Security

• Competitive Information For Picking An Antivirus Solution

  24 Nov 2006 • 2 min read • technology security post

  This is an article from a year ago that showed how each vendor was able to respond to key virus outbreaks. They also show the data from the previous year. I personally recommend F-Secure’s …

• Four Challenges For Computer Security Research

  24 Nov 2006 • 2 min read • technology security post

  I would add a 5th item: 5. Develop Reusable Security Architectures that cover common scenarios and include appropriate protection by design Tools are sexy; secure design is hard. That’s why you …

• Ballot Design Not Dre Issues At Play In Fl Undervote Anomalies

  24 Nov 2006 • 2 min read • security politics Civil Liberties post

  It is hard to believe that such a blatant undervote error could be attributable solely to the DRE itself not properly recording them. But user interface designs can certainly be abused maliciously, or …

• Scans From 1962 Fallout Shelter Handbook

  22 Nov 2006 • 1 min read • security post

  The Ward-O-Matic: Fallout Shelter Handbook 1962 I’ve been working on emergency preparedness for my neighborhood lately so this is very apropos. BTW, I found a $79.99 Ready kit at Home Depot that …

• VirusTotal: Free site to check malware and AV solution efficacy

  12 Oct 2006 • 1 min read • security post

  Aviv Raff On .NET - VML Exploit vs. AV/IPS/IDS signatures Article showing how VirusTotal revealed how easy it can be to create “variants” that go undetected by most Anti Virus products. …

• No Fly List

  10 Oct 2006 • 1 min read • security post

  Schneier on Security: No-Fly List What a piece of crap!

• Microsoft Bug Reporting Process Makes Me Cacl

  9 Oct 2006 • 1 min read • security post

  The story of how Microsoft has ended up with so many unconnected and uncoordinated versions of command-line tools to manage setting and displaying ACL (Access Control List) entries is funny enough, …

• Ing Direct'S Anti Phishing Measure Backfires

  9 Oct 2006 • 1 min read • security post

  Another funny observation I had was about ING’s anti-phishing security mechanisms and usability. They make you use an annoying, long numeric ID as your login ID (you can’t change it to an …

• Security and Privacy "Certifications" often mean the opposite

  6 Oct 2006 • 1 min read • security Privacy post

  Certifications and Site Trustworthiness An excellent paper summarizing many of the problems with certifiers such as TRUSTe as well as showing that sites that get these certifications to prove their …

• TSA Insecurity. An economists perspective

  25 Sep 2006 • 1 min read • security post

  Freakonomics Blog: An airplane announcement I’ve been waiting for if I were a terrorist, don’t you think that I could figure out how to take the top off a bottle of contact lens solution and put my …