- Follow this blog:
- RSS
- Email Alert
IT Security
Selena Frye
TechRepublic Staff
Selena Frye

-
Top 10 posts in IT Security for 2012
Here are the most read posts of the year in IT Security.
Posted by Selena Frye | December 20, 2012, 2:00 PM PST
-
The 12 networking truths applied to information security
Alfonso Barreiro relates the 12 networking truths to the information security field.
Posted by Alfonso Barreiro | December 19, 2012, 9:00 AM PST | Latest comment by water-man
-
Cloud services: The threat of side channels
Cloud services offer convenience and potential cost savings, but a potential security issue may negate the benefits. Michael Kassner digs into some of the latest research.
Posted by Michael Kassner | December 17, 2012, 9:43 AM PST | Latest comment by doug.cronshaw@...
-
Don't ignore physical security: Cameras and surveillance systems for the SMB
Patrick Lambert offers tips on taking care of your workplace's physical security with affordable cameras and surveillance systems.
Posted by Patrick Lambert | December 11, 2012, 6:00 AM PST | Latest comment by kyleethompson
-
Reporting online crime: What to do when you're the victim
Online fraud shouldn't happen, but it does. And when it does, how should one report the crime, and to whom? Michael Kassner would like to share what he's learned.
Posted by Michael Kassner | December 10, 2012, 7:27 AM PST | Latest comment by JCitizen
-
John McAfee tripped up by the smartphone
The case of John McAfee just gets weirder. Here's how he was tracked down in Guatemala, where he is currently seeking asylum from Belize authorities.
Posted by Selena Frye | December 5, 2012, 8:19 AM PST | Latest comment by NickNielsen
-
The basics of using a proxy server for privacy and security
Patrick Lambert goes over the basics of how proxy servers work and why they are used to add security and privacy.
Posted by Patrick Lambert | December 5, 2012, 6:30 AM PST | Latest comment by Tony Hopkinson
-
eReaders: They're reading us while we read them
Your Kindle, therefore Amazon, knows more about your reading habits than you do. Is that something you want? Michael Kassner looks at eReaders and privacy issues.
Posted by Michael Kassner | December 3, 2012, 8:33 AM PST | Latest comment by MikeMJ
-
When doing 'something' isn't better than 'nothing': Risk assessment steps
IBM security pro Jack Danahy warns that some incomplete measures may be more dangerous than doing nothing about security threats. Here are his recommendations for real risk assessment.
Posted by Guest Contributor | November 28, 2012, 8:35 AM PST
-
How Cyanogen lost their online presence: Don't let it happen to your business
Patrick Lambert sounds a warning about protecting your web infrastructure from insider threats. Here's what happened to CyanogenMod.
Posted by Patrick Lambert | November 27, 2012, 5:30 AM PST | Latest comment by feral@...
-
Proposed amendments to ECPA would make Orwell squirm
George Orwell wrote his famous book about Big Brother in 1948. What would he think about the Electronic Communications Privacy Act? Changes to the act are being voted on this week in the U.S. Senate.
Posted by Michael Kassner | November 26, 2012, 7:59 AM PST | Latest comment by HAL 9000
-
Google reports .govs requesting lots of user information
According to Google's latest Transparency Report, government requests for user information and requests to remove content have increased. Help Michael P. Kassner figure out what that means.
Posted by Michael Kassner | November 21, 2012, 10:12 AM PST | Latest comment by bikingbill
-
Infographic: Holiday shopping safety
Remind your organization's users to remain security conscious during the holiday shopping season with this infographic.
Posted by Selena Frye | November 21, 2012, 9:00 AM PST
-
Making sense of computer forensics
Alfonso Barreiro goes over the basics of computer forensics that all IT pros should know. Preparing your organization for the possibility of a legal investigation should be part of any security...
Posted by Alfonso Barreiro | November 20, 2012, 5:30 AM PST
-
The FBI locked your computer? Watch out for new spins on ransomware
The FBI locks your computer. Can they do that? Or is it fake? How does one know? Michael Kassner asks an expert for help with the latest forms of ransomware.
Posted by Michael Kassner | November 15, 2012, 7:18 AM PST | Latest comment by JCitizen
-
How to sell security to the C-Level
In this guest blog post, Justin Strong lays out the business case that IT needs to take to executives when investments are needed for security tools and policies.
Posted by Guest Contributor | November 13, 2012, 10:44 AM PST
-
Application shielding: Exploring ExploitShield
Dominic Vogel talks to the CEO of ExploitShield to find out more about what is meant by "application shielding" technology and how it fits in with other security mechanisms.
Posted by Dominic Vogel | November 13, 2012, 6:00 AM PST
-
The convergence of biological and computer viruses
The difference between a biological virus and a computer virus is blurring. Learn how a researcher infected himself with a computer virus.
Posted by Michael Kassner | November 9, 2012, 5:49 AM PST | Latest comment by hanekwj
-
Analysis of a targeted cyber attack
Patrick Lambert highlights an example of a targeted cyber attack and points out what should be learned about analysis and disclosure in the event your organization has to deal with something similar.
Posted by Patrick Lambert | November 8, 2012, 6:15 AM PST
-
Short and pithy IT security tips for users
Dominic Vogel came up with 10 short security tips for users that he thinks will do the most good without overwhelming them with too much information.
Posted by Dominic Vogel | November 6, 2012, 6:00 AM PST | Latest comment by Neon Samurai
-
List open ports and listening services
You should turn off any services you don't actually need so that they will not become avenues of attack for security threats. Different systems will have different services running by default,...
Posted by Chad Perrin | April 15, 2008, 8:47 PM PDT | Latest comment by jackhard
-
Battling the Google Redirect virus
Consultant Bob Eisenhardt recounts his frustrating experience trying to track down and get rid of a client's search-redirect virus. Here's how he finally ditched it.
