I should be able to resume posting shortly.

Video: Three Natural Laws of Security is currently unavailable. Seeking new hosting site.

2010-04-20

More recent desktop computers are powerful enough to drive, and in some cases enhance harder-to-crack encryption algorithms such as AES, enabling the option of running encrypted devices as standard. This takes away the need to worry about whether or not a certain piece of data should be encrypted, and indeed it removes the risk of forgetting. But full-disk encryption brings with it another challenge, that of key management. For an individual user installing their own software it’s not such an issue – you set up your own password and keep tabs on it in the normal way (hopefully not by writing it on a post-it and sticking it on the wall). Meanwhile, for a company, keys need to be managed at a central point. While tools exist for this, someone needs to maintain them and respond to user requests when keys are forgotten.
A veteran FBI official drew on 30 years of experience with the bureau to talk to local police about managing an "unstructured" crisis — one like the 2008 attacks in Mumbai, India, where coordinated shooting and bombing incidents took place across the city formely known as Bombay. While a similar incident has not taken place in the United States, the speaker, Danny Coulson, a retired deputy assistant director for the FBI, spoke at the annual Mid-Hudson Association Chiefs of Police Command Development Training Seminar last week about preparing patrol-level officers to handle such an attack. Coulson emphasized the importance of patrol and school resource officers because they are usually the first law enforcement officials to respond to a crisis. SWAT teams often don't get there until a while later, when it could be too late, he said."The SWAT is not the answer, it's an answer," he said.

2010-04-19

Hmmm ... never seems to be any data on what statistical effect its had on election violence ...
As is so often the case, it depends on what their aims are ...
Sounds like fun ...

2010-04-18

... or from favoring a wannabe despot like you ...

Thai watch

Naxal watch

Just what the baddies need ... a Gandhi all up in their grill ...

Also ...
 Furthermore ...
If you hold personal information on a Massachusetts resident, you were on the hook as of March 1. The question for security groups is, How do we comply with the myriad state-mandated data security laws without putting an undue burden on the business? And comply you must, because CMR 17.00 raises the stakes in terms of potential penalties. The law will be enforced, quite literally, in the breach, and companies can potentially be fined $5,000 per violation and per record lost. One stolen laptop loaded with a database containing the names and Social Security numbers of 200 Massachusetts residents puts you in the hole for a cool million. The Massachusetts law isn't remarkable in its overall requirements, but it is special in two areas. First, it requires businesses to attest that they have a working data security program in place to protect any personally identifiable information (PII) they've collected from state residents. Companies must maintain a comprehensive written information security program (WISP) that includes "technical, administrative, and physical safeguards" to protect PII. Covered businesses range from neighborhood dry cleaners to Fortune 100 companies, but the law stipulates that the program be appropriate to the size and resources of the business.
With governor Jan Brewer’s signature on the new “Constitutional Carry” firearm law today, Arizona becomes a beacon state for the nation on the gun-rights issue. Arizonans, who have been free to carry firearms openly since statehood in 1912, will now be free to carry discreetly as well, without permits or red tape. Low-crime Vermont has had this freedom intact since Colonial days. The permit system remains in place but will no longer be required for discreet carry. Alaska enacted a Constitutional Carry law in 2003, and Texas passed a limited version for traveling in 2007. Montana has enjoyed this freedom since 1991 on 99.4% of its land (outside city limits). These states experienced no increase in crime or accidents from the expanded freedom to discreetly bear arms in public. However, numerous dire warnings of “blood in the streets” preceded those new laws, but proved false. A list of circulating myths about the law, also known as “Freedom To Carry,” appears at the end of this article.
It would be nice to have a little more detail on the solution ...

2010-04-16

Sounds like more fun than you can shake a stick at ...
Unfortunate ...
Let's hope so ...
It should go without saying that if the company can get access to the plain text of the e-mails stored on its servers then somebody else can as well. Needless to say even if an online service proclaims they securely store your data and it can not be accessed that is not usually true. The only secure option is to encrypt the data while it’s still on your machine and then send it out. For instance I backup much of my data to an online store service. Before the data leaves my system it’s put into a TrueCrypt partition. Only I have the key to decrypt the partition so even if a government entity forced my storage provider to hand over my data there is no way for that provider nor the government to decrypt it (obviously I mean before I die, they could brute force the key but it would take practically a century and I doubt I’ll still be alive when they find out my encrypted partition contained nothing important nor incriminating).

2010-04-15

Yeah, going after authors ought to improve security ...
" ... all space-faring nations ... " - What a cool ring that has to it!
E-mail encryption has been around almost as long as e-mail itself, but due to quirky installation and support requirements, the security technology hasn't been very popular with many enterprises. Fortunately, the current crop of e-mail encryption products and services includes options that are easy to deploy and use and that don't require a great deal of IT support to operate. One such easy-to-deploy option is Hushmail Business, an entirely hosted solution from longtime e-mail encryption player Hush Communications Canada. As a hosted service, the Hush offering carries no client-side installation requirements. However, the company does offer an Outlook plug-in that works with Exchange and automatically handles the authentication and exchange encryption keys—something that used to be a major support headache. On the server end, administrators need only configure a company e-mail domain with Hush to handle the encrypted e-mail traffic.
A single-user, free Hushmail account is a solution of beauty, too ... there is a link to the right ...
Interesting ...
The only way they will ever become history is if some other tech advance makes them impotent ...

