Application Security – Redux
When you’re on a roll, ride it out. I’ve been on the “Redux” train for a couple of days. I usually do this when I review our security architecture initiatives…
DetailsDeja Vu All Over Again – DDoS Amplification Attacks
Yep, it’s time to use this title again. This time we’re talking about Distributed Denial of Service (DDoS) amplification attacks. One of the lists I monitor posted the following: Christian…
DetailsThe Problem of Buggy Software Components
What do Heartbleed, Shellshock and Poodle all have in common? Well apart from being software vulnerabilities discovered in 2014, they were all found in pre-built software components, used by developers…
DetailsThree Factor Authentication and The Law – Compelled Decryption by Biometric
We all know what multi-factor authentication is. Typically, it involves two of three classes of authentication; (1) something you know (a password or passphrase); (2) something you have (a token…
DetailsThe Internet and Ebola
When Doctor Craig Spencer returned from West Africa to New York, having treated Ebola patients while wearing protective gear and being asymptomatic and non-infectious, he engaged in a rigorous course…
DetailsGone Catfishing: Police, Subterfuge and the Internet
I’ve said it before, and I’ll say it again. Cops lie. They are allowed to. In the course of conducting investigations, they can go undercover, pretend to be other people,…
DetailsSecurity for the Holidays
The holiday season is filled with opportunities for the Bad Guys to take advantage of people who are filled with the holiday spirit, out and about having a good time…
DetailsMore Calls for Businesses to Adopt EMV Chip Payment Technology
Another industry alliance joined the chorus urging businesses that process debit and credit cards to implement EMV payment chip technology to combat fraud. EMV stands for Europay, MasterCard® and Visa®, the…
DetailsAmazon Web Services Security: It Takes a Village
For those contemplating using Amazon Web Services (AWS), their compliance page is quite assuring. With a who’s who of compliance standards from SSAE-16, ISO 27001, PCI DSS, to CSA, MPAA,…
DetailsIs the FBI Really “Going Dark?”
FBI Director Comey complained about the problem of people, “going dark,” in a speech before the Brookings Institution on October 16, 2014. He explained, “the law hasn’t kept pace with technology, and…
Details