<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
	>
<channel>
	<title>Comments on: When databases do more harm than good</title>
	<atom:link href="http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/</link>
	<description>The views of one man on security, privacy and anything else that catches his attention.  The views expressed on this blog do not reflect the views of my employer or anyone other than myself.</description>
	<lastBuildDate>Thu, 02 Feb 2012 21:45:54 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: Martin</title>
		<link>http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/comment-page-1/#comment-3309</link>
		<dc:creator>Martin</dc:creator>
		<pubDate>Thu, 04 Sep 2008 12:07:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/#comment-3309</guid>
		<description>No, most of my opinions are based on decades of experience in the real world.  But sometimes I just don&#039;t have the time to do proper research on a subject, so I just run with what I have.  That&#039;s one of the reason&#039;s I&#039;m a blogger, not a journalist.  Seriously, this is the blogosphere, what else do you expect? At least I&#039;m willing to admit my errors, which is a lot more than you can say about many bloggers.  Maybe if I didn&#039;t have a day job, a wife and two kids, as well as the blog and a podcast, I&#039;d have the time to spend more than 15-30 minutes on a post.  But that&#039;s not a luxury I have. 

Have a great day.

Martin</description>
		<content:encoded><![CDATA[<p>No, most of my opinions are based on decades of experience in the real world.  But sometimes I just don&#8217;t have the time to do proper research on a subject, so I just run with what I have.  That&#8217;s one of the reason&#8217;s I&#8217;m a blogger, not a journalist.  Seriously, this is the blogosphere, what else do you expect? At least I&#8217;m willing to admit my errors, which is a lot more than you can say about many bloggers.  Maybe if I didn&#8217;t have a day job, a wife and two kids, as well as the blog and a podcast, I&#8217;d have the time to spend more than 15-30 minutes on a post.  But that&#8217;s not a luxury I have. </p>
<p>Have a great day.</p>
<p>Martin</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mr W</title>
		<link>http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/comment-page-1/#comment-3306</link>
		<dc:creator>Mr W</dc:creator>
		<pubDate>Thu, 04 Sep 2008 10:07:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/#comment-3306</guid>
		<description>Good to see Adam spending time furnishing you with some detailed background. You said

&#039;Thanks for the feedback. Today is, as a matter of fact, the first time I’d heard of ContactPoint, and I am guilty of only reading the one article before forming my opinions.&quot;

I&#039;m just wondering if all your blogging is predicated on opinions formed ont he basis of reading one newspaper article, when there is a huge volume of material about the question being discussed freely available on the web.</description>
		<content:encoded><![CDATA[<p>Good to see Adam spending time furnishing you with some detailed background. You said</p>
<p>&#8216;Thanks for the feedback. Today is, as a matter of fact, the first time I’d heard of ContactPoint, and I am guilty of only reading the one article before forming my opinions.&#8221;</p>
<p>I&#8217;m just wondering if all your blogging is predicated on opinions formed ont he basis of reading one newspaper article, when there is a huge volume of material about the question being discussed freely available on the web.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adam</title>
		<link>http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/comment-page-1/#comment-3300</link>
		<dc:creator>Adam</dc:creator>
		<pubDate>Wed, 03 Sep 2008 20:54:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/#comment-3300</guid>
		<description>Hi Martin,
not a problem, and I am glad you took it in the way I hoped you would.

My concerns are very similar to yours, and you really have to stand back and ask why is there a need for collection of data into central repositories?

Within the context of ContactPoint the sole aim was to try and improve information sharing between professionals.  It came about after a small girl was murdered in London even though she was known to lots of Social Services.  When the report into the actions of her death where made public it showed that nobody knew who else had dealings with her.  ContactPoint prime reason for being is to show who else is dealing with a child.  On paper its a really good idea. 

What is a my bug bear is the danger of placing the data into the hands of a Government that has a terrible reputation of data security.

If I had a database that had information about kids and the data was compromised in some way, sure it would be a big deal, but in the big scheme of things its a small database.

If I then combine that with lots of other databases it near enough creates it&#039;s own gravity, of the wrong type.... and for all the wrong reasons. 


Social engineering as it is means there will be a breach of security with this database its just a question of time.

Its a case of &quot;the right reasons&quot; but too much at stake.  IMHO

They should take this model and reduce it in scale to combine local data and share between neighbours.

Any way - a good debate me thinks..

:o)

adam</description>
		<content:encoded><![CDATA[<p>Hi Martin,<br />
not a problem, and I am glad you took it in the way I hoped you would.</p>
<p>My concerns are very similar to yours, and you really have to stand back and ask why is there a need for collection of data into central repositories?</p>
<p>Within the context of ContactPoint the sole aim was to try and improve information sharing between professionals.  It came about after a small girl was murdered in London even though she was known to lots of Social Services.  When the report into the actions of her death where made public it showed that nobody knew who else had dealings with her.  ContactPoint prime reason for being is to show who else is dealing with a child.  On paper its a really good idea. </p>
<p>What is a my bug bear is the danger of placing the data into the hands of a Government that has a terrible reputation of data security.</p>
<p>If I had a database that had information about kids and the data was compromised in some way, sure it would be a big deal, but in the big scheme of things its a small database.</p>
<p>If I then combine that with lots of other databases it near enough creates it&#8217;s own gravity, of the wrong type&#8230;. and for all the wrong reasons. </p>
<p>Social engineering as it is means there will be a breach of security with this database its just a question of time.</p>
<p>Its a case of &#8220;the right reasons&#8221; but too much at stake.  IMHO</p>
<p>They should take this model and reduce it in scale to combine local data and share between neighbours.</p>
<p>Any way &#8211; a good debate me thinks..</p>
<p> <img src='http://mckeay.net/wp-includes/images/smilies/icon_surprised.gif' alt=':o' class='wp-smiley' /> )</p>
<p>adam</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Martin</title>
		<link>http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/comment-page-1/#comment-3299</link>
		<dc:creator>Martin</dc:creator>
		<pubDate>Wed, 03 Sep 2008 18:53:43 +0000</pubDate>
		<guid isPermaLink="false">http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/#comment-3299</guid>
		<description>Adam,

Thanks for the feedback.  Today is, as a matter of face, the first time I&#039;d heard of ContactPoint, and I am guilty of only reading the one article before forming my opinions.  So thanks for letting me know that there&#039;s a lot more going on here and that the original article might be a little one sided.

