Thursday, August 28, 2008

RIAA Wins Undefended Case

ARSTechnica's recent article on a p2p case may cause some to reconsider their use of file-sharing networks, but it is more of a case of never defend yourself in court. Although the user went to extremes in destroying the evidence - this is apparently what sprung the trap.

Friday, August 22, 2008

Sign Language at Panera Bread, Inc

Hanging out at Panera Bread, Inc. enjoying their free wifi I was approached by a person begging for food. This was the second time in 2 weeks that this same person. He handed me a card explaining he was deaf. Thankfully, I know Sign Language.

The first time I asked if he knew Sign Language (not all deaf do).

He answered, "yes."

I asked where he lived.

He spelled, "Motel." He asks for food, but I could not help him.

The second time was today and he again handed me the card and asked for food. Perhaps I am not memorable? Either way I asked him more questions.

"I remember you from last time. Do you know any other deaf?"

"Yes, I am deaf."

Again I asked if he knew any other deaf, but in a different way.

He, unfortunately, just shrugged as if he didn't understand me.

Is he really deaf?

At least I got to practice. :)

Wednesday, August 6, 2008

TSA's Lost Laptop and Security Professionals

ISC-squared blog commented today on the recent TSA loss of a laptop, only recently disclosed. While this security professional 'Clear'ly dodged a bullet, this security professional is probably steaming mad.

You cannot assume your information is protected simply because it is in the hands of a government agency who's purpose is your security.

Sunday, August 3, 2008

Symantec Blows Its Fortune 500/1000 Trumpet

A Market Watch article describes Symantec as "provide[r of] ... industry-leading information security solutions, services and support to 99% of 2007 Fortune 500 and Fortune 1000 Corporations."

The article is more focused on the Democratic National Party's choice of security software and barely made it to the dark edges of my news radar, but this statement caught my eye. In today's competitive market companies must take time to carefully toot their horns as they grab for market share, but this statement tweaked my inner sense of political correctness. It wasn't until I read it a couple of more times that I understood.

It reads as if 99% of the companies listed on the 2007 Fortune 500 and 1000 exclusively reach for Symantec products when they have information security needs. Which is a wild aspiration to say the least.

Having been an information security analyst for the better part of a decade and in information technology for over 15 years I would beg to differ. While we do use Symantec products for a narrow band of limited uses we've found them to be bloatware expanding at a rate proportional to the number of viruses and trojans released into the wild. However, there is hope on the horizon for the Ivy-league Software junior cadet. I've heard from at least one reputable source that Symantec is rewriting their cash cow Antivirus to be more optimized and work so vastly different that it will be barely noticeable.

The honest opinion of this humble security analyst is this: I reach for many tools in my profession to get the job done, the least of which has Symantec on the label - but it is present in the toolbox. Whether it stays in the toolbox... time will tell...

Saturday, August 2, 2008

Daily Lit: Giving Away the Classics

DailyLit has come up with a clever way to distribute literature. Daily emails with bite-size chunks of books. The classics are free, but contemporary authors will cost you. Copyright infringement!? Most works are Public Domain, Creative Commons or copyright is maintained.

Couple this website and HearWho and you have a poor man's Audiobook.