Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

BSides London 2017, Chris Kubecka's 'Freaky Leaks from a Chic Geek' →

August 08, 2017 by Marc Handelman in All is Information, Conferences, BSides, Education, Information Security
August 08, 2017 /Marc Handelman
All is Information, Conferences, BSides, Education, Information Security

BSides London 2017, Stefan Hager 's 'Think About The Box' →

August 04, 2017 by Marc Handelman in All is Information, BSides, Conferences, Education, Information Security
August 04, 2017 /Marc Handelman
All is Information, BSides, Conferences, Education, Information Security

Le Rogue →

July 12, 2017 by Marc Handelman in Supply Chain Security, Alternate Attack Vectors, Devices, Information Security, Device Security, Attack Vectors, All is Information

Rogue replacement parts concept. H/T

July 12, 2017 /Marc Handelman
Supply Chain Security, Alternate Attack Vectors, Devices, Information Security, Device Security, Attack Vectors, All is Information

DARPA, The Implantation Instantiation →

July 11, 2017 by Marc Handelman in DARPA, All is Information, Brilliant, Computer Science, Cognitive Security, Cogitation

News, via the IEEE's Spectrum Magazine (and reported by Eliza Strickland) of a challenge from DARPA's Neural Engineering Systems Design; in this case, the need for a recording brain implant has been identified. Indeed.

July 11, 2017 /Marc Handelman
DARPA, All is Information, Brilliant, Computer Science, Cognitive Security, Cogitation

Seams, Minimum Number of →

July 03, 2017 by Marc Handelman in Science, Mathematics, All is Information

via the notion of Universal Origami comes a Guarantee of a Minimum Number of Seams. An outstanding achievement that will yield enormous returns in the coming years.

July 03, 2017 /Marc Handelman
Science, Mathematics, All is Information

CSIAC: Certified Security by Design for the Internet of Things →

July 01, 2017 by Marc Handelman in All is Information, Education, IoT Security, IoT
July 01, 2017 /Marc Handelman
All is Information, Education, IoT Security, IoT

Fast Lightweight Autonomy →

June 30, 2017 by Marc Handelman in All is Information, AI Security, Artificial Intelligence, Information Security

Good, or Evil? You Be The Judge.

June 30, 2017 /Marc Handelman
All is Information, AI Security, Artificial Intelligence, Information Security

Converge 2017, Wendy Nather's 'How Much Security Do You Really Need' →

June 26, 2017 by Marc Handelman in All is Information, Conferences, Education, Information Security, Security Strategy, Security Architecture
June 26, 2017 /Marc Handelman
All is Information, Conferences, Education, Information Security, Security Strategy, Security Architecture

McAfee Mines Cryptocash →

June 26, 2017 by Marc Handelman in All is Information, Cryptocurrency, Cryptography, Fungibility, Information Security

Ah, the old Ethereum mining gambit...

June 26, 2017 /Marc Handelman
All is Information, Cryptocurrency, Cryptography, Fungibility, Information Security

IAM, The Yin and Yang →

June 23, 2017 by Marc Handelman in All is Information, IAM, Identity Management, Information Security

Interesting IAM posting by Steve Mowll and Chris Williams, targeting IAM and AD integration with a Yin-Yang view... Read it and you may find some truth beyond vendor fiction.

'Point: Effective identity management strategies are business-based, and should rise above technical limitations. - Steve Mowll, Identity Architect, RSA'

June 23, 2017 /Marc Handelman
All is Information, IAM, Identity Management, Information Security

Converge 2017, Wolfgang Goerlich's 'Tarnished Silver Bullets' →

June 23, 2017 by Marc Handelman in All is Information, Conferences, Education, Information Security
June 23, 2017 /Marc Handelman
All is Information, Conferences, Education, Information Security

Converge 2017, Dave Ferguson’s ‘A Top 10 List for Better AppSec Hint Its Not the OWASP Top Ten' →

June 22, 2017 by Marc Handelman in All is Information, Conferences, Education, Information Security
June 22, 2017 /Marc Handelman
All is Information, Conferences, Education, Information Security

Brain Meet Internet →

June 22, 2017 by Marc Handelman in All is Information, Biology, Communications, Computation, Biological Computation

Superlative study (funded by the Department of Defense - Army Research Office) - via Duke University's Department of Electrical and Computer Engineering at Durham, Nort Carolina and the Salk Institute for Biological Studies - Integrative Biology Laboratory in La Jolla, California - targeting the apparent similarities between artifical and biologic network implementations. Today's must read!

“The founders of the Internet spent a lot of time considering how to make information flow efficiently,” says Salk Assistant Professor Saket Navlakha, coauthor of the new study that appears online in Neural Computation on February 9, 2017. “Finding that an engineered system and an evolved biological one arise at a similar solution to a problem is really interesting.”

