Obama Lets N.S.A. Exploit Some Internet Flaws, Officials Say

20140413-002830.jpgBy DAVID E. SANGER
April 12, 2014
WASHINGTON — Stepping into a heated debate within the nation’s intelligence agencies, President Obama has decided that when the National Security Agency discovers major flaws in Internet security, it should — in most circumstances — reveal them to assure that they will be fixed, rather than keep mum so that the flaws can be used in espionage or cyberattacks, senior administration officials said Saturday.

But Mr. Obama carved a broad exception for “a clear national security or law enforcement need,” the officials said, a loophole that is likely to allow the N.S.A. to continue to exploit security flaws both to crack encryption on the Internet and to design cyberweapons.

The White House has never publicly detailed Mr. Obama’s decision, which he made in January as he began a three-month review of recommendations by a presidential advisory committee on what to do in response to recent disclosures about the National Security Agency.

But elements of the decision became evident on Friday, when the White House denied that it had any prior knowledge of the Heartbleed bug, a newly known hole in Internet security that sent Americans scrambling last week to change their online passwords. The White House statement said that when such flaws are discovered, there is now a “bias” in the government to share that knowledge with computer and software manufacturers so a remedy can be created and distributed to industry and consumers.

Caitlin Hayden, the spokeswoman for the National Security Council, said the review of the recommendations was now complete, and it had resulted in a “reinvigorated” process to weigh the value of disclosure when a security flaw is discovered, against the value of keeping the discovery secret for later use by the intelligence community.

“This process is biased toward responsibly disclosing such vulnerabilities,” she said.

Until now, the White House has declined to say what action Mr. Obama had taken on this recommendation of the president’s advisory committee, whose report is better known for its determination that the government get out of the business of collecting bulk telephone data about the calls made by every American. Mr. Obama announced last month that he would end the bulk collection, and leave the data in the hands of telecommunications companies, with a procedure for the government to obtain it with court orders when needed.

But while the surveillance recommendations were noteworthy, inside the intelligence agencies other recommendations, concerning encryption and cyber operations, set off a roaring debate with echoes of the Cold War battles that dominated Washington a half-century ago.

One recommendation urged the N.S.A. to get out of the business of weakening commercial encryption systems or trying to build in “back doors” that would make it far easier for the agency to crack the communications of America’s adversaries. Tempting as it was to create easy ways to break codes — the reason the N.S.A. was established by Harry S. Truman 62 years ago — the committee concluded that the practice would undercut trust in American software and hardware products. In recent months, Silicon Valley companies have urged the United States to abandon such practices, while Germany and Brazil, among other nations, have said they were considering shunning American-made equipment and software. Their motives were hardly pure: Foreign companies see the N.S.A. disclosures as a way to bar American competitors.

Another recommendation urged the government to make only the most limited, temporary use of what hackers call “zero days,” the coding flaws in software like Microsoft Windows that can give an attacker access to a computer — and to any business, government agency or network connected to it. The flaws get their name from the fact that, when identified, the computer user has “zero days” to fix them before hackers can exploit the accidental vulnerability.

The N.S.A. made use of four “zero day” vulnerabilities in its attack on Iran’s nuclear enrichment sites. That operation, code-named “Olympic Games,” managed to damage roughly 1,000 Iranian centrifuges, and by some accounts helped drive the country to the negotiating table.

Not surprisingly, officials at the N.S.A. and at its military partner, the United States Cyber Command, warned that giving up the capability to exploit undisclosed vulnerabilities would amount to “unilateral disarmament” — a phrase taken from the battles over whether and how far to cut America’s nuclear arsenal.

“We don’t eliminate nuclear weapons until the Russians do,” one senior intelligence official said recently. “You are not going to see the Chinese give up on ‘zero days’ just because we do.” Even a senior White House official who was sympathetic to broad reforms after the N.S.A. disclosures said last month, “I can’t imagine the president — any president — entirely giving up a technology that might enable him some day to take a covert action that could avoid a shooting war.”

