Date: 2007-11-21 08:42 pm (UTC)
From: [identity profile] the-marquis.livejournal.com
LOL it was an amusing listing, is it me though or have the rest of the media missed the boat on this one viz ID cards, just why the NAO would need to see these records, and will the Data Commisioner impose a whopping great (landmark) fine on HMRC???

Date: 2007-11-21 09:20 pm (UTC)
ext_189645: (lurcher)
From: [identity profile] bunn.livejournal.com
According to tonight's news, they didn't need to see the records, and after a previous occasion when they'd been sent the entire dataset on CD, NAO had asked them to only send the data that needed to be checked, not all of it.

Apparently SELECT fieldname, fieldname, fieldname was too expensive, when you could just SELECT *...

The whole thing is somehow boggling, yet utterly predictable...

Date: 2007-11-21 11:02 pm (UTC)
ext_27570: Richard in tricorn hat (Default)
From: [identity profile] sigisgrim.livejournal.com
It's just a bunch of civil servants who are a bit (lot) out of their depth, but now less dangerous for that.

If one does need to physically transfer that amount of highly sensitive data you physically walk / drive / fly it to where it needs to go. But what is wrong with remote access? Get your server / database to talk to my server / database. We know it's not that difficult, but I suspect that their IT systems are so wrapped up in protection, isolated from the rest of the world (rest of reality) that no friendly system can talk to another one.

I bet these are people who insist on 15 character passwords with lower case, UPPER CASE, 999, and $&^^%@!$ that change every 30 days which nobody can remember and everybody writes down. *shakes head*

Date: 2007-11-21 11:09 pm (UTC)
ext_189645: (Default)
From: [identity profile] bunn.livejournal.com
The killer detail for me was that there was a password on it, but no encryption. That's really funny: the token effort based on tragic misconception.

It makes me think of the joke about the countryman giving directions :

"well, if I was going where you're going, I wouldn't be starting from here!"

Date: 2007-11-21 10:07 pm (UTC)
From: [identity profile] philmophlegm.livejournal.com
The NAO presumably wanted the records as part of their audit testing. I'm not sure why they wouldn't do their testing and sample selection on site though, which would remove the need to send this kind of data through internal mail.

Date: 2007-11-21 10:55 pm (UTC)
ext_189645: (Default)
From: [identity profile] bunn.livejournal.com
A question I keep wondering about is why this supposed 23 year old assistant-type person has access to just dump 25 million records onto a CDROM and pop it in an envelope.

Date: 2007-11-21 11:07 pm (UTC)
ext_27570: Richard in tricorn hat (Default)
From: [identity profile] sigisgrim.livejournal.com
I hadn't heard that was had happened, but then I've not listened to the news this evening. My guess would be that the person who had the access just pulled the data and said the the assistant "get that over to NAO" and didn't bother to check exactly was how it to be done. A failure in instructions, as well as a failure in quality control.

I wonder if the assistant even knew what data they were dealing with.

Date: 2007-11-21 11:11 pm (UTC)
ext_189645: (Default)
From: [identity profile] bunn.livejournal.com
That's just as bad, surely. Equivalent to giving the assistant the password. Worse, really, because so easy to copy a CD and all the records already neatly packaged for transport.

Date: 2007-11-22 10:47 am (UTC)
ext_27570: Richard in tricorn hat (Default)
From: [identity profile] sigisgrim.livejournal.com
I'm not saying that it is better, indeed I would agree that it is worse.

The point I'm making is that it is the assistant's manager who is at fault, not the assistant themselves; other than perhaps questioning whether they should do it or asking for more details about what should be done. But the level of assistant (which I don't know) would determine whether they had enough knowledge to know to ask.

Date: 2007-11-22 12:25 am (UTC)
From: [identity profile] philmophlegm.livejournal.com
Evidence of poor controls.

Possibly that was what the NAO was testing for!

Date: 2007-11-21 10:10 pm (UTC)
From: [identity profile] philmophlegm.livejournal.com
Douglas Adams spent much of his career writing about the failings of bureaucracy. He'd have loved the fact that Gordon Brown's statement on the mess was exactly the same as god's last message to creation in HHGTTG:

"I apologise for the inconvenience."

Yes, he really said that.

Class.

Date: 2007-11-22 12:44 am (UTC)
From: [identity profile] freddiethetroll.livejournal.com
The most shocking thing about this for me is the revelation that 15 million people get child benefit.

So in a very overcrowded country with very high house prices, supposedly desperate to reduce its 'carbon footprint', the government thinks it is appropriate to encourage one in four of the population to have more children; furthermore it chooses to do this by taxing and spending.

Uh?


