The main article is an interesting clarification, but keep reading through the diatribe of comments to get it rehased from every possible angle
- Christopher Perry
Activity at the top tier of the Internet’s DNS is only part of the first step in deploying DNSSEC. It also must be deployed in the zones for lower tiers, and DNS servers must then use the signatures to validate queries and requests.
- Christopher Perry
"The virus has been programmed to turn on its host PCs and destroy data on Friday" ... I LOVE this! This is one way to get the attention of oblivious PC owners.
- Christopher Perry
"Google says that its forthcoming Chrome operating system will be so secure that "users don't have to deal with viruses, malware and security updates." But Google's claim is being met with skepticism within the Internet security world."
- Christopher Perry
Update, July 10, 11:48 a.m. ET: South Korea's Computer Emergency Response Team (KR-CERT) has confirmed that machines which participated in this attack are now self-destructing.
- Christopher Perry
"We now have a smaller connected globe where information can be moved in seconds, where information managed by computer networks -- which runs our utilities, our transportation, our banking and communications -- can be exploited or attacked in seconds from a remote location overseas. No flotilla of ships or intercontinental missiles or standing armies can defend against such remote attacks located not only well beyond our borders, but beyond physical space -- in the digital ether of cyberspace."
- Christopher Perry
No, please Jon tell us how you really feel ... "My favorite terrorist plot story was one told by former terrorism prosecutor turned pundit Andy McCarthy, where he recounted how a terrorist cell was using a shared Hotmail account to communicate. These guys set up a single e-mail account, passed the credentials around to cell members, and proceeded to communicate with it by saving messages for each other in the "Drafts" folder. Needless to say, this cell was not uncovered by multimillion dollar email-sniffing supercomputers."
- Christopher Perry
"What's astonishing is how often these security breaches were the result of network managers forgetting to take obvious steps to secure their systems, particularly non-critical servers."
- Christopher Perry
"Armed with fresh funding from the Bush administration, officials started work on a new version, dubbed Einstein 2. It is supposed to detect known types of cyberattacks and immediately alert the cybersecurity center. The problem: Like its predecessor, it still can't detect or block sophisticated attacks that weren't previously known, said Stewart Baker, a former senior Homeland Security Department official."
- Christopher Perry
Third part in a series - 1st half is a bit dry, but 2nd half of the article has more info. "According to the U.S. Commerce Department, intellectual property theft is estimated to top $250 billion annually (equivalent to the impact of another four Katrinas), and also costs the United States approximately 750,000 jobs, while the International Chamber of Commerce puts the global fiscal loss at more than $600 billion a year. But both estimates appear to be woefully underestimated; by some other estimates, there was over $251 billion worth of intellectual property lost or illegal property seized in August 2005 alone."
- Christopher Perry
I have a recommendation ... require the folks with the green eye shades at the GAO actually have to securely configure, maintain and defend a network for a minimum of a year before they are allowed to tell others how to secure their networks.
- Christopher Perry