At the center of that technology are the kinds of hidden gaps in the Internet — almost always created by mistake or oversight — that Heartbleed created. There is no evidence that the N.S.A. had any role in creating Heartbleed, or even that it made use of it. When the White House denied prior knowledge of Heartbleed on Friday afternoon, it appeared to be the first time that the N.S.A. had ever said whether a particular flaw in the Internet was — or was not — in the secret library it keeps at Fort Meade, Md., the headquarters of the agency and Cyber Command.

But documents released by Edward J. Snowden, the former N.S.A. contractor, make it clear that two years before Heartbleed became known, the N.S.A. was looking at ways to accomplish exactly what the flaw did by accident. A program code-named Bullrun, apparently named for the site of two Civil War battles just outside Washington, was part of a decade-long effort to crack or circumvent encryption on the web. The documents do not make clear how well it succeeded, but it may well have been more effective than exploiting Heartbleed would be at enabling access to secret data.

The government has become one of the biggest developers and purchasers of information identifying “zero days,” officials acknowledge. Those flaws are big business — Microsoft pays up to $150,000 to those who find them and bring them to the company to fix — and other countries are gathering them so avidly that something of a modern-day arms race has broken out. Chief among the nations seeking them are China and Russia, though Iran and North Korea are in the market as well.

“Cyber as an offensive weapon will become bigger and bigger,” said Michael DeCesare, who runs the McAfee computer security operations of Intel Corporation. “I don’t think any amount of policy alone will stop them” from doing what they are doing, he said of the Russians, the Chinese and others. “That’s why effective command and control strategies are absolutely imperative on our side.”

The presidential advisory committee did not urge the N.S.A. to get out of the business entirely. But it said that the president should make sure the N.S.A. does not “engineer vulnerabilities” into commercial encryption systems. And it said that if the United States finds a “zero day,” it should patch it, not exploit it, with one exception: Senior officials could “briefly authorize using a zero day for high priority intelligence protection.”

Malaysia Jet Crew Made Contact After Data System Shut Down

Malaysia Jet Crew Made Contact After Data System Shut Down

The flight crew of the missing Malaysian jet made its last radio contact with air traffic controllers after the aircraft’s automatic signaling system was disabled, a Malaysian transport official said Sunday.

“The ACARS (Aircraft Communications Addressing and Reporting System) communications system was disabled before last radio contact between plane and air traffic,” said Malaysian Airlines Chief Executive Ahmad Jauhari Yahya.

Malaysia’s Prime Minister Najib Razak said early Saturday that the aircraft’s ACAR system was disabled first, and then the aircraft’s transponder was shut off before the flight veered off course.

The ACARS is located on a lower-level of the plane, while the transponder is housed in the cockpit, Tom Casey, a retired pilot who used to fly the giant Boeing 777 told NBC News on Saturday. In order to disconnect the ACAR system, a person would have to pull a series of circuit breakers, but also know where to find them, Casey noted.

Razak also said Saturday that the plane was diverted because of a “deliberate action by someone on the plane.” He said the investigation would focus on the passengers and crew.

— Elisha Fieldstadt

Shirley Temple Black, Hollywood’s Biggest Little Star, Dies at 85

Shirley Temple Black, Hollywood’s Biggest Little Star, Dies at 85

By ALJEAN HARMETZFEB. 11, 2014

Shirley Temple Black, who as a dimpled, precocious and determined little girl in the 1930s sang and tap-danced her way to a height of Hollywood stardom and worldwide fame that no other child has reached, died on Monday night at her home in Woodside, Calif. She was 85.

Her publicist, Cheryl Kagan, confirmed her death.

Mrs. Black returned to the spotlight in the 1960s in the surprising new role of diplomat, but in the popular imagination she would always be America’s darling of the Depression years, when in 23 motion pictures her sparkling personality and sunny optimism lifted spirits and made her famous. From 1935 to 1939 she was the most popular movie star in America, with Clark Gable a distant second. She received more mail than Greta Garbo and was photographed more often than President Franklin D. Roosevelt.The little girl with 56 perfect blond ringlets and an air of relentless determination was so assured that the usually unflappable Adolphe Menjou, her co-star in her first big hit, “Little Miss Marker,” described her as “an Ethel Barrymore at 6” and said she was “making a stooge out of me.”When she turned from a magical child into a teenager, audience interest slackened, and she retired from the screen at 22. But instead of retreating into nostalgia, she created a successful second career for herself.

