Tuesday, May 20, 2008

Data Breaches Mean More Than Bad Publicity

In this article from New York Law Journal, the author describes types of data losses that can occur, possible legal consequences, and calls the law firms to prepare their clients for the inevitable data breaches.

In the next post, I will describe the methodology that Top8 has developed to approach this problem.

Monday, May 19, 2008

Is this secure enough?

This Sunday outing had a crop of security questions. The first was at a Kroger store, where the essential id information was requested on the checkout receipt. On closer inspection, it was a credit card application. But it felt in the wrong place. How easily can a person fill all of this out and then lose it somewhere?

On the other hand, Chase bank did it just right. They scanned and printed a deposited check, and lo and behold "Part of the check image has been obscured for security reasons!". Good job Chase.
What is the advice? Often programmers ask for information just because they can, while in truth they do not need it. Today, one should start to collect as little information as possible, not as much.

litsupport summary for the week ending on 05/18/08

A lot of important and useful information is posted to litsupport each week. The following is a distilled summary, in the form of questions and answers.

Q. How to open ASCII TXT files that are about 2 GB per file?
A. Windows: UltraEdit(32) or TextPad, OS X try BBEdit, vim or emacs, AND your computer should better have at least 4 Gigs of RAM. It may also be that the files are not text but binary. Consider grep, sed, AWK, tr, cut, paste, sort, uniq, Perl and other text processing commands and tools of their ilk.

Q. Good FTP Software?
A. Filezilla, WS_FTP, Flash_FXP, CuteFTP, SmartFTP, CoreFTP, FireFTP for Firefox. BUT keep security and encryption in mind.

Q. Utility to provide word count and frequency.
A. dtSearch, DT Desktop.

Q. xcopy files to one destination folder?
A. copyrite (http://copyrite.dyndns.biz/), Upcopy from www.dmares.com - forensically good, robocopy, Upcopy, SafeCopy.

Q. View .pst files without Outlook?
A. QuickView Plus, Mail Examiner from Paraben.

Q. What is the future of Bates numbers?
A. They may be replaced by hashes, but this is debatable.

Q. Convert PDF to .doc?
A. pdfDocs with optional OCR Server, ScanSoft PDF Professional

This summary from the Litsupport Group postings created by the wonderful and talented members of the group has been culled by Mark Kerzner (mkerzner@top8.biz) and reviewed by Aline Bernstein (Abernstein@mwe.com).

Tuesday, May 13, 2008

A guide to cryptography in PHPH

Quite relevant

Moving your mother over to Linux

How Michael Reed moved HIS mother over to Linux, and she almost did not notice. A good practical guide includes advice on photo, movie, and user psychology.

Monday, May 5, 2008

Highly recommended security book

Security Engineering by Ross Anderson

Lots of downloadable chapters from the second edition, MP3, and complete first edition.

Friday, May 2, 2008

Elephant Cemetery = Security Risk









I like looking at elephant cemeteries, which are of course security risks if not properly disposed of. Why do poor elephants deserve this comparison?