Brainwashing in security

Albert Zenkoff
2013-02-28
Society, corporate, general, greedy, irresponsible, Lies, philosophy, RSA Conference, security, social

At first, when I read the article titled Software Security Programs May Not Be Worth the Investment for Many Companies I thought it was a joke or a prank. But then I had a feeling it was not. And it was not the 1st of April. And it seems to be a record of events ...

Ignoring security is not a good idea…

Albert Zenkoff
2013-02-24
Management, Android, embedded, evaluation, HTC, management, mobile, news, privacy, punishment, security

I see that HTC got finally whacked over the head for the lack of security in their Android smartphones. I will have to contain myself here and will leave aside the inherent issues surrounding Android, its security and model of operation that will hurt … Ok, ok, I stop now. So, HTC got dragged ...

The art of unexpected

Albert Zenkoff
2013-02-16
Management, art, general, Google, management, news, philosophy, security, unexpected

I am reading through the report of a Google vulnerability on The Reg and laughing. This is a wonderful demonstration of what the attackers do to your systems – they apply the unexpected. The story is always the same. When we build a system, we try to foresee the ways in which it will be ...

SAMATE Reference Dataset

Albert Zenkoff
2013-02-14
Technology, Data set, Development, SAMATE, security, test, test cases, Tools, vulnerability database

Through the news we can become alerted to many interesting things and one of the recent useful bits is the SAMATE Reference Dataset built by NIST Software Assurance Metrics And Tool Evaluation project. Should you need information on common vulnerabilities test cases, the database has more than 80,000 test cases by now. From the project ...

Albert Zenkoff
2013-02-07
Management, error, general, human, inevitability, management, passwords, recovery, security, weakest link

It is often said that the system is only as strong as the weakest link. When you have good security and strong passwords, the weakest link will be the human. As has always been. Think of how the system can be recovered from a breach when the problem is not technical but human. [youtube=http://youtu.be/W50L4UPfWsg]

Brainwashing in security