Learning is a choice

"If your intent is to learn, you almost always do learn." - Richard Carlson

Like when we see what we want to see, we learn what we want to learn. This is important for our careers in IT and infosec but also provides a great way for us to become better people.

Read More

Coffee shop laptop thefts in Atlanta a good reminder

Here's a good reason why you need to remind your employees of the risks of using laptops in coffee shops and other public places. Once the thief has it, it's all over...unless of course a brave (stupid?) coffee shop employee comes to your rescue.

A good rule of thumb is if you're setting up shop for a while then use a laptop lock to secure the system to the table. Most importantly, never, ever leave laptops unattended. I know, it does look a little goofy carrying your laptop into the john but, as in other aspects of life, substance (common sense) trumps style.

Read More

From each according to his ability to each according to his need

I thought this Marxist/Obama philosophy was very fitting for our symbolic day today here in the U.S. The general belief that the government should decide what the people need is what's driving our country...and the world. And we wonder why we can't get out of this economic mess! The reality is that the economy cannot be taxed into prosperity but that's what the politicians want to make us believe...especially if they can play on the emotions of the non-achievers - the other 50% of income earners who pay no taxes.

Speaking of this divide, here's a good read on how if the Feds seized all of the income of the top 1% of income earners they couldn't even run the federal government for a year! How can a $980 billion tax base possibly fund a $4 trillion government budget? It can't but no one talks about that. Instead the media and its myrmidon followers just want more taxes...As with government schools, just throw more money at the problem, that'll fix it.

Folks, we don't have a taxation problem, we have a spending problem. But as Obama and the other political elite want us to believe, government is the answer to everything.

On a related note, as Art Laffer wrote today in the WSJ, there's a 30% cost markup on every dollar paid in taxes. In fact, according to his piece: "Tax compliance employs more workers than Wal-Mart, UPS, McDonald's, IBM and Citigroup combined." Amazing...Just like the data breach problem, I know without a doubt that taxation and government growth is MUCH worse - impacting so many lives in a negative way - than most people it perceive it to be.

People largely want personal security over freedom. As with many information security issues people don't want to take personal responsibility for their choices and their actions. Sadly, it's the way of the world - apparently human nature...If you fall into the achiever class you've just got to figure out how to work your way through it. As for me, I can't wait to get the next two months over with so I can stop funding the government with what I earn and start keeping my own money for my own family.

Read More

Be wary of the well-certified IT pro

You may have read that Gartner projects IT spending to increase in 2011. It's great news that may lead to hiring new staff or at least new consultants for your IT and information security projects....Just proceed with caution and don't fall for the "I'm certified therefore I'm all you need" persona that's rampant in our industry.

There are a lot of people out there looking for work - many of which have added one, two, perhaps five or more IT/security certifications such as CCNA and CISSP to their names over the past year. But you have to be forewarned: just because someone has passed a certification testing regimen doesn't mean he or she is going to be 1) a disciplined worker, 2) a good communicator, 3) have goals, or 4) possess that sticktuitiveness required to succeed in IT.

Certification only goes so far. In fact, I've often found that the more certifications one has the harder he or she is "trying" to prove something to mask other deficiencies (likely the very things you're in need of). Ironically, some of the sharpest and most productive people in IT and infosec have no certifications at all.

It's a harsh reality but it is what it is. Buyer beware.

Read More

Have no fear and be free

"The whole secret of existence is to have no fear. Never fear what will become of you, depend on no one. Only the moment you reject all help are you freed." -Buddha

This is great for personal power, personal responsibility and, of course, information security - just be careful with that "reject all help" bit. ;)

Read More

Web security tidbits on developers, leadership, weak passwords & more

Here are a few pieces I've written recently on Web application security you may be interested in...things that affect each and every one of us working in IT and infosec:

I wouldn’t want to be a developer these days

Don’t overlook the importance of authenticated testing

You can’t change what you tolerate

Testing for weak passwords: a common oversight without a great solution

How often should you test your web applications?

Notable changes in the PCI DSS 2.0 affecting Web application security

Enjoy!

Also, be sure to check out www.principlelogic.com/resources.html for all of my information security articles, podcasts, webcasts, screencasts and more.

Read More

Time management + getting over your job title in IT

Here are some IT career bits I wrote for TechTarget's SearchWinIT.com that you may be interested in:

Time management strategies for the IT pro

Your title is worthless; your value is priceless

This is the best time ever to focus on these things.

Enjoy!

Also, be sure to check out www.principlelogic.com/resources.html for all of my information security articles, podcasts, webcasts, screencasts and more.

Read More