Category Archives: news

Dumping Dropbox…

I’m deleting my Dropbox account in favor of Jungle Disk.  First, the fact that Dropbox is able to view my plaintext data if I don’t encrypt it before uploading (with Truecrypt etc) worries me. Second there was a local exploit … Continue reading

Posted in news, security | Tagged , , | 1 Comment

Cloud Computing Security Considerations

Cloud computing offers potential benefits including cost savings and improved business outcomes for government and private industry. However, there are a variety of information security risks that need to be carefully considered.  Risks will vary depending on the sensitivity of … Continue reading

Posted in news, privacy, security | Tagged | Leave a comment

How Big is Your Haystack?

I’m not the world’s biggest fan of Steve Gibson and his Security Now! podcast.  Recently someone notified me of a neat website that Mr. Gibson created.  The website which he calls Haystack is a ‘brute force search space calculator’. So … Continue reading

Posted in news | Tagged , , , | 2 Comments

Cisco’s 2011 Q1 Threat Report released

I won’t bother summarizing the findings as Brian Pennington has a great writeup on it already. Click here if you want to see the complete Cisco 2011 Q1 Threat Report for yourself.  

Posted in news | Tagged | Leave a comment

China’s Blue Team

It seems that China finally had their come to Jesus moment.  They realize the value in having a cyber warfare command.  They have formed a blue team composed of 30 technology-savvy officers and soldiers. Does that strike anyone else as … Continue reading

Posted in news, security | Tagged | Leave a comment

Virtualization Security Podcast

I recently came across an interesting podcast centered on virtualization security.  Personally, I don’t get off on virtualization besides using Vmware for BackTrack and Windows but this may be of some interest to folks out there.  Currently, there’s over 60′s … Continue reading

Posted in news, security | Tagged , | Leave a comment

True Cost/Benefit Analysis of Online Privacy

I came across an interesting article regarding online privacy.  It presents surprising research arguing the advantages of online advertising may actually outweigh the costs including identity theft. Do you think privacy advocates arguments are flawed?  Find out for yourself…. Applications … Continue reading

Posted in news | Tagged | Leave a comment

Recent WordPress vulns and the Open Source Vuln DB

There’s been too many WordPress vulnerabilities for my liking.  Fortunately they seem to be quick to patch but software updates are always a pain. How long before everyone starts to adopt Chrome’s auto update feature? Luckily, I’m a fan of … Continue reading

Posted in news, security | Tagged , | Leave a comment

LastPass & DropBox breach thoughts

LastPass, the online cloud based password manager, and Dropbox, the cloud based storage service, both reported possible security concerns.  A dropbox vulnerability(?) was discovered where an attacker with physical access to a PC can steal a certain config file and … Continue reading

Posted in news, security | Leave a comment

OWASP Appsec Tutorial Series

I don’t remember where I found these links —- researching White Hat security I believe after reading an entry in Grossman’s blog, don’t quote me though… Anyways I thought the videos below are valuable if you’re into appsec for a … Continue reading

Posted in news, security | Leave a comment