• 09 May 2008

    Why you need to protect your Blackberries – even in ‘secure’ locations

    Here's an interesting story I stumbled across. Didn't seem to get much coverage elsewhere. Apparently people can't even visit our own White House without getting victimized. Man....that train of thought could go in SO many directions. Anyway, the lesson is to not leave your Blackberries, smartphones, and PDAs lying around in your purse, on your desk, or any other conspicuous place where they can be taken.No worries here though, I'm ...

    Continue Reading...
  • 08 May 2008

    Good read on penetration testing helping compliance

    Here's a good read from security analyst/guru Mike Rothman on how penetration testing can help with compliance.The only thing I'd add is that you've gotta do more than traditional "pen testing" as we know it. And you've got to do it periodically and consistently. Not just one time. Use what I call the ethical hacking methodology that combines the best of penetration testing and general vulnerability testing. When seeking reasonable ...

    Continue Reading...
  • 07 May 2008

    Work for yourself? Check out these gotchas when dealing with clients

    Here's a good read for consultants and people with small businesses on what not to do when dealing with clients.I'll have my own version of these in my upcoming audio program Succeeding as an Independent Consultant. We all make stupid mistakes...the key is whether or not you keep repeating them....

    Continue Reading...
  • 07 May 2008

    Don’t waste your money on a hybrid or ethanol automobile…

    Telecommute!The politicians want us to burn more ethanol in our cars but it's a terrible idea. Ethanol not only burns 29% more fuel than it creates, using fossil fuels to create ethanol adds even more carbon dioxide to the atmosphere. Check out these very interesting facts about ethanol we don't hear about in the news.Anyway...back to working from home. I know, I know, many managers don't believe in telecommuting. They ...

    Continue Reading...
  • 06 May 2008

    C’mon Feds – what’s taking so long with the breach notification law?

    You've probably gathered that I have little respect for the intent and abilities of our Imperial Federal Government here in the U.S. Our "leader" politicians stay busy developing gimmicks like the gas tax holiday instead of coming up with real solutions, arguing about "global warming", making the evil rich pay their fair share of taxes (yeah right!), and prying into Major League baseball steroid use.They have their hands in virtually ...

    Continue Reading...
  • 05 May 2008

    My security content from this (past) week

    Here are two information security podcasts published this past week:Using the Malicious Mindset in Security AssessmentsNew service packs for Windows Vista and XPAs always, for my past information security content be sure to check out www.principlelogic.com/resources.html.Enjoy!...

    Continue Reading...
  • 30 Apr 2008

    Small business owners take note – security affects you too!

    In fact, the threats and vulnerabilities we're up against don't discriminate. Size doesn't matter. Here's a good read on this if you're trying to find some ammo to get management on your side and show that security affects all businesses - large and small.Here's another story about how credit card thieves are targeting small businesses.Oh, one more thing - one of the greatest bits of ammo is the Privacy Rights ...

    Continue Reading...
  • 30 Apr 2008

    Yet another reason for testing your Web applications for security flaws

    This is a very interesting story. Apparently attackers are automating SQL injections on vulnerable sites/apps with SQL Server backends. I've always been a big fan of automated SQL injection tools such as what HP's WebInspect has built-in but this brings a whole new meaning to automated SQL injection!Yet another reason you need to be testing your Web applications for security vulnerabilities consistently and without fail....

    Continue Reading...
  • 30 Apr 2008

    How the word ‘hacker’ got started

    I heard a news story this morning regarding the economy that reminded me of how we got to the point of misusing the word hacker. The essence of what this economic expert being interviewed said is that it doesn't matter if we're technically not in a recession, if the people believe we're in one, then that's all that matters. Well, we're not - but who cares, right?Just like with hacker. ...

    Continue Reading...
  • 29 Apr 2008

    What NOT to focus on to boost your career

    Here's a funny look at technologies to NOT focus on if you're going to boost your salary. I couldn't agree more. It makes me sad about NetWare skills (I'm a CNE and former Novell bigot). Those used to be "elite" skills that garnered you more $$$. Not really any more. Thanks for running NetWare into the ground Novell!...

    Continue Reading...