Posted by Bob Eisenhardt | January 2, 2013, 10:56 AM PST | Latest comment by Jane3344
-
BGP and Internet security: Is it better to be lucky or good?
Does "it's not a problem until it actually happens" apply to Internet security? Michael P. Kassner interviews a networking expert who's wondering about the same thing.
Posted by Michael Kassner | June 10, 2013, 9:11 AM PDT | Latest comment by wdewey@...
-
DropSmack: Using Dropbox to steal files and deliver malware
Michael P. Kassner interviews a digital forensic scientist who uses Dropbox to compromise targeted networks -- something the bad guys probably figured out as well.
Posted by Michael Kassner | April 15, 2013, 7:46 AM PDT | Latest comment by Michael Kassner
-
New Android malware should be wake-up call for security admins
Security firm Kaspersky reported on a new malware threat that it calls the most sophisticated it has seen in targeting Android phones.
Posted by Patrick Lambert | June 12, 2013, 10:29 AM PDT | Latest comment by Michael Kassner
-
The anatomy of a phishing operation
There are far better things than being phished, like writing about how not to get phished. Michael P. Kassner reviews a research paper that provides amazing insight into a successful phishing...
Posted by Michael Kassner | June 3, 2013, 7:04 AM PDT | Latest comment by JCitizen
-
How to spoof a MAC address
MAC address filtering for wireless networking isn't real "security". Anyone who pays any attention to current trends in wireless security at all should know that MAC filtering is less effective...
Posted by Chad Perrin | January 22, 2008, 1:28 PM PST | Latest comment by Doug Vitale
-
Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works
Strongbox was Aaron Swartz's final project. Michael P. Kassner explains why The New Yorker requested a way to keep sources and their information secret.
Posted by Michael Kassner | May 20, 2013, 7:17 AM PDT | Latest comment by tylerpitchford
-
The basics of using a proxy server for privacy and security
Patrick Lambert goes over the basics of how proxy servers work and why they are used to add security and privacy.
Posted by Patrick Lambert | December 5, 2012, 6:30 AM PST | Latest comment by Tony Hopkinson
-
BoxCryptor vs. DropSmack: The battle to secure Dropbox
Can DropSmack malware be stopped? Michael P. Kassner asks the creators of BoxCryptor if it is up to the task of securing the Dropbox file-synchronization service.
Posted by Michael Kassner | April 29, 2013, 10:30 AM PDT | Latest comment by Michael Kassner
-
Virtualizing apps could be the bridge over the BYOD security gap
Allowing BYOD has unfavorable implications for both the company and employees. Michael P. Kassner explores what businesses are doing to mitigate the risk.
Posted by Michael Kassner | May 28, 2013, 6:33 AM PDT | Latest comment by Michael Kassner
-
How to successfully implement the principle of least privilege
Least privilege is a core security principle, but it's one that often meets with resistance by users. Here are tips for how to implement it and get the point across to others.
Posted by Dominic Vogel | May 29, 2013, 9:27 AM PDT | Latest comment by o_p_i
-
DARPA's Plan X and the future of the U.S. cyber defense infrastructure
Plan X sounds like a summer sci-fi movie, but it's actually one of DARPA's latest projects, aimed at improving the nation's defense of critical infrastructure targets.
Posted by Patrick Lambert | June 4, 2013, 5:30 AM PDT
-
Cloud-service contracts and data protection: Unintended consequences
There are things your cloud-service (Facebook, Amazon, Google, Dropbox, etc.) contracts aren't telling you. Michael P. Kassner interviews an attorney concerned about what's not being said.
Posted by Michael Kassner | May 13, 2013, 11:52 AM PDT | Latest comment by Michael Kassner
-
DDoS attack methods and how to prevent or mitigate them
Patrick Lambert covers the various methods attackers use to launch distributed denial of service attacks, and the precautions you can take to prevent or at least, mitigate these types of events.
Posted by Patrick Lambert | October 15, 2012, 11:24 AM PDT
-
Is uncovering digital vulnerabilities doing more harm than good?
A noted virtual-reality technologist and author views "security through obscurity" as the only true way security can exist. Michael P. Kassner looks at what this uniquely divergent viewpoint means.
Posted by Michael Kassner | March 25, 2013, 8:48 AM PDT | Latest comment by mla_ca520@...
-
Dropbox: Convenient? Absolutely, but is it secure?
A potential security lapse and possibly misleading statements are plaguing Dropbox, a hugely popular file-syncing app. What are the issues and is concern justified?
Posted by Michael Kassner | June 13, 2011, 8:03 AM PDT | Latest comment by kprivigyi@...
-
Use PuTTY as a secure proxy on Windows
Last month, I wrote about using OpenSSH as a secure Web proxy on UNIX and Linux systems. This time, I'll show you how to do the same thing on Microsoft Windows using PuTTY -- probably the single...
Posted by Chad Perrin | March 10, 2008, 4:30 PM PDT | Latest comment by abaabaa
-
The FBI locked your computer? Watch out for new spins on ransomware
The FBI locks your computer. Can they do that? Or is it fake? How does one know? Michael Kassner asks an expert for help with the latest forms of ransomware.
Posted by Michael Kassner | November 15, 2012, 7:18 AM PST | Latest comment by JCitizen
-
10 services to turn off in MS Windows XP
As I pointed out on 19 October, in point number four of the article 10 security tips for all general-purposes OSes, an important step in the process of securing your system is to shut down...
Posted by Chad Perrin | November 7, 2007, 10:02 AM PST | Latest comment by JonB2008

































