Is Facebook under attack? Does it matter?
So, is a large distributed hacking group, fond of Guy Fawkes planning an attack on Facebook? It depends on who you ask. They are DE-centralized. They are like Occupy in that they do not have a governing body, bylaws, membership fees, or fancy lapel pins. They are a group of like minded hactivists declaring war on "the institution". Whether you agree with their methods and message or not, there is virtually no way for "a civilian" to confirm or deny a threat.
Being an information security wonk, my feeling is that there are elements that have targeted the social networks. I have recent first hand fishing and social engineering attempts in my inbox.
I received an email from Facebook about one of the people I most respect in my field and one of my closest and oldest friends. It looked legitimate enough that I forwarded it to him and said "is this for real"? I have to admit, I do more with making networks talk to each other than with securing what is ostensibly public knowledge, so I was not familiar with a peer based password reset on Facebook. I was sure to ask a few personal questions that only the friend would know came from me. I got back a resounding NO. Looking at the email on my mobile device, even with a fairly heavy background in securing and forensically proving data is from the implied source....It looked real.
So what do you do about it? Change your password. Soon and often. I know, passwords suck. I don't know half of mine and keep them in an encrypted file, forensically hidden from the world on my system. They are phrases, which are easier to remember, they are disguised as other data (addresses, tech papers, notes, emails, etc). The phrases are 8+ characters with punctuation. Mathematically, the number 8 makes a password an order of magnitude harder for a computer to crack. So something like "@Never gonna give you up, never gonna make you cry!@" is a great password. I would have to crack each word, individually, the punctuation, the non-dictionary words like "gonna", and assume you are using a 6 year old meme as a password. I'd also have to put the words in the correct order. Those that know me wouldn't try it on my system, as I find Rick Astley detestable. Those who know me really well would try it thinking I was being ironical.
Best. Captcha. Ever. Thank you Joe.
Data on Facebook, regardless of your settings, is fair game. It is indexed, stored, backed up, screenshot, and stolen if it is quotable. If you've ever used hotel, coffee shop, the neighbor or your own wireless network without having to add a password, you are wide open. With a mobile device and nearly no technical knowledge, your Facebook, Twitter, Email and other "slightly secure" data can be compromised. It takes me about two minutes, including waiting for my machine to boot.
Access to your Facebook isn't the biggest concern. The fact that you re-use passwords is. Don't say you don't. You do. You also probably use words and phrases that can be found within inches of your desk or computer. Words and phrases of family, musicians or sports entities that you like. Chances are your kids names are somehow involved. Even those in the security game do it. A lot.
So, are you explicitly under attack? Hell if I know. Is Facebook under constant attack? Sure. All sites of any interest are. That's why I have a job. Is it under organized attack from a loosely organized group for political, social or financial gain? I couldn't say. Even if I knew. My suspicion is it's better to be safe than sorry. In my line of work, I see every attack vector and attack surface. Physical, administrative, competitive, political, social and just plain curiosity. In an age where you are living out loud, take some rudimentary precautions.
If you MUST reuse passwords, have levels of passwords. X password for banking, commerce, secret messages to the lonely housewife you had a crush on in high school. Use another for your social networking sites and other less critical and benign sites. Use as many as you can remember without it being a pain in the ass and getting in the way of your daily use.
Change your password occasionally. Do it when you change the Brita filter, or pay the electric bill. Make it a routine.
Use phrases, not words. Make it complex to guess, easy to remember. Don't use stuff anyone that reads your Facebook can guess.
Never click on an email needing you to "verify" you are who you say you are. Chances are it is bunk. Log into your account and check there. It should work for just about anything short of YOU resetting your password.
Don't use a password so complicated that you have to reset it every time you try to login.
Don't store passwords in your browser. See the Wall Street Journal this week and the study done by some big Information Security company that signs my paychecks.
Thanks,
Rocky Gregory, CISSP
Wireless Field Day 2 – Electric Boondagaloo
Posts to follow presenters, watch us stream at you:
Thanks to @BlakeKrone for the embed!
