Stupid Security prize relaunched

NEWS

A civil rights organisation wants to hear examples of security measures that are so ill-advised, impotent or irritating that they should be named and shamed.

Privacy International (PI) announced on Monday that it is holding the "Stupid Security Awards" in an attempt to highlight the absurdities of the security industry.

These awards were first held by PI in 2003. They are being staged again, according to PI director Simon Davies, in response to a sharp rise in "pointless, intrusive, stupid and self-serving" security measures.

"The situation has become ridiculous," said Davies in a statement. "Security has become the smokescreen for incompetent and robotic managers the world over".

Prizes that will be awarded include, Most Egregiously Stupid Award, Most Inexplicably Stupid Award, Most Annoyingly Stupid Award, Most Flagrantly Intrusive Award and Most Stupidly Counter-productive Award.

As an example, Davies cited the North London school which had been fingerprinting pupils without their parents' consent, and Network Rail's decision, back in 2003, to ban train-spotters from its stations as they were potential terrorists.

The rise of organised cybercriminals means that many IT managers are wrestling with the challenge of tightening up security. PI argues, though, that companies who introduce new security measures unthinkingly can cause more harm than good.

The competition closes on 31 October 2006. Nominations can be emailed to stupidsecurity@privacy.org.

Talkback

I am with 99% of readers who don't know what egregious means.

25 Aug 06 11:35 Reply

In defense of security professionals

Some security measures may seem stupid to the public or to those who don't understand security.

However to someone who eats, sleeps and breathes security there are reasons that just everyone may not understand.

http://www.forestwander.com

25 Aug 06 15:04 Reply

In reply to the previous comment "In defense of security professionals", I partly agree with you. But still there are security measures which are stupid to some extent. This is probably due to the fact that security professionals are mostly over-cautious and does not want to take any risk.

Its comparitively easy to spend loads of money and build a secured environment, but the real skill is to justify the security barrier with respect to threat.

A simple analogy is, someone was murdered in a pub doesnt mean one will stop going to pub.

Anyway, I personally welcome this idea of Stupid Security prize, at least it will be a good laugh in this serious security world.

1 Sep 06 09:57 Reply

Post your comment

In order to post a comment you need to be registered and logged in

Log in or create your ZDNet UK account below

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Membership FAQ

ZDNet UK Live

sameerhere

the future of mobile will be location and context aware. This means, you will have apps that will suggest you depending where you are right...

1 hour ago by sameerhere on Symbian^3 will do resistive multitouch, says Nokia
kenye2009

hello i would like to have some form of a answer to this question as it concerns the goverment i want to know why if your on state benefits as a...

1 hour ago by kenye2009 on ITN to launch ITV online news service
georgiox

love the LHC info. Keep up the good work. May God bless all in volved.

7 hours ago by georgiox on LHC to run for longest continuous period
sgardia

You are quite right. HDS has not been marketing their products well. USPV is miles ahead in terms of ease of use and technology on enterprise...

12 hours ago by sgardia on Will the SUN set on Hitachi Data Systems OEM relationship?
apexwm

Fedora is the same way as well. The yum update system uses "presto" which shrinks the amount of data needed for download. It's a great system....

23 hours ago by apexwm on Can you believe it - 2765 kB will be freed?
cybfor

Updated ID cards considered for 2012: [zdnet.co.uk] The government is considering introducing a new generation of ID... http://dlvr.it/KpBZ

cybfor

Google, Viacom trade blows in YouTube copyright spat: [zdnet.co.uk] Google and the US media giant Viacom have issued... http://dlvr.it/Knht

CIMITL

Be sure to include an audio option - eg. a beep tone - to intensify and reiterate the action. This will greatly benefit some consumers and give...

1 day ago by CIMITL
DataSecurityUK

Data disposal is really important to get right. There are standards set by UK and US federal governments to ensure that data is kept secure. If...

1 day ago by DataSecurityUK
chaycon1

Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...

1 day ago by chaycon1 on BT launches 40Mbps fibre-based broadband
chaycon1

Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...

1 day ago by chaycon1 on Google to build gigabit broadband to the home
J.A. Watson

Hi Dava, I'm glad to hear from you, and glad that you see things from the other side. I think that is the most important point of the whole...

1 day ago by J.A. Watson on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest
dava4444

please please please please please please kill that spam bot.

1 day ago by dava4444 on ZDNet UK: faster, smarter, still IT all the way
253chelisa253

hi

1 day ago by 253chelisa253 on How security will look in 10 years
lezlow

it is only greedy[microsoft]?

1 day ago by lezlow on Researchers break into BitLocker
dava4444

it didn't post the link it's 'Ubuntu 10.04 Lucid Lynx Beta-1 First Look' on youtube :) Dava

1 day ago by dava4444 on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest
dava4444

Hi James I disagree, Ubuntu needs a GUI update and this one IMO is quite good. your pics show a low res. here's a high res. on YouTube* The...

1 day ago by dava4444 on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest
dava4444

Hi any news on the comment bot? knocking me back from my own blog is a bit cheeky lol *Mulder to Scully* "I think it has an agenda.." I know, I...

1 day ago by dava4444 on ZDNet UK: faster, smarter, still IT all the way
benny boy

if you look at the Brentwood exchange on samknows it servers 21,000 residential propertiesm, Lowestoft serves 31,000! Come on BT sort yourselves...

1 day ago by benny boy on BT fibre broadband coming to 69 more towns
pbreddit

[programming] H.264 - a sting in the tail http://reddit.com/bfu4q [zdnet.co.uk]

Featured white papers

Achieving PCI Compliance for:Privileged Password Management & Remote Vendor Access

For multi-store outlets, including retail, banking, grocery, gas, hospitality, convenience stores and others, reducing (or avoiding) the cost of in-store system support and maintenance while maintaining compliance with PCI and other requirements has become a strategic challenge.

Download now

Web 2.0 Security Threats: How to Protect Your Enterprise Network

Speaker: Dr. Chenxi Wang, Principal Analyst, Security and Risk Management, Forrester Research, Inc. As Enterprises are increasingly connected to the Internet and as hard organizational boundaries are fast disappearing, security professionals are facing fresh challenges in Enterprise computing.

Download now

MindManager - Tutorial for New Users - Short

This tutorial is for new MindManager users and teaches you how to get started, by creating maps, reading maps and organizing your information.

Download now