After marrying Charles Alden Black in 1950, she became a prominent Republican fund-raiser. She was appointed a delegate to the United Nations General Assembly by President Richard M. Nixon in 1969. She went on to win wide respect as the United States ambassador to Ghana from 1974 to 1976, was President Gerald R. Ford’s chief of protocol in 1976 and 1977, and became President George H. W. Bush’s ambassador to what was then Czechoslovakia in 1989, serving there during the fall of Communism in Eastern Europe.

After winning an honorary Academy Award at the age of 6 and earning $3 million before puberty, Shirley Temple grew up to be a level-headed adult. At a time when operations for cancer were shrouded in secrecy, Mrs. Black held a news conference in her hospital room after her mastectomy to discuss her experience and to urge women discovering breast lumps not to “sit home and be afraid.” She is widely credited with helping to make it acceptable to talk about breast cancer.

Shirley Jane Temple was born in Santa Monica, Calif., on April 23, 1928. From the beginning, she and her mother, Gertrude, were a team (“I was absolutely bathed in love,” she remembered); her movie career was their joint invention. Her success was a result of both her own charm and her mother’s persistence.

In “Child Star,” her 1988 autobiography, Mrs. Black said her mother had made a “calculated decision” to turn her only daughter into a professional dancer. At a fee of 50 cents a week, Mrs. Temple enrolled 3-year-old Shirley in Mrs. Meglin’s Dance Studio.

In 1932, Shirley was spotted by an agent from Educational Pictures and chosen to appear in “Baby Burlesks,” a series of sexually suggestive one-reel shorts in which children played all the roles. The 4- and 5-year-old children wore fancy adult costumes that ended at the waist. Below the waist, they wore diapers with oversize safety pins. In these heavy-handed parodies of well-known films like “The Front Page” (“The Runt Page”) and “What Price Glory” (“War Babies”), Shirley imitated Marlene Dietrich, Mae West and — wearing an off-the-shoulder blouse and satin garter as a hard-boiled French bar girl in “War Babies” — Dolores del Río.

When any of the two dozen children in “Baby Burlesks” misbehaved, they were locked in a windowless sound box with only a block of ice on which to sit. “So far as I can tell, the black box did no lasting damage to my psyche,” Mrs. Black wrote in “Child Star.” “Its lesson of life, however, was profound and unforgettable. Time is money. Wasted time means wasted money means trouble.”

“Baby Burlesks” was followed by five two-reel comedies and a year of casting calls and bit-part auditions that which garnered young Shirley half a dozen small roles. By Thanksgiving 1933 she was growing older. She was 5 ½, and in the previous two years she had earned a total of $702.50. Her mother did the sensible thing: she shaved a year off her daughter’s age. Shirley would be shocked to discover, at a party for her 12th birthday in April 1941, that she was actually 13.

Her career began in earnest in 1934, when she was picked to play James Dunn’s daughter in the Fox fantasy “Stand Up and Cheer,” one of many films made during the Depression in which music chases away unhappy reality. She was signed to a two-week contract at $150 a week and told to provide her own tap shoes.

Within an hour of completing her song-and-dance number “Baby, Take a Bow,” she was formally placed under contract to Fox for a year at $150 a week. The studio had an option for seven more years and would pay Gertrude Temple an additional $25 each week to take care of her daughter.

On ‘The Good Ship Lollipop’

In its review of “Stand Up and Cheer” (1934), Variety called Shirley Temple a “surefire potential kidlet star.” She made eight movies in 1934 and moved from potential to full star in February, when Fox lent her to Paramount for “Little Miss Marker,” based on a Damon Runyon story.

Playing a child left with a bookie (Mr. Menjou) as a marker for her father’s gambling debts, Shirley reforms a gang of gamblers, bookies and horse dopers. She would play a similarly wise and maternal miniature adult, dominating the adults around her and solving their problems with unbounded optimism and common sense, in most of her films.

She brought peace to a British regiment fighting rebels in India in “Wee Willie Winkie” (1937) and to white men and Indians in “Susannah of the Mounties” (1939). She was frequently cast as an orphan, the better to show adults how to cope with adversity: her father committed suicide in “Little Miss Marker”; her aviator father crashed and her mother was killed by a car in “Bright Eyes” (1934); she was the sole survivor of a shipwreck in “Captain January” (1936).