BionicMythBusters – 1
Thanks to our dear friend, Mr. Mark Church, The Lad and I were able to see perhaps the greatest live show of my life. Not Desmond Dekker, Not The Who, Not Elvis Costello. Two people who inspire my research and love of my trade more than just about anyone. Mr. Jamie Heynaman and Mr. Adam Savage. Mythbusters live may have been the show to beat all shows.
I read that the they were coming and knew that TheBionicLad, lead cryptologyst for AlliedSkunkWorks had to see them. As the smartest 12 year old I have ever met, the lad needs intellectual stimulii. To say it was awarded would be a like saying "Jamie Like Small Boom". There was a contest for good seats, so I reached out to the social networks to ask people to sign us up. No one did. One very good friend told me he had a hook up though.
We showed up at the venue and saw the backstage door was open. I knew we were on the list but not will-call or backstage. I asked a very nice young lady what the process was. Hearing a deep booming grumble, Jr and I started to perk up. NO WAY. IT'S NOT HIM.
Up walks a charming man in a beret, white shirt, black undershirt and huge mustache. Thrusting his hand out he said "Adam is a little busy, can you come see us after the show"? Ummm...ok.
Half Time at Mythbusters behind the scenes tour
We were fairly helpless at even finding our tickets.....more to follow
Intensified OutReach – WE ARE KELSO
I came from a very small town in Washington. So small that Mayor was a part time job, with the City Manager running the show. I also come from a long line of law enforcement and....the other side of the law.
WE ARE - KEL-SO
Kelso (Springfield) is a Scottish town, twin citied with the dreaded Longview (Shelbyville). All of us Scots were sent to the Highlands of Kelso. Our bitter rivals stayed on the West Side of the Columbia River in Longview. To say we had a football rivalry is...mild. A group of hoodlums once burned a K in the center of Longview's the RA Long high school football team's new grass. THEY painted OUR Mountain side "K" their dreaded black and red, over our beloved Blue and Gold. It was small town Americana at it's best and worst. To say that we were a...culturally segregated town is mild. Jocks everywhere, Punks hidden, Hicks over there and moderate folks trying, with their families to make a living, everywhere. The first Gulf War started the Junior year of my class of ~350.
My older brother and hero, Richard Gregory was deployed very early as a combat MP. I was not a fan of that, or of having anyone in harm's way. I was the classic "support the troops, not the war" kid. I started penpal campaigns, wrote to my brother daily, sent weekly care packages and worried for a year. My stance confused most of my small, backwoods high school. To the extent that the school polarized and fists were thrown.
Ok, I will give Longview one claim to fame that is not a blood relative
Senior year, people who had been in school a minimum of eight years together started to get wistful. We lost one and nearly lost another of our own in tragic accidents. The chief jocks in charge and I had a life changing speech and debate course together. We argued, laughed, poked fun, and became friends. Two jocks in particular saved my life. Being disabled, I could only play my beloved baseball and tennis, and worse, Boxing a few years as a lad. During those years I took and made many bets. The scariest of which was asking Brenda Compton if she wore a jock when she played hardball with the boys. It was met with a poke in the nose that may have been my first of many beek breaks. The other jock was of the same scale. I am proud to say, these two have remained among my dearest friends my entire life. We were a true BreakFast Club. We each have gone through the roughest times in our lives TOGETHER.
Kelso is poor. My father held that part-time Mayor job for a quarter of a century. He, as shrewd a guy as he is, could barely keep the lights on in The City, or as my Mom called it, dad's other wife. Days, Papa worked(s) as a cop. Starting as a County Mounty and working to Criminal Investigator for both Washington and Oregon. So I was the classic Cop/Mayor's kid in a very small town. My friends called me the teflon offender during our childhood hijinks. Nothing stuck.
Kelso has gone down hill. Being on the I5 corridor, gangs and meth hit early. They hit hard and they hit with a vengeance. In my day we would drink, tip cows, race motorcycles, make babies and the like. Now it is hard core drugs and violence. It tears my family and the BreakFast Club to shreds every time we hear about our beloved home town sliding further into a tougher and tougher spot.
