Operations // Careers & People
3/31/2014
01:55 PM
Marilyn Cohodas
Marilyn Cohodas
Commentary
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
100%
0%

Community & A Virtual Handshake

A secret handshake means you are part of a shared experience. That's what the Dark Reading community is all about.

If you had any doubt that security geeks are a breed apart, German researchers (definitely geeks) found evidence a few years ago that the "secret handshake" of experience has been passed down through the evolutionary chain from generations of chimpanzees. That handshake makes subcultures or communities distinct from the mainstream.

For the past few days, I've been honored to "shake hands" with many of you in the security community as we've hashed out a range of issues, from the skills shortage to the Target breach and the balance between privacy and security in the post-Snowden era.

But a secret handshake represents a lot more than conversation and culture. It means we are part of a something larger -- a community. We are connected by the unique lingo, memes, and passions we all share. When those things are acknowledged, we know we are among friends.

That's the kind of environment we intend to create at Dark Reading with our new platform designed to foster high-IQ conversations about the critical security issues of the day. Our aim is to foster a dialogue among practitioners that is both relevant and personal. But it's a goal that can succeed only with your help and active participation.

How will that happen?

First of all, we want you to tell us about the trends you are seeing in security, where you have found success, and what you think about the headlines and analysis from our award-winning news team, as well as the opinions voiced by industry leaders. But because we know it's tough combating threats and protecting sensitive corporate data, we are also planning some lighter fare -- cartoons, contests, slide shows, and flash polls that will put a smile on your face and keep you in good spirits as you face the trials ahead.

Here's how to get started helping us build Dark Reading's security community.

  • Register for the site, create a user profile, and tell us a little bit about yourself. Your user profile will automatically archive your comments and conduct private chats with other members.
  • Comment on the article boards. Agree or disagree. Ask questions. Share your ideas on how to solve a problem. But keep the conversation at a high level. We will monitor the boards closely to keep them free from spam and product pitches.
  • Start your own blog or discussion board topic. On the home page, under "Current Conversations," click "More Conversations." Hit "Start a Board," and write a personal commentary on a hot-button topic.
  • Be social. Share Dark Reading's best ideas, blogs, and threads with your colleagues and friends through email and social media.

Our secret handshake may be a virtual one, but it's one we hope will help strengthen our community.

Marilyn has been covering technology for business, government, and consumer audiences for over 20 years. Prior to joining UBM, Marilyn worked for nine years as editorial director at TechTarget Inc., where she launched six Websites for IT managers and administrators supporting ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Marilyn Cohodas
100%
0%
Marilyn Cohodas,
User Rank: Strategist
4/2/2014 | 4:51:03 PM
Re: Saving items?
My error, LB. The functionality to save your favorite blogs is not available at the moment.  
lafritz65
50%
50%
lafritz65,
User Rank: Apprentice
4/2/2014 | 2:57:25 PM
Saving items?
How do I "save your favorite blogs and news"?  I see links or buttons to add a comment, email the item, "like" it, print it, or add an RSS feed, but nothing to save it so I can reference it later, if desired.

LB
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3409
Published: 2014-10-25
The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.

CVE-2014-4620
Published: 2014-10-25
The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.

CVE-2014-4623
Published: 2014-10-25
EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force a...

CVE-2014-4624
Published: 2014-10-25
EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call.

CVE-2014-6151
Published: 2014-10-25
CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.