<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>
<channel>
	<title>Comments on: National Fraud Strategy</title>
	<atom:link href="http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/</link>
	<description>Security Research, Computer Laboratory, University of Cambridge</description>
	<pubDate>Thu, 18 Mar 2010 14:52:28 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Peter</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30936</link>
		<dc:creator>Peter</dc:creator>
		<pubDate>Sat, 28 Mar 2009 22:24:19 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30936</guid>
		<description>For years I submitted 419 (Nigerian Scam) reports to the Commercial Fraud desk of a UK city police force. By chance, I spoke with a police officer from the unit. He advised me that the Home Office had closed the national unit set up to deal with 419 fraud reports. This new initiative will, in my view, go the same way. Why? I believe it is because UK police forces are independent, governed by Chief Constables and committees who may have used a typewriter but are unlikely to have used  a Personal Computer (that's what secretaries and personal assistants are for !). They don't care about Internet based crime. It's not on the Home Ofice statistics, it's invisible, no one is physically hurt, the Banks' repay what is stolen, so there's no problem. This "head in the sand" approach allows criminals to defraud UK citizens and businesses. Crooks know that the UK is soft on Internet (and other) crime.  The Government and the Home Office need to define and implement an Internet based security strategy that provides local reporting and trained, initial investigation, linked to central reporting and specialist investigation resources. The strategy has to link up to and work with other country's Internet Crime Investigation centres to implement a global strategy (as per the Prime Minister's apporach to combating the current financial issues). Anything else is just a sop.</description>
		<content:encoded><![CDATA[<p>For years I submitted 419 (Nigerian Scam) reports to the Commercial Fraud desk of a UK city police force. By chance, I spoke with a police officer from the unit. He advised me that the Home Office had closed the national unit set up to deal with 419 fraud reports. This new initiative will, in my view, go the same way. Why? I believe it is because UK police forces are independent, governed by Chief Constables and committees who may have used a typewriter but are unlikely to have used  a Personal Computer (that&#8217;s what secretaries and personal assistants are for !). They don&#8217;t care about Internet based crime. It&#8217;s not on the Home Ofice statistics, it&#8217;s invisible, no one is physically hurt, the Banks&#8217; repay what is stolen, so there&#8217;s no problem. This &#8220;head in the sand&#8221; approach allows criminals to defraud UK citizens and businesses. Crooks know that the UK is soft on Internet (and other) crime.  The Government and the Home Office need to define and implement an Internet based security strategy that provides local reporting and trained, initial investigation, linked to central reporting and specialist investigation resources. The strategy has to link up to and work with other country&#8217;s Internet Crime Investigation centres to implement a global strategy (as per the Prime Minister&#8217;s apporach to combating the current financial issues). Anything else is just a sop.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Keith Tayler</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30922</link>
		<dc:creator>Keith Tayler</dc:creator>
		<pubDate>Wed, 25 Mar 2009 11:36:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30922</guid>
		<description>@Clive Roberson