Wistful in our old age, Brenda, a few other friends, and I are doing something about it in our ancestor's names. Dad started the Community Alcohol, Battered Womens (SIC) Shelter, Public Transportation System, a Babe Ruth Park with Reggie Jackson dedicating, and countless other community enhancements. With Dad retiring, the torch is being passed. Brenda went on to coach one of the best competitive Softball teams in Nevada, I consider myself a mentor to many of the finest engineers I know. I bask when they exceed me and I pass the torch to them when they are ready. I dream of working for one of them one day. We have the skills to help our hometown in the toughest economy since the depression.
Kelso NEEDS a Boys and Girls club, science center, and gym for the under served. My personal mission is to teach kids business, technology, and how to defend themselves. Brenda and I will overlap, in many ways, in her continued life coaching. She is my goto when I need advice, and I them. Along with The Cricket, my padiwans and my peers, we will improve our homes and home towns. Portland is my home, Kelso will always be my hometown. It's time to stand up and fix it. We are Blue and Gold Collar Workers. Having the luxury of a damn nice internet pipe and all sorts of telepresence, the BionicFamily can help from afar. We will crash at the Gregory Compound as much as is feasible and help young tech and boxing students along their paths. We will teach how to communicate on the world stage of the Internet as it is necessary.
A call to action: Those of you still home, get ahold of Brenda, or me and tell us what RESOURCE you can offer. Not money per se, or equipment, or time. What you can AFFORD to give back to the Blue and Gold. Even the Red and Black (Shelbyville)! I commit to: Build as much technology as is feasible into the community. Teach and learn from Mentors and Mentees. Give back to my family and my heart. Show up with REAL PIETROS and Yobys as much as possible (there is still a non-Pi@tros in PDX)! What are you gonna do? WE ARE....?
Accuvant and Microsoft, together again for the first time!
Told you I work for the greatest infosec company in the world!!
Contact Information:
Susan Vaillancourt Accuvant (603) 459-8906 svaillancourt@accuvant.com
Press Release
Accuvant Joins the Microsoft SDL Pro Network
Denver – Jan. 16, 2012 – Accuvant, the only research-driven information security partner delivering alignment, clarity and confidence to enterprise and government clients, today announced that it has joined the Microsoft SDL Pro Network. As a consulting member of the network, the elite Accuvant LABS assessment and research team will provide specialized application security consulting services to help companies develop more secure applications through SDL technologies.
“Cyber-attacks are continuing to increase in number and complexity, and many are aimed at the application layer. Our significant first-hand experience has shown us that the Microsoft SDL process improves the security of code, and helps to protect organizations from malicious attacks aimed at applications,” said Jon Miller, director of Accuvant LABS. “Becoming part of the Microsoft SDL Pro Network is an honor that highlights the expertise of our people and our processes.”
“Accuvant LABS is comprised of some of the best and brightest minds in information security today,” said David Ladd, principal security group program manager, Microsoft. “We are extremely pleased that Accuvant LABS has joined the SDL Pro Network in an effort to help companies ensure security and privacy is an integral part of their software development activities.”
Accuvant LABS’ end-to-end SDL reviews can cover an entire product team or development organization in addition to individual services that address all phases of the SDL including:
- Training – Secure coding, including design analysis and threat modeling, as well as application security assessment.
- Requirements and Design – Threat modeling, architecture and design review, regulatory and risk analysis.
- Implementation – Tool selection and implementation support, coding standard development and secure code reviews.
- Verification – Dynamic application testing, which typically includes fuzz testing and attack surface reviews.
- Release – Final security review assessments and response plan development.
- Response – Response services, including attack analysis, vulnerability reverse
engineering, and code remediation.
Since 2002, Accuvant LABS has provided penetration testing, application and enterprise security assessments, vulnerability research and training to more than 2,000 clients across industry verticals. Experts from the team have won numerous awards and have
been featured in articles published by Ars Technica, Associated Press, SC Magazine, and New York Times, among others.
For more information about Accuvant and SDL, please visit
www.accuvant.com/capability/accuvant-labs/sdl
About Accuvant
Accuvant is the only research-driven information security partner delivering alignment between IT security and business objectives, clarity to complex security challenges and confidence in complex security decisions.
