An Information Security Place

Go check out this blog post by Mitch Wagner at InformationWeek. Mr. Wagner, according to Blue Security, you are an accomplice to a notorious spammer! Go see Blue Security’s explanation and attack timeline. I hate spammers, but I don’t know a lot about Blue Security and how they work. I will let you know when […] ↓ Read the rest of this entry…

I talked about Fidelity losing a laptop that held personal data of 196,000 employee’s of HP in this post. Now it looks like Aetna has done it. Martin McKeay mentions it here. ZDNet has the the story. Looks like about 38,000 employees of two un-named companies (they asked to stay anonymous) had names, addresses, and […] ↓ Read the rest of this entry…

Here is a case where I am torn. Basically, Mr. Eric McCarty was going to register at USC, and in trying to help keep the Internet secure, he decided to test their registration website for flaws (he claims nothing but good intentions, which I really find no reason to disbelieve). Well, he found a big […] ↓ Read the rest of this entry…

Here’s another information security foul-up. Looks like Ohio sent a voter list CD out to a bunch of people. No big deal, except that they included social security numbers in the data sent out! This is why ALL people should be responsible for security in some way. Who was the brain-donor that included the social […] ↓ Read the rest of this entry…