SEARCH RESULTS
 
Showing 1-10 of 28 records
 
Expand article

What do the Cold Boot Crypto Attack, DVD Players, and MiFare tell us about the Future of Biometrics?

2008-03-26 00:16:43 by Erik T. Heidt in Art of Information Security
 
...enormous amount of scrutiny, and minor flaws will be exploited. And of course, the greater the financial gain, the greater the time and energy attackers invest in trying to defeat the system. The authors of the article ignore these issues, idealistically assuming biometrics will just work Now, of course there are lots of examples where...
 
Tags: biometric authentication, biometric authentication infrastructure, biometric authentication challenge, tamper-proof biometric authentication, authentication, authentication device, mifare, tamper, biometrics
 
 
 
 
Expand article

Partial Disclosure - The Good, Bad, and Ugly

2008-10-21 13:58:00 by Tyler Shields in Zero in a bit
 
...enormous target audience Partial Disclosure - The Bad What is driving the fear surrounding partial disclosure is the potential for abuse. When a major flaw is partially disclosed, a number of potential issues may occur. First and foremost, the further along the partial disclosure path we are, the more details will be released to the public,...
 
Tags: partial disclosure, process, responsible disclosure process, partial disclosure process, disclosure, partial disclosure model, responsible disclosure, partial disclosure path, disclosure andor non-disclosure
 
 
 
 
Expand article

Betting on the SOA Horse

2008-01-05 05:49:38 by Tim Bass in The Complex Event Processing Blog
 
...enormous payouts, but the odds are remote. Very few people win these exactas or trifectas. I recall warm memories of my years inNew Orleanswhen I was a university student at Tulane University . We loved the excitement (and the beer!)at Jefferson Downs, in Kenner, Louisiana. We took our dates to the horse races at Jefferson Downs and these...
 
Tags: horse, soa horse, technology horse races, races, cep, cep horse, technology horse racingis, real horse races, horse fast
 
 
 
 
Expand article

Swedish Army Loses Classified Information on Memory Stick

2008-01-09 13:46:31 by schneier in Schneier on Security
 
...enormous amount of information. Twenty years ago, someone could break into my office and copy every customer file, every piece of correspondence, everything about my professional life. Today, all he has to do is steal my computer. Or my portable backup drive. Or my small stack of DVD backups. Furthermore, he could sneak into my office and...
 
Tags: stick, memory stick, public computer center, computer, public computer, information, armed forces, swedish army, stick belongs
 
 
 
 
Expand article

New Privacy Policy Wrinkles: Online Behavioral Advertising; and Potential new EU Data Protection Policy

2008-01-31 11:24:31 by Geoffrey Turner in Security & Risk Management
 
...enormous implications for Internet search engine operations within EU nations and may also impact the provisions of the US Safe Harbor agreement with the EU. This blog will track this activity as it unfolds and update events as they occur. Stay tuned
 
Tags: consumer, consumer protection, privacy policy, consumer choice, consumer data, constitutes sensitive data, sensitive data, protection, ftc staff
 
 
 
 
Expand article

Lock-In

2008-02-12 06:08:15 by schneier in Schneier on Security
 
...enormous (.pdf Of course, that's not how Microsoft advertises NGSCB . The company has positioned it as a security measure, protecting users from worms, Trojans and other malware. But control does not equal security; and this sort of control-based security is very difficult to get right , and sometimes makes us more vulnerable to other...
 
Tags: lock-in, software, software development kit, custom software, software company, security, hardware, special security hardware, security mechanism
 
 
 
 
Expand article

Boston/Cambridge InfoSecurity Events

2007-12-18 19:12:25 by Chris Wysopal in Zero in a bit
 
...Enormous Room. Source: Boston 2008 Source: Boston is a new security conference taking place in Cambridge on March 12-14th. This lines up pretty well with St. Patricks Day weekend which will be a fun time to be in Boston. Mike Murray has a great writeup about it on his blog
 
Tags: software security weaknesses, boston, cambridge, held, held tomorrow night, patricks day weekend, basement conference center, talk tonight, talk
 
 
 
 
Expand article

Privacy and Power

2008-03-11 06:09:57 by schneier in Schneier on Security
 
...enormous power over you: He or she can search police databases using the information on your ID; he or she can create a police record attached to your name; he or she can put you on this or that secret terrorist watch list. Asking to see the officer's ID in return gives you no comparable power over him or her. The power imbalance is too...
 
Tags: relative power differential, relative power, power, relative power levels, power levels, additional power, power imbalance, officer enormous power, officer
 
 
 
 
Expand article

N-DEx National Intelligence System

2008-03-31 06:13:30 by schneier in Schneier on Security
 
...enormous caches of local and state records for the first time The expanding police systems illustrate the prominent roles that private companies play in homeland security and counterterrorism efforts. They also underscore how the use of new data -- and data surveillance -- technology to fight crime and terrorism is evolving faster than the...
 
Tags: intelligence, police systems, police, authorities, surveillance authorities, local police, law enforcement, federal law enforcement, intelligence analysts
 
 
 
 
Expand article

Irish jobs site compromised and personal information accessed

The Article has images
2008-03-31 10:13:21 by Evan Francen in The Breach Blog
...enormous. It is usually easy to detect common network and host-based technical attacks because the patterns of traffic and commands differ from what would be considered "normal". Social engineering attacks can and often do go unnoticed Most of the stolen information relates to archive CVs rather than those of people now looking for jobs All...
 
Tags: jobs, information, personal information, job-seekers site jobs, site, identity, identity theft, breach description, breach