“People in the Depression wanted something to cheer them up, and they fell in love with a dog, Rin Tin Tin, and a little girl,” Mrs. Black often said in appraising her success.

It is no surprise that Shirley Temple dolls were the best-selling dolls of the decade (and are valuable collectibles now). In many of her films she was a living doll, adored by entire groups of men: aviators in “Bright Eyes,” a Yankee regiment in “The Little Colonel” (1935).

No Shirley Temple movie was complete without a song — most famously “On the Good Ship Lollipop” and “Animal Crackers in My Soup” — and a tap dance, with partners including George Murphy, Jack Haley and Buddy Ebsen. But her most successful partnership was with the legendary African-American entertainer Bill (Bojangles) Robinson. She may have been the first white actress allowed to hold hands affectionately with a black man on screen, and her staircase dance with Mr. Robinson in “The Little Colonel,” the first of four movies they made together, retains its magic almost 80 years later.

Not everyone was a Shirley Temple fan. The novelist Graham Greene, who was also a film critic, was sued by 20th Century Fox for his review of “Wee Willie Winkie” in the magazine Night and Day, which he edited. In the review, he questioned whether she was a midget and wrote of her “well-shaped and desirable little body” being served up to middle-aged male admirers.

After the failure of “The Blue Bird” (1940), a film version of the Maeterlinck fantasy that Fox had expected to be the bonanza MGM’s “The Wizard of Oz” had been a year earlier, the studio dropped the 12-year-old actress’s contract. Even before the movie was released, her mother had decided it was time for Shirley, who had been educated in a schoolroom at Fox, to go to a real school.

She entered the private Westlake School for Girls in seventh grade, with little idea of how to cope. She had sat on 200 famous laps and found J. Edgar Hoover’s the most comfortable. Amelia Earhart had shared chewing gum with her. She had conversed with Eleanor Roosevelt. The Brown Derby restaurant in Hollywood had created the Shirley Temple — a nonalcoholic drink of lemon-lime soda, grenadine and a maraschino cherry — in her honor. (She didn’t care for it.) But her playmates had been few and carefully chosen.

At Westlake, after months of being given the cold shoulder, she decided she might as well be herself. She eventually spent a happy five years there.

What Fox had dropped, MGM picked up eight months later. But the little girl was now entering adolescence. On her first visit to MGM, Mrs. Black wrote in her autobiography, the producer Arthur Freed unzipped his trousers and exposed himself to her. Being innocent of male anatomy, she responded by giggling, and he threw her out of his office.

Curls and Girlish Magic Fade

She made “Kathleen” (1941) for MGM and “Miss Annie Rooney” (1942) for United Artists; played supporting roles for David O. Selznick in two 1944 films, “Since You Went Away” and “I’ll Be Seeing You”; and made “Kiss and Tell” on loan to Columbia in 1945.

But her golden hair had turned brown, and, as the film historian David Thomson observed, she had become “an unremarkable teenager.” After nearly four dozen films, the public had lost interest.
Recent Comments
Knorrfleat Wringbladt
36 minutes ago

Bravo! A life superbly lived! May any of us do half as well?
Judy c
36 minutes ago

God Bless you, sweet, sweet Shirley. You always made me smile.
Timothy M Vaslet
37 minutes ago

I was born in 1960 but remember her well;am blown away to know the tough minded intelligent roles she acted in is truly who she was and will…

By then she was a strong-willed, chain-smoking 17-year-old. Determined to be the first in her Westlake class to become engaged, she had accepted a ring from a 24-year-old Army Air Corps sergeant, John Agar Jr., a few days before her 17th birthday. They were married on Sept. 19, 1945.

Unable to handle being Mr. Shirley Temple, Mr. Agar began drinking excessively. While his wife was appearing in “The Bachelor and the Bobby Soxer” with Cary Grant and Myrna Loy and “That Hagen Girl” with Ronald Reagan, Mr. Agar began an acting career of his own. He appeared in several low-budget movies, in support of John Wayne in a few westerns and war films, and on television. But he failed to achieve anything close to her success.

