- Follow this blog:
- RSS
- Email Alert
IT Security
Selena Frye
TechRepublic Staff
Selena Frye

-
eReaders: They're reading us while we read them
Your Kindle, therefore Amazon, knows more about your reading habits than you do. Is that something you want? Michael Kassner looks at eReaders and privacy issues.
Posted by Michael Kassner | December 3, 2012, 8:33 AM PST | Latest comment by MikeMJ
-
When doing 'something' isn't better than 'nothing': Risk assessment steps
IBM security pro Jack Danahy warns that some incomplete measures may be more dangerous than doing nothing about security threats. Here are his recommendations for real risk assessment.
Posted by Guest Contributor | November 28, 2012, 8:35 AM PST
-
How Cyanogen lost their online presence: Don't let it happen to your business
Patrick Lambert sounds a warning about protecting your web infrastructure from insider threats. Here's what happened to CyanogenMod.
Posted by Patrick Lambert | November 27, 2012, 5:30 AM PST | Latest comment by feral@...
-
Proposed amendments to ECPA would make Orwell squirm
George Orwell wrote his famous book about Big Brother in 1948. What would he think about the Electronic Communications Privacy Act? Changes to the act are being voted on this week in the U.S. Senate.
Posted by Michael Kassner | November 26, 2012, 7:59 AM PST | Latest comment by HAL 9000
-
Google reports .govs requesting lots of user information
According to Google's latest Transparency Report, government requests for user information and requests to remove content have increased. Help Michael P. Kassner figure out what that means.
Posted by Michael Kassner | November 21, 2012, 10:12 AM PST | Latest comment by bikingbill
-
Infographic: Holiday shopping safety
Remind your organization's users to remain security conscious during the holiday shopping season with this infographic.
Posted by Selena Frye | November 21, 2012, 9:00 AM PST
-
Making sense of computer forensics
Alfonso Barreiro goes over the basics of computer forensics that all IT pros should know. Preparing your organization for the possibility of a legal investigation should be part of any security...
Posted by Alfonso Barreiro | November 20, 2012, 5:30 AM PST
-
The FBI locked your computer? Watch out for new spins on ransomware
The FBI locks your computer. Can they do that? Or is it fake? How does one know? Michael Kassner asks an expert for help with the latest forms of ransomware.
Posted by Michael Kassner | November 15, 2012, 7:18 AM PST | Latest comment by JCitizen
-
How to sell security to the C-Level
In this guest blog post, Justin Strong lays out the business case that IT needs to take to executives when investments are needed for security tools and policies.
Posted by Guest Contributor | November 13, 2012, 10:44 AM PST
-
Application shielding: Exploring ExploitShield
Dominic Vogel talks to the CEO of ExploitShield to find out more about what is meant by "application shielding" technology and how it fits in with other security mechanisms.
Posted by Dominic Vogel | November 13, 2012, 6:00 AM PST
-
The convergence of biological and computer viruses
The difference between a biological virus and a computer virus is blurring. Learn how a researcher infected himself with a computer virus.
Posted by Michael Kassner | November 9, 2012, 5:49 AM PST | Latest comment by hanekwj
-
Analysis of a targeted cyber attack
Patrick Lambert highlights an example of a targeted cyber attack and points out what should be learned about analysis and disclosure in the event your organization has to deal with something similar.
Posted by Patrick Lambert | November 8, 2012, 6:15 AM PST
-
Short and pithy IT security tips for users
Dominic Vogel came up with 10 short security tips for users that he thinks will do the most good without overwhelming them with too much information.
Posted by Dominic Vogel | November 6, 2012, 6:00 AM PST | Latest comment by Neon Samurai
-
BYOD: Risks, rewards, and how to deal with it
Patrick Lambert revisits some of the basic precautions that need to be taken to deal with the proliferation of employee-owned devices in the workplace.
Posted by Patrick Lambert | November 1, 2012, 9:00 AM PDT
-
Unencrypted bar codes on airline boarding-passes pose threat
Unencrypted boarding-pass barcodes allow those so inclined to find out if they are "Pre-Checked" or not. Isn't the next logical step to see if the bar code can be tampered with?
Posted by Michael Kassner | October 31, 2012, 7:04 AM PDT | Latest comment by Michael Kassner
-
What you should know about Windows 8 security features
Alfonso Barreiro takes a detailed look at all the security features available in each edition of Windows 8, including what's brand new, improved, and carried over from previous versions.
Posted by Alfonso Barreiro | October 25, 2012, 6:00 AM PDT | Latest comment by Deadly Ernest
-
Apple allows app developers to resume tracking with iOS 6
Apple was burnt once by allowing app developers to track users via the UDID. Will they get burnt again by allowing app developers to track using Apple's brand-new IDFA?
Posted by Michael Kassner | October 24, 2012, 12:02 PM PDT | Latest comment by vegesm
-
How likely is a cyber 'Pearl Harbor'?
Patrick Lambert considers a recent speech by U.S. Defense Secretary Leon Panetta warning about cyberwar threats.
Posted by Patrick Lambert | October 24, 2012, 9:46 AM PDT | Latest comment by ccasebolt19
-
Check out the HoneyNet Project's real-time attack visualization map
The HoneyNet Project has come up with this real-time attack visualization map that tracks attacks against honeypots set up throughout the world.
Posted by Selena Frye | October 23, 2012, 1:50 PM PDT
-
Next-generation firewalls: Security without compromising performance
Patrick Sweeney makes the case for next-generation firewalls (NGFWs) that provide security without killing network performance.
Posted by Guest Contributor | October 18, 2012, 6:00 AM PDT | Latest comment by techracer7
-
List open ports and listening services
You should turn off any services you don't actually need so that they will not become avenues of attack for security threats. Different systems will have different services running by default,...
