The Law: Fear It


“Dude, you’re gettin’ a Dell.” And by Dell, I mean a pointy stick in the eye

Welcome our newest candidate for “dark lord of the pit”, Dell. According to court documents, they knowingly sold faulty computers and covered it up for years.  Despicable. What bothers me the most about this is the callous attitude that Dell had for the security, safety, and livelihood of the folks they sold to; from betanews: Capacitors had been known to leak, and in some cases...

Read More

US Government: Serving up whale for over 100 years

Interesting…  If you haven’t seen the coverage, the FTC forced Twitter to update its information security program after a slew of information security issues including password problems, breaches, and fraudulent claims about the security of the site (in other words,  claimed protection measures that just weren’t implemented the way they said they were).  Check it out: In one...

Read More

“DarkMarket” was FBI Sting

Cool reading over at wired. Turns out that the “DarkMarket” was an FBI sting. Wonder if that’ll throw of people who’ve been using this source to get information about the price of stolen data.

Read More

On Remingtons, Magnums, and CISSP

In case you haven’t heard, a bunch of folks in our industry are pretty fired up. They’ve gotten it in their head that the worst thing that could possibly happen to the noble institution that is CISSP is for college students to get certified. The contention is that CISSP is supposed to just be for security practitioners, and college students can’t have the type of real-world...

Read More

Keystone Cops go Virtual

As a security guy, I’ve always viewed law enforcement as “brothers and sisters in arms” – I’ve always felt a close comraderie with the folks whose job it is to go out there and bring the bad people to justice. After all, isn’t that pretty much what we’re trying to do as security people? But recently it seems like law enforcement is making it tougher and...

Read More

From now on, I’m calling it “CHiPs”

Ahem… So, Panda put out a press release last week that (unfortunately for me) intersted me enough to entice me to download and read a marketing whitepaper about TruPrevent. Now, I have nothing against Panda but lest anybody accuse me of endorsing the paper (trust me I don’t), let me assure you that the only reason that I’m bringing it up is that it drew my attention to a new...

Read More

Who’s Above the Law?

Taking a quick break from infosec and into the broader realm of law-enforcement, I pose the following hypothetical question: What do you suppose would happen if I was involved in a hit and run, then I was videotaped almost running down a crowd of pedestrians, and then I told a crowd of police officers that I was drunk behind the wheel? I think it’s a safe bet that I’d spend the night...

Read More

Hoffing – The New Trend In Defacement

Everybody loves David Hasselhoff. And why not? His singing ability notwithstanding (which I’ve never heard so I can’t comment on), most of us have seen and/or enjoyed Knight Rider, Baywatch, and (more recently) the SpongeBob SquarePants Movie. Interestingly, there’s a new trend among the hacker crowd: surreptitious injection of David Hasselhoff-laced content into otherwise...

Read More

Scary stuff in the courts

Scarily enough, the supreme court ruled that, despite the name (‘order’), restraining orders are more or less just guidelines that the police can choose to follow (or not) as they deem fit. In other words, if person A gets a restraining order against person B and the cops elect not to enforce it, there is no recourse for person A. In the particular case that decided this, a...

Read More

“Candid Cop Camera”

Cameras at traffic lights came up for a vote in NH this week. And I quote: “So when a bill came up in early April to consider allowing robotic traffic cameras at the busiest crossroads, mocking laughter from the gallery preceded the measure’s demise.” Mocking laughter… Have I said how much I love it here recently?

Read More

Giving Thieves the Finger

Apparently, a gentleman was getting into his Mercedes and was assaulted by thieves. In order to bypass his biometric theft deterrent system, they took his finger with them. I think I’d rather not have the biometric system than lose a finger because of it…

Read More

FTC settles with Guess on Web vulnerabilities">FTC settles with Guess on Web vulnerabilities

“The Federal Trade Commission (FTC) has settled a case with clothing and accessory vendor Guess Inc., in which the agency had accused the company of not taking appropriate measures to secure its Guess.com Web site.” Not the first time the FTC has gone after a company for exposing customer data, they also slapped the hands of MSFT for Passport issues and Eli Lilly for shipping out an...

Read More