Skip to main content

The WiKID Blog

Viewing posts from January, 2009

herman-munsters-identity-stolen

Posted by: admin 15 years, 3 months ago

As if you needed more proof that identity thieves are lowly scum, they have now stolen Herman Munster's identity. If they had any class at all, they would have gone for Gomez Adams.

read more / 0 comments

banks-seek-tighter-security-from-vendors

Posted by: admin 15 years, 3 months ago
According to today's WSJ, 6 big US banks and BITS will announce security standards for their vendors. This action shouldn't come as a surprise, since the banks are essentially following in the footsteps of VISA and Mastercard and their CISP/PCI standards that attempt to secure the credit card industry - especially since the banks own VISA and Mastercard.

read more / 0 comments

better-password-strength-just-one-factor

Posted by: admin 15 years, 3 months ago

Pete over at Spire Security points out the obvvious(which alluded me):

As far as I can tell, Bruce Schneier's current Wired column, MySpace Passwords Aren't So Dumb, is intended to be taken seriously. The article is supposed to be about how "good" passwords on MySpace are these days, and there isn't a hint of irony in his statement:
"But seriously, passwords are getting better."
I am at a loss to explain how he can come to this conclusion when every single one of the 34,000 passwords he analyzed were stolen through a phishing attack. What he should have said was: "This shows that a 1-character password (the shortest they harvested) is just as secure as a 32-character password (the longest they harvested)"
He also points out that if you're not going to do two-factor authentication, then don't worry about long passwords. If any data is important enough or vulnerable enough to require a strong and therefore annoying password policy, use two-factor authentication.

read more / 0 comments

spire-on-low-frequency-high-impact-events

Posted by: admin 15 years, 3 months ago
Compare this Spire Security post to my previous post about hedge fund risks to see who has the better sense of humor.

read more / 0 comments

spam-and-the-fortune-1000

Posted by: admin 15 years, 3 months ago

There is an interesting article on the Register about bots in large company networks. I always assumed that the massive bot armies of spammers and phishers consisted of the PCs of unsophisticated home users. I think this has tremendous implications. If you're PayPal and Oracle is sending PayPal spam, can you do something about it? Yes, I think.

read more / 0 comments

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom