security

Microsoft (and others) Just Don't Get It

Microsoft apparently doesn't like to listen and then dialog with their most sophisticated users when it comes to security issues, to name just one way they are failing as a business in the Information Age. A security vulnerability in SQL Server, Microsoft's premier database management application which competes with products like Oracle, MySQL, and others was discovered and reported in the linked article.  In a nutshell, this security vulnerability allows a user with administrative priveledges to SQL Server to access other user's passwords, but not without some "hacking" to do so.  In any case, Microsoft has refused to fix the problem because they don't care about their users.

 

Balance Privacy with Transparency

I asked the question, "How much personal information should we allow online?" in a previous post titled, Online Personal Information - How Much Is Too Much?. This question has been weighing heavily on my mind this entire week, so I have decided to expand on some of the ideas that I touched on in that previous post, in this article. I will explore the implications of online privacy, transparency, redundancy, accountability, and risks in this article. You will see that there are benefits to walking a tight line of balance between complete online transparency, and the far more prevalant ultra-privacy that our current American society expects in everyday life.

Yubico - A great new way to handle our online world

Yubico is a brand new start-up company out of Sweden that I just found out about through listening to the weekly podcast, Security Now.  Steve Gibson relates the story of making a startling find at the RSA Conference 2008 when he came across the CEO, founder, and inventor of the device that Yubico has created to revolutionize pretty much every kind of computer transaction that requires a password.

Syndicate content