Accuvant delivers these solutions through three practice areas: Accuvant LABS, Risk and Compliance Management and Solution Services. Based on our clients’ unique requirements, Accuvant assesses, architects and implements the policies, procedures and technologies that most efficiently and effectively protect valuable data assets.
Since 2002, more than 3,900 organizations, including 65 of the Fortune 100 and 20 of the largest U.S. Federal Agencies, have trusted Accuvant with their security challenges. Headquartered in Denver, Accuvant has offices in 36 cities across the United States and Canada. For more information, please visit www.accuvant.com, follow us on Twitter: @Accuvant, or keep in touch via Facebook: http://tiny.cc/facebook553.
© 2011 Accuvant, Inc. All Rights Reserved. “Accuvant” is a registered trademark of Accuvant, Inc.
###
WTHeck is Neuromodulation and Spinal Cord Stimulation? Are you /REALLY/ a cyborg?
So, being a guy with a disability and an engineering focussed mind, I see problems with BIOtechnology everywhere I look. I've worked for and with most hospitals in Oregon, and been a customer of said far far too many times. I walk with a cane 30-50% of the time. Canes are stupid. It's a stick that you use not to fall. Like cavemen did. Wheel chairs, even the most advanced, are heavy, clumsy, demeaning and stupid. My canes are collapsable mostly, and can be deployed from my bag in a swift movement. This usually involves stopping, waiting for it to snap together then walking. It also requires what the BIOnicLadies call a MAN PURSE be with me at all times. My leg just doesn't cooperate a lot of the time. BIOtech is broken. We can do AMAZING things with these waves Mr. Hertz found for us, but we can start doing it smaller, faster and better. Just look at Dean Kamen's Luke Arm!!
I use the cane because my lower back is...as Patrick at Ptown scooters would say "a basket case, maybe good for some parts". My lumbar disks have caved in and broken. The last one down was removed and replaced with titanium. Being the last one, it takes the most pressure. If you imobilize it and you are prone to broken disks....you break disks. That hurts. My back looks something like this, if all of the lumbar disks were broken:
NOT me, mine is one lower, I will post when I get the latest MiloGram back.
Sciatica is a refered pain from your back or spinal column that means the Sciatic nerve is pinched or otherwise inpinged. When your disks "bulge" or you get "slipped disk" it means that nerve is compromised. If you haven't has sciatica, I wouldn't recommend it. It's a lot like having a wild animal chewing on your leg. All the time. That hurts.
So how do we treat pain in the US? Chemicals. Chemicals are stupid. We have the most complicated machine ever (choose one, don't look on anyone else's paper) [created]/[invented]. Why on earth do we want to dump crap into it? Because we can't figure out the mechanics. Sometimes you need a lube job, sometimes an alignement. What FEW people remember, until someone has a heart attack is that though we are ugly bags of mostly water, we also need electricity. If done wrong, that hurts.
So, we know that pain from the lower extremities traverses the spinal cord using electricity. Why don't we just send a busy signal by attenuating the signal from pain into say...a pleasant and numb feeling? Well, we do. In fact, that is why I have a BIONIC butt! This technology is NOT stupid. It is not new either. It's been around 30 years in various forms. I personally went with mine because the company that makes my particular implant had Bionics in the name and they made my grandfather's cochlear implant. It is also the only fully wireless solution, which is why I really went with it. I charge my implant with a biscuit battery first charged on the wall, then taped to my side. It's "inductively charged", like your toothbrush, or a charging mat for your PDA. I change my stimulation level with a remote that looks like a garage door opener. The whole system, including the implanted battery, the leads that are sutured to my spinal column and the remote comprise a technology called NeuroModulation. This particular flavor is called a Spinal Cord Stimulator or SCS. Here is one of a dozen videos on it, until I make my own:
It's an amazing tech. Or it was 5 years ago when I got mine... Who is the worst candidate for an RF based pain implant? A wireless hacker. Or maybe the best candidate...hmm....
