<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: My New Web 2.0 Identity Theft Scheme</title>
	<atom:link href="http://episteme.ca/2007/01/23/my-new-web-20-identity-theft-scheme/feed/" rel="self" type="application/rss+xml" />
	<link>http://episteme.ca/2007/01/23/my-new-web-20-identity-theft-scheme/</link>
	<description></description>
	<lastBuildDate>Sat, 04 Feb 2012 10:41:30 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: Eric Wolbrom, KeepYouSafe.Com</title>
		<link>http://episteme.ca/2007/01/23/my-new-web-20-identity-theft-scheme/comment-page-1/#comment-174</link>
		<dc:creator>Eric Wolbrom, KeepYouSafe.Com</dc:creator>
		<pubDate>Tue, 23 Jan 2007 18:30:34 +0000</pubDate>
		<guid isPermaLink="false">http://episteme.ca/wp/?p=217#comment-174</guid>
		<description>Hello, Eric Wolbrom, Co-Founder of KeepYouSafe.com, here. Just wanted to respond to some of the issues you raised in your comment on our Secure Online Safe Deposit Box service. 

Sorry that we got your &quot;spidey sense tingling.&quot; You do raise some good points, thanks, and we appreciate the opportunity to address them.

&gt;1. Nowhere on the site is there any identifying information - there&#039;s no information on the company founders, no information about the background of the company, and generally, no identifying information at all. And nothing in the domain registry info, either.

You&#039;re absolutely right. In the last minute rush to get our site launched, (the service itself has been fully tested and retested and vetted, the site is still just a bit under construction) we haven&#039;t put up all of the planned public web pages yet. We focused more on the technical information than the personal info, because that&#039;s what we personally gravitate to when we&#039;re evaluating a service.

Our bios were added to the site early this afternoon. We&#039;ll also be adding information shortly about our company and our board of advisors, many of whom have backgrounds in law enforcement or network/data security.  As you can now read in our bios, both myself and my partner are CISSPâ€™s (certified information system security professionals) and have been since 2000. Our company, Information Survival, LLC, is a member in good standing of the NYECTF (the New York Electronic Crime Task Force, run by the Secret Service).

Regarding the domain registry info, it was just a matter of keeping it brief to avoid spam and other annoyances.

&gt;2. Their terms of use abdicate all responsibility - Okay, so, surely, they&#039;re going to take responsibility for the information, right? Much like a bank, there&#039;s going to be some sort of insurance that if they lose my data, they&#039;re going to pay for it, right?

I&#039;ve yet to see any company/enterprise/government agency whose TOS states that they will take financial responsibility for lost data. 

Our TOS states we&#039;re not responsible for data loss to provide protection against potential user-caused losses.  We want to avoid long, drawn-out legal battles over whose fault it was if someone gives out their password and their data is exposed. That said, we have complete faith in our security systems â€“ and will happily answer any questions you or others might have about them.

&gt;Even more important to my security spidey sense was their technical white paper about their security architecture. It&#039;s worth a read - it&#039;s just about the perfect document that could give someone who has never done any security a complete sense of false security. 

This is a little too vague for me to respond to  â€“ I&#039;m not sure exactly what you found in our &quot;perfect document&quot; that concerns you? Please feel free to contact me at wolbrom@keepyousafe.com so we can discuss further, if you like.</description>
		<content:encoded><![CDATA[<p>Hello, Eric Wolbrom, Co-Founder of KeepYouSafe.com, here. Just wanted to respond to some of the issues you raised in your comment on our Secure Online Safe Deposit Box service. </p>
<p>Sorry that we got your &#8220;spidey sense tingling.&#8221; You do raise some good points, thanks, and we appreciate the opportunity to address them.</p>
<p>>1. Nowhere on the site is there any identifying information &#8211; there&#8217;s no information on the company founders, no information about the background of the company, and generally, no identifying information at all. And nothing in the domain registry info, either.</p>
<p>You&#8217;re absolutely right. In the last minute rush to get our site launched, (the service itself has been fully tested and retested and vetted, the site is still just a bit under construction) we haven&#8217;t put up all of the planned public web pages yet. We focused more on the technical information than the personal info, because that&#8217;s what we personally gravitate to when we&#8217;re evaluating a service.</p>
<p>Our bios were added to the site early this afternoon. We&#8217;ll also be adding information shortly about our company and our board of advisors, many of whom have backgrounds in law enforcement or network/data security.  As you can now read in our bios, both myself and my partner are CISSPâ€™s (certified information system security professionals) and have been since 2000. Our company, Information Survival, LLC, is a member in good standing of the NYECTF (the New York Electronic Crime Task Force, run by the Secret Service).</p>
<p>Regarding the domain registry info, it was just a matter of keeping it brief to avoid spam and other annoyances.</p>
<p>>2. Their terms of use abdicate all responsibility &#8211; Okay, so, surely, they&#8217;re going to take responsibility for the information, right? Much like a bank, there&#8217;s going to be some sort of insurance that if they lose my data, they&#8217;re going to pay for it, right?</p>
<p>I&#8217;ve yet to see any company/enterprise/government agency whose TOS states that they will take financial responsibility for lost data. </p>
<p>Our TOS states we&#8217;re not responsible for data loss to provide protection against potential user-caused losses.  We want to avoid long, drawn-out legal battles over whose fault it was if someone gives out their password and their data is exposed. That said, we have complete faith in our security systems â€“ and will happily answer any questions you or others might have about them.</p>
<p>>Even more important to my security spidey sense was their technical white paper about their security architecture. It&#8217;s worth a read &#8211; it&#8217;s just about the perfect document that could give someone who has never done any security a complete sense of false security. </p>
<p>This is a little too vague for me to respond to  â€“ I&#8217;m not sure exactly what you found in our &#8220;perfect document&#8221; that concerns you? Please feel free to contact me at <a href="mailto:wolbrom@keepyousafe.com">wolbrom@keepyousafe.com</a> so we can discuss further, if you like.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andy ITGuy</title>
		<link>http://episteme.ca/2007/01/23/my-new-web-20-identity-theft-scheme/comment-page-1/#comment-173</link>
		<dc:creator>Andy ITGuy</dc:creator>
		<pubDate>Tue, 23 Jan 2007 16:48:35 +0000</pubDate>
		<guid isPermaLink="false">http://episteme.ca/wp/?p=217#comment-173</guid>
		<description>And I thought that the stolenidsearch.com was bad. This is unbelievable. Of course there will be plenty of people naive  enough to do this</description>
		<content:encoded><![CDATA[<p>And I thought that the stolenidsearch.com was bad. This is unbelievable. Of course there will be plenty of people naive  enough to do this</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: rG0d</title>
		<link>http://episteme.ca/2007/01/23/my-new-web-20-identity-theft-scheme/comment-page-1/#comment-172</link>
		<dc:creator>rG0d</dc:creator>
		<pubDate>Tue, 23 Jan 2007 15:03:48 +0000</pubDate>
		<guid isPermaLink="false">http://episteme.ca/wp/?p=217#comment-172</guid>
		<description>I love it. Of course this could be really useful if I scanned them in, ENCRYPTED them, and uploaded them (preferably along with the crypto software) to the site. Hmm. Might just do that to see how long my account lasts...</description>
		<content:encoded><![CDATA[<p>I love it. Of course this could be really useful if I scanned them in, ENCRYPTED them, and uploaded them (preferably along with the crypto software) to the site. Hmm. Might just do that to see how long my account lasts&#8230;</p>
]]></content:encoded>
	</item>
</channel>
</rss>

