Steve Riley on Security

Browse by Tags

Mythbusters beat "unbreakable" fingerprint door lock: My good friend Jamie Sharp sent me this link today. It's amazing: watch how Adam and Jamie easily defeat a fingerprint lock the manufacturer claims has never been broken. As if to snub the claims, they break it three times! Supposedly it monitors pulse, Read More...
Posted 20 September 06 10:15 by Steve Riley | 13 Comments
Filed under identity, authentication, security theater, biometrics, things that make me laugh
Yes, everyone knows you're a dog: Amazing how long the legs are on the AOL search debacle. Of course, we in the online community often beat such storeis to death, if only because they deserve it! Recently Kim Cameron posted the search history of user 16006693, which flits "from politics, Read More...
Posted 07 September 06 08:17 by Steve Riley | 2 Comments
Filed under the trade press, identity, threats, things that make me laugh, public policy, things that make me worried
Security myths and passwords: I like this a lot. http://www.cerias.purdue.edu/weblogs/spaf/general/post-30/ In the practice of security we have accumulated a number of “rules of thumb” that many people accept without careful consideration. Some of these get included in policies, and Read More...
Posted 30 April 06 09:07 by Steve Riley | 3 Comments
Filed under identity, authentication, security policies, passwords, security myths
What do YOU need out of two-factor authentication?: Two-factor authentication continues to grow in popularity and emerge as a security requirement for many people I meet with. At Microsoft, we use smartcards internally for VPN access right now; soon we'll be requiring smartcards for domain logon, too. Read More...
Posted 20 April 06 03:37 by Steve Riley | 43 Comments
Filed under identity, authentication, biometrics, email, access technologies, security policies, risk mitigation, passwords
It's me, and here's my proof: why identity and authentication must remain distinct: My February Security Management column is posted: http://www.microsoft.com/technet/community/columns/secmgmt/sm0206.mspx No matter what kinds of technological or procedural advancements occur, certain principles of computer science will remain -- especially Read More...
Posted 16 February 06 09:41 by Steve Riley | 7 Comments
Filed under identity, authentication, biometrics, security policies, risk mitigation, passwords, security science
New column -- Using IPsec for network protection: I'm now writing semi-regular articles for TechNet. These are part of the security management series, and they're also linked from the security newsletter. The first column is a two-parter about IPsec. Part 1 describes the technology: how it operates, Read More...
Posted 10 February 05 09:59 by Steve Riley | 6 Comments
Filed under identity, authentication, access technologies, protection, configuration, IPsec