Abolish child benefit. If people are going to complain that they'll be too poor to properly bring up their children, well they should have thought about that earlier.

Date: 2007-11-22 11:19 am (UTC)
ext_27570: Richard in tricorn hat (Default)
From: [identity profile] sigisgrim.livejournal.com
Compulsary sterilisation of all the population. Then those who want children must pass some sort of test to prove that they are able to bring them up properly.

I know where you're comming from, but the problem with abolshing child benefit is that it penalises the children and they had no choice in the matter of being born.

The other thing to consider is that the 15 million people would include not only those receiving it now, but probably those who have applied and been rejected, and those who were receiving it previously (at least for a time). Also child benefit covers a period of at least 16 years, I think it goes on longer for those who have children in higher education (to age 19?).

Date: 2007-11-22 03:42 pm (UTC)
From: [identity profile] philmophlegm.livejournal.com
"Compulsory sterilisation of all the population" isn't exactly libertarian though is it? I can sympathise with the idea, but I think you might offend our trollish friend...

Date: 2007-11-22 07:28 pm (UTC)
ext_27570: Richard in tricorn hat (Default)
From: [identity profile] sigisgrim.livejournal.com
I don't think that I claimed that it was libertarian.

As for offending freddie, he is at liberty to be offended if he wishes to be. To be true to libertarianism (as it has been explained to me) I should be at liberty to be as offensive (or pleasant) to him as I wish.

The problem with such a philosophy is that somebody's liberty infringes somebody else's liberty. For example, I want the liberty to be able to go into a pub and not have to breath somebody else's tobacco smoke, however, that person wants the liberty to be able to partake of a cigarette while they drink their pint in the pub. Where does one draw the line?

Even the principle employed by Human Rights legislation is open to problems. (One only enjoy something as a Human Right if it doesn't infringe somebody else's Human Right to something.) Does the second person also loose their Human Right to that thing because by having it they are, through Human Right legislation, preventing the first person from enjoying their Human Right? And so we go round in circles...

Date: 2007-11-22 11:42 pm (UTC)
From: [identity profile] philmophlegm.livejournal.com
I think the point about drawing the line is that by and large people are better at drawing the line than the state.

Or at least I think that's his point.

Help me out here, Freddy...

Date: 2007-11-22 11:43 pm (UTC)
From: [identity profile] philmophlegm.livejournal.com
Oops - that should be 'Freddie' not 'Freddy'. Now it's me offending him / her / it.

Date: 2007-11-23 01:15 pm (UTC)
ext_27570: Richard in tricorn hat (Default)
From: [identity profile] sigisgrim.livejournal.com
I didn't think that Freddie had made any specific point regarding libertarianism, at least on this thread, but maybe you know better than I do.

I'm not convinced about the claim that people are better at drawing the line than the state.

Take communisism for example. The basic principle that everybody is given what they need is basically sound (regardless of whether you or I actually believe in it). However to actually achieve that ideal somebody has to do the mecanics of the giving out and that person will be able to abuse the system. Human nature being what it is they will do, so the whole system breaks down.

Alternatively, to take the example that I cited above of smoking. The state has been forced to draw the line because most smokers weren't prepared to draw a reasonable line themselves. The amount of whinging that smokers have done this year about their "right to smoke" while ignoring other people's right to smoke-free air has been immence.

There are some things which it is better for the state to draw the line because they relate to many, many people, or a very broad picture needs to be considered. And there are other things that people are better at drawing the line because they are more focused. I don't think that a one-size-fits-all approach is workable.

Going back to the OTT suggestion of mine of universal steralisation and Freddie's complaint that prospective parents should consider the cost of bringing up prospective children. Freddie himself make the point in that complaint that many individual people aren't good at making that decision. My proffered solution to Freddie's complaint is that the decision should be taken away from the people as a whole before they make it (because they aren't any good at it), rather than afterwards (because doing that would unfairly penalise those who had made a sensible decision in good faith based on the current situation).

Date: 2007-11-23 01:44 pm (UTC)
From: [identity profile] philmophlegm.livejournal.com
If you look up his profile, he calls himself 'Freddie the Libertarian Troll'.

On the other hand, it also says he was born in 1899, which seems unlikely!


He seems to have gone rather quiet for now. I also notice that he's never actually made a post himself, only comments and replies.

Date: 2007-11-23 03:39 pm (UTC)
ext_189645: (Default)
From: [identity profile] bunn.livejournal.com
Hmmm. I think this thread has gone far enough off topic that I'd like to call a halt, please.

Profile

bunn: (Default)
bunn

January 2026

S M T W T F S
     123
45678910
11121314151617
18192021222324
25262728293031

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Jan. 2nd, 2026 03:01 pm
Powered by Dreamwidth Studios