-
16 Aug 2009Worst moments in network security history?
This "10 worst moments in network security history" is a little light but I did enjoy slides 4, 5, 6, and 9. Check it out....
Continue Reading... -
05 Aug 2009
Why you need to read privacy policies
In case you haven't heard, apparently our Imperial Federal Government was at it again with their recent draconian privacy policy on the Cash for Clunkers web site. Here's a snippet of the policy:"Any or all uses of this system, any or all uses of this system and all files on this system may be intercepted, monitored, recorded, copied, audited, inspected, and disclosed to authorized CARS, DOT, and law enforcement personnel ...
Continue Reading... -
31 Jul 2009
Are “power users” keeping you from doing more important things?
Here's a great definition of the term power user for you:Pc Operators Who Eventually Run, Unload, Screw up, Erase, and Remove Software*Sound familiar!?*I can't remember who I got this from...I cut out of a presentation I attended years and years ago and it's been sitting on my desk ever since. It may have been Laura Chappell or someone else who presented at Novell's Brainshare conference back in the mid-90's. Sorry ...
Continue Reading... -
30 Jul 2009
GAO reports federal infosec failures – seriously?!
So the people in our own Imperial Federal Government has failed yet another security test!? You know, the same people who force us (at gunpoint if necessary) to become secure and stay secure.Some highlights:Twenty of the 24 agencies had inadequate information security controls that were considered a material weakness or a significant deficiency.A 200% increase in security incidents over the past three years...It's a "major management challenge"...even with an unlimited ...
Continue Reading... -
27 Jul 2009
Imagine if your security plan looked like this
Imagine if you tried to force an Obamacare-eqivalent information security plan on management (see chart below). How would they respond. They'd probably tell you to go pound sand.And now anyone against such a big goverment idea can't speak out about it. I wonder how much longer I'll get to do my rants in a forum such as this. Wow, where's our freedom going? Is anyone listening...? This isn't about healthcare. ...
Continue Reading... -
23 Jul 2009
“Change” sells but who’s buying?
So in the past year we've gone from:"global warming" to "climate change" (esp. with the ridiculous cap and trade bill that's going to further hurt our economy)Islamic terrorism to "man-caused disaster" ...and the latest in the Obamacare scam we heard about last night:healthcare reform to "health insurance reform"Boy are our so-called leaders sneaky! It's amazing how these politicians change their wording up ever so slightly to make their schemes sound ...
Continue Reading... -
20 Jul 2009
Imagine signing off on something you haven’t read
Jeff Jacoby with the Boston Globe made an excellent point in his article regarding the Read The Bills Act (the law we need to prevent our own lawmakers from carelessly passing laws they haven't read nor understand).Jeff said: "Senators and representatives who vote on bills they haven't read and don't understand betray their constituents' trust. It is no excuse to say that Congress would get much less done if every ...
Continue Reading... -
17 Jul 2009
SSNs a thing of the past?
You may have already heard about this (I just got around to reading it). It's about how researchers at Carnegie Mellon have reverse engineered the Social Security Number assignment scheme. With just the birth date and state of birth SSNs can be cracked.Yet another reason to limit what you put on Facebook and other social sites...and a good reason to freeze your credit.Perhaps each of us can have a SSN ...
Continue Reading... -
16 Jul 2009
Another ridiculous way of handling Web passwords
I use iContact's marketing service. It's an overall great app and reputable company but they've now made my list of ridiculous password requirements. I was logging in to their site today using what I consider to be a strong password and got this message:As part of our latest application security upgrade, iContact has strengthened the criteria for account passwords. To access your account, you must first reset your password.So I ...
Continue Reading... -
15 Jul 2009
UPS sloppiness – How’s this for document security?
I just went into a bathroom behind a UPS delivery guy. He left both his handheld computer and someone's overnight package sitting on the sink counter while he went into a stall. Anyone could've walked out with both and he'd never know who did it...This helps explain how packages go missing and subsequent breach notifications ensue.Gives you the warm fuzzies about using UPS to ship sensitive documents, huh!?...
Continue Reading...
Resources
Client Testimonials
“A business associate referred our company to Principle Logic when we were seeking a resource to perform vulnerability /penetration testing for our external and internal networks. We found Kevin Beaver to be professional, well informed, and easy to work with. His testing did not disrupt our networks, and his progress updates were timely.
His final report was very thorough and included security recommendations for our network environment. The executive leadership was so impressed with Kevin’s security expertise, they have extended their agreement to continue to perform periodic testing. We highly recommend Kevin Beaver and Principle Logic as a resource for network security testing.”
(IT managed services firm)
Kevin has written/co-written 12 books on information security including one of the best-sellers of all time:
