VMware and PCI QSAs

Dave Jasso has posted an update on VMware’s efforts to help its customers with virtualization and PCI DSS 2.0

VMware has been working with QSAs such as Coalfire to clarify how to successfully address PCI while still being able to fully leverage virtualization. This link takes you to a whitepaper written by Coalfire that highlights some of the core technologies that VMware offers that can help you address PCI compliance. VMware is actively working to deliver more guidance in this area but this will give you a good overview on how VMware can help companies of any size achieve PCI 2.0 compliance.

FBI Cloud Compliance Challenges

Computerworld has a nice summary of why FBI data compliance requirements are often incompatible with cloud providers:

One of the more challenging requirements requires cloud service providers to identify all system, database, security and network administrators who have access to criminal justice information, [Stephen Fischer Jr., a spokesman for the FBI’s CJIS division] said.

Similarly, cloud vendors will likely find it difficult to require fingerprint criminal background checks on all administrators with access to the criminal justice information. Fischer said.

Analysts have previously noted such rules would be particularly difficult for cloud vendors like Google that maintain staffed data centers outside the U.S.

Changing SSL Certs with VMware vSphere 5

Michael Webster on Long White Virtual Clouds has posted a handy guide on how to change vSphere 5’s SSL certificates

I’m hoping that the information in this article will help and encourage more people to change out the default certs (to improve security), and make the process far more reliable and easier to achieve with vSphere 5. This article will focus on successfully changing the default VMware SSL certificates on ESXi 5 hosts with CA signed certificates using a Microsoft CA (it will also work with public and OpenSSL CAs, but I have not tested it yet).

Intelligence as it relates to safety…and political philosophy

The Guardian tosses a beautifully written review at the Daily Mail over a story called “Rightwingers are less intelligent than left wingers, says study”.

The Mail’s report went on to detail the results of a study carried out by a group of Canadian academics, which appears to show some correlation between low childhood intelligence and rightwing politics. It also claimed that stupid people hold rightwing views in order to feel “safe”. Other items they hold in order to feel safe include clubs, rocks and dustbin lids. But those are easy to let go of. Political beliefs get stuck to your hands. And the only way to remove them is to hold your brain under the hot tap and scrub vigorously for several decades.

As you might expect, many Mail Online readers didn’t take kindly to a report that strived to paint them as simplistic, terrified dimwits. Many leapt from the tyres they were swinging in to furrow their brows and howl in anger. Others, tragically, began tapping rudimentary responses into the comments box. Which is where the tragi-fun really began.

Charlie Brooker, the author, is a comedian fast becoming part of my required Monday reading. He runs a weekly slice of The Guardian. Here’s a recent piece he wrote on privacy and the risk of social networks

When Sony launched the Walkman back in the late 70s, its main appeal was that for the first time in history you could stroll down the high street listening to Neil Diamond belting out Sweet Caroline and no one could judge you for it. It made you the master of a private world of music. If the Walkman had, by default, silently contacted your friends and told them what you were listening to, not only would no one have bought a Walkman in the first place, its designers would have been viewed with the utmost suspicion.