The WiKID Blog

The WiKID Blog, musings on two-factor authentication, information security and some other stuff.

texas-considers-requiring-pci-compliance

Posted by: admin 16 years, 3 months ago

In an interesting twist in the continuing PCI story, the Texas legislature may mandate PCI compliance:

According to the language of the bill, "A business that, in the regular course of business, collects, maintains, or stores sensitive personal information in connection with an access device must comply with payment card industry data security standards." The bill would allow a financial institution in the state to request a breached entity to provide certification of its compliance with PCI specified controls. HB 3222 would require the certification to be issued by a PCI-approved auditor no earlier than 90-days before the breach.

It sounds like retailers would have to be audited every 90 days! Is this bill the work of the financial institutions or the auditors?

telework-promoted-to-cut-gas-costs

Posted by: admin 16 years, 3 months ago

According to a recent study, federal workers could save $55 on monthly fuel costs.

The online-based telework promoting organization figured that current fuel prices cost typical GS-7, Step 5 federal employees $138.80 a month, nearly 7 percent of their after-tax income. The organization's study, titled "Gas Fuels Telework," is based on a survey of 3,500 federal employees registered with the Telework Exchange Web site.

If you've been in DC area traffic, then you know that anything that gets cars off the roads is a good thing.

securing-webdav-with-ssl-and-two-factor

Posted by: admin 16 years, 3 months ago

One reason for the lack of posts recently has been that I have written a how-to on securing WebDAV with SSL and two-factor authentication. Dealing with WebDAV was more of a pain than I anticipated. First, there seems to be a bug in recent versions of apache that breaks mod_auth_radius and mod_auth_xradis. Second, I spent a lot of time figuring out the ways that WebDAV does not work on Windows ;).

ted-stevens-site-hacked-by-irony

Posted by: admin 16 years, 3 months ago

Hot off the tubes:

Almost as freaky as his infamously disjointed "series-of-tubes" speech last year about the Internet (which briefly earned him the Most Lampooned Politician on the Web award), Stevens's reelection site asks visitors to enter a username and password and then -- as they unsuccessfully fumble for a password -- condemns them with a warning that begins:

i-can-dig-it-he-can-dig-it-she-can-dig-it-we-can

Posted by: admin 16 years, 3 months ago

With apologies to Friends of Distinction: An article I wrote for Howtoforge has made the front page of Digg. So can you digg it. baby?

• Page 109 of 135
• ←
• 102
• 103
• 104
• 105
• 106
• 107
• 108
• 109
• 110
• 111
• 112
• 113
• 114
• 115
• 116
• →