Category Archives: Security

Kansas BioSecurity Lab

I suspect many people already knew this, as I heard them discussing it months ago, but I just read in the news that Kansas State University will be the US center of BioSecurity research:

Kansas has won a three-year competition to land a new $450 million federal laboratory to study livestock diseases and some of the world’s most dangerous biological threats. But some states that lost out are crying foul.

The Homeland Security Department’s choice of a lab site at Kansas State University in Manhattan beat out rival bids from Georgia, Mississippi, North Carolina and Texas.

Crying foul. How clever.

Time to update the marketing:

Beef. It’s what’s for security research.

Aussies Protest Net Filters

Computerworld Australia says Internet “blacklist” measures are highly unpopular:

Opponents to the Australian government’s Internet content-filtering scheme will take to the streets in a series of protests planned in the country’s capital cities.

The protests, organized by members from activist groups including the Electronic Freedom Project and Digital Liberty Coalition, will be held at Sydney’s Town Hall, Brisbane Square, Melbourne’s State Library, Adelaide Parliament House, Perth’s Stirling Gardens and Tasmania’s Parliament Lawns.

Activists, rebels…what else can they call the people who oppose this network control? Imagine if we could call users rebels when they argued over a firewall rule.

Anyway, the crazy thing about the rule is how low the standards were set for approval. The Australian Communications and Media Authority (ACMA) is supposed to maintain a list, but even with a perfect list the technology is likely to never push above “a 94% accuracy rating, would incorrectly block up to 10,000 Web pages out of 1 million”. Have supporters of the measure really done their risk/reward calculations properly?

Unknown Flower

by Nick Virgilio, dedicated to his younger brother who died in Vietnam

Deep in rank grass,
through a bullet-riddled helmet:
an unknown flower

Keiko Imaoka has posted an interesting analysis of the significance of 5-7-5 to the Japanese, and the emergent “free-form” style of English haiku such as Virgilio’s.

The 5-7-5 syllable rhythm in Japanese haiku is not the matter of arbitrary choice that it may appear to be to a non-Japanese haiku writer. Various combinations of 5 and 7 syllables have dominated the Japanese literary scene for most of its history, tanka (5-7-5-7-7) being the most prominent example. To most Japanese, words phrased in these configurations have a remarkably mnemonic, at times haunting quality, so much so that many war and political propaganda have utilized this form :

hoshigarimasen(7) katsumadewa(5) : “we want nothing till we win (the war)”

kono dote-ni(5) noboru-bekarazu(7) keishichou(5) : “Do Not Climb This Levee – The Police Department”

Nice insights. I may have to revisit my security awareness posters and slogans and see if I can achieve some sort of consistent mnemonics. Hmmm, if seven is lucky and thirteen unlucky…

Massachusetts 201 CMR 17.00

It has an ugly name, but word is starting to spread about “201 CMR 17.00: Standards for the Protection of Personal Information of Residents of the Commonwealth”.

Shall we call it SPPIRC — pronounced “sparc”?

I briefly mentioned the MA Executive Order No. 504 last month, and TaoSecurity has today posted a number of links to information on SPPIRC.

If you handle the personal information of a resident of MA, then you need to plan for compliance with the Commonwealth’s new rules.