So, without going into much detail, the security is...lacking. It uses a VERY commonly used frequency and has only 1 way authentication. I have found that with an Arduino kit and 1/2 hour I can take over a stimulator. I don't have a live stimulator other than the one that's in me, but I can show that with it's remote controller, I can take over someone ELSE'S body. I don't hack my own body beyond RFID implants, punching my heavy bag and tattoos, so my POC lacks a live demo other than taking over with an unauthorized remote. Remember, the device doesn't "see pain" and stop it, it is just on or off at a particular frequency and amplitude.
Neuromodulation is GOOD. Taking 40% of someone's chronic pain away without drugs is GOOD. Having it relatively easy to compromise and change someone's level of pain is BAD. That tingling sensation can become insanely painful and crippling if over done. The programming is like the eye doctor, a vetruvian man on screen and a tablet with tingling moving around as a technician says "Number 2 or Number 3" to which setting effectively makes parts of your body tingle. Being able to move that sensation around without a trained neurologist and technician scares the bujhezus out of me, and I'm fairly technical. I love the tech, but the security needs a good hard look.
My next post will be on research I am conducting for improving the stimulation itself as well as more detail on the security issues.
BIOnicLABS
So what's all the hubub? Between Portland's tech mafia, "The Geeklist" and it's 20+ years of geekdom and packrattery, I've decided to continue to give back. Currently in an undisclosed but VERY accessible location resides the BIOnicLAB. Think of it as somewhere between Tony Stark's shop and M5 Labs. All gear is either donated, traded bartered or sent from manufacturers for testing. My day job brings a lot of gear my way. This gear is for use by my peers nationally at my day job. The rest is stuff the 50+ geeklisters and I have had laying around for years and is for the world. Two rules: 1) Record and Annotate your work B) Kick down old gear and help fix stuff. 3)There is no third thing.
The concept is an open lab for people to be able to test configs, practice for certification, touch high end gear and provide feedback to the manufacturers and the community at large. Everything is as modular and as portable as possible. All gear on loan can be returned in 24-48 hours. All changes made to the lab are recorded with audio narration to be used as CBTs for those that need more learning. Following in the Intensified Outreach spirit of a mentor and a padiwan for everyone, documentation comes first. NDAs and EMBARGOS are strictly adhered too, trade secrets are never shared. Ideas and inventions that move on to the rapid prototyping side of the house are split with %20 going to college funds for members and their children, %50 to the owner and the rest divided among the people working on the project.
The system for establishing the setup and troubleshooting of gear is pretty straight forward as well. All projects will use the copy-written Bionic ASSESR system - Analyze-Strategize-Stabalize-Efficienct-ize-Stabilize-Repeat (ASSESR or assessor), co-created with Denver Bronco Superbowl winner, David Richie.
To be clear, the lab is three parts. People's personal gear. My full time employer's gear. Geeklist and everyone can access gear. We are getting the latter setup as soon as possible.
Current kit in the lab (very very abbreviated):
3x Cisco 3560 Switches
8x Cisco 1900/2900 switches
6x Cisco 2500+ Routers
2x Aerohive 100 Series Devices
1x Aerohive 350
1x Fortinet Firewall
10x Consumer APs
2x Meraki APs
2x Aruba APs and a 650 Controller
20x Wireless cards of different levels
2x WiSpy DBX
2x AirMagnet
10x PC/MAC/Ubuntu/BT4 Clients
10x Servers and VMs
Airmagnet SpectrumXT
Chanalyzer
Chanalyzer Lab
BT5
Rovio Robot
ViziWave
Zperf
NetSpot
2x RFID Writer/Readers
HiveManager
AirWave
SafeNet
YubiKey
In the near term works:
3D Printer
CNC Machine
BIOnicRockyCoffee!
It isn't uncommon to roast your own coffee. Until the 1940's it was commonplace here in the US and even more so overseas. What you get at the major roasters is at least a weak old. Roasting your own couldn't be easier. Getting a basic batch is really a straightforward process of cooking the beans. It's when you infuse other flavors or get crazy (like my vanilla baily's cherry vodka I call Tiger Blood). To get started, you need: an old popcorn popper, a fan, 20 minutes. Or if you are a gadget guy, one of these:
Or if you want to try a REALLY small batch, this will do the trick.
