IT Security work seems like we are in “Groundhog Day” the movie

You know the movie which makes Phil(Bill Murray) relive the same day until he gets it right.  http://www.imdb.com/title/tt0107048/ I asked Google how many days are in the movie “Groundhog Day”?   8 years, 8 months and 16 days, the director said 10 years.   IT security is just like that except it should be called … Read more

I Want My Internet 24/7- HACKERS KNOW THAT

Yes, we realize that everyone wants to Google something whenever you need to look up something. Our Website must be up all the time. Email has to work. YouTube watching, surfing the Internet – it is our right to go wherever we want. Visit Government websites when needed. Watch Netflix, and all our News channels … Read more

Does it Pay to be a Criminal Hacker?

Before i answer this question let me give you a screenshot of the following FBI Cyber most wanted: from www.fbi.gov/wanted/cyber Alexsey Belan: Belan allegedly stole the user data and the encrypted passwords of millions of accounts and then negotiated the sales of the databases. Two separate federal arrest warrants for Belan have been issued. One … Read more

Starbucks Mobileapp Did not get hacked – user accounts got hacked

And this issue even though being a “new news story” as of 6 hours ago from ibtimes.cp.uk http://www.ibtimes.co.uk/starbucks-customer-accounts-hacked-through-smartphone-apps-1501118 Which originally got going with Bob Sullivan’s ‘scoop’     yes there is no need to know the account number, because all that is needed is the username, which is not the account number.  I have a … Read more

State-of-the-Art Security: Obscure your Network

Richard Bejtlich has a new post (as of May 10) http://taosecurity.blogspot.com/ He set out a few excerpts of a 1978 book “Computer Capers” by Thomas Whiteside. To me the most interesting excerpt(2nd): “The difficulties of catching up with the people who have committed computer crimes is compounded by the reluctance of corporations to talk about the … Read more