• 14 Oct 2009

    Cloud computing & customer no-service – match made in heaven?

    I never thought I could be so productive. This week I've had less pressure to deliver. I've been able to turn "things" off. All while I'm attending a conference when I usually get even more behind. Well you see, my email isn't working. My email security "application service provider", I mean "managed service", dang it, actually my "cloud computing" provider delivering "software as a service" has apparently decided to take ...

    Continue Reading...
  • 13 Oct 2009

    In case you’re trying to email me…

    ...my lovely email security provider has chosen to work part-time apparently. If you need to reach me, email my full name (1 word) at gmail dot com....

    Continue Reading...
  • 13 Oct 2009

    Latest version of LANguard worth considering

    Have you seen the new - OK, it's not that new any more - version of LANguard (formerly LANguard Network Security Scanner)? It's certainly a tool worth checking out if you do vulnerability scanning.I've been using LANguard for years for share finding and authenticated scanning and it does both very well. The biggest change in the latest version is the user interface. I've never been a big fan and I'm ...

    Continue Reading...
  • 13 Oct 2009

    Proper password length

    Probably late to the game but just had to post this:During a recent password audit, it was found that a blonde was using the following password: MickeyMinniePlutoHueyLouieDeweyDonaldGoofy When asked why such a big password, she said that it had to be at least 8 characters long....

    Continue Reading...
  • 12 Oct 2009

    Cool tool for cracking/resetting SQL Server passwords

    Elcomsoft has a neat - and relatively new - tool called Advanced SQL Password Recovery I thought you may be able to benefit from. It can be used to change any SQL Server databases protected by a password included SQL Server 2000, 2005 and 2008. All you need is access to the master.mdf file. SQL Server optional.I was going to show a screenshot but there's not that much to show...you ...

    Continue Reading...
  • 09 Oct 2009

    My latest security content

    Here are a couple of new articles of mind that were just published. Many more to come. Enjoy!Balancing Windows security with reasonable password policiesStorage encryption essentialsBe sure to check out www.principlelogic.com/resources.html for all of my information security articles, podcasts, webcasts, screencasts, Twitter updates, and more....

    Continue Reading...
  • 08 Oct 2009

    Asking the right questions

    One of the elements of being successful in security is asking the right questions - and not being afraid to do so. As information security professionals we can, and should, question the funding of security projects, management being on board with the business risks at hand, and so on.I recently came across two great quotes regarding questioning. First, Anthony Robbins said "Quality questions create a quality life. Successful people ask ...

    Continue Reading...
  • 06 Oct 2009

    Don’t give up

    Napoleon Hill once said "The majority of men meet with failure because (they don't create) new plans to take the place of those that fail." I see this a lot: people with big plans who are met with a setback, they get discouraged, and give up. If you feel strongly about doing something - writing a book, changing careers, getting a degree, whatever - don't be this person....

    Continue Reading...
  • 06 Oct 2009

    Good info on hardening Windows XP

    I've written various articles on hardening Windows XP over the years and am always seeking out new nuggets since XP's going to be around a while. Eric Shultze has a neat list of 5 registry keys you can use to further harden your Windows XP systems that you may not have heard about. Enjoy!...

    Continue Reading...
  • 06 Oct 2009

    10 Ways to Become Indispensable at Work

    Here's a good piece on keeping your job and growing your career:10 Ways to Become Indispensable at WorkI'd also add network to build your relationships, focus on your communications skills, and always, always - put things in terms of the business - what's in it for them. Here are some IT and security career tips (that can apply to anyone) I've written that dive into these areas and more....

    Continue Reading...