tag:blogger.com,1999:blog-36310439645406274572011-11-27T16:54:25.163-08:00I don't want be annoying, but I have questions...A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.comBlogger1412528.804039-81.536898http://creativecommons.org/images/public/somerights20.gifGadflySecurityhttp://feedburner.google.comtag:blogger.com,1999:blog-3631043964540627457.post-49596516631705773432011-10-05T16:23:00.001-07:002011-10-05T16:23:52.476-07:002011-10-05T16:23:52.476-07:00Can anyone let me borrow an iPad for a little research. I would like to make a presentation to interested parties in the Lake County Florida area regarding the technology of iPad tracking? Also, a...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=EjxE3RudnXQ:1S4jGRxsGOA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=EjxE3RudnXQ:1S4jGRxsGOA:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=EjxE3RudnXQ:1S4jGRxsGOA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=EjxE3RudnXQ:1S4jGRxsGOA:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/EjxE3RudnXQ" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2011/10/help.htmltag:blogger.com,1999:blog-3631043964540627457.post-13458780610987459042011-10-04T20:03:00.001-07:002011-10-04T20:06:39.875-07:002011-10-04T20:06:39.875-07:00I am moving all of my content over from Facebook to here, but here is the scoop: School systems are using the iPad's tracking feature to track students. Furthermore, when and who is doing this...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=yZl37v1YiLA:S0llhwCvf0M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=yZl37v1YiLA:S0llhwCvf0M:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=yZl37v1YiLA:S0llhwCvf0M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=yZl37v1YiLA:S0llhwCvf0M:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/yZl37v1YiLA" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2011/10/ipad-tracking-and-school-systems.htmltag:blogger.com,1999:blog-3631043964540627457.post-47965626045038659902009-01-01T12:10:00.001-08:002009-01-01T12:23:35.801-08:002009-01-01T12:23:35.801-08:00I have been working with Ruby on Rails (RoR), for a bit now, so I decided to extend my Ruby knowledge a bit and learn design patterns. I read the original GoF design patterns book, but "Design...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=Tkzhn0kbVSc:r9TbXjZKYOo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=Tkzhn0kbVSc:r9TbXjZKYOo:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Tkzhn0kbVSc:r9TbXjZKYOo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=Tkzhn0kbVSc:r9TbXjZKYOo:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/Tkzhn0kbVSc" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2009/01/off-topic-ruby.htmltag:blogger.com,1999:blog-3631043964540627457.post-66248952733182587672008-04-24T12:37:00.001-07:002008-04-24T12:45:51.329-07:002008-04-24T12:45:51.329-07:00I have been doing some online seminars for my CISSP CPE credits, and I recently viewed one on the state of malware. It was a bit depressing. Botnets and polymorphic threats abound, as well as the...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=CRJlD6O_Uow:BBDQdMjqjr0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=CRJlD6O_Uow:BBDQdMjqjr0:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=CRJlD6O_Uow:BBDQdMjqjr0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=CRJlD6O_Uow:BBDQdMjqjr0:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/CRJlD6O_Uow" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/04/depressing-cpes.htmltag:blogger.com,1999:blog-3631043964540627457.post-54064946455184432982008-03-19T09:44:00.000-07:002008-03-19T09:46:46.935-07:002008-03-19T09:46:46.935-07:00I created a Squidoo Lens to cover some of the same material as this blog. However, I did put some useful links to risk assessment methodologies and guides.<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=brsZynjUpDg:rf6a-kvtNNc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=brsZynjUpDg:rf6a-kvtNNc:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=brsZynjUpDg:rf6a-kvtNNc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=brsZynjUpDg:rf6a-kvtNNc:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/brsZynjUpDg" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/03/new-squidoo-lens.htmltag:blogger.com,1999:blog-3631043964540627457.post-58388312807292607232008-03-18T08:47:00.001-07:002008-03-18T10:04:54.995-07:002008-03-18T10:04:54.995-07:00Code reviews and static analysis of code, plus scanning tools, will only get you so far when securing your database-driven web application. The best solutions of securing web applications are...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=Auw4GMVpjZs:jobkAMvWh1A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=Auw4GMVpjZs:jobkAMvWh1A:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=Auw4GMVpjZs:jobkAMvWh1A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=Auw4GMVpjZs:jobkAMvWh1A:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/Auw4GMVpjZs" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/03/dont-do-db-security-by-yourself.htmltag:blogger.com,1999:blog-3631043964540627457.post-74741128348087553562008-03-06T07:10:00.000-08:002008-03-13T10:24:55.344-07:002008-03-13T10:24:55.344-07:00A terrible aspect of information security is the propagation of trendy buzzwords and their use as social signifiers in the community. One could be completely competent with fundamental aspects of...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=pvfdXix0sAY:2HwDN0YpdUc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=pvfdXix0sAY:2HwDN0YpdUc:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=pvfdXix0sAY:2HwDN0YpdUc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=pvfdXix0sAY:2HwDN0YpdUc:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/pvfdXix0sAY" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/03/buzzword-ephemera-and-propagation-of.htmltag:blogger.com,1999:blog-3631043964540627457.post-13097811479607891252008-03-03T07:10:00.000-08:002008-03-03T07:21:42.424-08:002008-03-03T07:21:42.424-08:00At one place where I had the opportunity to work, the external connections to the web and external partners were all protected by firewalls. Depending on the requirements of the customers, the...