This morning I was reading a new report that seems to have provided additional evidence of some of my suspicions regarding the total cost of offshoring decisions for information technology initiatives. Written by the Intelligence and National Security Alliance, the new report suggests (while in the context of the U.S. Government) that there may be hidden consequences of outsourcing and offshoring decisions, where “potential adversaries can easily insert themselves into our logistical chains” (Intelligence and National Security Alliance, 2011, p. 6). Overlaying the backdrop of [...]

Today, I am going to switch gears a little bit regarding my blog entries, and take a look at vulnerability scanners from an end user perspective. As you are no doubt aware, there are several to choose from. Rather than pander to a specific product, I would like to keep it general and list out some of the features that I would love to see integrated into the product that may not get as much attention, but important nonetheless. I apologize in advance if $product [...]

By Thomas Lowenthal | Last updated 2 days ago On the Internet, nobody knows you’re a dog—but they might now have an easy time finding your kennel. In a research paper and technical report presented at the USENIX Networked Systems Design and Implementation (NDSI) conference at the beginning of April, researchers from Northwestern University presented new methods for estimating the exact physical location of an IP address tens or hundreds of times more accurately than previously thought possible. The technique builds on existing approaches but [...]

Researchers in Germany say they’ve been able to reveal passwords stored in a locked iPhone in just six minutes and they did it without cracking the phone’s passcode. » Comments By Martyn Williams February 10, 2011 — IDG News Service — Researchers in Germany say they’ve been able to reveal passwords stored in a locked iPhone in just six minutes and they did it without cracking the phone’s passcode. The attack, which requires possession of the phone, targets keychain, Apple’s password management system. Passwords for [...]