CSO magazine has posted an illustration to show US states that still do not have breach notification requirements: South Dakota Alaska New Mexico Iowa Missouri Kentucky West Virginia Virgina South Carolina Alabama Mississippi Any guesses why these sates chose not to pass notification laws? Economics? Politics? Washington D.C. has the footnote “Pending Federal Legislation”. Wouldn’t … Continue reading Gaps in US Breach Notification Laws →

I thought for second that the date was a typo, but apparently the US military was pondering how to make a “love bomb” in 1994. The most interesting thing about this story, however, is not how recent the absurd ideas were generated but the fact that they are so incredibly ethnocentric: The plan for a … Continue reading Culture bombs →

I had suggested earlier that the RSA conference badge could be some kind of token with an associated revocation and replacement fee (as opposed to being forced to pay a full conference rate for a lost/stolen badge). I just realized as I navigated the swarms of vendors that the badges do, in fact, have to … Continue reading RSA Registration →