9 July 2003. Mirrors of the Auto-ID RFID docs:
http://quintessenz.org/rfid-docs/cryptome.org/rfid-docs.htmhttp://www.cryptogon.com/2003_07_06_blogarchive.html#105758884475666166
8 July 2003
AP story on RFID: http://cryptome.org/buy-spy.htm
RS writes:
Silicon.com has an explanation of what went wrong at the Auto-ID Web site with the leaked confidential documents:Tracking tag firm exposes confidential data onlinehttp://silicon.com/news/500013-500001/1/5037.html
"These are now being taken down as the company works to fix the hole but visitors typing "confidential" into the site's search engine were presented with 68 sensitive documents."
I willing to bet early visitors to the Auto-ID Web site also looked at internal documents and didn't even know it. Pretty much any search phrase could end up finding internal documents.
I hadn't thought of this problem before. A site-based search engine is much more likely to find internal documents than Google. A site-based search engine gets to work with directory listings, while Google does not. Internal documents can appear in a directory, but they may never be linked to by other documents. A site-based search engine will find everything, but Google only finds linked documents. A site-based search engine would also find hidden directories with yet more internal documents.
I bet this problem is present on many Web sites. I wonder what companies who make search engine software for Web sites have to say about this "glitch".
Richard M. Smith
8 July 2003
FOR IMMEDIATE RELEASERFID Twist: CASPIAN Praises Auto-ID Center's "Openness Policy"
Consumer group seeks answers to three basic questions
July 8, 2003
CASPIAN (Consumers Against Supermarket Privacy Invasion and Numbering) invites the MIT Auto-ID Center to demonstrate its claim of being nonsecretive about the tracking of consumer products with radio frequency identification (RFID) tags.
Yesterday, the Center's Director Kevin Ashton claimed openness in a Boston Globe interview: "We don't have anything to hide, and we're very open with what we do."
This was in response to CASPIAN's disclosing a security hole on the Auto-ID Center website (www.autoidcenter.org) that permitted access to embarrassing and confidential documents. See
http://www.boston.com/dailyglobe2/189/business/PR_plan_riles_foes_of_product_tracking+.shtml
"We're very pleased that the Center is open to sharing information about its activities," said CASPIAN Founder and Director Katherine Albrecht.
"This is what we have been calling for all along. Now we'd like to see them prove it."
CASPIAN is challenging Ashton's claim by issuing 3 basic questions about the Center's current trials, including trials where Gillette Mach 3 razors are silently tagged and tracked at selected Wal-Mart stores.
1. What products are currently being tagged with RFID devices as part of the Auto-ID Center trials? What products have been involved in past trials?2. Where can consumers see the RFID trials underway? Please provide specific store location information.
3. Where can consumers get details about what information is being collected when they purchase tagged items during these trials? For example, are consumers being tracked, videotaped, or photographed?
Even RFID supporters are requesting that trial information be made public. Pro-RFID journalist Mark Roberti of RFID Journal beseeched companies to share more information after hearing of yesterday's security gaffe:
"I would implore any company currently running a pilot or considering one to brief the press on it and be as open about it as possible. Openness will convince your customers that you have no ill intent. Secrecy breeds mistrust. I know companies are risk-averse, and it's easy to think that not publicizing a trial reduces the risk of bad publicity. In fact, it only increases the risk that your company and this technology will be portrayed in a negative light." See
http://www.rfidjournal.com/article/articleview/494/1/1)
"We encourage Mr. Ashton and his organization to release these details as evidence of their public commitment to openness," says Albrecht.
Consumers Against Supermarket Privacy Invasion and Numbering (CASPIAN) is a grass-roots consumer group fighting retail surveillance schemes since 1999. With members in all 50 U.S. states and 15 nations across the globe, CASPIAN seeks to educate consumers about marketing strategies that invade their privacy and to encourage privacy-conscious shopping habits across the retail spectrum.
For more information about CASPIAN visit http://www.nocards.org.
