<![CDATA[[SecurityRatty] tag: point-in-time]]> http://securityratty.com/tag/point-in-time Sun, 03 Aug 2008 20:00:00 +0000 iRatty Engine http://blogs.law.harvard.edu/tech/rss <![CDATA[Check Point appliances fight spam, protect industrial networks ]]> http://securityratty.com/article/9f3a86491d90c9f5c3204ccf39fb0718 http://securityratty.com/article/9f3a86491d90c9f5c3204ccf39fb0718 Thu, 20 Nov 2008 21:00:00 +0000 multifunction security appliances control industrial infrastructure secure wireless connectivity antispam capabilities check protection support devices software Check Point appliances fight spam, protect industrial networks <![CDATA[Don't just stand there... do something!]]> http://securityratty.com/article/8f2185a94af9d583b7d6ed051c8978f0 http://securityratty.com/article/8f2185a94af9d583b7d6ed051c8978f0 Wed, 12 Nov 2008 08:57:54 +0000 vulnerable technologies stop experts users Don't just stand there... do something! <![CDATA[Security at the point of sale]]> http://securityratty.com/article/700176f504c9a4d12ae76cbeaa5283c9 http://securityratty.com/article/700176f504c9a4d12ae76cbeaa5283c9 Add to digg Add to StumbleUpon Add to Twitter Add to Slashdot
]]> Tue, 04 Nov 2008 02:00:00 +0000 point-of-sale systems thieves intent retailers networks Security at the point of sale <![CDATA[Really Good Point From Schneier ...]]> http://securityratty.com/article/224dd81351c5dcee47e6095088342c98 http://securityratty.com/article/224dd81351c5dcee47e6095088342c98 here; the key point is: "The same is true for knitting needles [...] and whatever else the airport screeners are confiscating this week. If there's no consequence to getting caught with it, then confiscating it only hurts innocent people. At best, it mildly annoys the terrorists.

To fix this, airport security has to make a choice. If something is dangerous, treat it as dangerous and treat anyone who tries to bring it on as potentially dangerous. If it's not dangerous, then stop trying to keep it off airplanes. Trying to have it both ways just distracts the screeners from actually making us safer."

Doesn't it just make sense?!

About me: http://www.chuvakin.org
]]> Wed, 01 Oct 2008 10:36:00 +0000 dangerous hurts innocent people screeners airport screeners treat airport security mildly annoys consequence terrorists Really Good Point From Schneier ... <![CDATA[Security's connections and intersections]]> http://securityratty.com/article/4decd009313212d53a0fb4161271eba1 http://securityratty.com/article/4decd009313212d53a0fb4161271eba1 Sun, 28 Sep 2008 20:00:00 +0000 core knowledge base difficult intellectual profession competent generalists serial specialization broad option security hope recruits planet Security's connections and intersections <![CDATA[Cryptosmith Blog]]> http://securityratty.com/article/28ab882455f08fd37cc1fc0ba1780433 http://securityratty.com/article/28ab882455f08fd37cc1fc0ba1780433 Rick Smith has a blog called Cryptosmith. Rick has written extensively on authentication, crypto, and other pressing issues. A couple of his posts to point out


Models for Today's Security

The Center for Password Sanity
]]> Thu, 04 Sep 2008 07:43:11 +0000 rick smith rick password sanity blog cryptosmith models issues authentication center Cryptosmith Blog <![CDATA[Check Point goes virtual with VPN-1 ]]> http://securityratty.com/article/3da450d4e82b713893f83d82d9cf3ff3 http://securityratty.com/article/3da450d4e82b713893f83d82d9cf3ff3 Sun, 17 Aug 2008 20:00:00 +0000 protect virtual machines vmware esx vpn-1 software single piece check esxi version hardware runs Check Point goes virtual with VPN-1 <![CDATA[Majority of Web users share personal data online]]> http://securityratty.com/article/4e5a32829f736cdf24f1bd89b3e24b49 http://securityratty.com/article/4e5a32829f736cdf24f1bd89b3e24b49

]]> Tue, 12 Aug 2008 09:00:00 +0000 personal details online aol research internet users willingly Majority of Web users share personal data online <![CDATA[Fun Reading on Security - 6]]> http://securityratty.com/article/9a84eccd9e65597ca9f13e1a6c56c52f http://securityratty.com/article/9a84eccd9e65597ca9f13e1a6c56c52f Instead of my usual "blogging frenzy" machine gun blast of short posts, I will just combine them into my new blog series "Fun Reading on Security." Here is an issue #6, dated August 7th, 2008.

  1. DNS + Karma = Boom! Enuf said. Also, hear Pete Linstrom squeal.
  2. Fun essay on "blocking" and risk. Is it our job to stop'em from using Facebook?
  3. MS Exploitability Index. Smart ... or misguidedly focused on "vulnerability release" (and not creation)
  4. Chip-n-PIN, a PCI killer? I don't think so!
  5. Mike R revisits "good enough security" - read it, then review your IR plans (...for you will be 0wned)
  6. Very fun RSA survey here; data leakage beats malware again, people still not report incidents (to whom???)
  7. More and more and more people point at idiocies of academic security research... Read the whole w00t 08 thread here. Weep. Laugh.
  8. Neosploit has a bad quarter... breaks support "contracts" ... shuts down? Ah, the economy :-)
  9. Awesome stuff from  Richard Bejtlich: CAER.
  10. "The Network Firewall is a Consensual Hallucination" :-)
  11. More GRC-ball-kicking: here, here ("IT-GRC "vendors" are not IT-GRC vendors") - both are pretty insightful for GRC-lovers and GRC-haters)
  12. More SIEM-ball-kicking: here ("underwhelming","ridiculous", "missing the point"), here ("dead ...unless","cripple")
  13. Fun DLP portal launches.
  14. Final word (?) on TerryChilds-gate here. "When management starts controlling the actions of admins, things start to fall apart." Huh? When management loses control of the business, it dies. Folks, IT vs IT security gap IS real. I never quite believed it, but this taught me a lesson. Some common security sense for a change (also here).

Enjoy.

About me: http://www.chuvakin.org
]]> Thu, 07 Aug 2008 14:01:00 +0000 security fun academic security research security gap fun essay common security sense fun rsa survey it-grc it-grc vendors Fun Reading on Security - 6 <![CDATA[How we tested Check Point's IPS ]]> http://securityratty.com/article/3ca7c3526fbd86e94f03e34c946f8087 http://securityratty.com/article/3ca7c3526fbd86e94f03e34c946f8087 Sun, 03 Aug 2008 20:00:00 +0000 ips-1 sensor 200c gigabit ethernet ports check ips interfaces production network sets How we tested Check Point's IPS