Lead Story
First Impressions of pfSense Open Source Firewall
At my new place of employment we had some firewall problems over the last couple of weeks. Eventually I figured out that the firewall was rebooting at random intervals during the day. Hint: Turn on email notifications. So I started scouring the market for an inexpensive firewall that could share two WAN connections without screwing up the SSL sessions. One of the first firewalls I found was pfSense.
{More»} Features
The Impact of Cold Boot Attacks on Disk Encryption»
One of the common uses of disk encryption is to protect this confidential information. For people who have confidential information on their laptops the use of disk encryption is highly recommended if not mandatory. Recently a group at Princeton University published a paper called Lest We Remember: Cold Boot Attacks on Encryption Keys which presented a suite of attacks that exploit DRAM remanence effects to recover cryptographic keys held in memory. Can we continue to use and recommend these disk encryption programs?
{More»}
Office Live, Windows Server 2008, and SMB Software as a Service Strategy»
The Office Live and the Server 2008 products address the office environment with different technologies. What is a small business supposed to do? When you add in the security implications from various regulations and privacy issues that exists outside of the security requirements, the analysis can be a daunting task. To make this a little easier let me take you on a tour and review the tradeoffs between remote access and security.
Redesigning this web site to use WordPress»
There are a variety of reasons why an organization should redesign their web site. Technology is changing continuously and the site that looked smart and fresh last year looks dull and lifeless this year. This web site was originally constructed using an open source CMS called phpwebsite. This was a nice choice a couple of years ago for a magazine style web site but WordPress has caught up and passed it on the technological front. There are many low cost or free CMS systems out there but I think WordPress is leading the pack. Here are some of the reasons that led me to convert this web site to WordPress.
April Meeting of OWASP»
[ April 22, 2008; 5:30 pm to 7:30 pm. ] April’s meeting will feature the premiere of Fortify’s movie, The New Face of Cybercrime, followed by a reception and round table discussion.