Katherine Albrecht, CASPIAN Founder and Director: (877) 287-5854
Mary Starrett, CASPIAN Media Associate: (602) 315-6193
###
8 July 2003: A Zipped file of the 10 documents cited by CASPIAN:
http://cryptome.org/rfid/rfid-10.zip (2MB)
Mirrors are encouraged; send URLs to: jya@pipeline.com
7 July 2003
Auto-ID has begun to withdraw many of the documents cited in the CASPIAN release, and might substitute with less offensive files. Cryptome archived the original files and has replaced the original CASPIAN links to Auto-ID with Cryptome links.
FOR IMMEDIATE RELEASE
July 7, 2003
CASPIAN asks, "How can we trust these people with our personal data?"
CASPIAN (Consumers Against Supermarket Privacy Invasion and Numbering) says anyone can download revealing documents labeled "confidential" from the home page of the MIT Auto-ID Center web site in two mouse clicks.
The Auto-ID Center is the organization entrusted with developing a global Internet infrastructure for radio frequency identification (RFID). Their plans are to tag all the objects manufactured on the planet with RFID chips and track them via the Internet.
Privacy advocates are alarmed about the Center's plans because RFID technology could enable businesses to collect an unprecedented amount of information about consumers' possessions and physical movements. They point out that consumers might not even know they're being surveilled since tiny RFID chips can be embedded in plastic, sewn into the seams of garments, or otherwise hidden.
"How can we trust these people with securing sensitive consumer information if they can't even secure their own web site?" asks CASPIAN Founder and Director Katherine Albrecht.
"It's ironic that the same people who assure us that our private data will
be safe because 'Internet security is very good, and it offers a strong layer
of protection' [see
http://www.autoidcenter.com/new_media/media_kit/questions_answers.pdf]
http://cryptome.org/rfid/questions_answers.pdf
would provide such a compelling demonstration to the contrary," she added.
Among the "confidential" documents available on the web site are slide shows
discussing the need to "pacify" citizens who might question the wisdom of
the Center's stated goal to tag and track every item on the planet [
http://www.autoidcenter.com/media/communications.pdf ],
http://cryptome.org/rfid/communications.pdf
along with findings that 78% of surveyed consumers feel RFID is negative
for privacy and 61% fear its health consequences [
http://www.autoidcenter.org/media/pk-fh.pdf ].
http://cryptome.org/rfid/pk-fh.pdf
PR firm Fleischman-Hillard's confidential "Managing External Communications"
suggests a variety of strategies to help the Auto-ID Center "drive adoption"
and "neutralize opposition," including the possibility of renaming the tracking
devices "green tags." It also lists by name several key lawmakers, privacy
advocates, and others whom it hopes to "bring into the Center's 'inner circle'"
[ http://www.autoidcenter.com/media/external_comm.pdf ].
http://cryptome.org/rfid/external_comm.pdf
Despite the overwhelming evidence of negative consumer attitudes toward RFID
technology revealed in its internal documents, the Auto-ID Center hopes that
consumers will be "apathetic" and "resign themselves to the inevitability
of it" instead of acting on their concerns [
http://www.autoidcenter.com/publishedresearch/cam-autoid-eb002.pdf
].
http://cryptome.org/rfid/cam-autoid-eb002.pdf
Consumer citizens who are not feeling apathetic will be pleased to learn that the site provides names and contact information for the corporate executives who oversee the Center's efforts. Since the phone list isn't labeled "confidential," we're assuming that Auto-ID Center Board members are open to calls and mail that might help them better understand public opinion on this important subject.
Anyone interested in speaking with Dick Cantwell, the Gillette VP who heads the Center's Board of Overseers, for example, can find his direct office number listed on the Auto-ID Center's website here:
http://www.autoidcenter.com/uploads/226691160-list_board_of_overseers.pdfhttp://cryptome.org/rfid/226691160-list_board_of_overseers.pdf
To experience the Auto-ID Center's security holes firsthand, simply visit the web site at http://www.autoidcenter.org and type "confidential" in the site search box. The Center encourages such site exploration: "Our website has Research Papers and other information that anyone can download for free. There is also a Sponsors Only area of the site, which includes information and materials not available to the public at large. We encourage you to visit our site frequently to stay up to date with the Center's many activities."