I agree and of course so would the Great Adam Smith. He warned us in some detail about "externalising risk onto others". The level of risk determines the profit, but profits must always be kept to a minimum and wages at a maximum. There should be little financial rewards for those that place the money of others at risk (i.e. the odious “dealers” that were the ruin of many a nation), rewards come when you place your own money at risk. 
As for the “systems” that Ross discusses: Smith wanted markets in areas where there was transparency and good information (you can get a Noble Prize for that type of thinking these days), but where it was not possible to determine the quality of goods and services because they were, so to speak, opaque, he called for external quality controls. The assaying of gold and silver by the Guilds was his example (although again the Guilds needed reforming).
Smith's answer to your final question is that we should give a resounding "yes". But of course governments will continue to  kowtow to bankers and the masters of industry - vanity and the lust for power still holds sway.</description>
		<content:encoded><![CDATA[<p>@Clive Roberson</p>
<p>I agree and of course so would the Great Adam Smith. He warned us in some detail about &#8220;externalising risk onto others&#8221;. The level of risk determines the profit, but profits must always be kept to a minimum and wages at a maximum. There should be little financial rewards for those that place the money of others at risk (i.e. the odious “dealers” that were the ruin of many a nation), rewards come when you place your own money at risk.<br />
As for the “systems” that Ross discusses: Smith wanted markets in areas where there was transparency and good information (you can get a Noble Prize for that type of thinking these days), but where it was not possible to determine the quality of goods and services because they were, so to speak, opaque, he called for external quality controls. The assaying of gold and silver by the Guilds was his example (although again the Guilds needed reforming).<br />
Smith&#8217;s answer to your final question is that we should give a resounding &#8220;yes&#8221;. But of course governments will continue to  kowtow to bankers and the masters of industry - vanity and the lust for power still holds sway.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Clive Robinson</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30921</link>
		<dc:creator>Clive Robinson</dc:creator>
		<pubDate>Wed, 25 Mar 2009 09:08:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30921</guid>
		<description>@ Keith Tayler,

Ah Adam Smith, the real economic poster child of that little town in The Kingdom of Fife.

Unfortunatly one Gordon Brown of the same town wishes to assume the mantel whilst directly contradicting the advice...

When I heard GB admit he had not seen the effects of the housing bubble etc comming my mouth dropped. Not because it was not obvious he and others had been "fiddling whilst...". But because he thought he could get away with a "hey guys I'm human too" ruse to cover up his compleatly inadiquate level of competance.

Having worked for a couple of companies in the Far East in the 1990's, I was aware first hand of what a property bubble / spiral could do to a nations economy and those dependent on it's well being.

In 98 I decided that the UK had got to the point it's property market could not be sustained any longer and nor could the attendent rising personal debt from easy credit.

Having put "my own house in order" I am more than a little upset at having to pay for the price of GB's clique of "influencial industry advisors", as I suspect are many readers of this site.

However I'm not sure that regulation is the answer. In the US in response to the likes of Enron, their legislature gave a blank sheet to the auditing industry and said tell us what to do.. The Sarbanes-Oxley Act was the result. And as we now know it was compleatly inefective. Even where Congress had dictated that there should be an independent audit body of the two largest motgage issuers in the US (FM&amp;FM) over 100 government employed auditors compleatly failed to raise any warning flags.

I suspect that as Ross and others think the only real way to prevent this sort of thing re-occuring (in another way) is to stop industries forcefully externalising risk onto others and for greater transparency in action and accountability.

However are we as a society ready or willing to pay the inevitable consiquences of this?</description>
		<content:encoded><![CDATA[<p>@ Keith Tayler,</p>
<p>Ah Adam Smith, the real economic poster child of that little town in The Kingdom of Fife.</p>
<p>Unfortunatly one Gordon Brown of the same town wishes to assume the mantel whilst directly contradicting the advice&#8230;</p>
<p>When I heard GB admit he had not seen the effects of the housing bubble etc comming my mouth dropped. Not because it was not obvious he and others had been &#8220;fiddling whilst&#8230;&#8221;. But because he thought he could get away with a &#8220;hey guys I&#8217;m human too&#8221; ruse to cover up his compleatly inadiquate level of competance.</p>
<p>Having worked for a couple of companies in the Far East in the 1990&#8217;s, I was aware first hand of what a property bubble / spiral could do to a nations economy and those dependent on it&#8217;s well being.</p>
<p>In 98 I decided that the UK had got to the point it&#8217;s property market could not be sustained any longer and nor could the attendent rising personal debt from easy credit.</p>
<p>Having put &#8220;my own house in order&#8221; I am more than a little upset at having to pay for the price of GB&#8217;s clique of &#8220;influencial industry advisors&#8221;, as I suspect are many readers of this site.</p>
<p>However I&#8217;m not sure that regulation is the answer. In the US in response to the likes of Enron, their legislature gave a blank sheet to the auditing industry and said tell us what to do.. The Sarbanes-Oxley Act was the result. And as we now know it was compleatly inefective. Even where Congress had dictated that there should be an independent audit body of the two largest motgage issuers in the US (FM&amp;FM) over 100 government employed auditors compleatly failed to raise any warning flags.</p>
<p>I suspect that as Ross and others think the only real way to prevent this sort of thing re-occuring (in another way) is to stop industries forcefully externalising risk onto others and for greater transparency in action and accountability.</p>
<p>However are we as a society ready or willing to pay the inevitable consiquences of this?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Keith Tayler</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30914</link>
		<dc:creator>Keith Tayler</dc:creator>
		<pubDate>Sun, 22 Mar 2009 22:39:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30914</guid>
		<description>We should perhaps recall the advice of Adam Smith when regulating the banks and indeed the whole financial services industry.  When discussing in the Wealth of Nations the problem of regulating markets and the activities of  “dealers”  he wrote, “The proposal of any new law or regulation of commerce which comes from this order [dealers], ought always to be listened to with great precaution, and ought never to be adopted till after having been long and carefully examined, not only with the most scrupulous, but with the most suspicious attention. It comes from an order of men, whose interest is never exactly the same with that of the public, who have generally an interest to deceive and even to oppress the public, and who accordingly have, upon many occasions, both deceived and oppressed it.”

