Will cookie alternatives sidestep privacy laws?

HTTP Cookie Hijacking in the Wild: Security and Privacy Implications

The widespread demand for online privacy, also fueled by widely-publicized demonstrations of session hijacking attacks against popular websites, has spearheaded the increasing deployment of HTTPS. However, many websites still avoid ubiquitous encryption due to performance or compatibility issues. The prevailing approach in these cases is to force critical functionality and sensitive data access...

Free Will, Genuine Alternatives and Predictability

Drafting Informational Privacy Laws: Information Science Perspective

In this paper, we describe an information science approach to drafting information privacy laws. Information scientists can contribute to the design of these laws not as mere technical experts, but rather as collaborators in design and construction of the legal text. Specifically, this paper concentrates on rules governing the handling of personal identifiable information (PII). First, we devel...

Sharing Data under Genetic Privacy Laws

Clinical medical practice and biomedical research utilize genetic information for specific purposes. Irrespective of the purpose of obtaining genetic material, methodologies for protecting the privacy of patients/donors in both clinical and research settings have not kept pace with rapid genetic advances. When the usage of genetic information is not predicated on the latest laws and policies, t...

Inferential or Differential: Privacy Laws Dictate

So far, privacy models follow two paradigms. The first paradigm, termed inferential privacy in this paper, focuses on the risk due to statistical inference of sensitive information about a target record from other records in the database. The second paradigm, known as differential privacy, focuses on the risk to an individual when included in, versus when not included in, the database. The cont...