2010-04-14

Hmmm ...
It's pretty hard to tell what's going on in the video ... they don't seem to be awfully worried about the authorities showing up ...
I'm surprised disguises don't get used more often. Makes it pretty hard to look for you once you've taken it off ...
Good thing Comelec has banned guns ...
At least it's easy to tell what team everyone's on ...

Also ...
Interesting ...
Also ...
Keep that in mind while you're deciding what to do with all that U235 you're 'fugeing. We're peace-loving right up until you piss us off ...

2010-04-12

It's got a cool name ...
There seems to be a lot of revolution afoot, these days, what with Kyrg, the Philippines (at least in my estimate) and Thailand all more or less in the process ...

Also ...
That took some stones ...
Some cool pics ...
This looks promising ... 3 down, 47 to go ...
Geez ... good to know the new regime is reasonable ...

2010-04-11

History in the making ... I wonder if 60 years from now there will be Roza t-shirts ... only time will tell ...
The IP address led police to the Weber County Library. Director Lynnda Wangsgard said police have asked to look at surveillance video from the library to try to track who may have sent the e-mail. Wangsgard said they have not denied footage to police, but they are waiting for a formal request to be filed to release any documents. She said this is because of government policy and because they are not sure what information police are looking for. "That IP address is not associated with a particular computer or building," she said. "In fact, a patron using Wi-Fi access in the parking lot could have generated that e-mail. So we're not sure which record, if any, we would have that would be relevant to the situation." Wangsgard said the library does have general surveillance video but does not monitor computers individually. "We don't spy on people using computers," she said. "We have general surveillance to protect against vandalism, but we may not have anything that is relevant to the situation. We won't know until we get the request."
Can't really picture it happening, but I guess we can wait and see ...

2010-04-09

Definitely sounds like some underestimating going on ...
I can't see the justification for having 'activated a national alert system for all planes in flight' ...

Also:
Let's hope so ...
Jealous, are we ...?

2010-04-08

It will be interesting to hear how this shakes out. We seem to be all about the over-reacting these days ...
Interesting ...
I wonder if these fines will be levied against Brit gubmint personnel when they have breeches or is it just for the peasants ...?
Cool pic, too ...

2010-04-07

Hmmm ... haven't heard this one before ...
Yup. I can see how telling the burger-flipper he was going to wait for him after work will likely change all our political wills, hence the need to charge him with making terroristic threats ...
Seems to be a lot of this going around ...

2010-04-06

The video doesn't show much but should be adequate for identifying the perp. It just seems odd that no one kneed his face on the way through the opening ... he'd have been real vulnerable ...
At least those nasty ol' law-abiding tax payers won't be unlawfully protecting themselves without first receiving permission from their masters. Only the police should be allowed to be indescriminately safe ...
Should be interesting ... for a short while ...

2010-04-05

It's worth remembering that all of these techniques have potential prison sentences that attend there use, so make sure it really is necessary before you use them ...
Hmmm ... a defiler ... things are a little different in Uganda ...

2010-04-04

Sounds more like man-hunting to me ...
Where to begin (after I stop laughing from the video). First, don't be an asshole. And first, assume the cameras are running and that whatever you do will be on youtube FOREVER. Then first, don't beef with people you don't know as they may nuke your stupid ass. Next first, don't use opening moves that result in your pants falling down because it's hard to be tough with a crowd of strangers laughing as your hairy, white ass flaps in the breeze. Finally first, the poster is correct that there aren't any good closing moves to use that won't result in prison time once your in a mount. And last, the little guy was fortunate that the jerk's buddy was so disgusted with his friend's behavior that he wasn't willing to kick the little guys ribs in while he was tied up on the floor, which is what would normally have happened.
The same as it ever was ... the same as it ever was ... [makes chopping motions with edge of hand along arm] ...

2010-04-03

The move was hailed as a significant first step by groups often critical of U.S. security practices, including American Muslim organizations, the American Civil Liberties Union, airline and travel industries. Some of these groups had warned that the 14-country rule would lead to racial profiling and delays in the busy summer travel season. But the same groups noted that Obama aides have provided virtually no public information about who would carry out the new screening procedures, which are classified, or precisely how information about travelers would be used. "We'd hate to see a system that's overtly discriminates replaced by a system that covertly discriminates," said Michael German, national security policy counsel with the ACLU Washington Legislative Office and a former FBI agent. "That's why increased transparency into what's actually happening is necessary."
Interesting, if true ...

Criminy ... better your sub than your forehead, I guess ... [shudders] ...
Just because it's never worked in the past doesn't mean that it won't work in the future ... Oh ... that's right ... it does mean that ...