Security Blog
-
Infosec – Failing or Succeeding?
Noam Eppel from Vivica contends that Information Security is a complete failure, citing alarming statistics on security breaches and cybercrime. While his article highlights the risks, many dissent from his conclusion, considering it a collection of gloomy statistics often seen in security vendor pitches.
-
False Positives
During my morning commute, I encountered an interesting flaw in an alerting system. My car’s weight sensor triggers an alarm if it detects a possible passenger without a seatbelt. However, this car’s system escalates from a dinging sound to a rapid alarm. My immediate thought was to disable the alarm, highlighting a common security system…
-
Sledgehammers
Achieving perfect data security involves elaborate measures such as encryption, one-time passwords, asymmetric identifiers, and physical access controls. However, the ultimate level of security must align with the data’s value and potential threats, avoiding the extreme sledgehammer argument while striking a balance in risk management.
-
Pseudonymity
Pseudonymity refers to adopting a semi-permanent, yet incomplete or false identity, commonly observed in online communities. It allows individuals to use distinctive pseudonyms to establish their unique presence while avoiding full anonymity. This practice fosters better community engagement by promoting courteous interactions. However, the challenge lies in identifying instances where a single person assumes multiple…
-
Usenix Security Symposium
The upcoming USENIX security symposium in Vancouver during the first week of August promises an impressive lineup of invited talks. While I may not attend, I highly recommend catching Matt Blaze’s presentation on wiretapping, previously acclaimed as one of the most exceptional research talks at ICNS 2006.
-
Disclosure Laws
During a recent conference, a panelist expressed their belief that the California Disclosure Law (SB-1386) was an exceedingly inadequate information security regulation. However, I hold a different perspective. In my view, SB-1386 stands as the epitome of information security regulations, surpassing even the esteemed GLBA. While most regulations focus on prescribing specific controls for safeguarding…
Leadership Newsletter
-
Showing Up Has Costs
Leadership Moment: Visibly Representing I spent the weekend alternating between terror and belonging. My wife and I went to Frankfurt to celebrate our 20th anniversary by watching the Patriots play an international game. As a Jew, a lot of friends had cautioned me to be careful, especially given the antisemitic unrest blooming all across the world.… Read this …
-
Fixing the DEI Disaster
Leadership Moment: DEI is in dire straits Bill Ackman called out Harvard lackadaisical approach to antisemitism (again), and a notably component is his assertion that “Harvard’s Office of Equity, Diversity, Inclusion and Belonging is an important contributing factor to the problem.” I doubt this surprises anyone who isn’t in an identity group that DEI offices… Read this …
-
Culture Clashes: Bringing in a new system
Leadership Moment: A Coach’s Scars Dante Scarnecchia was just inducted into the New England Patriots Hall of Fame. Everyone who spoke about him – then, or at any time during his tenure – described him as one of the greatest assistant coaches (he coached the offensive line for the Patriots for two decades) ever, but… Read this …
Fiction
-
Skeleton
A necromancer and an Olympic event [Read the story]
-
Albus Dumbledore and the Rituals of Immortality
The words that didn’t make the Harry Potter septology that fill in the blanks for what’s really going on. [Read the story]