Of course Smith heaped even more scorn upon the legislators, believing they would always be in league with the dealers and masters of industry to oppress the public. Looks like he got it right.</description>
		<content:encoded><![CDATA[<p>We should perhaps recall the advice of Adam Smith when regulating the banks and indeed the whole financial services industry.  When discussing in the Wealth of Nations the problem of regulating markets and the activities of  “dealers”  he wrote, “The proposal of any new law or regulation of commerce which comes from this order [dealers], ought always to be listened to with great precaution, and ought never to be adopted till after having been long and carefully examined, not only with the most scrupulous, but with the most suspicious attention. It comes from an order of men, whose interest is never exactly the same with that of the public, who have generally an interest to deceive and even to oppress the public, and who accordingly have, upon many occasions, both deceived and oppressed it.”</p>
<p>Of course Smith heaped even more scorn upon the legislators, believing they would always be in league with the dealers and masters of industry to oppress the public. Looks like he got it right.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Peter</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30913</link>
		<dc:creator>Peter</dc:creator>
		<pubDate>Sun, 22 Mar 2009 18:09:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30913</guid>
		<description>That may be insulting Uzbekistan ;-)

On a more serious note, I would class a "National Fraud Reporting Centre" as yet another detriment to our privacy and civil liberties.  There is no requirement to setup centralised policing for this issue, and I seriously doubt it would ever be effective.

What needs to be done is for the government to enact clear and unequivocal legislation to say that unless there is proof that a customer has defrauded the bank (which I image would be a fairly rare occurance), then the liability lies firmly with the bank.  It shouldn't be the situation that the customer has to prove there hasn't been fraud which is contrary to our basic principles of law (since fraud is a crime).

It is then in the bank's interests to improve its security and put itself in a real position to be able to prove who authenticated a particular transaction.

