Category Archives: Security

Testing and wind tunnels

When thinking about advanced in aviation, wind-tunnels are a necessary step. The cost of disaster is simply too high not to test extensively before deployment. It is a world far removed from the common software development lifecycle.

Oobject shows some fine examples, including one from the Wright brothers:

The interior and exterior of wind tunnels have unusual design requirements that often make them accidental architectural masterpieces.

Test environments as masterpieces? I like the sound of that. Perfect material for presentations to developers who scoff at the idea of testing.

Linux BlueProximity

This is nice:

BlueProximity is a clever program that sets up your computer to lock itself when your phone is out of bluetooth range, and unlock itself when it comes close enough again.

With so many enterprise users getting cell-phones issued by default, it makes for a clever two-factor solution.

Bluetooth isn’t the strongest model, but the concept is worthy of note and the fact that it can be tested today for free is a big bonus.

Gaps in US Breach Notification Laws

CSO magazine has posted an illustration to show US states that still do not have breach notification requirements:

  • South Dakota
  • Alaska
  • New Mexico
  • Iowa
  • Missouri
  • Kentucky
  • West Virginia
  • Virgina
  • South Carolina
  • Alabama
  • Mississippi

Any guesses why these sates chose not to pass notification laws? Economics? Politics? Washington D.C. has the footnote “Pending Federal Legislation”. Wouldn’t that be true for all states?

This reminds me of a VP I used to work for who swore up and down that breach notification laws were horrible things that would immediately turn into swarms of “ambulance-chasing lawyers” trying to pick on the weak and vulnerable companies who had to disclose a breach. I guess he was wrong.

Two modes of security

I like this analysis by Margaret Fuller:

There are two modes of criticism. One which … crushes to earth without mercy all the humble buds of Phantasy, all the plants that, though green and fruitful, are also a prey to insects or have suffered by drouth. It weeds well the garden, and cannot believe the weed in its native soil may be a pretty, graceful plant.

There is another mode which enters into the natural history of every thing that breathes and lives, which believes no impulse to be entirely in vain, which scrutinizes circumstances, motive and object before it condemns, and believes there is a beauty in natural form, if its law and purpose be understood.

Wikipedia says this is from “Poets of the People” in Art, Literature and the Drama (1858). Although she says criticism is the mode, I see security.