Steve Riley on Security

Browse by Tags

What's your data worth? More importantly, to whom?: This week, I'm attending and spoke at a cybercrime conference in Singapore. One of the presenters made a very good point, and I want to share it with you. When considering how to protect your data, don't consider how valuable it might be to an attacker. Read More...
Posted 24 October 07 11:49 by Steve Riley | 5 Comments
Filed under protection, risk mitigation, security policies, security science
Lousy security: Lousy security is all around us, and I'm not even thinking about airport security here (which, I admit, i love griping about). Here I have in mind lousy computer security. And lest you think I'm proceeding to engage in naval-gazing introspection, no -- Read More...
Posted 13 September 05 03:33 by Steve Riley | 2 Comments
Filed under false claims, security theater, protection, RMS, security science
August article: 802.1X on wired networks considered harmful: Several months ago I learned from Svyatoslav Pidgorny, Microsoft MVP for security, about a problem in 802.1X that makes it essentially useless for protecting wired networks from rogue machines. Initially I was a bit skeptical, but the attack he described Read More...
Posted 11 August 05 10:55 by Steve Riley | 16 Comments
Filed under NAP, access technologies, authentication, protection, risk mitigation, security science, threats, wireless