News
Commentary
News
Commentary
Commentary
CommentaryQuick HitsNews
CommentaryNewsNews
Commentary
News
CommentaryQuick HitsNewsNews
Commentary
Commentary
Commentary
Thanks for the feedback, @EdMoyle. OpenBSD is doing an overhaul of OpenSSL in what they consider a security cleanup of the code. I'm not sure where all of this will go--there is a major cultural gap between the two groups...
In reply to: Re: Memory management not the core issue
First, great reporting Kelly as always. Second, I'm sure I'll get flames for this, but it strikes me that the mechanics of memory allocation aren't the issue here. The lack of bounds checking (i.e. the bogus...
In reply to: Memory management not the core issue
There's also some security benefit from using a custom platform, such as a homegrown content management system instead of WordPress. WordPress has the advantage of being tested constantly by those trying to break it (maliciously...
In reply to: Custom platforms another example of security by obscurity
It seems like you are reacting to the overuse of a good idea. The good idea is that you have to put your energy into fixing the basic security of your system and NOT rely on obscurity. A determined bad guy will...
In reply to: slows down an attack -- so it helps
Thanks for those simple obfuscations, Corey. Wondering if you've tried them out in practice.
In reply to: Good examples but do they work?
Curious, Jeff. What do you think a "Software Facts" label should include?
In reply to: Assurance Evidence
Heartbleed is a platform-independent problem that has exposed what is being called a two year old underlying weakness in the OpenSSL protocol. Major websites like Facebook and Tumblr have applied the necessary patches...
In reply to: Re: Obama Approved NSA’s use of Heartbleed for ‘National’ Interests
@haglt, not sure if Europe's data security are insane, but definitely odd. One reason to not use DropBox is that DropBox stores it's data on AWS, which is in the US. Which the UK can't use, because the US isn't on the list...
In reply to: Data security
"Today's hottest startups –- companies like Dropbox, Uber, Pinterest, and Tumblr" These happen to be the same companies that have come a cropper with Heartbleed, whereas- at least this time around- MS's infrastructure...
In reply to: Unusual article
Nice article; maybe- just maybe- Heartbleed will wake people up that no form of IT is a magice bullet impervious to faults. We're lukcy this time in that we're primarily a Windows shop and have therefore bypassed OpenSSL,...
In reply to: Good balanced view of software
I find it hard to believe Johnrobie that security loses in a risk versus cost argument, but I suppose that given the survey's findings, it is entirely possible. Enterprises can design their own security awareness programs...
In reply to: Re: Security Awareness Training or lack of it
I agree with Chris Eng that hindsight is 20/20 and I doubt very much that presented with the very simple choice of performance over, in this case vulnerability, would have been chosen by the OpenSSL project. I think the...
In reply to: Performance over Vulnerability
Containing Corporate Data on Mobile Devices
If you’re still focused on securing endpoints, you’ve got your work cut out for you. WiFi network provider iPass surveyed 1,600 mobile workers and found that the average US employee carries three devices -- a smartphone, a computer, and a tablet or e-reader -- with more than 80% of them doing work on personal devices.
Tweet This
0 Comments
