SEARCH RESULTS
 
Showing 1-10 of 32 records
 
Expand article

Third Annual Movie-Plot Threat Contest Semi-Finalists

2008-05-07 14:33:13 by schneier in Schneier on Security
 
A month ago I announced the Third Annual Movie-Plot Threat Contest: For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the sale of your new product idea. There are lots of risks out there, some of them serious, some of them so unlikely that we shouldn't worry about them, and some of them...
 
Tags: risk, criminal risk, common household risk, annual movie-plot threat, terrorism risk, product idea, product, fear, toothpaste test strips
 
 
 
 
Expand article

How Secure is Secure?

2008-05-08 16:46:00 by sdl in The Security Development Lifecycle
 
Hi folks, Eric Bidstrup here As I touched on in my December posting on Common Criteria , and as Michael Howard discussed in his post on security metrics , trying to objectively quantify and measure How secure is secure is far more difficult than one might think. Id like to share my perspective that there are two dimensions useful to consider...
 
Tags: security metrics, software security metrics, implementation vulnerabilities, potential implementation vulnerabilities, metrics, secure, software, discretionary security protection, security protection
 
 
 
 
Expand article

The 802.1X Hat-Trick

2008-06-30 02:39:27 by JJ in Security Uncorked
 
Well my recent blogging , or lack there of, may have clued you in on my recent hectic travel schedule. Its June, and that means the end of governments fiscal year, so weve been busy little bees at the office. (Read my primer on 802.1X here For June, we have an 802.1X hat-trick to blame for my slack blogging habits. Over the past few weeks, Ive...
 
Tags: customers, government customers, variety, real world, implementations, wireless aps, actual implementations, wireless, address issues
 
 
 
 
Expand article

Passport Canada web site suffers serious breach

The Article has images
2007-12-05 11:51:09 by Evan Francen in The Breach Blog
Technorati Tag: Security Breach Date Reported 12/4/07 Organization Government of Canada Contractor/Consultant/Branch Passport Canada As mandated by the Canadian Passport Order, Passport Canada is responsible for issuing, revoking, withholding, recovering, and providing instructions on the use of Canadian passports Victims Certain persons...
 
Tags: passport canada, information, personal information, passport application information, application, breach, passport application site, passport canada spokesman, significant security breaches
 
 
 
 
Expand article

Maryland Department of Assessments & Taxation web exposure

The Article has images
2008-01-05 14:02:15 by Evan Francen in The Breach Blog
Technorati Tag: Security Breach Date Reported 1/4/08 Organization State of Maryland Contractor/Consultant/Branch Department of Assessments and Taxation Towson University's Regional Economic Studies Institute Victims Maryland residents applying for a homestead tax credit Number Affected Unknown roughly 900 people used the system on the day...
 
Tags: maryland, sensitive personal information, personal information, secure server hadhas, server, web application server, application, information, information security
 
 
 
 
Expand article

Cloned Trucks

2008-02-06 12:37:32 by schneier in Schneier on Security
 
Criminals are using cloned trucks to bypass security: Savvy criminals are using some of the country's most credible logos, including FedEx, Wal-Mart, DirecTV and the U.S. Border Patrol, to create fake trucks to smuggle drugs, money and illegal aliens across the border, according to a report by the Florida Department of Law Enforcement In August...
 
Tags: routine traffic stop, trucks, wal-mart, wal-mart semi-trailer, wal-mart uniform, savvy criminals, criminals, border patrol, fake trucks
 
 
 
 
Expand article

Lost Memorial Hospital laptop affects employees and retirees

The Article has images
2008-02-08 14:14:44 by Evan Francen in The Breach Blog
Technorati Tag: Security Breach Date Reported 2/7/08 Organization Memorial Health System, Inc Contractor/Consultant/Branch Memorial Hospital American Airlines Victims Employees and retirees Number Affected 4,300 Types of Data Names, addresses, birth dates, ID numbers, and Social Security numbers Breach Description An employee of Memorial...
 
Tags: memorial, hospital, memorial health system, memorial hospital lost, memorial hospital, sensitive personal information, personal information, hospital staff, employees
 
 
 
 
Expand article

More on Hating Agents

2008-02-13 14:54:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
I responded to a question about using agents for log collection on a mailing list (semi-public); I think this content also begs to be blogged. So Agents for log collection pros and cons agents are unavoidable in some cases (nowadays such cases are few and far between deployed agent can secure the log data in transit from its source to a log...
 
Tags: log management tool, log management, log management system, agents, remote, management, remote agent, agent, agents evil
 
 
 
 
Expand article

LogLogic User Forums Open

2008-02-27 17:37:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
We got this brand-spanking-new "semi-official" LogLogic user forum here , and I have my own sub-forum called " Log Innovations ." Feel free to drop by and participate As of now, I am reposting some of the most useful blog content there (such as the tips ), but it will be used for other fun stuff on the future. Check it out About me:...
 
Tags: loglogic user forum, blog content, log innovations, fun stuff, sub-forum, org, drop, semi-official, tips
 
 
 
 
Expand article

Laptop stolen from a Kraft Foods traveling employee

The Article has images
2008-03-04 13:26:48 by Evan Francen in The Breach Blog
Technorati Tag: Security Breach Date Reported 3/3/08 Organization Kraft Foods Contractor/Consultant/Branch None Victims Employees Number Affected 20,000 Types of Data It contained the names and may have contained Social Security numbers, - Kraft Foods spokeswoman Cathy Pernu Breach Description A company-owned laptop was stolen from a...
 
Tags: kraft, sensitive personal information, personal information, kraft tape lost, kraft policy, employee, kraft foods employee, kraft foods, information