The thought of this being a database containing information on all children in England and Wales scares me even more than the thought of this being about at risk children.  I cringe at the thought of people being educated into believing that having the government track them like this from an early age for no other reason than something might be useful at some point.  People need to realize that just collecting the data for the sake of having it is dangerous.  Very dangerous.  And despite general wisdom, the danger is much greater from someone internal abusing the system than from an external attacker. 
 
I could rant all day on the dangers of governmental collection of data.  Instead, let me thank you again for clearing up some of my misconceptions.  I don&#039;t know if I&#039;m happier knowing the facts, but I&#039;m definitely better educated for it.  

Martin</description>
		<content:encoded><![CDATA[<p>Adam,</p>
<p>Thanks for the feedback.  Today is, as a matter of face, the first time I&#8217;d heard of ContactPoint, and I am guilty of only reading the one article before forming my opinions.  So thanks for letting me know that there&#8217;s a lot more going on here and that the original article might be a little one sided.</p>
<p>The thought of this being a database containing information on all children in England and Wales scares me even more than the thought of this being about at risk children.  I cringe at the thought of people being educated into believing that having the government track them like this from an early age for no other reason than something might be useful at some point.  People need to realize that just collecting the data for the sake of having it is dangerous.  Very dangerous.  And despite general wisdom, the danger is much greater from someone internal abusing the system than from an external attacker. </p>
<p>I could rant all day on the dangers of governmental collection of data.  Instead, let me thank you again for clearing up some of my misconceptions.  I don&#8217;t know if I&#8217;m happier knowing the facts, but I&#8217;m definitely better educated for it.  </p>
<p>Martin</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adam</title>
		<link>http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/comment-page-1/#comment-3297</link>
		<dc:creator>Adam</dc:creator>
		<pubDate>Wed, 03 Sep 2008 18:34:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.mckeay.net/2008/09/03/when-databases-do-more-harm-than-good/#comment-3297</guid>
		<description>Hi there,
interesting thoughts you have laid out, but your facts are fundamentally flawed.

To me it seems you have read information from the web without researching any of the details.  

You will find that ContactPoint is not a database of &quot;at risk&quot; children but more a register of all children in England and Wales.  If a child is at risk they are more likely to have their information shielded on ContactPoint, in a similar way to children of celebrities or high profile members of the public.

You also talk about security being bolted on afterwards, again your facts are wrong.  To be considered to be able to access the ContactPoint system (think very secure webbased telephone directory!) you need to be sponsored, you need to be Police vetted (enahanced CRB - think very detailed police search on your past history), you need to be vetted by your own organisation, you need to have fulfilled the mandatory training on the legal aspects of sharing information and you need to have carried out the ContactPoint training.  
It is only then that you will be provided with a token for access, this token is a 1-2-1 ratio, and is used to login to the system.   Anything you do in the system is audited.  Every Council has to have a dedicated team of people to keep an eye on the use of ContactPoint. 

Overall the security of the system is more than any other system ever attempted to be introduced into the English Councils.  

It is not 100% secure because no system ever is, but its a lot better than you realise.

But - I am not an advocate of the ContactPoint and am deeply concerned over the misuse of the data, which IMHO will come from the Centralisation of the data rather than rouge elements accessing individual elements.

I just thought that you would be happier knowing the facts..

thanks

Adam</description>
		<content:encoded><![CDATA[<p>Hi there,<br />
interesting thoughts you have laid out, but your facts are fundamentally flawed.</p>
<p>To me it seems you have read information from the web without researching any of the details.  </p>
<p>You will find that ContactPoint is not a database of &#8220;at risk&#8221; children but more a register of all children in England and Wales.  If a child is at risk they are more likely to have their information shielded on ContactPoint, in a similar way to children of celebrities or high profile members of the public.</p>
<p>You also talk about security being bolted on afterwards, again your facts are wrong.  To be considered to be able to access the ContactPoint system (think very secure webbased telephone directory!) you need to be sponsored, you need to be Police vetted (enahanced CRB &#8211; think very detailed police search on your past history), you need to be vetted by your own organisation, you need to have fulfilled the mandatory training on the legal aspects of sharing information and you need to have carried out the ContactPoint training.<br />
It is only then that you will be provided with a token for access, this token is a 1-2-1 ratio, and is used to login to the system.   Anything you do in the system is audited.  Every Council has to have a dedicated team of people to keep an eye on the use of ContactPoint. </p>
<p>Overall the security of the system is more than any other system ever attempted to be introduced into the English Councils.  </p>
<p>It is not 100% secure because no system ever is, but its a lot better than you realise.</p>
<p>But &#8211; I am not an advocate of the ContactPoint and am deeply concerned over the misuse of the data, which IMHO will come from the Centralisation of the data rather than rouge elements accessing individual elements.</p>
<p>I just thought that you would be happier knowing the facts..</p>
<p>thanks</p>
<p>Adam</p>
]]></content:encoded>
	</item>
</channel>
</rss>

