Here's 2 articles from the New York Times that were run a week or so ago. The first one ran on 9/14 explaining that the NYT website was hacked and some rogue malware ads were placed on the server. The 2nd article (apparently unrelated) is from the very next day and it says that IT depts. prioritize the wrong threats and are focused on old problems. I just thought the contrast 1 day apart was very ironic.


http://www.nytimes.com/2009/09/15/technology/internet/15adco.html?_r=2

http://bits.blogs.nytimes.com/2009/09/15/security-pros-are-focused-on-the-wrong-threats/?ref=technology

DNSSEC

here's a good article that ties into last weeks class about DNS security. looks like all root servers will be on DNSSEC within a couple more years.

http://searchsecurity.techtarget.com/news/interview/0,289202,sid14_gci1367915,00.html?track=NL-102&ad=725126USCA&asrc=EM_NLN_9223953&uid=9172669

Apple missed security boat

Here's a good one. Microsoft actually one upped Apple. Given MS reactive nature to situations, hard to believe they're ahead of the curve on this. It is so simple a concept, and yet can help defeat buffer overflows. Can't believe Apple missed it.


http://www.networkworld.com/news/2009/091409-apple-missed-security-boat-with.html

Microsoft putting money where mouth is on open source

Here's an interesting, albeit, short article. I have a question: WHY? These are the same people that won't give us the time of day for free and now they are backing an Open Source initiative? Is this just a legal rouse to lay claim to more open source code? Given their very public statements about open source in the past, what are we supposed to think?




http://www.smartbrief.com/news/comptia/storyDetails.jsp?issueid=F9126A3F-2A32-4868-BF55-33C45B4273A7&copyid=B00706CE-2753-4419-91AC-D0B7D865B586&brief=comptia&sb_code=rss&&campaign=rss

n-lite software

For anyone interested, here's the link for the software to lighten up windows installs.

http://www.nliteos.com/index.html

Truth, lies and fiction about encryption

Here's a good article to tie into our crypto study. Like anything else, it's not an end all for security concerns, but crypto is a powerful tool if used correctly.

http://searchsecurity.techtarget.com/magazineFeature/0,296894,sid14_gci1365961_mem1,00.html?track=sy160

The "new" IRS

The 'thinking' of some people is dumbfounding. The article talks about how the IRS is using all the info on Facebook, MySpace, etc. to track down tax dodgers. I have to say hooray for the IRS. What a ridiculously simple way to gather info. Putting aside the fact I couldn't possibly care less what someone is doing every 10 minutes of their life, I have quite a few people tell me how secure their info is because 'friends' have to be approved, and IM is 'only' between us! I showed my wife just how insecure these sites were, and thankfully, she is now much more cautious about what she will write to anyone through the sites.



http://www.maximumpc.com/sites/maximumpc.com/themes/maximumpc/wow.php?back=article%2Fnews%2Fcareful_irs_using_social_networks_find_tax_evaders