Following are other examples of sensitive documents available at the site:
February 27, 2003 Board minutes:
http://www.autoidcenter.com/media/feb03_board/joint_minutes_feb03.pdf
ONS server schematics:
http://www.autoidcenter.com/media/feb03_board/oatsystems.pdf
EMS documentation:
http://www.autoidcenter.com/media/software.pdf
Documentation of RFID field tests:
http://www.autoidcenter.com/media/field_test_nov02.pdf
Consumers Against Supermarket Privacy Invasion and Numbering (CASPIAN) is a grass-roots consumer group fighting retail surveillance schemes since 1999. With members in all 50 U.S. states and 15 nations across the globe, CASPIAN seeks to educate consumers about marketing strategies that invade their privacy and to encourage privacy-conscious shopping habits across the retail spectrum.
For more information about CASPIAN, visit http://www.nocards.org.
Katherine Albrecht, CASPIAN Founder and Director: (877) 287-5854
Mary Starrett, CASPIAN Media Associate: (602) 315-6193
###
The confidential documents listed below will likely be withdrawn as soon as the host, Auto-ID Center, learns they are publicly accessible (see note above). Mirrors of the documents are encouraged. Cryptome has archived the documents (~20MB). If they are withdrawn by Auto-ID, and you want mirror send a request to jya@pipeline.com
Item 11 describes a PR campaign to persuade the public that RFID -- radio-frequency ID tagging of products -- is beneficial technology despite consumer privacy fears. It proposes an "international privacy advisory council:"
• Create a Privacy Advisory Council to:provide 3rd party validation to Center’s privacy commitment
offer valuable guidance on technology and privacy issues
serve as spokespeople, when necessary• Made up of:
well known, credible, and credentialed experts
potentially adversarial advocates• Examples of potential members:
Harvard Information Infrastructure Project
Georgetown Center on Law and Technology
Center for Democracy and Technology
Electronic Privacy Information Center
Global Information Infrastructure Commission
Consumer Federation of America
Privacy Officers Association
European Consumers’ Union
and enlist prominent opinion-makers:
• Including, for instance:U.S. Senators Leahy and McCain
U.S. Representatives Dingell and Tauzin
FTC Bureau of Consumer Protection
National Association of Attorneys General
AARP
AFL-CIO
Head of Unit, EC, Information Society
Leaders of European Parliament Industry Committee
Source: http://www.autoidcenter.org/
Search for "confidential" 68 results for: "confidential"
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Source: http://www.eanindia.com/NEWS/mit.htm
Wednesday 21st May 2003
UCC Finalises Agreement with MIT
Forms Joint Venture with EAN International to Drive Standards for
Electronic Product Code (EPC)(tm) Network
EAN International and the Uniform Code Council, Inc. (UCC), leaders in facilitating efficient international business, announced today at the UCC's annual U Connect Conference, the intention to establish AutoID, Inc., a not-for-profit organisation that will develop and oversee commercial and technical standards for the Electronic Product Code (EPC)(tm) Network. The EPC(tm) Network, based on research conducted at the Massachusetts Institute of Technology (MIT), uses radio frequency in combination with a network system to allow items or products to be identified. This technology will enable companies to have true visibility of their supply chains in real time, in any industry, anywhere in the world.
AutoID, Inc., is an initiative between EAN International and the UCC. Both organisations have more than 25 years developing standards for the EAN13 and the Universal Product Code (U.P.C.), now incorporated in the Global Trade Item Number (GTIN). Through the global standards of the EAN*UCC System, nearly one million member companies in more than 133 countries worldwide conduct business every day using bar codes and related electronic communications.
