Archive for the ‘Uncategorized’ Category

Three Worked the Web to help Terrorists.

July 23, 2007

BombA trial of 3 people being tried in Britain for terrorism has uncovered how they used stolen credit card information obtained over the Internet to purchase communication forums and web hosting services to spread terrorist propaganda.
http://www.washingtonpost.com/wp-dyn/content/article/2007/07/05/AR2007070501945_pf.html

[Editor's Note (Valle): This news is sure to make anti-terrorist government officials look at ID theft in a new, more serious light.]

Data Governance will Eclipse CIO Role

June 21, 2007

A very insightful article about how data will become centralized and how information drives business models.Chess Players
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9024560&source
=rss_topic17

Editor’s note (Valle): I am a firm believer that information (creation, dissemination, and use) ultimately drives all business models and that the winners in the market are those that will use information to create more value to for their customers than their competitors.  I like the author’s idea of a chief information stategist (CIS) whose importance, I think, will eclipse the CIO and CTO role.

Spammers using AI to get through

June 8, 2007

Spammers are using image-based spam and artificial intelligence to get through even the best anti-spam defenses
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9022560&pageNumber=1No Junk Mail

[Editors note: (Valle) Since there is currently no really good defense for stopping sophisticated image spam that uses CAPTCHA (completely automated public Turing test to tell computers and humans apart) technology, anti-spam vendors have had to rely more on intent and IP and URL reputation analysis to block spam.

German lab tests 29 Anti-virus programs

May 30, 2007

ThermometerSee how your anti-virus program did in this head-to-head competition of 29 different anti-virus vendors.
http://www2.csoonline.com/blog_view.html?CID=32948

SearchSecurity.com’s FREE Security Courses

May 23, 2007

SearchSecurity.com offers some of the best free on-line information security training courses on the Net.  Check them out.Lecture Room
http://searchsecurity.techtarget.com/generic
/0,295582,sid14_gci1115504,00.html?Offer=SEint2

Preparing for virtualization security unknowns

May 15, 2007

It’s impossible to say exactly what the most significant virtualization security challenges will be, but here are some key points to consider..Keyboard and world

http://searchsecurity.techtarget.com/tip/0,289483,
sid14_gci1254079,00.html?track=sy260

Steve Gibson has some great podcasts and PDF transcripts on the topic of virtualization and virtualization security. If you can’t get to all of them I highly recommend starting with Episode 54.

Episode 50: Virtual Machine History & Technology
Episode 53: Vmware
Episode 54: Blue Pill
Episode 55: Application Sandboxes
Episode 57: Virtual PC Versus VMware
http://www.grc.com/securitynow.htm

Hello world!

May 9, 2007

Welcome to the Security World blog where I will be posting thoughts and ruminations on breaking IT security topics. I look forward to a lively discussion amongst IT security professionals.