My latest security content

Here's my latest information security content...many more to come soon! Hope these prove to be of value to you.

Finding cross-site scripting (XSS) application flaws checklist

The Windows Report - Analyzing the IT Job Market (podcast)

Be sure to check out www.principlelogic.com/resources.html for all of my information security articles, podcasts, webcasts, screencasts, my Twitter updates, and more.

Read More

XSS in my article on XSS!?

I "tweeted" about this but I had to post it here as well. I just realized that my new article for SearchSoftwareQuality.com on XSS actually executes JavaScript when loading because of some sample code I inserted into it!! It's not actual XSS but looks like it! Ahh the irony.

Finding cross-site scripting (XSS) application flaws checklist

BTW, I'm working on getting it resolved...

Read More

Know of anyone who is "ignorant of the facts"?

British prime minister Benjamin Disraeli once said "To be conscious that you are ignorant of the facts is a great step to knowledge."

What a great quote related to information security...in the context of both users and management. There are people out there who understand the basics of information security risks. It's all the other people you need to focus on. Here's how you can build credibility and get others on your side with information security.

Read More

Do you have racy photos on Twitter too?

If you're on Twitter you may want to check out your followers - at least their pictures...I'm getting a lot of people with racy photos. Maybe I'm just developing a new fan base of people who feel really comfortable around me! ;-)

And to think that I could have a few hundred more followers on Twitter if I didn't filter out the junk!

Read More

Quoted in today's WSJ

If you can, check out today's Wall Street Journal - page A20. I talk about sensitive information being mismanaged on mobile devices. You may already know how I feel about mobile security...what's it going to take to fix this issue?

Read More

My latest security content

Here are a few new pieces just published. Enjoy!

The lowdown on PCI compliance

Testing rich Internet applications: 2009's best free tools

Big Brother or lowly minion - finding your role in IT

Be sure to check out www.principlelogic.com/resources.html for all of my information security articles, podcasts, webcasts, screencasts, my Twitter updates, and more.

Read More

Swimming in Atlanta

We're getting completely drenched here in the South. Pouring rain nonstop for four days and it's not supposed to let up for another few days. Must be all that "global warming". Seriously we've been hearing about reduced sun spot activity as of late (just not so much in the mainstream media because that would go against their religion). Some scientists (likely the ones whose jobs aren't tied to taxpayer funding) believe sunspot activity affects weather here on earth...like the really cold weather we've been having over the past couple of years...and all this rain.

I've always thought that it's quite cocky of man to believe he's powerful enough to change the climate but this guy has beat me to the punch. Some food for thought. That said "man changing the climate" is not what "global warming" is about anyway. But you already knew that.

Anyway, lots of homes and buildings flooded here in my neck of the woods should remind us all that business continuity - even if you work from home - is not something to take lightly. Have a great week, stay dry, and wish us luck!

Read More