{"id":1816,"date":"2011-05-12T21:46:38","date_gmt":"2011-05-12T20:46:38","guid":{"rendered":"http:\/\/www.piglet-net.net\/pigblog\/?p=1816"},"modified":"2011-05-12T22:36:23","modified_gmt":"2011-05-12T21:36:23","slug":"open-data","status":"publish","type":"post","link":"https:\/\/www.piglet-net.net\/pigblog\/?p=1816","title":{"rendered":"Open Data"},"content":{"rendered":"<p>We hear a lot about open data these days. Organisations embrace it differently- Southampton University have a <a href=\"http:\/\/data.southampton.ac.uk\/\">huge amount available<\/a> in machine-readable formats, others think that posting a PDF is the way to go, despite <a href=\"http:\/\/blogs.ecs.soton.ac.uk\/data\/2011\/04\/01\/pdf-selected-as-interchange-format\/\">the fact that it isn&#8217;t<\/a>.<\/p>\n<p>Anyway, you have to be careful what data is released: data protection laws mean that you shouldn&#8217;t release personal data.<\/p>\n<p>Walsall MBC have fallen foul of this: if it&#8217;s not actually illegal (though <a href=\"http:\/\/www.out-law.com\/page-4931\">this<\/a> suggests it is), it&#8217;s not good to reveal the email addresses of everyone that signed a e-petition to all the other people that did. It&#8217;s a social engineer&#8217;s dream: a list of people with a common interest. I&#8217;m in there, but just guessing my email address is easy, but I now know several people&#8217;s email addresses I didn&#8217;t before and couldn&#8217;t have guessed.<\/p>\n<p>Interestingly, I only noticed because the mail got trapped by <a href=\"http:\/\/spamassassin.apache.org\">Spamassassin<\/a>, and I thought it was odd that anything from Walsall MBC would hit the filter- this made me look at it in detail.<\/p>\n<p>Because the mail was badly formatted, it got scored like this:<\/p>\n<p><code><br \/>\n pts rule name              description<br \/>\n---- ---------------------- -------------------------<br \/>\n 1.8 BAD_ENC_HEADER         Message has bad MIME encoding in the header<br \/>\n 0.2 SUBJECT_FUZZY_TION     Attempt to obfuscate words in Subject:<br \/>\n 0.6 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)<br \/>\n 1.6 DEAR_SOMETHING         BODY: Contains 'Dear (something)'<br \/>\n-0.2 BAYES_40               BODY: Bayesian spam probability is 20 to 40%<br \/>\n                            [score: 0.2723]<br \/>\n 0.0 HTML_MESSAGE           BODY: HTML included in message<br \/>\n 1.4 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76 chars<br \/>\n 0.1 RDNS_NONE              Delivered to trusted network by a host with no rDNS<br \/>\n<\/code><\/p>\n<p>Bad form, Walsall MBC. As for all of you people that signed the library petiton, watch out for <a href=\"http:\/\/en.wikipedia.org\/wiki\/Phishing\">phishing<\/a> attempts.<\/p>\n<p>[edit 22:34]<br \/>\nJust to clarify: In my opinion, this is a training or systems issue- the individual that sent the mail should have been shown\/trained how to do this, or the system should do it correctly with no intervention. A proper mass-mailer would do so.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We hear a lot about open data these days. Organisations embrace it differently- Southampton University have a huge amount available in machine-readable formats, others think that posting a PDF is the way to go, despite the fact that it isn&#8217;t. Anyway, you have to be careful what data is released: data protection laws mean that &hellip; <a href=\"https:\/\/www.piglet-net.net\/pigblog\/?p=1816\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Open Data<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,1,23],"tags":[],"class_list":["post-1816","post","type-post","status-publish","format-standard","hentry","category-computers","category-general","category-tech"],"_links":{"self":[{"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=\/wp\/v2\/posts\/1816","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1816"}],"version-history":[{"count":0,"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=\/wp\/v2\/posts\/1816\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1816"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1816"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.piglet-net.net\/pigblog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1816"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}