Open Source More Secure?

In a study of 11 major open source projects, Fortify labs discovered multiple vulnerabilities in every one.

Technology (& Security) in Agriculture

Information Technology is beginning to make its way into the agriculture world. Along with Information Technology comes a great anecdote for the need for Information Security controls.

Real Life "Sneakers"

Ever wonder where those guys in the movie Sneakers work in real life? Popular Mechanics found and interviewed one from the NSA.

Top Security Tools

At least in the humble opinion of Security Focus these security tools are the best.

Pesky Windows Passwords

Can't remember your Windows password? Petter Nordahl has the answer in a handy boot disk.

Dark Reading's Best Ever List (Part Two)

Dark Reading published their 2nd edition of the "Most Popular Articles" list. These guys publish some very compelling articles.

Man-in-the-Middle

I've seen IT Security professionals using ParosProxy to test web applications. Interesting tool.

Key RSA Messages

Ex-CIO of CA, Dave Hansen, speaks about the need for IT Security Pros to "step up" and be noticed in the boardroom.
IBM Global Services executive, Val Rahamani, spoke about the need for a paradigm shift from IT Security to Business Sustainability.

Great lessons on disaster recovery

10 Lessons on Disaster Recovery from ComputerWorld.

Security vs. Privacy

Bruce Schneier has a great blog posting on Security vs. Privacy. The ACLU has a provided a great backdrop for this conversation with a flash simulation on Ordering Pizza 2020.

Hackers with poor taste

Wired.com posted an article on malicious users targeting people with epilepsy. Sad.

Scary report on Malware

Sounds like the bad guys are back ahead of the good guys in the computer security world. Malware is up 5 to 10 times in 2007 over 2006.

Information Security video games

A GCN article posted today is reports on an information security game called Cyberciege created by the Naval Postgraduate school and a video game developer. Non-traditional training and education continues to march on.

Insecurity in Numbers

Dan Kaplan of Federal Computer Week provides a discussion on the impacts of major sporting events on the information security front using examples from the current March Madness and the recent Super Bowl. The old addage of security in numbers doesn't really hold true on the world wide web. The Internet society seems to better reflect what happens downtown in a big city or at major events in the physical world where pick-pockets and panderers have always gone to select easy targets.

Critical who?

CNN is reporting an attempted attack on an "internet nerve center" in the United Kingdom. If you want an easy and interesting way to learn why this attempted attack is significant to your life try reading Richard A. Clarke's new book "Breakpoint" published in January 2007. It's a "fictional" novel written by a man who has been an advisor to the President of the United States on Intelligence and Cyber Security since Reagan.

Think your information is safe?

Privacy Rights Clearinghouse has posted a chronology of data breaches since 2005. Just another way to help us all realize how insecure our information really is.

What have we learned?

http://www.cnn.com/2006/TECH/12/01/hacker.charged.ap/index.html

After reading this story I have to ask the question: What have we learned about securing information resources since the early 1980s?

For anyone who has read the book "The Cuckoo's Egg" by Clifford Stoll, I think the answer is "Not a whole lot".