Source Boston Next Week

I will be at Source Boston next week, which is going to be probably one of the coolest conferences this year.

FRI 07 MARCH 2008 |Featured in: App Security

Edward Tufte - Visualization Seminar

This week I finally attended Edward Tufte’s one-day visualization course. It was a great day, filled with inspiration

THU 31 JAN. 2008 |Featured in: App Security

Information Leaks

I was on the last flight back west on a Friday night, glad that it looked likely I was going to get home. Even better, I'd been upgraded. I flopped into my seat, pulling out the noise-canceling headphones, laptop power adapter, books, and all that other stuff that makes a long flight an oasis of irony.

WED 09 JAN. 2008 |Featured in: App Security

Rely only on the secrecy of that which can be easily changed

The title is a statement of Kerkhoffs' principle. A cryptographic system is only secure if the security of the system doesn't depend on the whole system being secret. And there's an interesting lesson there for Diebold. You see Diebold sells ATMs and voting machines. And they posted pictures of the key that allegedly opens every voting machine they sell.

WED 09 JAN. 2008 |Featured in: App Security

More controls creates more risk?

Over at his excellent blog, Chandler Howell referenced an interesting risk analysis performed by a home inspector:

"The power switch for the garbage disposal in the sink could be accidentally turned on by a person standing at the sink while their hand was in the disposal."

SAT 05 JAN. 2008 |Featured in: App Security

Camouflage as Security

This is a new twist on an old trick. SFGate reports in, "'I didn't eat and I didn't sleep' -- Coin dealer flies dime worth $1.9 million to NYC'" that coin dealer John Feigenbaum transported a $1.9M rare coin (an 1894-S dime) from its previous owner, Daniel Rosenthal, who lives in the Bay Area to its new, unidentified owner in New York, by hand-carrying it.

THU 03 JAN. 2008 |Featured in: App Security

86%: Would you buy an IDS this good?

A number of commenters on yesterday's post, "Noh Entry: Halvar's experience and American Legalisms" are taking me to task for being idealistic about rule of law. I agree strongly with what Nicko wrote in the comments

THU 03 JAN. 2008 |Featured in: App Security

Security Cameras and the Obedience Imperative

Cameras now have voice

WED 31 JAN. 2007 |Featured in: App Security