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=2GivK09FcuQ:bXq8Ov6WJY0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=2GivK09FcuQ:bXq8Ov6WJY0:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2GivK09FcuQ:bXq8Ov6WJY0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=2GivK09FcuQ:bXq8Ov6WJY0:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/2GivK09FcuQ" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/03/personal-firewall.htmltag:blogger.com,1999:blog-3631043964540627457.post-37367882821366510732008-02-28T05:46:00.000-08:002008-02-28T05:47:11.462-08:002008-02-28T05:47:11.462-08:00"We use professional judgement, a pinch from COBIT, a jot from FISCAM, two tablespoons of NIST baked in with meat from the Institute of Internal Auditors." This was the answer [paraphrased for...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=SVaiqSKSS8E:4ffOKZt7Mns:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=SVaiqSKSS8E:4ffOKZt7Mns:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=SVaiqSKSS8E:4ffOKZt7Mns:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=SVaiqSKSS8E:4ffOKZt7Mns:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/SVaiqSKSS8E" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/02/stovepiping-madness_28.htmltag:blogger.com,1999:blog-3631043964540627457.post-37413335367192231452008-02-26T08:46:00.000-08:002008-02-26T09:09:10.933-08:002008-02-26T09:09:10.933-08:00The first product I want to take a look at is Triumfant's Resolution Manager. After reviewing the information on Triumfant's website, I have began to develop some questions. Unfortunately, the site...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=YHVa_QVsL-k:LGRqSShr_x0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=YHVa_QVsL-k:LGRqSShr_x0:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=YHVa_QVsL-k:LGRqSShr_x0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=YHVa_QVsL-k:LGRqSShr_x0:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/YHVa_QVsL-k" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/02/first-impressions-triumfant-resolution.htmltag:blogger.com,1999:blog-3631043964540627457.post-37210227665300218822008-02-12T08:07:00.000-08:002008-02-12T08:09:45.990-08:002008-02-12T08:09:45.990-08:00I just found a cool blog where someone is using Emacs as a personal organizer. http://sachachua.com/ The blogger is also writing a book on using Emacs for personal productivity. I think this is...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=U0ov5XUGR6g:M1GCCiLOVz4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=U0ov5XUGR6g:M1GCCiLOVz4:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=U0ov5XUGR6g:M1GCCiLOVz4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=U0ov5XUGR6g:M1GCCiLOVz4:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/U0ov5XUGR6g" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/02/toolitis.htmltag:blogger.com,1999:blog-3631043964540627457.post-1703273185192538092008-02-08T05:38:00.000-08:002008-02-08T05:48:45.268-08:002008-02-08T05:48:45.268-08:00I now need to select the products I am going to review. There are several candidates for point solutions and few truly comprehensive solutions. One of my criteria will be the scope of the...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=2kUAxjW4I7U:OmzlXnr3zbk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=2kUAxjW4I7U:OmzlXnr3zbk:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=2kUAxjW4I7U:OmzlXnr3zbk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=2kUAxjW4I7U:OmzlXnr3zbk:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/2kUAxjW4I7U" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/02/product-selection.htmltag:blogger.com,1999:blog-3631043964540627457.post-55308585156299645732008-02-07T06:11:00.000-08:002008-02-07T06:46:54.233-08:002008-02-07T06:46:54.233-08:00Tripwire is the classic file integrity tool. Tripwire establishes a baseline of files using cryptographic hashes, then intercepts changes to the files in the security base, finally triggering a...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=V-DSyvNXZhM:8oZCcGoT-vs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=V-DSyvNXZhM:8oZCcGoT-vs:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=V-DSyvNXZhM:8oZCcGoT-vs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=V-DSyvNXZhM:8oZCcGoT-vs:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/V-DSyvNXZhM" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/02/something-is-in-my-network.htmltag:blogger.com,1999:blog-3631043964540627457.post-8211428387704919252008-02-06T11:41:00.000-08:002008-02-06T12:59:35.832-08:002008-02-06T12:59:35.832-08:00Risk management and risk assessment is structured as an elaborate linguistic game that provides a "feel good" payoff without an attendant change in the universe of discourse. Like what Bruce...<br/> <br/> I just see things in IT and computer security that are wrong. Others agree, but the real world organizations don't follow.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=dnMXMwOfBR0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=1aHraN-QZ3Y:mWaR3upt6F4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=1aHraN-QZ3Y:mWaR3upt6F4:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:l6gmwiTKsz0"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=l6gmwiTKsz0" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?d=7Q72WNTAKBA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/GadflySecurity?a=1aHraN-QZ3Y:mWaR3upt6F4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/GadflySecurity?i=1aHraN-QZ3Y:mWaR3upt6F4:gIN9vFwOqvQ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/GadflySecurity/~4/1aHraN-QZ3Y" height="1" width="1"/>A priori knowledge of the goodhttp://www.blogger.com/profile/16343586017959887365noreply@blogger.com0http://gadflysecurity.blogspot.com/2008/02/linguistic-games-in-risk-managementrisk.html