Knowledge.

Backblog > Industry

By Mark Stanislav

Another Certificate Authority (CA) Blunder; No Hack Required

The Certificate Authority (CA) system that currently handles how we publicly interact 'securely' with web sites, mail servers, and other services around the world can't catch a break. In the latest black-eye, an Entrust bulletin speaks about how a... Read more

November 4, 2011 Browsers, Compliance, Cryptography, Industry, Policy
By Mark Stanislav

Mitigating the Risks of Poor Web Programming

If you weren't paying attention during the early Summer months this year, you may have missed the overwhelming rate at which web sites were being publicly compromised and mocked. Often, these sites were prone to compromise due to SQL injection and... Read more

October 18, 2011 Application Security, Industry, Policy
By Mark Stanislav

Cloud Should Not Be Spelt FUD

Fear, Uncertainty, and Doubt (FUD) are sadly a corner-stone of those who don't know enough to know better, or those that just don't care if they are wrong. When it comes to information technology, FUD is alive and well in 'cloud computing', at least... Read more

October 13, 2011 Cloud Computing, Incident Response, Industry
By Mark Stanislav

Security Folks on Twitter Who Deserve Attention

This is a first round of trying to provide community awareness of digital and social media that deserves a look (or listen). Today's post is a somewhat verbose listing of folks on Twitter I've found valuable over the years in the field of... Read more

October 11, 2011 Community, Industry, Social Media