Got Domino? Don't forget about security.

Like Novell NetWare, there's plenty of Domino still running out there so we certainly can't be lax on security for that platform. Here are a couple of pieces I wrote regarding Domino security that you may be interested in:

Domino security vulnerabilities to watch for

Getting started with hardening Domino

Read More

Data Protection and Compliance in Complex Environments

Here's a new guide I just completed aimed at C-level information protection professionals:













The three CREDANT-sponsored pieces cover:

1. Primary Concerns of Regulatory Compliance and Data Classification
2. Finding, Classifying and Assessing Data in the Enterprise
3. Data Protection Reporting and Follow up

Simply click the image above or browse to Realtime Publisher's landing page for this CSO Executive Series and download from there.

By the way, Realtime has a ton of free content practically anyone in our field can benefit from. Check it out the other stuff they have while you're on the site.

Read More

Should Windows users have full admin rights?

Here's a piece I wrote recently for SearchWinIT.com where I cover the never-ending debate about whether or not users should have administrative rights on their computers:

Should Windows users have full administrative rights?

If you have additional insight, please let me/us know. It's something every business can benefit from.

Read More

Oil rigs now, Internet later?

Obama shuts down oil rigs - $330 million in lost wages per month. What's going to happen when he shuts down the Internet?

Who gave this guy such power!?

...elections have consequences.

Read More

Survival of the weakest?

I just heard Neal Boortz discussing this Wall Street Journal piece about how people with the least amount of economic knowledge are making all the rules in America right now. Very interesting insight.

Totally reminds me of management and other non-technical people making all the rules for information security and privacy.

Something's backwards here folks. Why is it the tail wags the dog in so many critical situations such as these affecting so many people long term? Is there some sort of reverse Darwinism at work?

Read More

iPad "breach" - another sensationalistic Web flaw

NewsFactor has a nice piece on the recent AT&T iPad "breach" that tells the story of how a code on AT&T's site was cracked exposing email addresses of iPad users. So, some criminals gleaned some email addresses from a telecom provider...In the grand scheme of things: big deal.

I agree with Sophos' Paul Ducklin - I think this is being overblown...just like the sensationalism brought forth by my recent bit on CSRF.

Sure, it's an exploit and shame on AT&T for not finding it before someone else did. But, in the end, it's about priorities and level of exposure - you know, all that boring behind the scenes stuff that no one bothers to mention.

Read More

Oil and infosec, a marriage made in heaven?

Here's a funny - and ironic - pic a friend of mine just forwarded me.


























Need I say more?

Also, I have on my desk the March 8, 2010 edition of InformationWeek (great mag by the way) that has BP as its cover story. A call out quote says:

"Two years ago, BP CEO Tony Hayward laid some very tough love on his 500 top managers. Despite revenue of about $300 billion, the energy company had become "a serial underperformer" that had "promised a lot but not delivered very much." Here's how CIO Dana Deasy responded."

Promise a lot a not deliver very much - the security mantra of all too many businesses!

I'm sure Obama and his government minions will be able to fix it all. Seriously, I hope someone does. This oil mess is a pretty big blow to Newt Gingrich's Drill Here Drill Now Pay Less that I was so pumped up about. Really a cruddy situation all around.

Read More