Condoms and castles

We are spending billions on protecting the enterprise from hackers and malware, but we're letting the rest of the world burn around us. Most of what matters on the Internet isn't giant corporations or social networks, it's the average user, the person that doesn't know between a trojan and a sniffer. Whether you call them average joes, consumers, citizens or the unwashed masses, these are people that cannot defend themselves. ...

Continue reading

Vote For YOUR ISC2 Board of Directors

The election for the ISC2 Board of Directors is underway! The election runs from Nov 16 until Nov 30th. I need your votes! For those of you who have already voted, thank you so very much! When you're voting I should point out that there are THREE write in spots on that ballot as well. Oddly enough, there are three other "Horsemen" who didn't make it onto the ballot originally. Coincidence? ...

Continue reading

Skype Password Reset, Queue Zombie Apolocalypse

This morning I awoke to find the news feeds churning on a Skype password reset story. On first glance this seems like a troublesome one. If headlines were to be believed all you would need is the intended targets email address associated with their Skype account and they could reset your password. Um, yeah, see that's bad. M'kay. What would be REALLY bad is that if some political figure had ...

Continue reading

The Strange Tale of a Virus Called SQL Injection. Wait What?

Today was odd. I woke to a wonderfully unseasonably warm day that eventually spiraled into a dreary rainy one. Much in the same vein as the oddity that developed online today. This morning while perusing my Twitter feed and reading email I received an email from a reader. The email made my brain cramp almost instantly. I give you a passage from the strange tale of a virus called SQL ...

Continue reading

ISC2 BoD Election Opens Nov 16, 2012

Here we are four days from the beginning of voting for the ISC2 Board of Directors and, well, I'm in the running and I want YOUR VOTE! From The Register: "Wim Remes made it to the board last year from a write-on candidacy, let’s see if we can get more - at least on the ballot." Well, you folks got me on the ISC2 ballot and I really thank ...

Continue reading

Canadian Auditor General’s Report on Cyber Threats

It's that time of the year again and the nice folks at the Auditor General's Office have brought out their report on Protecting Canadian Critical Infrastructure Against Cyber Threats. This is a rather fascinating 36 page read and a serious condemnation of the work done by the federal government on four areas relating to the protection of critical infrastructure and cyber security. From the report: Between 2001 and 2009, the government made limited ...

Continue reading

L0pht Testimony Before Congress 1998

Here is the testimony as delivered before Congress by members of the L0pht in 1998. Watch the video. A lot of the items the touch on are still problems today. Required viewing.

The Liquidmatrix 2012 Security Budget Survey

Welcome to our first ever survey on security budgets. It takes two minutes to answer and will provide our community with valuable data. The survey is anonymous and the results will be published next month. Fill out the

Running For ISC2 Board Of Directors

The race is on to collect 500 signatures to be added to the ISC2 Board of Directors election ballot! I am running because I want to affect positive change for the membership and help provide greater benefit to the ISC2 membership overall. Let's be honest. There a lot of people out there who are disaffected with the state of affairs regarding the CISSP certification. I'm one of those people. Rather than ...

Continue reading

Project Viglio: There Will Be CyberDouchery!

ecyenixsoyokdbnjwinbgy Once Upon A Time…. Once upon a time, not too long ago, at Defcon, a guy no one really heard of stepped up and claimed he was starting a new “group“ and needed volunteers and money. This was Chet Uber, and after some time, and some posts, we all thought this little group with the misspelled logo (viglio is not vigilant wink wink nudge nudge) but it seems that ...

Continue reading