News
NewsNews
CommentaryNews
Commentary
Commentary
CommentaryQuick HitsNews
CommentaryNewsNews
Commentary
News
CommentaryQuick HitsNewsNews
Commentary
I should clarify that OneLogin doesn't focus particularly on start-ups, but that's where we are seeing this trend. 90% of our customers are not startups and have Active Directory, some of them with dozens of forests and...
In reply to: Re: Unusual article
I can see that point. So many have relied ONLY on security by obscurity (which IS bad) for protection that it is probably good to hammer that idea out of a Infosec neophyte's head... However, I still think the more exprienced...
In reply to: Re: Security v. Obscurity
One site I converted to WordPress previously ran on a CMS of sorts that you could edit by going to www.mydomain.com/data/ - no password required, pure security by obscurity. So compared with that, WordPress was certainly...
In reply to: Re: Custom platforms another example of security by obscurity
@rjthomas01: The drive to cloud is largely about mobility, speed, and collaboration. The apps you mention are being adopted by users directly; whether that's good or not is certainly debatable, but their popularity is born...
In reply to: Re: Unusual article
Better to deride obscurity than end up back where we started: Obscurity is Security
In reply to: Security v. Obscurity
Yep... we agree. The best security is securely designed systems, but there is no point in making those systems easy to find. ^_^
Corey
In reply to: Re: slows down an attack -- so it helps
I absolutely agree... However, to be devils advocate to this point (and my own article), I think this will only be the case if you have security conscious and trained folks creating the custom systems. Since they are blackboxes,...
In reply to: Re: Custom platforms another example of security by obscurity
That is an excellent point! When relying on someone elses' systems (the cloud) obscurity is NOT good. We need transparency in what tactics and strategies our external partners are using to protect out data... But in that...
In reply to: Re: Know your risks first
Interesting article, Corey. Something to consider here is that there is a distinction between obscurity, where you rely upon the use of an unknown or custom system to trip up a tracker, and a defensive posture where you...
In reply to: Know your risks first
ExtraHop analyzes all traffic to parse out transaction-level metrics, including the heartbeat messages used in this exploit. In this way, enterprise IT teams can easily monitor all potential Heartbleed attacks against any...
In reply to: It's possible to analyze all traffic for heartbeat messages
Thanks for the feedback, @EdMoyle. OpenBSD is doing an overhaul of OpenSSL in what they consider a security cleanup of the code. I'm not sure where all of this will go--there is a major cultural gap between the two groups...
In reply to: Re: Memory management not the core issue
Containing Corporate Data on Mobile Devices
If you’re still focused on securing endpoints, you’ve got your work cut out for you. WiFi network provider iPass surveyed 1,600 mobile workers and found that the average US employee carries three devices -- a smartphone, a computer, and a tablet or e-reader -- with more than 80% of them doing work on personal devices.
Tweet This
0 Comments
