Friday Summary: November 11, 2010
When we came up with the Friday Summary, the idea was we’d share something personal that was either humorous or relevant to security, then highlight our content from the week, the best thing’s we read on other sites, and any major industry news. The question is always where to draw the line on the personal stuff. I mean, it isn’t like this is Twitter.
Hopefully this next story doesn’t cross the line. It’s not too personal, but especially for those of you with kids, it might bring a smile.
This morning I was getting my 20-month-old ready for daycare when I may have let loose a little toot. I’ve always known that is one of those things I’ll have to… put a cap on… once she got older and knows what it is. But I’m practically a vegetarian, and that comes with certain consequences.
Anyway, it went like this:
Daughter (looking me in the eye): “Daddy pooped!”
Anyway, yet one more thing I can’t do in the comfort of my own home.
Nope. This has nothing to do with security. Live with it.
Webcasts, Podcasts, Outside Writing, and Conferences
- Rich speaking at the Cloud Security Alliance Congress next week. I’m co-presenting with Hoff again, and premiering my new Quantum Datum pitch on information-centric security for cloud computing. Haven’t been this excited to present new content in a long time.
- Adrian’s Dark Reading post on NoSQL.
Favorite Securosis Posts
- Rich: Baa Baa Blacksheep. Lather. Rinse. Get pwned. Repeat.
- Mike Rothman: MS Atlanta: Protection Is Not Security. It’s always hard to wade through the hyperbole and marketing rhetoric, especially with a fairly technical topic. You are lucky Adrian is there to explain things.
- Adrian: Baa Baa Blacksheep. Zscaler totally freakin’ missed the point.
Other Securosis Posts
- LinkedIn Password Reset FAIL.
- Incite 11/10/2010: Hallowreck (My Diet).
- PCI 2.0: the Quicken of Security Standards.
- React Faster and Better: Contain, Investigate, and Mitigate.
- React Faster and Better: Trigger, Escalate, and Size up.
- Security Metrics: Do Something.
Favorite Outside Posts
- Rich: Verizon launches VERIS site to anonymously share incident data. I’m on the advisory board (unpaid) and a bit biased, but I think this is a great initiative.
- Mike Rothman: Indiana AG sues WellPoint for $300K. $300K * 10-15 states could add up to some real money. This is just a reminder that getting your act together on disclosure remains important, unless you like contributing a couple hundred large to your state’s treasury (and everybody else’s, eventually).
- Adrian Lane: All In One Skimmers. And yes, it’s really that easy. On a positive note, this may be the only piece of electronic gear not made in China.
Research Reports and Presentations
- The Securosis 2010 Data Security Survey.
- Monitoring up the Stack: Adding Value to SIEM.
- Network Security Operations Quant Metrics Model.
- Network Security Operations Quant Report.
- Understanding and Selecting a DLP Solution.
- White Paper: Understanding and Selecting an Enterprise Firewall.
- Understanding and Selecting a Tokenization Solution.
- Security + Agile = FAIL Presentation.
Top News and Posts
- New Android Bug Allows for Silent Malicious App Installation.
- A Database Administrator Disconnect Over Security Duties.
- PGP Disk Encryption Bricks Upgraded Macs.
- It’s time to get very serious about Java updates Java is a friggin’ mess. You’ll hear more about it in the coming years… trust us.
- Body Armor for Bad Web Sites.
- Danger to IE users climbs as hacker kit adds exploit.
- The Great Cyberheist A great, in-depth article on Albert Gonzales (the TJX/Heartland/etc. hacker).
- Chrome, Pitted.
Blog Comment of the Week
Firesheep is not the attack; it’s the messenger.