These are my current rigs for testing new roasts. I can do about 1/2lb in 1/2 an hour. Give it a day in one of my patented storage containers and you are dialed. Coffee needs even heat and to move while roasting. I use popcorn popers that I've modified (posting soon), Heat guns (posting soon), and even my stove top to get a bit going. Future posts will talk about the exact science and art behind it.
Being the Bionic Man, however. I have a camera and mic on mine to keep tabs. Soon, my robot, BIONICRovio will be telling me when it's ready!
Quoted in SearchIT Article
SearchITChannel.com article quoting me on Biometrics!
Biometrics solutions still searching for identity in channel
The potential for biometrics technology as part of identity management solutions in certain niche applications continues to intrigue VARs and systems integrators, especially those involved in the health care industry.
More on biometrics
Biometric security technology: The safest types of biometric devices
Biometric authentication technology curbs microfinance org's losses
Electronic access control system and biometrics authentication
But actual deployments and service opportunities for IT solution providers have been slower to catch up. The low numbers are in spite of the inclusion of technologies such as fingerprint readers and palm-print scanners in notebook models from manufacturers including Fujitsu, Hewlett-Packard and Lenovo.
The slow uptick has a lot to do with cost, but it also highlights concerns about the “false positives” that fingerprint scanners or palm-print readers can sometimes yield, according to security VARs and systems integrators.
“There are a lot of things that can happen if a biometrics method fails,” said Michelle Drolet, CEO of Towerwall Inc., a security solution provider in Framingham, Mass. “If it doesn’t work, you can’t log on. What happens if a false positive occurs when you are on the road? Most people aren’t ready to deal with this.”
Many security solution providers have been watching biometrics technologies for years, as they seek viable methods of identity authentication.
Rocky Gregory, information security solutions engineer for Accuvant Inc., a Denver-based security solution provider, said that the health care sector is clamoring for credible secondary security authentication methods. That’s because solutions that require a health care professional to log on to a computer using a typed password are at odds with the physical requirements of some health care settings.
“We have to get to a secondary authentication system that is easy for the masses that puts us into a more secure environment,” Gregory said.
Types of biometrics validation systems
The most commonly understood and widely used biometrics authentication method is fingerprint scanning, although Gregory said there remains a “fine line between false positives and negatives.”
Other methods cited by solution providers and integrators evaluating this market are palm readers (think PalmSecure from Fujitsu Frontech North America) and retinal scanners, most often associated with military or government settings. RFID readers, in certain applications, could be considered security devices because they can track movement of, for example, a patient.
A forecast by Acuity Market Intelligencestates that commercial solutions that use biometrics could match public sector deployments by 2014. Overall, the market could generate $11 billion in 2017, compared with slightly north of $4 billion this year. That’s one reason some of the highly visible vendors in this segment are fine-tuning their channel partner programs.
Training for resellers
In mid-September, Fujitsu Frontech of Foothill Ranch, Calif., launched a new partner program, called PalmPartner, to train VARs and systems integrators on creating applications that build on the Fujitsu PalmSecure biometric technology. The thrust of the program is to help train VARs for specific, customer-focused applications, notably in health care.
Christer Bergman, vice president of the Fujitsu Frontech biometric solution group, said Fujitsu provides the reader and a simple software development kit that uses PalmSecure as the biometric engine. “We need to provide the technologies and then work closely with partners to get the sales and business developed,” Bergman said.
Today, the biggest installed based for PalmSecure is in health care settings. Recent implementations include a patient registration system for the New York University Langone Medical Center and a patient registration and records management system for the George Washington University Medical Center.
Health care security systems are also the top focus for BIO-key International Inc., a Wall, N.J.-based company that has invested in courting VARs and systems integrators as a sales and solution channel for its technologies.
