The Security Eunoia

Blogging about Security Auditing, IdM & Access Mgmt, Web App Security etc

Entries for the ‘Cryptography’ Category

IBM’s answer to the Endpoint Security problem

Remember the post about how big security vendors are moving down the food chain to consolidate their hold on the security market? Well IBM through its partnership with (a much smaller) BigFix has released a desktop security solution that is positioned to enhance endpoint security and “reduce cost”.

Leave a Comment

Companies can learn from the Tylenol-Cyanide case

In 1982 Johnson & Johnson the company making Tylenol had to contend with a major financial and image problem when contaminated Tylenol capsules caused the deaths of 7 people. Investigators discovered that someone had filled Tylenol capsules with solid cyanide compound and replaced the original Tylenol bottles with poisoned ones in some supermarkets and drug stores.
What did the company do and what lessons do we learn from it?

Leave a Comment

Spotify hacked! - My account compromised

Oh great! Its now my account that has been compromised .. ouch! Interestingly this is the first time any service provider has sent me any such notification. This may be in part because I live in Europe where data breach notification is still being debated therefore many providers may remain silent until exposed.

This is a mail I received from Spotify this evening

Leave a Comment

Card readers for online banking - Some risks

Researchers from the University of Cambridge have published a paper which discusses problems with the introduction of new hand held card readers optimized for online banking in the UK. Here is a part of the abstract:

Leave a Comment

5 Security Tools to beat the Budget Crunch

Many are the articles suggesting ways by which departments can make the most of shrinking budgets in these hard times. If you are a small company, allocating funds for all the security resources you need can prove very challenging. You need to be smart about security spending. Therefore security tools that just do the work for as little as possible is a ‘must consider’.

Leave a Comment

No warrant, No cryptographic hash

A US federal court judge has ruled that taking a cryptographic hash (fingerprinting) of a suspects hard drive constitutes a search and therefore a search warrant should be obtained first.
The judge ruled:
“To derive the hash values of Crist’s [suspect] computer, the government physically removed the hard drive from the computer, created a duplicate image of [...]

Leave a Comment