June 22, 2017 /Marc Handelman
All is Information, Biology, Communications, Computation, Biological Computation

Converge 2017, Fernando Montenegro's 'The 4 Eyes of Information Security' →

June 20, 2017 by Marc Handelman in All is Information, Conferences, Education, Information Security
June 20, 2017 /Marc Handelman
All is Information, Conferences, Education, Information Security

Le Quanta des Jumeaux Chinois →

June 19, 2017 by Marc Handelman in Information Security, All is Information, Cryptography

Roland Pease - writing for the BBC Radio Science Unit, has crafted this well-reported piece, targeting the PRC's Micius satellite, engineered to provision the fundamentals of an ostensibly 'unbreakable' crypto-mehodology, i.e., quantum entanglement (in this case, wierding twins)...

"Chinese scientists have pulled off a major feat with one of the sub-atomic world's weirdest phenomena: photons that behave like twins and experience the same things simultaneously, even over great distances." - via Phys.org

June 19, 2017 /Marc Handelman
Information Security, All is Information, Cryptography

Gadi Evron, 'The First Internet War in Estonia' →

June 09, 2017 by Marc Handelman in All is Information, War, Cyberwar

via Gadi Evron, Founder and CEO at Cymmetria comes this unique retrospective view of the world's first internet-based war fought within Estonia, now, a decade removed. An outstanding historical view and well-crafted thought piece - well worth your time to read. Most Certainly, Todays' Must Read

June 09, 2017 /Marc Handelman
All is Information, War, Cyberwar

XKCD, State Word Map →

June 02, 2017 by Marc Handelman in All is Information, Analytics, XKCD, Measurement, Sarcasm, Humor

Another sarcastically superb analytics mapping bit of tomfoolery? No, it's the real deal - well, maybe... via the superlative talent of Randall Munroe at XKCD.

June 02, 2017 /Marc Handelman
All is Information, Analytics, XKCD, Measurement, Sarcasm, Humor

NolaCon 2017, Aaron Hnatiw's "Beyond OWASP Top 10" →

June 01, 2017 by Marc Handelman in All is Information, Conferences, Education, Information Security
June 01, 2017 /Marc Handelman
All is Information, Conferences, Education, Information Security

Clouding Up →

June 01, 2017 by Marc Handelman in All is Information, Data Classification, Data Driven Security, Data Leakage, Data Security, Espionage, Government, Information Security, Information Technology, USNGA

via Gizmodo investigative reporter Dell Cameron, comes the astounding news of the systemic incompetence in properly handling secret documents and other artifiacts stored within the cloud (in this case, AWS S3 Buckets) by a well established contractor to the National Geospatial-Intelligence Agency (NGA). Certainly, a first-rate example of an Expanding Cloud of Lethal Stupidity (ECOLS).

Where does the organization in question fall within the Noel Burch Hierarchy of Competence model?. Should the culprits in this scenario be prosecuted? You be the judge. Truly astounding, indeed.

"A cache of more than 60,000 files was discovered last week on a publicly accessible Amazon server, including passwords to a US government system containing sensitive information, and the security credentials of a lead senior engineer at Booz Allen Hamilton, one of the nation’s top intelligence and defense contractors. What’s more, the roughly 28GB of data contained at least a half dozen unencrypted passwords belonging to government contractors with Top Secret Facility Clearance." - via Gizmodo reporter Dell Cameron

June 01, 2017 /Marc Handelman
All is Information, Data Classification, Data Driven Security, Data Leakage, Data Security, Espionage, Government, Information Security, Information Technology, USNGA

Stockpiled →

May 31, 2017 by Marc Handelman in Blatant Stupidity, Infosec Competence, Infosec Policy, All is Information

via the eponymous Iain Thomson, whilst plying his trade at El Reg, comes this astonishing tale of the profoundly stupifying incompetence at Microsoft Corporation (NasdaqGS: MSFT) in regards to the Redmond, Washington software leveiathan's askew morality... This time, focused on the company's complaints targeting the National Security Agency's stockpiling of exploitation bits, yet also, dancing the stockpile two-step... Simply astounding.

"Most crucially, it's more than a little grating for Microsoft, its executives, and its PR machine, to be so shrill about the NSA stockpiling zero-day exploits when the software giant is itself nesting on a pile of fixes – critical fixes it's keeping secret unless you pay it top dollar. Suddenly, it's looking more like the robber baron we all know, and less like the white knight in cyber armor" - via Iain Thomson writing at El Reg

May 31, 2017 /Marc Handelman
Blatant Stupidity, Infosec Competence, Infosec Policy, All is Information
  • Newer
  • Older