Tag: Security

Results 1 to 6 of 6

Information Leaks

I was on the last flight back west on a Friday night, glad that it looked likely I was going to get home. Even better, I'd been upgraded. I flopped into my seat, pulling out the noise-canceling headphones, laptop power adapter, books, and all that other stuff that makes a long flight an oasis of irony.

Wed, 09 Jan., 2008| Posted in App Security| Section: Security

Rely only on the secrecy of that which can be easily changed

The title is a statement of Kerkhoffs' principle. A cryptographic system is only secure if the security of the system doesn't depend on the whole system being secret. And there's an interesting lesson there for Diebold. You see Diebold sells ATMs and voting machines. And they posted pictures of the key that allegedly opens every voting machine they sell.

Wed, 09 Jan., 2008| Posted in App Security| Section: Security

More controls creates more risk?

Over at his excellent blog, Chandler Howell referenced an interesting risk analysis performed by a home inspector:

"The power switch for the garbage disposal in the sink could be accidentally turned on by a person standing at the sink while their hand was in the disposal."

Sat, 05 Jan., 2008| Posted in App Security| Section: Security

Camouflage as Security

This is a new twist on an old trick. SFGate reports in, "'I didn't eat and I didn't sleep' -- Coin dealer flies dime worth $1.9 million to NYC'" that coin dealer John Feigenbaum transported a $1.9M rare coin (an 1894-S dime) from its previous owner, Daniel Rosenthal, who lives in the Bay Area to its new, unidentified owner in New York, by hand-carrying it.

Thu, 03 Jan., 2008| Posted in App Security| Section: Security

86%: Would you buy an IDS this good?

A number of commenters on yesterday's post, "Noh Entry: Halvar's experience and American Legalisms" are taking me to task for being idealistic about rule of law. I agree strongly with what Nicko wrote in the comments

Thu, 03 Jan., 2008| Posted in App Security| Section: Security