They were divorced in December 1949, a year after the birth of their daughter, Linda Susan. Less than 60 days after her divorce, Miss Temple, 21, met and became engaged to Mr. Black, then the 30-year-old assistant to the president of the Hawaiian Pineapple Company, who claimed he had never seen a Shirley Temple movie. They were betrothed after a 12-day courtship. Their marriage lasted almost 55 years, until his death in 2005.

Mr. Black, who was dropped from the San Francisco Social Register for marrying an actress, told a reporter in 1988: “Over 38 years I have participated in her life 24 hours a day through thick and thin, traumatic situations, exultant situations, and I feel she has only one personality. She would be catastrophic for the psychiatric profession. You can wake her up in the middle of the night and she has the same personality everybody knows. What everybody has seen for 60 years is the bedrock.”

Shirley Temple had left the movies for good by Dec. 6, 1950, when she married Mr. Black. A son, Charles Jr., was born in 1952; a daughter, Lori, in 1954. They survive her, as does her daughter, Linda Susan.

During the Korean War, Mrs. Black followed her husband to Washington, where he was stationed at the Pentagon as a Navy lieutenant commander. In later years he would follow her to her diplomatic postings.

Late in the 1950s, with her old movies being shown on television all over America, she briefly returned to show business. From 1958 to 1961 she was the host and an occasional performer on the television series “Shirley Temple’s Storybook” (also known as “The Shirley Temple Show”), an anthology of fairy-tale adaptations.
Watch Now: New York Fashion Week | Elements

Watch: Clothes and Character | “American Hustle”
Watch: Vows | One more member for the band

By the early 1960s she was president of the Multiple Sclerosis Society and co-founder of the International Federation of Multiple Sclerosis Societies, raising funds to fight the disease that struck her brother George. She was representing the federation in Prague on Aug. 21, 1968, when Soviet tanks rolled in and brought a premature end to Alexander Dubcek’s effort to remodel the Communist system.For many years the Black family lived in the San Francisco area, where Mrs. Black was active in civic and community affairs. She worked particularly hard for the development of the San Francisco International Film Festival, but quit the festival’s executive committee in 1966 to protest a decision to show the Swedish film “Night Games,” which she called “pornography for profit.”

A Conservative Republican

Mrs. Black had become interested in politics when she lived in Washington. In 1967 she ran for Congress to fill a seat left vacant by the death of the Republican J. Arthur Younger. She hoped to emulate the California political successes of George Murphy, her dancing partner in “Little Miss Broadway,” who had become a United States senator, and Mr. Reagan, who had become governor.

A backer of the Vietnam War, she lost to a more moderate Republican, Pete McCloskey, in the suburban 11th Congressional District south of San Francisco. It probably did not help that the bands kept playing “On the Good Ship Lollipop” at her campaign stops.

But Mrs. Black pressed on with her goal of a career in public service. In 1969, President Nixon appointed her to the five-member United States delegation to the 24th session of the United Nations General Assembly. She acquitted herself well by all accounts, speaking out about the problems of the aged, the plight of refugees and, especially, environmental problems.

When she was appointed ambassador to Ghana in 1974, some career diplomats were outraged, but State Department officials later conceded that her performance was outstanding.

Among her duties as the government’s chief of protocol was heading a training program for new envoys. She flashed her wit in describing it: “We teach them how to get used to being called Ambassador and having Marines saluting. Then, on Day 3, we tell them what to do if they’re taken hostage.”

When she arrived in Prague as ambassador — a post usually reserved for career diplomats — she discovered that there had been a Shirley Temple fan club there 50 years earlier. Officials brought “Shirleyka” old membership cards to autograph. Having been Shirley Temple was extremely helpful to Shirley Temple Black, she told reporters, “mainly because it provides name identification,” although it had no bearing on her future success or failure. Mrs. Black succeeded beyond almost everyone’s expectations, winning praise during her three years in Prague from, among others, Henry Kissinger, who called her “very intelligent, very tough-minded, very disciplined.” It was a fitting tribute to a woman who had left the screen at 22 saying she had “had enough of pretend.”

