• Security

    Data Privacy Day 2012

    by  • January 23, 2012 • Security • 0 Comments

    It’s here again.   It’s not guaranteed to be more fun than Ground Hog Day, but it is important none the less. Data Privacy Day 2012 is on January 28th. There are numerous events being hosted across Canada and the US to make people more aware of data privacy issues.  You can find a list of events [...]

    Read more →

    SANS Ouch! – January 2012

    by  • January 16, 2012 • Security • 0 Comments

    The latest edition of SANS Ouch! is out. Every month they publish a newsletter directed at the typical web user.  Not those of us with a heightened awareness of security, but people like your office manger, mail room clerk or your parents. This month’s newletter deals with how to securely set up a wireless network. [...]

    Read more →

    Canadian House of Commons Employees Downloading Illegal Content

    by  • January 11, 2012 • Security • 0 Comments

    According to the activist group, The Pirate Party of Canada, House of Commons employees are downloading illegal content before Canada’s bill C-11, the strict copyright protection legislation comes into effect. The party used youhavedownloaded.com a site that scrapes torrent sites for IP addresses to find addresses owned by the House of Commons. When you work in such [...]

    Read more →

    Security Theatre in the Hospital

    by  • December 21, 2011 • Security • 0 Comments

    I was listening to the radio this morning and heard this story about how the local children’s hospital is reducing waste. One of the things they are removing from the emergency rooms is the paper that lays across the examination tables. An emergency room doctor explained that the paper doesn’t really contribute to the infection [...]

    Read more →

    RCMP Camera Gaffe and Security Policies

    by  • November 17, 2011 • Policy, Security • 0 Comments

    I read about the RCMP’s gaffe with leaving images from past investigations on a camera used for surveillance of a suspected graffiti artist, and immediately thought of this article entitled “IT Security policies Widely Ignored, Survey Suggests”. Is that what happened?   Was it a process issue, or a policy issue? I wonder if we’ll ever know?

    Read more →

    Security Notice: THC-SSL-DOS, Lotus Domino and SSL Regegotiation

    by  • November 4, 2011 • Admin Notes, Lotus, Security • 1 Comment

    A group called www.thc.org released a tool called THC-SSL-DOS.  Here’s a clip from their site: THC-SSL-DOS is a tool to verify the performance of SSL. Establishing a secure SSL connection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off [...]

    Read more →

    Greece, a Referendum and Security

    by  • November 1, 2011 • Hack Attack, Security • 0 Comments

    About now, some people will be pontificating that if Greek citizens vote down austerity measures, Greece will run out of money in a matter of days, and that the world/European economy will go into a tailspin shortly thereafter. I suspect that if that occurs, there will be a rather public hack of Greece’s infrastructure, taking advantage [...]

    Read more →