Scott Mahnken, vice president of marketing for BIO-key, said the company’s technology is integrated with products from many of the top vendors supporting single-sign-on solutions including CA, IBM, Microsoft and Oracle. “People have been inconvenienced by passwords,” Mahnken said.“Hospitals, blood banks, they want to do this for compliance reasons, but they also want to do this to help tame administrative costs.”
Jim Russell, vice president of sales for Matrix Systems, a biometrics integrator in Miamisburg, Ohio, said another key selling point for biometrics solutions is convenience.
Doctors in surgery don’t want to have to carry proximity badges to enter certain secure areas, but fingerprints aren’t an option because of surgical gloves, so iris scans could work well, Russell said.
http://searchitchannel.techtarget.com/tip/Biometrics-solutions-still-searching-for-identity-in-channel?vgnextfmt=print
Password Managers – More Mac Wackieness
Check out this review of LastPass vs 1Password. COMMENT on your thoughts. I use passphrases usually, 32 characters, psuedorandomly generated and a password keeper that I first encrypt, then synchronize over an encrypted link to an encrypted folder. LOTS of overhead and a bit cumbersome. Thoughts on these two options for prosumer users? I need much more due to my work, but my folks don't....http://www.40tech.com/2011/05/16/lastpass-vs-1password-whose-syncing-method-is-more-secure/
Requirements:
- Sync to ALL OS on mobile and laptop/desktop
- Have a REAL generation algorithm that understands that computers and humans alone can't be truly random, only the mixture of the two can get close
- EASY
- I can control the encryption, levels of security, sharing without disclosing
- 2 Factor of MY choice. RFID a plus for my implanted chip, Yubi, standard finger, soft or hard token, retina, bodily fluid, whatever
- Possible AD integration
- FAST
- Marketing doesn't use the words "cloud based security"
- 3DES or above minimally, AES at 256 much better preference, Open and closed standards mixed optimal. My OWN SALT with my own randomness algorithm and personal certificate compatible with my 13 year old PGP key
- Margarita maker
- Stripper pole
These both actually come pretty damn close. The "private/enterprise" Lastpass seems a great option. I've suggested LastPass 1 brazillian times or more. What's the open source or true enterprise player version? Which do you like?
Find It
Security Updates
- Kaspersky buys out equity firm; keeps security company private
- Faith in webmasters’ security rewarded-kinda
- Typosquatter hive targets holiday shoppers
- Nitro attackers sending malicious emails using Symantec report
- Symantec launches mobile security evaluation, app assessment services
- Rapid7 massive VC funding opens door to acquisitions, expansion and maybe IPO?
- Cloud security among PCI Council 2012 special interest groups
- Report: ‘R&D is under attack’ from China, Russia
- Secunia brings own spin to vulnerability rewards programs
- Windows zero-day flaw used in Duqu attacks
Twitter Feed
- I've yet to NOT find an AirMag Webinar valuable. Don't be an idiot, register:
http://t.co/sYAtPO5d - Great @ArubaNetworks talk on Instant yesterday, talking @MeruNetworks today.
- English muffin with egg and some Blur. Best way to start a work day.
- Lab is coming together in its new home!
- RT @fmsnewyork Got my signed book from Bruce Schneier in the mail today, the dedication is encrypted :) (- so jealous
Wireless Week Updates
- Google patent idea hints at mobile, desktop convergence
- Lenovo and Motorola may confirm Intel Medfield plans next week
- T-Mobile to FCC: Block Verizon AWS Deal
- Ahead of MWC: Getting There & Around
- T-Mobile asks FCC to block spectrum sale to Verizon
- FirstNews Briefs for February 22, 2012
- AT&T to Conduct Trial of PTT Service
- Report: Operators Lose Big on Social Messaging
- Failed T-Mo Deal Costs Stephenson $2M
- More Trouble for LightSquared: Layoffs Reported
Blogroll
- 2nd Hottest Volvo Chick I know
- Development Blog
- Documentation
- Plugins
- Suggest Ideas
- Support Forum
The YOUNGEST CWIE/CCIE-W
- Tom! Netword Nerd of the YEAR
- UXCricketAndJ@CobONLY! All others pay cash! Dig?
- WordPress Planet