Tech Seige

Security Mindset

I have often thought about the mindset required to be good at the security game. I hang out with Duane Laflotte alot and he has the whole hacker mindset which lends itself nicely to security even when you are

Posted: Mar. 21, 2008 08:31 AM

Being hacked might get even more expensive

Most companies pay lip service to security, but the emphasis is just not there. There is bluster and maybe even a few conversions soon after an embarrassing security breach, but all too often a scapegoat is found, fired and then it is bac

Posted: Feb. 27, 2007 11:30 AM

Default Router Passwords

ZDNet recently had an article about new attacks that allow systems to be exposed to the worst kind of attacks just by visiting a web page with a bit of Javascript. The root of the problem is actually not changing the default passwords on those

Posted: Feb. 16, 2007 11:28 AM

Interesting ways to increase security (incrementally)

Forbes.com has a story about the use of typing patterns to identify whether a user is the actual user or a hacker. I like the idea, though I fear it won't catch on. Defense in depth, adding an edge is important, but the key element from this a

Posted: Jan. 3, 2007 05:25 PM

MS from the Inside and the Developer Community from the Outside

My good friend, Eileen Rumwell, has started blogging. Her blog is something I plan to keep watching especially since in the short time it has been up she has already thrown out some great insights. The really cool thing is that having com

Posted: Nov. 29, 2006 04:58 PM

It usually isn't what we expect that gets us...

Time magazine's cover story is about how people are scared of very, very unlikely things such as bird flu which hasn't killed anyone in the US while the regular flu kills tens of thousands each year. Security is the same way. I

Posted: Nov. 26, 2006 01:55 PM

Cross Site Scripting protection made easy (er)

Microsoft has just released their new Anti-XSS library which helps developers do the right thing more often without as much effort as before. If you are interested in this (and trust me, you are) your first stop is to go to the tutorial

Posted: Nov. 23, 2006 07:03 PM

Preventing Software Piracy

Chad Hower is a smart guy and I came across his post on protecting the software you write from pirates right at a time that we were revisting the question ourselves. On the whole I agree with Chad, while he comes off as against anti-pira

Posted: Nov. 6, 2006 02:07 PM

Data Destruction

I have commented before on this issue and a recent blog post forwarded to me has dredged up the topic again. If you want to get rid of a drive after retiring a server or getting indicted then most of the things you can think to do to that drive will

Posted: Oct. 23, 2006 07:42 PM

FUD

Sometimes the Fear, Uncertainty and Doubt (FUD) argument is very well disguised. In an article the Chief Scientist at McAfee is decrying some of the new features that MS is putting into Vista to try and stop virus infection and the spread of sp

Posted: Oct. 18, 2006 02:08 PM