5/01/2010

平行實境遊戲 (Alternate reality game)

Alternate Reality Game (平行實境遊戲,簡稱ARG) 是一種把真實世界當作平台的互動式劇情,通常會包含多媒體與遊戲元素,平行實境遊戲的故事情節可以被參加者的想法或行動改變。
平行實境遊戲中需要玩家的大量參與,劇情的發生是即時的,而且會受到玩家反應的影響。相對於傳統電玩中,角色是被遊戲中的人工智慧所控制,角色在平行實境遊戲中是被遊戲的設計者所控制的。
玩家們直接與平行實境遊戲中的角色互動,一起解決設計好的挑戰或是謎題,也經常以一個社群的方式來分析劇情並協調現實生活與進行中的活動。
一般來說,平行實境遊戲使用各式各樣的媒體來傳遞訊息,例如:電話,電子郵件,或信件。

10/25/2009

ChoicePoint allows data breach, again

Published: 2009-10-20
Consumer-data broker ChoicePoint turned off a database monitoring system, allowing an unknown person to conduct unauthorized searches of one of its systems, the Federal Trade Commission said on Monday.
The breach, which occurred over 30 days starting August 8, 2008 (corrected), exposed the personal information of 13,750 people, including Social Security numbers. On Monday, the FTC announced that a court had ruled against the company, finding that it had violated a 2006 court order that resulted from its previous breach. Under the new agreement, the company agreed to improve its data security and pay $275,000 into a fund for consumers affected by the breach.
"If the security software tool had been working, ChoicePoint likely would have detected the intrusions much earlier and minimized the extent of the breach," the FTC claimed in a statement released on Monday.

In a statement issued on Monday, ChoicePoint — now owned by Reed Elsevier — added details that suggested the breach was far less serious than characterized by the FTC and involved a former government customer that failed to protect their credentials to the system.

"The former government customer's failure to properly safeguard its user ID and password resulted in unauthorized access to a ChoicePoint database," the company said in the statement. "The database did not contain personal information subject to the Fair Credit Reporting Act and no information provided by ChoicePoint's customers was compromised."

In 2005, ChoicePoint revealed that criminals had created fake businesses to gain access to the company's information on consumers. The breach resulted in the unauthorized access to 145,000 people's profiles. Data broker Lexis Nexus also acknowledged in 2005 that it had fallen for a similar scheme, allowing unauthorized groups access to some 310,000 consumer records.

As part of the latest court order, which modifies the 2006 consent decree, ChoicePoint will report its current security status and procedures to the FTC every two months for the next two years.

CORRECTION: The original news brief assigned the breach to the wrong time period. While the monitoring system as disabled in April 2008, according to the FTC, the actual attack started on August 8, 2008. In addition, the $275,000 is not a punitive fine, but an agreed-upon payment into a fund for consumer redress, according to ChoicePoint. Additional ChoicePoint comment was added to the article.

If you have tips or insights on this topic, please contact SecurityFocus.

Posted by: Robert Lemos

6/06/2007