Quick Hits
Commentary
News
News
Quick HitsNewsNewsNews
CommentaryNews
Commentary
Commentary
CommentaryQuick HitsNews
CommentaryNewsNews
CommentaryNews
You may have something with passcode. However password has been used for so long it will be hard to get people to think of it as a code and not a word. Also, if you can still enter a word then I think users will still do...
In reply to: Re: language
Passwords are the weak link to many things. How many people use that word for their password? I bet it's a pretty large number. That being said what else can we do? Finger prints maybe? I realize that's much easier...
In reply to: passwords
I think you're confusing insurance with assurance. If I provide some kind of warranty, guarantee, or underwriting of a piece of software, then sure, I'm on the hook. But I disagree with your assertion that assurance...
In reply to: Re: But assurance equals accountability equals liability.
I haven't been able to find information on the exact malware used or the infiltration method, however, it has been reported that the same group that breached Target is also behind this attack. Therefore, the malware used...
In reply to: Re: Type of Malware
you don't blame the tools for sloppy work. heartbleed was caused by a crass violation of an old and well known programming standard: you don't let user input data control your program. you control the input. ...
In reply to: don't blame the tools
Use the word "passcode" instead of "password" and less people will use simple passcodes based on words. Something like "H6f4ggmo3fGaM" is not a word, so it doesn't make sense to call it a "password."
In reply to: language
Has there been any report as to what type of malware was used to exploit the POS machines? Also, how were the machines infiltrated?
In reply to: Type of Malware
From what I have been told is that for many the focus is on "compensating measures" such as firewalls and physical security. Truth is, they have been dealing with this type of issue for years. It's not uncommon to find Windows...
In reply to: compensating measures
This is a great post Matt. Does anyone have a problem with the way companies were notified? Certain companies were told early, certain companies weren't, and there are vendors that still don't know if their product are vulnerable....
In reply to: Heartbleed
Ok thank you for the insight. It seems very logical to have something like a password manager in place. However, let me play devil's advocate for the moment. For the password manager to work it needs to store your passwords....
In reply to: Re: RoboForm Password Manager
As an IT Auditor who worked with one of the big five (before they became the big four) global audit firms, I can only suggest that our definitions of assurance are vastly different. Arthur Andersen certainly found it out...
In reply to: Re: But assurance equals accountability equals liability.
Containing Corporate Data on Mobile Devices
If you’re still focused on securing endpoints, you’ve got your work cut out for you. WiFi network provider iPass surveyed 1,600 mobile workers and found that the average US employee carries three devices -- a smartphone, a computer, and a tablet or e-reader -- with more than 80% of them doing work on personal devices.
Tweet This
0 Comments
