Archives

Elliptic Curve Cryptography – a small chink in the armor

Swiss Researchers unveiled last month they successfully cracked Elliptic Curve Cryptography (ECCp-112), using 200 Playstation 3s. The experiment took one year, but could be done in as little as 3 months. This has implications in security and privacy planning, as the amount and cost of equipment needed to break encryption continues to [...]

Security vs. Privacy in France – Part 3

French citizens are beginning to weigh sacrificing the privacy held so dearly in the name of security. After listening to a round table forum with several well known French privacy advocates and security researchers, Shal “realized the antagonism between security & privacy was thinking all along that not getting the debate to some extent translated into other languages would be very unfortunate.
The participants tackle the deployment of cameras over Paris, face recognition, RFID usage etc. This is part 3 of the [...]

Security vs. Privacy in France – Part 2

French citizens are beginning to weigh sacrificing the privacy held so dearly in the name of security. After listening to a round table forum with several well known French privacy advocates and security researchers, Shal “realized the antagonism between security & privacy was thinking all along that not getting the debate to some extent translated into other languages would be very unfortunate.
The participants tackle the deployment of cameras over Paris, face recognition, RFID usage etc. This is part 2 of the [...]

Security vs. Privacy in France – Part 1

French citizens are beginning to weigh sacrificing the privacy held so dearly in the name of security. After listening to a round table forum with several well known French privacy advocates and security researchers, Shal “realized the antagonism between security & privacy was thinking all along that not getting the debate to some extent translated into other languages would be very unfortunate.
The participants tackle the deployment of cameras over Paris, face recognition, RFID usage [...]

Popular encryption software flaw details published

The recently unveiled flaw in SSH reiterates the idea that, no matter how good the technology, it will eventually fail from a whole host of threats. In this case, the implementation flaw occurred in a software product that had been previously “proven secure”. Real world implementations are more complex than security models, and other mitigations must be in place when a design does finally [...]

EXCLUSIVE: Interview with Heartland Payment Systems' Executive Director, Mr. Steven Elefant

We had a chance to talk with Mr. Steven Elefant, Executive Director of end-to-end security at Heartland Payment Systems shortly after the security breach reportedly affecting hundreds of millions of credit card transactions. While the complete interview is available in the forums, we include a few excerpts in the articles section of the [...]

Microsoft's End-to-end Trust – a review of Chief Security Strategist Douglas Cavit's vision

Last week, the Chief Security Strategist for Microsoft, Mr. Douglas Cavit, presented a webcast to the Information Systems Security Association titled “End-to-end Trust: Creating a more trusted [...]

Critical Adobe Acrobat flaw reminds us how far programs and data may infiltrate an enterprise

Last week, Adobe confirmed the vulnerability of most of it’s Acrobat product line, including Reader, Standard and Professional on all operating systems and every nearly every released version from 3-9. The ubiquitous nature of the PDF format, deployed footprint of Acrobat and the nature of the exploit create a catastrophic set of circumstances. Looking carefully may reveal related hidden problems lurking in your infrastructure. These problems are not unique to this specific software, and the lessons learned should carry over to handling of private and mission-critical [...]

UK's secret spies nix huge covert operation after loss of USB memory stick

Last week, the British Security Service and Secret Intelligence Services, better known as MI5 and MI6, showed exactly how expensive information security procedures really can be. Details unveiled last week show MI6 scrapped a 2006 undercover drug raid operation in Columbia for fear that a lost USB stick containing covert agents and informants may have fallen into the wrong [...]

Congressman Twitters Security Breach

Even with the best policies and practices in place, everything hinges on the end user. This weekend, Congressman Hoekstra Twittered secret Iraqi travel plans, showing how easily private information is disseminated and security may be [...]