The InfoSec Blog

System Integrity: Without Integrity you don’t have Security

January 26th, 2009

Network Segmentation is Common Sense

On one of the professional forums I subscribe to there was a request for “references” to justify the separation of development and production networks and facilities.  It seems some managers “don’t get it” when it comes to things like change control and undocumented and unplanned changes.  Many guidelines discuss this, but its seems that some key ones like NIST and ISO-27001 do not explicitly mandate it, and some managers use this as a reason to not do it.

Some of us security droids find this frightening.

My colleague Miriam Britt managed to sum up the reasons why one should have separation quite sussinctly and forcefully.  With her permission I have copied her reasoning here and I hope many people will either reference this or copy it to their own blogs.  This kind of straight forward statement needs a wide exposure.

Read the rest of this entry »

January 19th, 2009

This should go down really well in homes for the deaf

http://www.reghardware.co.uk/2009/01/17/ces_video_hitachi_gesture_tv/

Every casual comment will make the TV do something (probably undesired).

Not every security flaw is an opportunity for hackers!

Enhanced by Zemanta
January 4th, 2009

Is it the end of the road for LiveCDs?

An Imation USB Flash Drive and CD-R (can be av...
Image via Wikipedia

http://www.freesoftwaremagazine.com/columns/it_end_road_live_cds

No. I don’t think so!

The price of recordable DVDs is now under $0.22 each That’s roughly 60 times cheaper than the current price for equivalent-size pen drives and more than 25 times the cost of the cheapest pen drives now being sold.  And at most trade shows even the more expensive form, the credit card/business card format is being handed out like candy.
Yes, USB sticks are being handed out too, but not so eagerly.

Until pendrives can get Blank-DVD-level cheap — maybe inevitable, but not at least for five years or so — it will be cheaper to pass around bootable DVD media than bootable pen drives.   Right now the USB-as-demo works fine so long as you hang around for the demo but is useless for a “try it on your own time” leave-behind (unless you like spending that kind of money for leave-behind, which may work for a reseller but not volunteer advocates).

All media is on a price curve. Its not the price of blank CDs/DVDs that counts, its that they can be printed. Yes, I can download and burn onto a blank, but if I’m in business I’ll get 10,000 printed and silk screened, and because of the way printing works the set-up is amortized over volume and that can never be approached by pen drives.

This was the same economics that meant a cassette tape album was often more expensive than a vinyl one and the CD was even cheaper!

You know all this … But its the price CURVES that are interesting. Blank CDs/DVDs are comparable to blank pen drives, so the price curves CAN be compared. CDs are ahead (in time) and the question is will their price bottom out as the cost of memory falls?

The falling cost of system memory makes the slow speed of LiveCD irrelevant. The $2,000 high end laptop of three years ago now costs under $700 and has 3G or 4G of memory rather then 1/2G. The compressed file system is loaded into memory and the dual (quad?) core CPU running 50% faster (3GHz rather than 2GHz) is so fast that this actually beats out installing on the hard drive!

No, the LiveCD isn’t going away any time soon!

Reblog this post [with Zemanta]
|