Security Renaissance

Promoting the art and mindset of information security

Ren - ais - sance:

(lowercase) a renewal of life, vigor, interest, etc.; rebirth; revival: a moral renaissance

Archive for the 'Security' Category

Multimedia 911 security concerns

Tuesday, February 20th, 2007

I just posted at my Computerworld blog about how New York City is in the process of enabling their 911 systems to receive images and video from cell phone callers.  I think that this is a huge leap forward – but I am circumspect regarding the security of any proprietary systems involved in enabling this […]

Read the rest of this entry »

That thing you do – keystroke dynamics

Monday, February 19th, 2007

For years, security professionals have known and been saying that passwords themselves are inadequate — thus the need for two-factor (or stronger) authentication. However, multifactor authentication implementations are typically known to be costly (e.g. issuing tokens or biometric readers). Further, many companies report user push-back: some end-users reject or express disdain for biometric […]

Read the rest of this entry »

Another VA hard drive lost

Tuesday, February 6th, 2007

Ugh….  Less than a year after the reported loss of a laptop containing the data of 26.5 veterans, the VA looses another laptop.  Oh yeah – and in the intervening months they developed processes and procedures to ensure that such data is encrypted; yet this report mentions that there were upwards of 20,000 unencrypted records.
Here […]

Read the rest of this entry »

StolenID Search follow-up

Thursday, February 1st, 2007

A couple days ago I wrote about StolenID Search in my Computerworld blog.  Since then I’ve noticed that I was a bit late in the game in analyzing this.  Folks like Martin Mckeay, AndyITGuy, Dana Epp, and others heard about the service and have similar postings.
I even see that Scott Mitic, CEO of TrustedID, tried […]

Read the rest of this entry »

Security professionals deal with the law of unintended consequences every day.  For instance, vendor x creates “cool new widget,” a feature-rich application intended to enrich the otherwise sad and pathetic lives of every man, woman, and child on the Earth.  However, vendor x (being shortsighted, ignorant, stupid, or just plain human) didn’t realize that “cool […]

Read the rest of this entry »