In his opening remarks at U Connect, Michael Di Yeso, Executive Vice President and Chief Operating Officer at the UCC, shared with the group of nearly 1,200 supply chain and logistics managers how the UCC and EAN International will bring this technology to market. "This is a natural, evolutionary step for the UCC and EAN International," said Di Yeso. "The UCC was one of the founding members to provide support when the EPC(tm) Network was just a concept. Now, with the technology nearly ready for market, the UCC and EAN International look forward to assuming the leadership role in enabling global companies to deploy this revolutionary system into their supply chains."
Because of its flexibility, EPC(tm) technology has positive implications for many industries across multiple sectors including high technology, fast moving consumer goods, healthcare, and transportation, among others. "We are very excited to begin developing the open and neutral standards necessary to make this technology real," said Di Yeso. "As with all of our programmes, the UCC and EAN International want this to be a collaborative effort with the business community, providing diverse applications for multiple industries." Di Yeso added, "We have a lot of work ahead of us, and one of the first tasks is to engage in dialogue with companies, and encourage them to join AutoID, Inc."
Miguel Lopera, CEO of EAN International, commented: "EAN International is thrilled to work with the UCC on this major initiative. We believe the EPC(tm) Network will add unprecedented benefits to the supply chain management of the users of the EAN*UCC System." He continued, "EAN International, along with its 99 Member Organisations, are uniquely positioned to help globalise the AutoID, Inc. initiative."
"We are at an important juncture for this technology, and the UCC and EAN
International are uniquely positioned to drive commercialisation and adoption
of the EPC," said Dick Cantwell, Chairman of the Board of Overseers for the
The EPC(tm) Network was developed by the
UCC's executive team was also announced at the conference. As President,
Dicki Lulay will drive the initiative in
ENDS
For more information Contact:
Graham Avory, EAN International +32 2 227 10 20, e-mail:
avory@ean-int.org
Cecily Laidman, Uniform Code Council, +1 609.620.4526, e-mail:
claidman@uc-council.org
Jill Pace, Fleishman Hillard, Inc. +1 314.982.0592, e-mail:
pacej@fleishman.com
More information about Auto ID Inc., can be found by logging onto:
www.ean-int.org/AutoID.htm
or
www.uc-council.org/AutoID.htm
NOTES FOR EDITORS:
EAN INTERNATIONAL
EAN International is the global not for profit organisation that creates,
develops and manages EAN*UCC standards jointly with the Uniform Code Council,
one of its Member Organisations. These are open, global multisectoral
information standards, based on best practices. By driving their
implementation, EAN International and its Member Organisations play a leading
role in the supply and demand chain management improvement worldwide. For
more information about EAN international, please visit:
www.ean-int.org
THE UNIFORM CODE COUNCIL, INC.
The Uniform Code Council, Inc. (UCC) is a not-for-profit organisation dedicated
to the development and implementation of standards-based, global supply chain
solutions. Under its auspices, the UCC operates two wholly owned
subsidiaries, UCCnet and RosettaNet, and it co-manages the global EAN*UCC
System with EAN International. UCC-based solutions, including business
processes, XML standards, EDI transaction sets, and the bar code identification
standards of the EAN*UCC System are currently used by more than one million
member companies worldwide. For more information about the Uniform
Code Council, please visit:
www.uc-council.org.
-o0o-
Regards
Graham Avory
Communications Manager
EAN International
Rue Royale 145, B-1000 Brussels, Belgium
Tel: + 32 2 227 10 20 Direct: +32 2 227 54 45
Fax: + 32 2 227 10 21
E-mail: avory@ean-int.org
Web site: www.ean-int.org
CONFIDENTIALITY/DISCLAIMER: The contents of this e-mail are confidential and are not regarded as a contractual offer or acceptance from EAN International, (registered in Belgium). If you are not the addressee, or if this has been copied or sent to you in error, you must not use data herein for any purpose, you must delete it and should inform the sender. EAN International disclaims liability for accuracy or completeness, and opinions expressed are those of the author alone. EAN International may monitor communications. Third party rights acknowledged. ©2003