Having a national reporting centre just encourages the state to collect more data on us, and makes yet another of the bank's expenses the tax payer's expense.</description>
		<content:encoded><![CDATA[<p>That may be insulting Uzbekistan <img src='http://www.lightbluetouchpaper.org/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
<p>On a more serious note, I would class a &#8220;National Fraud Reporting Centre&#8221; as yet another detriment to our privacy and civil liberties.  There is no requirement to setup centralised policing for this issue, and I seriously doubt it would ever be effective.</p>
<p>What needs to be done is for the government to enact clear and unequivocal legislation to say that unless there is proof that a customer has defrauded the bank (which I image would be a fairly rare occurance), then the liability lies firmly with the bank.  It shouldn&#8217;t be the situation that the customer has to prove there hasn&#8217;t been fraud which is contrary to our basic principles of law (since fraud is a crime).</p>
<p>It is then in the bank&#8217;s interests to improve its security and put itself in a real position to be able to prove who authenticated a particular transaction.</p>
<p>Having a national reporting centre just encourages the state to collect more data on us, and makes yet another of the bank&#8217;s expenses the tax payer&#8217;s expense.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ross Anderson</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30910</link>
		<dc:creator>Ross Anderson</dc:creator>
		<pubDate>Fri, 20 Mar 2009 21:11:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30910</guid>
		<description>We've a paper appearing soon in the Journal of Economic Perspectives in which we analyse what tasks in the fight against fraud should be undertaken by whom - the customers, the banks, the bankers' trade associations, and the police. It's just common sense, really - getting the incentives as well aligned as possible</description>
		<content:encoded><![CDATA[<p>We&#8217;ve a paper appearing soon in the Journal of Economic Perspectives in which we analyse what tasks in the fight against fraud should be undertaken by whom - the customers, the banks, the bankers&#8217; trade associations, and the police. It&#8217;s just common sense, really - getting the incentives as well aligned as possible</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Clive Robinson</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30909</link>
		<dc:creator>Clive Robinson</dc:creator>
		<pubDate>Fri, 20 Mar 2009 19:35:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30909</guid>
		<description>Ross,

I'm wondering if the recent "harassmant" case British Gas lost is going to wake the banks up.

On thing the Judge decided was that "blaiming the computer" was not a liability get out as the computer is programed by humans.

He had some other choice statments to make that appear to relate aplicably to the banks especially (ie not being able to identify a controling mind does not mean that it is not still harassment...).

It might just unravel a few cosy little cartells based around revolving door employment between Governement Depts and the Banks and other financial businesses.</description>
		<content:encoded><![CDATA[<p>Ross,</p>
<p>I&#8217;m wondering if the recent &#8220;harassmant&#8221; case British Gas lost is going to wake the banks up.</p>
<p>On thing the Judge decided was that &#8220;blaiming the computer&#8221; was not a liability get out as the computer is programed by humans.</p>
<p>He had some other choice statments to make that appear to relate aplicably to the banks especially (ie not being able to identify a controling mind does not mean that it is not still harassment&#8230;).</p>
<p>It might just unravel a few cosy little cartells based around revolving door employment between Governement Depts and the Banks and other financial businesses.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: brian</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30907</link>
		<dc:creator>brian</dc:creator>
		<pubDate>Fri, 20 Mar 2009 17:09:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30907</guid>
		<description>I work in a fast declining business of cheques and I have for over 40 years. I work both in the UK and overseas.So I have a different angle on this rather than on the IT aspect. Historically Banks hadnt a clue about cheques and how to stop fraud ect. In fact banks in Africa have a far greater knowledge and better standards than we do in the UK. Cheques could be more secure but it would cost money. Banks have never wanted to spend cash on better cheques. Our cheques supplied by a bank are still pathetic. On top of that banks do not educate the clients in how to prevent fraud. If they did they would be culpable if a fraud took place so they say nothing. I do not see that improving in the future on the more technical payment systems and the current trend demonstrates that.</description>
		<content:encoded><![CDATA[<p>I work in a fast declining business of cheques and I have for over 40 years. I work both in the UK and overseas.So I have a different angle on this rather than on the IT aspect. Historically Banks hadnt a clue about cheques and how to stop fraud ect. In fact banks in Africa have a far greater knowledge and better standards than we do in the UK. Cheques could be more secure but it would cost money. Banks have never wanted to spend cash on better cheques. Our cheques supplied by a bank are still pathetic. On top of that banks do not educate the clients in how to prevent fraud. If they did they would be culpable if a fraud took place so they say nothing. I do not see that improving in the future on the more technical payment systems and the current trend demonstrates that.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gissaname</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30905</link>
		<dc:creator>Gissaname</dc:creator>
		<pubDate>Fri, 20 Mar 2009 12:35:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30905</guid>
		<description>Cloning CHIP cards is hard work fraud and only works in limited situations and where the transaction is not authorised online.  I do wish you guys would be factual and not going for the sensational all the time. 