Threat by Staten Island Lawmaker Adds to a Reputation as Hot-Tempered

Threat by Staten Island Lawmaker Adds to a Reputation as Hot-Tempered

That, at least, is what some politicians and journalists who have tangled with the Staten Island lawmaker have maintained for years. The criticism, however, never made much of a dent.

After all, Mr. Grimm, 43, the only New York City congressman who is a Republican, was a fringe character in Washington. Plus, many of the illustrations were of the “he said, she said” strain.

But Mr. Grimm’s latest eruption was recorded in living color for all to watch. Watch they did.

On Tuesday night, after President Obama completed his State of the Union speech, a highly unorthodox scene unfolded for anyone tuned into NY1, the cable news channel for New York City.
Related Coverage

Michael G. Grimm
Gotham: After Keeping Company With Mobsters, Politician Now Speaks Their Language JAN. 29, 2014
Rep. Michael Grimm Threatens an NY1 ReporterJAN. 29, 2014

It began innocuously. Mr. Grimm ventured over to the interview area of NY1’s Washington reporter, Michael Scotto, in the Capitol rotunda. After Mr. Grimm delivered what Mr. Scotto found to be a predictable reaction, Mr. Scotto tried to pose a question about an ongoing federal investigation into Mr. Grimm’s fund-raising.

state of union

state of union

A president’s annual address to Congress offers the opportunity to write a wish list for the year ahead. In the weeks leading up to his 2014 State of the Union, President Obama emphasized a plan to work around Congress to accomplish his goals when they would not act.

state of union

state of union

A president’s annual address to Congress offers the opportunity to write a wish list for the year ahead. In the weeks leading up to his 2014 State of the Union, President Obama emphasized a plan to work around Congress to accomplish his goals when they would not act.

Target breach

Target breach

http://www.nytimes.com
To Regain Trust, Target Must Do More, Crisis Experts Say

By HILARY STOUTJAN. 10, 2014

With clients over the years like Michael R. Milken (securities fraud), Dominique Strauss-Kahn (rape allegations), Jack Abramoff (bribery) and the Sizzler restaurant chain (salmonella), Marina Ein is well versed in the art and science of crisis public relations.

So she has been watching the unfolding disclosures involving the vast security breach at Target with interest — both for professional reasons (some of her clients at Ein Communications are shopping centers) and as a customer (she and her husband happened to shop at a Target in Naples, Fla., during the period when customer credit and debit card data was stolen.)

So far, she, like many others in the crisis communications business, think Target is doing a commendable job of showing transparency and contrition in a bad situation. But there are signs that the company may have a ways to go before it can regain the trust of its customers.

On Friday, Target executives said that the breach was far worse than previously disclosed. After further investigation, the company said, it now believes that as many as 110 million of its customers’ credit and debit card data may have been stolen, nearly three times the 40 million it initially estimated last month. The company also said that a wider array of information was stolen than previously believed, including addresses (both mailing and email) and phone numbers.

The announcement was the second time that Target has publicly revised its initial damage assessment. Two weeks ago it said that contrary to earlier statements, the company now believed that encrypted PIN data was taken too.

As clear evidence that the drip, drip of disclosures may be unnerving shoppers, the company on Thursday acknowledged that its sales had been slipping since the initial announcement of the security breach on Dec. 19. What started out as a promising fourth quarter, with “stronger than expected sales” turned into a dismal one, most likely down 2.5 percent from the fourth quarter of 2012, executives said. That would be bad news at any time, but it is particularly distressing given that the fiscal fourth quarter, which encompasses holiday shopping, is the most important quarter of the year for retailers.

Experts in both corporate security matters and damage control say Target has been doing what is expected of a company in an age where people expect instant communication and answers.

“The first rule in crisis management is to get the story out as quickly as possible and to be as transparent as possible in order to regain the public trust of whatever audience you’re dealing with,” said Ms. Ein, the president and chief executive of Ein Communications, which is based in Washington. “In Target’s situation, that was obviously an enormous customer base.”

The problem is that fast disclosures are by necessity incomplete disclosures so some customers can feel uneasy, like they are never getting the complete picture. Target, said Ms. Ein, has “to be in a continuous conversation with this very important audience.”

