Test Your Security – Because Mistakes Happen

There was a  presentation on the “Psychology of Security” which is a favorite topic of mine(past blogposts): http://oversitesentry.com/the-psychology-of-security/ http://oversitesentry.com/how-much-should-i-spend-on-cybersecurity/ http://oversitesentry.com/security-people-are-scaremongerers/ The topics in this slide from Stefan Schumacher presentation at BSides https://bsidesvienna.at/slides/2015/the_psychology_of_security.pdf Users Choose weak passwords. Users are not interested in Security Users don’t understand Security Programmers create Buffer overflows and forget safety regulations Admins … Read more

Healthcare CEO Does Not Mention Cybersecurity

It looks like Lynn Vos has a Blog at the Huffington Post and her latest post: “Luddites and Errors and Barriers, Oh My!” She makes some good points that it is difficult if not impossible to contact your doctor via email. several studies are cited that show healthcare providers are difficult to contact via methods that … Read more

2016 New Year – New Firewall? Which One?

The old firewalls are port filtering devices… I.e. web is allowed out (from in your network to out the Internet and back).   But is the traditional  firewall enough for next year 2016?  Are you really going to skate another year?   these guys are pushing the envelope: “Don’t waste time worrying – spend time … Read more

What is the Right Effort to Cybersecurity?

The keynote speaker of Troopers15 has an interesting presentation (on youtube now )   https://www.blackhat.com/eu-15/briefings.html https://www.youtube.com/watch?v=rarpym8JJXQ Some of the good quotes: Doing something better must be better than doing nothing? “Wrong. Paddling hard in the wrong direction doesn’t help just because you want it to” “You must never confuse faith that you will prevail in the end—which you can … Read more