More fraud is committed by 1st parties than 3rd Party actions such as theft and cloning.  So this area needs tackling too.

If you want to attack anyone attack the government and the police who would never assist the banks in the past with fraud, as they saw it as a victimless crime.  The banks, however, have always insisted this is not the case and spend vast sums to try and prevent it.

If you want to determine the causes of fraud just look to the thousands of useless items of legislation this government has put through in the past 12 years instead of enforcing the legislation that was already in place.

Most police authorities had done away with cheque fraud teams and fraud investigation over the last 20 years.

I guess the Government probably thought they could introduce a tax on fraud to add to the coffers they have wasted already but realised that it was probably not feasible, so instead we will recreate wheels and have lots of quangos looking at the problem with no one taking overall responsibility in the government or the police.

If it isn't car crime, speeding, or a way of generating revenue then there is no way that this government will do anything about fraud - except perhaps to see if they can legitimately conduct it to raise revenue.

As for the FSA - this has been another quango wholey reactive in its actions with no concept of the real world and how to Oversea best practice and regulation in the finance industry.

Hey ho - nothing changes - but don't blame the banks.</description>
		<content:encoded><![CDATA[<p>Cloning CHIP cards is hard work fraud and only works in limited situations and where the transaction is not authorised online.  I do wish you guys would be factual and not going for the sensational all the time. </p>
<p>More fraud is committed by 1st parties than 3rd Party actions such as theft and cloning.  So this area needs tackling too.</p>
<p>If you want to attack anyone attack the government and the police who would never assist the banks in the past with fraud, as they saw it as a victimless crime.  The banks, however, have always insisted this is not the case and spend vast sums to try and prevent it.</p>
<p>If you want to determine the causes of fraud just look to the thousands of useless items of legislation this government has put through in the past 12 years instead of enforcing the legislation that was already in place.</p>
<p>Most police authorities had done away with cheque fraud teams and fraud investigation over the last 20 years.</p>
<p>I guess the Government probably thought they could introduce a tax on fraud to add to the coffers they have wasted already but realised that it was probably not feasible, so instead we will recreate wheels and have lots of quangos looking at the problem with no one taking overall responsibility in the government or the police.</p>
<p>If it isn&#8217;t car crime, speeding, or a way of generating revenue then there is no way that this government will do anything about fraud - except perhaps to see if they can legitimately conduct it to raise revenue.</p>
<p>As for the FSA - this has been another quango wholey reactive in its actions with no concept of the real world and how to Oversea best practice and regulation in the finance industry.</p>
<p>Hey ho - nothing changes - but don&#8217;t blame the banks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Alex Jackson</title>
		<link>http://www.lightbluetouchpaper.org/2009/03/19/national-fraud-strategy/comment-page-1/#comment-30902</link>
		<dc:creator>Alex Jackson</dc:creator>
		<pubDate>Thu, 19 Mar 2009 20:01:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/?p=727#comment-30902</guid>
		<description>Well done Mr Anderson. I work in IT and from personal  experience know that the current system is riddled with flaws and the consumer has very little redress when money is fraudulently removed from their accounts due to the bank's 'Terms and Conditions'. What no one in either Government or banking seems able to grasp is that if I trust a bank to hold my money, then any refusal by them to honour that responsibility is legalised theft.</description>
		<content:encoded><![CDATA[<p>Well done Mr Anderson. I work in IT and from personal  experience know that the current system is riddled with flaws and the consumer has very little redress when money is fraudulently removed from their accounts due to the bank&#8217;s &#8216;Terms and Conditions&#8217;. What no one in either Government or banking seems able to grasp is that if I trust a bank to hold my money, then any refusal by them to honour that responsibility is legalised theft.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