Posted by Chad Perrin | April 15, 2008, 8:47 PM PDT | Latest comment by jackhard
-
Hackers: From innocent curiosity to illegal activity
Researchers asked why talented youth skilled in "computerese" evolve into criminal hackers. Michael P. Kassner explains their unexpected results.
Posted by Michael Kassner | May 6, 2013, 7:59 AM PDT | Latest comment by mattohare@...
-
DropSmack: Using Dropbox to steal files and deliver malware
Michael P. Kassner interviews a digital forensic scientist who uses Dropbox to compromise targeted networks -- something the bad guys probably figured out as well.
Posted by Michael Kassner | April 15, 2013, 7:46 AM PDT | Latest comment by Michael Kassner
-
Cloud-service contracts and data protection: Unintended consequences
There are things your cloud-service (Facebook, Amazon, Google, Dropbox, etc.) contracts aren't telling you. Michael P. Kassner interviews an attorney concerned about what's not being said.
Posted by Michael Kassner | May 13, 2013, 11:52 AM PDT | Latest comment by Michael Kassner
-
Battling the Google Redirect virus
Consultant Bob Eisenhardt recounts his frustrating experience trying to track down and get rid of a client's search-redirect virus. Here's how he finally ditched it.
Posted by Bob Eisenhardt | January 2, 2013, 10:56 AM PST | Latest comment by Jane3344
-
Understanding what motivates Chinese hackers
Michael P. Kassner, with the help of a noted academic and author, looks at what motivates Chinese hackers. It may not be what you think.
Posted by Michael Kassner | April 22, 2013, 10:16 AM PDT | Latest comment by HAL 9000
-
BoxCryptor vs. DropSmack: The battle to secure Dropbox
Can DropSmack malware be stopped? Michael P. Kassner asks the creators of BoxCryptor if it is up to the task of securing the Dropbox file-synchronization service.
Posted by Michael Kassner | April 29, 2013, 10:30 AM PDT | Latest comment by Michael Kassner
-
How to spoof a MAC address
MAC address filtering for wireless networking isn't real "security". Anyone who pays any attention to current trends in wireless security at all should know that MAC filtering is less effective...
Posted by Chad Perrin | January 22, 2008, 1:28 PM PST | Latest comment by Doug Vitale
-
Running the gauntlet: Tips for achieving your CISSP
One of the most highly regarded security certifications is the CISSP. Dominic Vogel offers these nine tips for becoming certified based on his own experience.
Posted by Dominic Vogel | April 23, 2013, 5:30 AM PDT | Latest comment by JCitizen
-
The basics of using a proxy server for privacy and security
Patrick Lambert goes over the basics of how proxy servers work and why they are used to add security and privacy.
Posted by Patrick Lambert | December 5, 2012, 6:30 AM PST | Latest comment by Tony Hopkinson
-
DDoS attack methods and how to prevent or mitigate them
Patrick Lambert covers the various methods attackers use to launch distributed denial of service attacks, and the precautions you can take to prevent or at least, mitigate these types of events.
Posted by Patrick Lambert | October 15, 2012, 11:24 AM PDT
-
Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works
Strongbox was Aaron Swartz's final project. Michael P. Kassner explains why The New Yorker requested a way to keep sources and their information secret.
Posted by Michael Kassner | May 20, 2013, 7:17 AM PDT | Latest comment by tylerpitchford
-
Software-Defined Networking: How it affects network security
SDN technology is set to rewrite the book of networking. Michael P. Kassner looks into how SDN will improve security, and where it's vulnerable.
Posted by Michael Kassner | April 8, 2013, 7:13 AM PDT | Latest comment by Michael Kassner
-
Use PuTTY as a secure proxy on Windows
Last month, I wrote about using OpenSSH as a secure Web proxy on UNIX and Linux systems. This time, I'll show you how to do the same thing on Microsoft Windows using PuTTY -- probably the single...
Posted by Chad Perrin | March 10, 2008, 4:30 PM PDT | Latest comment by abaabaa
-
Dropbox: Convenient? Absolutely, but is it secure?
A potential security lapse and possibly misleading statements are plaguing Dropbox, a hugely popular file-syncing app. What are the issues and is concern justified?
Posted by Michael Kassner | June 13, 2011, 8:03 AM PDT | Latest comment by kprivigyi@...
-
The future of IT security compliance: 201 CMR 17.00
Why should you be concerned about a security rule that is part of the State law of Massachusetts -- especially if you aren't in business there? Donovan Colbert explains how compliance regulations...
Posted by Donovan Colbert | April 30, 2013, 6:00 AM PDT | Latest comment by dcolbert@...
-
Security lessons from the 2013 Verizon Data Breach Report
Verizon's latest report on data breach statistics offers security pros a guide to the most persistent threats and where attention should be focused to defend against them.
Posted by Alfonso Barreiro | May 15, 2013, 6:00 AM PDT
-
Hacker vs. cracker
The word "hacker" gets used in a pejorative sense by journalists an awful lot. Some people think this is perfectly reasonable; others find it offensive, and recommend an alternative term for that...
Posted by Chad Perrin | April 17, 2009, 1:20 PM PDT | Latest comment by wizard57m-cnet
-
New McAfee patent hints at a more walled-off online world
A McAfee patent hints at content filtering at the user level in order to block sites that offer pirated content.
Posted by Patrick Lambert | May 3, 2013, 9:00 AM PDT | Latest comment by public_domain
-
10 services to turn off in MS Windows XP
As I pointed out on 19 October, in point number four of the article 10 security tips for all general-purposes OSes, an important step in the process of securing your system is to shut down...
Posted by Chad Perrin | November 7, 2007, 10:02 AM PST | Latest comment by JonB2008

































