Security Blog
-
Infosec – Failing or Succeeding?
Noam Eppel from Vivica contends that Information Security is a complete failure, citing alarming statistics on security breaches and cybercrime. While his article highlights the risks, many dissent from his conclusion, considering it a collection of gloomy statistics often seen in security vendor pitches.
-
False Positives
During my morning commute, I encountered an interesting flaw in an alerting system. My car’s weight sensor triggers an alarm if it detects a possible passenger without a seatbelt. However, this car’s system escalates from a dinging sound to a rapid alarm. My immediate thought was to disable the alarm, highlighting a common security system…
-
Sledgehammers
Achieving perfect data security involves elaborate measures such as encryption, one-time passwords, asymmetric identifiers, and physical access controls. However, the ultimate level of security must align with the data’s value and potential threats, avoiding the extreme sledgehammer argument while striking a balance in risk management.
-
Pseudonymity
Pseudonymity refers to adopting a semi-permanent, yet incomplete or false identity, commonly observed in online communities. It allows individuals to use distinctive pseudonyms to establish their unique presence while avoiding full anonymity. This practice fosters better community engagement by promoting courteous interactions. However, the challenge lies in identifying instances where a single person assumes multiple…
-
Usenix Security Symposium
The upcoming USENIX security symposium in Vancouver during the first week of August promises an impressive lineup of invited talks. While I may not attend, I highly recommend catching Matt Blaze’s presentation on wiretapping, previously acclaimed as one of the most exceptional research talks at ICNS 2006.
-
Disclosure Laws
During a recent conference, a panelist expressed their belief that the California Disclosure Law (SB-1386) was an exceedingly inadequate information security regulation. However, I hold a different perspective. In my view, SB-1386 stands as the epitome of information security regulations, surpassing even the esteemed GLBA. While most regulations focus on prescribing specific controls for safeguarding…
Leadership Newsletter
-
Failure is an opportunity to provide good customer service.
While at CYBR.SEC.CON last week, Jessvin, a professional acquaintance–very soon to be a friend–took me out for dinner. Neither of us knew the Houston area very well, so he discovered a nearby steakhouse (Pappas), and reserved a table for us. He even had the forethought to tell them about my dietary restrictions (although I think Read this …
-
On being the smartest one in the room
Sometimes, a really good kernel of advice gets so wrapped up in mediocrity that, while it sounds like good advice, it really becomes a seed of bad advice that harms organizations. “Don’t be the smartest one in the room.” Duha One: Leadership in Minutes is a reader-supported publication. To receive new posts and support my Read this …
-
The Case of the Missing Tupperware
Tunde Oyeneyin asks, “Who’s to blame?” Before I dive into the scenario, a caveat: it’s an inane story, about two friends and a misplaced borrowed dish. But fitness instructors have to share a lot of inane stories, to fill the airtime while telling people to lift weights, cycle, run, or row. We expect it. There’s Read this …
Fiction
-
Jumper
“Did you ever want children, Ms. Well?” Amanda paused at that question. It had been a weird interview – not many job interviews involved a therapy session, but apparently casinos did care about how well-balanced their security staff were – but this almost pushed her buttons. Taking a deep breath before answering, she considered her [Read the story]
-
Skeleton
A necromancer and an Olympic event [Read the story]
-
Albus Dumbledore and the Rituals of Immortality
The words that didn’t make the Harry Potter septology that fill in the blanks for what’s really going on. [Read the story]