Security Renaissance

Promoting the art and mindset of information security

Ren - ais - sance:

(lowercase) a renewal of life, vigor, interest, etc.; rebirth; revival: a moral renaissance

Archive for December, 2006

Eroding privacy

Tuesday, December 26th, 2006

I ran across a good article by Steve Kerrison about how social networking sites over-zealous bloggers are contributing to the erosion of privacy.
Steve warns his readers that anything posted will likely be accessible far into the future. So, while people may want to post opinions and escapades for their online ‘friends,’ they need […]

Read the rest of this entry »

Checklist your brain at the door

Saturday, December 23rd, 2006

Mike Rothman’s Daily Incite for 12/21 had a short rant about checklist based processes.  Mike states:
The technology today is amazing. Years ago, if you needed a lobotomy they’d slice your head open. Then they came up with drugs to fry your frontal lobe. Nowadays it’s much easier. Just publish a CHECKLIST of “best practices” and […]

Read the rest of this entry »

Month of Apple Bugs (MoAB) coming in January

Tuesday, December 19th, 2006

Looks like LMH is continuing the month of _________ bugs theme.  This time his focus will be on Apple.  More info is at Dark Reading.
The Month of Apple Bugs (MoAB) will certainly be a milestone.  The Dark Reading article states that LMH “expects the MoAB to have a significant impact on OS X security, and […]

Read the rest of this entry »

I’m a big fan of Gary McGraw’s Silver Bullet Security podcast.  Last week I listened to episode 9 which featured an interview with Bruce Schneier (of whom I am also a big fan).  
I was a bit taken back when Bruce said that, in today’s world, “security is all about technology.”  To be fair, he did […]

Read the rest of this entry »

Ryan Singel and Kevin Poulsen just put out a blog posting noting that we have just passed the 100 million mark for lost/stolen records which contain personal information.
This is, of course, only a milestone if one chooses to accept the ChoicePoint breach as the starting point for counting such losses. While, due to […]

Read the rest of this entry »