By most assessments, the company has conveyed sensitivity, offering credit monitoring services for a year and reaching out to affected customers directly. The chief executive, Gregg W. Steinhafel, has been front and center facing the public with apologies. There have been no cringe-worthy moments like the time the chief executive of BP went sailing on his yacht in the early days of the Deepwater Horizon oil spill.

Still Target’s weakening sales figures suggest more work to be done.

“I think they’ve already lost the trust of many individuals,” said Hemu Nigam, the chief executive of SSP Blue, a security consulting company that also does corporate reputation development. “But people are always willing to listen. You have to prove to them that you care, that you’ve acknowledged what went wrong, that you could have done more and that you are doing more.”

He says he believes that Target has accomplished the first two requirements on that list, but needs to focus on the other two to reassure shoppers that whatever security problems it had are being corrected and to explain the steps that are being taken to prevent them from happening again — in short, to make them feel that it’s safe to shop at Target.

“At this point they’re really in that stage of having to showcase what they’re doing to go forward,” he said.

Some consumer and privacy activists say they think the company has not gone far enough in counseling customers. “People tend to be frightened about this, and I think they could have been more forthcoming in terms of giving appropriate advice to consumers about how to handle it,” said Paul Stephens, director of policy and advocacy at the Privacy Rights Clearinghouse, a nonprofit consumer education and support organization. “Particularly with respect to debit cards.”

Mimi Edwards, a Target devotee in Miami (“it makes shopping for batteries fun”), has been satisfied so far. She has been watching her American Express statements for suspicious charges since she learned that she could be among the consumers whose data could have been stolen. But she said she was largely unconcerned.

“They were upfront and honest about it,” she said, adding that she has continued to shop at Target since the disclosure. “We live in a world where these things are going to happen,” she said. “We shop almost exclusively with credit cards and debit cards, and it’s kind of part of the territory.”

Kenneth K. Dort, a partner in the intellectual property practice at Drinker Biddell & Reath, who has handled dozens of corporate security breach cases, says he has a hard time criticizing anything that Target has done so far. “I tell my clients in these situations, ‘Don’t hide anything. Just be out there. Tell them what’s going on, where you’re going to go and what you’re going to do.’ ”

But he noted the risks were still substantial for a company that has enjoyed an enormously favorable reputation among shoppers for both its prices and its style.

No matter how well the company handles it, he noted, “It’s just a lot of bad P.R.”

An earlier version of this article misstated the circumstances behind Michael R. Milken’s plea deal. It was securities fraud, not insider trading.

flames_1024.jpg

boyish-looking American diplomat was meeting for the first time with the Islamist leaders of eastern Libya’s most formidable militias.

It was Sept. 9, 2012. Gathered on folding chairs in a banquet hall by the Mediterranean, the Libyans warned of rising threats against Americans from extremists in Benghazi. One militia leader, with a long beard and mismatched military fatigues, mentioned time in exile in Afghanistan. An American guard discreetly touched his gun.

“Since Benghazi isn’t safe, it is better for you to leave now,” Mohamed al-Gharabi, the leader of the Rafallah al-Sehati Brigade, later recalled telling the Americans. “I specifically told the Americans myself that we hoped that they would leave Benghazi as soon as possible.”

Yet as the militiamen snacked on Twinkie-style cakes with their American guests, they also gushed about their gratitude for President Obama’s support in their uprising against Col. Muammar el-Qaddafi. They emphasized that they wanted to build a partnership with the United States, especially in the form of more investment. They specifically asked for Benghazi outlets of McDonald’s and KFC.

The diplomat, David McFarland, a former congressional aide who had never before met with a Libyan militia leader, left feeling agitated, according to colleagues. But the meeting did not shake his faith in the prospects for deeper involvement in Libya. Two days later, he summarized the meeting in a cable to Washington, describing a mixed message from the militia leaders.

Despite “growing problems with security,” he wrote, the fighters wanted the United States to become more engaged “by ‘pressuring’ American businesses to invest in Benghazi.”

The cable, dated Sept. 11, 2012, was sent over the name of Mr. McFarland’s boss, Ambassador J. Christopher Stevens.

Later that day, Mr. Stevens was dead, killed with three other Americans in Benghazi in the most significant attack on United States property in 11 years, since Sept. 11, 2001.
By David D. Kirkpatrick
December 28, 2013