BTW,I suppose that you refer to 2010 Cambridge paper. Ross Anderson's team is great. You should read their latest hack on EMV implying skimming http://www.cl.cam.ac.uk/~rja14/Papers/unattack.pdf
About NFC chips, I don't believe that it will be claimed to be more secure. It will be claimed to be more convenient for the user.

I believe that was the team I interviewed -- very cool and sharp bunch. Thanks for the new link. I will give it a thorough read this weekend.

I'm working on NFC right now. I'll bet you know that Charlie Miller already compromised it.

I don't believe that's the case, certainly not for payments in the bricks and mortar world. As someone who has worked on my company's PCI compliance programme I'm confident that all the banks know is how much you spent and where. Now if "where" happens to be a car showroom, or a book shop for that matter, then they'll have a good idea of the kind of products you're purchasing, but that's as far as it goes.

And Pay by plastic the company providing the Payment gets a full list of everything you have bought and what each item costs to justify the finial price of the sale and Money transfer.

As a result the Banks sell those lists onto whom ever wants them The Supermarket also keeps lists like that but they are not linked to the Customer as much as the store what it sells and what it need to order. Though this is currently changing and the shops are becoming more and more involved in tracking individuals Purchases so that they can push advertising to them on things that they may want to buy.

The Banks on the other hand have a full list of your purchases so when they have a startup they can sell them lists of potential customers for their products in specific areas. Didn't you ever wonder while some areas where targeted with Mass Mail Outs of Sample Product and other areas where not?

Of course this is taken several steps further and the companies can now target individuals and hopefully increase their Market share at the expense of their competition.

Only times that this doesn't happen is when the industry is controlled and has to comply with Laws most companies do not have this restriction and make as much as they possibly can out of every sale that they make including the ones that get returned and the Fraudulent ones where they cover the costs in that sale not the banks who issue the cards.

Col

Maybe that happens in the US but I'm sure it's not the same on this side of the pond.

due to the companies making proprietary devices and using proprietary formats for the Kindle, Nook, e-pub etc it means there are formats that can be dropped if the company doesn't see enough profit, and thus what you've paid for is NOT readable - if you don't believe this, talk to people who have .lit books from the Microsoft Reader days.

I believe the companies should get into selling readers not private code translators. The e-books should be in basic html or something similar that can be read in any browser and the readers should be simple hand held light browsers. That way the books will be readable all over from just the one copy and always readable.

I write a lot of stories and at the moment I only make my books available as a printed book or a PDF file. I've recently learned that some of my books have been made available by one of my publishers as e-books via Amazon and B&N - but I don't like the way they no longer look like what I wrote due to the inability of those systems to handle basic formatting that any browser can to allow fro blocked text and three levels of headers. Now I shudder at the thought of how much people other than the readers may be digging into what my readers buy.

On that side I've reason to be concerned as I know one of my books has had copies bought by two different intelligence agencies due to the blurbs on them getting through their filters and triggering some alarms . That's what happens when you write a story about terrorism.

Thanks for the article and the fun way you presented it.

And I realize what you are saying. I think about it every time I buy an eBook. Up until four years ago, I felt the same way about PDF. I don't have a good answer for proprietary methods.

easy to get open source variants that work just as well, and often better.

I have several pdf files and they are not easy at all to read on mobile devices. That is my only real complaint. They do not reformat to small screen size like eBooks.

and a major reason why I advocate the use of basic html for creating e-books. Sadly B&N, Amazon, and Apple don't agree as they may lose some potential income in doing so. I think they'd gain more sales if they did.

How does the system work if there is no control over sharing copies?

that's obvious. but, in general, most people will pay a fair price for most things, just not a rip off price. Some people will go to a lot of trouble to make illegal copies of anything, but that happens with or without DRM. To me, there are two issues in regards to e-books and only one is about DRM.

I have no DRM on the electronic format books I sell as I allow the readers to have it able to be read on any device they have that can read the code, but I only use code that doesn't require a special device or may become obsolete within a few years. Thus my stories are available as html, .odt, or .pdf by me. One publisher has an arrangement for some via Amazon that I didn't know about until this month.

I've seen many complaints about DRM stopping people from reading stories because it's only available on one device, and then the Amazon case of 'steal the story back' adds to the problem, as does the issue of obsolete systems like the MS .lit files that few can use now.

I'd rather lose a few sales and have happy customers, than lose customers by draconian measures they don't like. You'd be surprised how many people refuse to buy those proprietary book formats. Anyway, a single sale lost is not huge money, and it's not like people are going to make millions of pirate copies to spread around the world.
..............

O have another issue with the proprietary e-book formats due to them not allowing for the e-book to look as clean and nice as the pdf or printed copy due to format deficiencies in the proprietary e-book formats.

I use Calibre to convert downloaded Library ebooks to a format for my wife's kindle, and also for my android tablet (Aldiko). I have just converted a pdf to 'mobi' format with this. It does it but not that well, which is a shame as it is difficult to read two-column pages on an e-reader. What about the effect here of the fact that many times while we are reading we are not connected to the Internet? What I hate is that I need that intermediary bit of software from a specialist supplier (Adobe) in order to download library e-books, as the actual file seems to come from a central resource, not the library.

15-20 years ago when I was trying to sell my science fiction stories to the pulps I had this whole scenario (and just about every other privacy concern) nailed. Editors loved my ideas, but no skilled writer be I.

And folks that knew me were worried that I was paranoid. A few who listened understood all you had to do was take current technology, push it out a decade or so and add as mix of the old human nature and voila! Everything governments and corporations do has an undercurrent of despotic command and control.

I also wrote about how toxic wastes that are expensive to dispose of properly were instead being sold at a profit to the would-be polluters as food ingredients, those additives with such concise names like "stabilizers," "artificial flavoring" and of course "red dye #2"... that story also turned out to be the sad truth. (wrote that one in 1984)

I keep crying from the wilderness over here... the first and foremost intended use of ANY technology is always evil. Has been since the days of pouring boiling oil off the parapets.

Really??? So how was the Walkman intended to be evil? How was the iPod intended to be evil? How was the automobile intended to be evil? How was the internal combustion engine intended to be evil? How was the wheel intended to be evil?

I'm sorry, but that is just dumb. I might agree that people can find a way to use nearly anything for "evil," but that's what people choose to do. That's like blaming the gun for someone getting shot. Or, as is popular in the media nowadays, blaming the SUV for whatever happens when someone is driving one.

not product. A universal difference. Look where the drive toward the "silicon fire" under our fingertips came from. It wasn't Japanese manufacturers of transistor radios and cheap toys.

And what proportion of all humanity that has ever been caught their first glimpse of a wheel attached to the chariots rampaging their village?

The best glaring example against my statement (nothing is ever absolute) is gunpowder. The Chinese used it for centuries and hadn't purposed it to violence until western Europeans showed up.

Hyperbole is a civilized substitute for profanity. Guilty as charged.

The Chinese invented the "fire arrow" (hollow arrow filled with gunpowder) by AD 989, not long after gunpowder was first created... and around the same time as the "peaceful" fireworks first came about.

They also created a lot of other explosives, including mortars & grenades, which they used well before they could have possibly been "corrupted" by "evil Western influences". Not to mention they created gunpowder rifles before "the West" did.

to their walkman to watch where they're going?