privacyguru

Props to Comcast and NOT to Congress if they pass either of these.

http://www.securityweek.com/dnssecs-time-here-sopa-presents-...

This bulletin fixes the "Hash Collision Attack Vulnerability" that came into the spotlight on Thursday: http://www.securityweek.com/hash-table-collision-attacks-cou...

Emergency out-of-cycle Patch being issued today by Microsoft:

http://www.securityweek.com/microsoft-issue-emergency-fix-ad...

Yeah, not very new. The idea of "homomorphic encryption" has been around for a while.

http://www.securityweek.com/making-use-sensitive-data-cloud-...

No, the FBI did NOT admit to using Carrier IQ data.

http://www.securityweek.com/fbi-carrier-iq-foia-denial-not-p...

One thing that Reuters failed to disclose while it continued to cover the NASDAQ breach, is that it offers a competing product. They finally added the disclosure after being called out and asked to by NASDAQ:

http://www.securityweek.com/reuters-accused-omitting-disclos...

The German government reportedly paid €2M to have the spying malware developed:

http://www.securityweek.com/german-government-paid-€2m-r2d2-...

Justin, dealing with HIPAA can be daunting, especially when it's not your primary function in terms of dealing with security and compliance issues that are constantly changing. There are a few companies that can help ensure your app is HIPAA compliant. There are also hosting providers like Firehost that offer HIPAA compliance ready hosting that may help as well. http://www.firehost.com/secure-hosting/hipaa

I have much respect for Meg Whitman, but she is not an ideal pick for HP. Her experience is with consumer companies -- eBay, P&G, Disney...Especially if HP spins off its PC business, that leaves the company as essentially a pure enterprise hardware/software play. Don't do it HP.

This paper is old. The media went running with numbers that are way outdated - The platform now has over 95,000 servers in 1,900 networks across 71 countries.

Tablets are starting to hold and access the same (and often sensitive) data that PCs do -- essentially putting it at the same threat level as typical PCs that have access to corporate and government networks.

With proper precautions, systems can be secured properly and with quite good security. Anytime a computer doesn't have encrypted data it's insecure, assuming an attacked has physical access. Installing a new operating system while keeping old data is cake. If a laptop is stolen or attempted to access data that is encrypted with proper security measures, it's pretty tough to break. Nothing is ever 100% secure but with proper security measures and encryption (either full disk or of sensitive data) it's pretty tough.

Just added Walgreens to the list. Getting Interesting.

I'd check out (www.carbonite.com) -- $54.95 Per Computer per year for unlimited backup.

Would someone really trust Yahoo/Flickr to all their images and not have backups? Hopefully they didn't really care much about the images, else they should have copies elsewhere.

(The concept the crowd sourced effort is cool, but the idea of wanting to remove all the ads from times square and make it a reality isn't)

That's just stupid. It's like asking the casinos in Vegas to stop with flashing lights and sounds. I'll agree that we're a population that is over marketed and flooded with advertising but part of the excitement of times square is all about the signs and advertisements. Take all that away and it would be a pretty boring spot.

I would think that a bugging device would be much more discreet. :) That was a pretty ugly job. Must be something more to it.

It was a Dupe -- Somehow someone used a different URL so it didn't just upvote it. When I submitted it I didn't catch it on there yet. In this case, having it twice I guess doesn't hurt so we can get some awareness.

Yeah, it's real.

This is a tough one to swallow. I never knew Bill personally but it did hit home as shared some common connections. Sucks. Sucks that its too late to help him. I won't comment on what I think should be done to that person but they deserve the worst and then some.

Someone posted a great quote in the comments on the story on Gizmodo: "Be kind, for everyone you meet is fighting a hard battle."

RIP Bill Zeller.

We added little more info here -- http://www.securityweek.com/backdoor-vulnerability-discovere...

Via @linkedin on Twitter- "Hey guys, this is part of the planned cutover we initiated oer the wknd. http://bit.ly/fYD800 Sorry for the inconvenience. Stay tuned."

"We continue to tune our site and optimize site performance following our recent cutover to the new Los Angeles data center. Thanks for your patience during the transition. Stay tuned. – Dec 13, 2010"

http://blog.linkedin.com/2010/12/11/linkedin-data-center-la/

And you'd think that with the resources they have they could come up with a better logo too! Pretty lame.

Gotta love this part: "And really IT, get with the program and stop wasting exorbitant amounts of money on equipment that periodically freezes and allows unauthorized access. Consider stepping outside your personal areas of comfort and the safe purchases dictated by popular culture. This system which you took months and untold thousands of dollars to implement, I have re-designed in one hour."

The student didn't "hack" O'Reilly's site, he conducted DDoS attacks. Totally Different.

Old news from last week.

Great company and a great business success story. I guess Amazon doesn't fear Diapers.Com Anymore! Excellent story over at Businessweek on the company: http://www.businessweek.com/magazine/content/10_42/b41990627...

Based on a recent salary guide/study, in the US, those graduating with a focus on it security may have a better chance of gaining employment upon graduation do to demand for networking/security talent. http://www.securityweek.com/it-salary-guide-shows-increase-s...

Story says "Google collected the data as a result of code integrated into the software used to identify and map WiFi signals. Google says the code was developed in 2006 by an engineer working on an experimental WiFi project that sampled all categories of publicly broadcast WiFi data. That coded ended up on the systems that power the data collection of the Street View cars."