Steve Riley on Security : January 2009

January 2009 - Posts

Today’s spam: Here’s what’s in my junk mail folder today: What is up with all that? Apparently I sent a payment to myself, I initiated another payment to myself, I am a user of myself who’s received exclusive offers for January, and I received a payment from myself. Read More...
Posted 21 January 09 10:13 by Steve Riley | 12 Comments
Filed under spam, email, things that make me angry
Attacks against integrity: I’ve been mentioning this frequently during my talks in the last 12 months: that accidental or malicious data modification is yet something else we need to defend against. Richard Bejtlich wrote last year about attack progressions , and this year summarized Read More...
Posted 20 January 09 08:28 by Steve Riley | 3 Comments
Filed under security policies, protection, integrity
I want a Model 22 HDD Hard Drive Disintegrator: Here at Microsoft we have an active internal discussion group where most security-minded folk hang out. The topic of data destruction came up recently, it’s actually a lot more difficult than most people think. CIPHER /W and SDELETE do a reasonable job, Read More...
Posted 20 January 09 01:43 by Steve Riley | 10 Comments
Filed under security myths, physical security, data destruction
Questions about virtualization and security?: Yesterday, Donnie Hamlett, a Microsoft core infrastructure optimization specialist, gave a webcast and played a video of my TechEd presentation on virtualization and security. Some of the viewers had questions, and I offered to Donnie that they could Read More...
Posted 09 January 09 09:46 by Steve Riley | 4 Comments
Filed under configuration, virtualization
Poll: do you use scheduled scans for malware?: An interesting comment recently appeared on my older post about whether or not to use antimalware software. Peter van Dam wondered whether scheduled scans are really necessary, given that anti-malware products scan files as they enter (and sometimes Read More...
Posted 05 January 09 12:03 by Steve Riley | 18 Comments
Filed under risk mitigation, protection, malware