Privacy & Security Violations at Buy.com

In October 2000, I noticed that buy.com‘s product return system allowed any Internet user to view prepaid UPS return labels intended for use by some 45,000+ Buy.com customers. Labels included customers’ names, addresses, and phone numbers. Buy.com has since fixed the problem, replacing the information with an error message, but I kept a sample of the data that was temporarily publicly accessible. See coverage of the story in major media.

 

Expert Declarations in National Football League, et al., v. TVRADIONOW Corporation (iCraveTV)

I had the honor of submitting testimony, both in two expert declarations and orally, in National Football League, et al., v. TVRADIONOW Corporation (iCraveTV), litigation in federal court as to the propriety of iCraveTV’s retransmission of certain American television video to users nationwide and worldwide. My initial expert declaration and supplemental expert declaration.