InfoSecPodcast.com

I was looking for something tonight and clicked a link to a page on Whitedust Security’s news site, Whitedust.net. When I clicked on the link I got a page with only this:

14 August 2007 - 23:58 GMT

With the industry and those in it so seemingly hostile to Whitedust, and
pure apathy from anyone who thinks otherwise. Why bother. This site is
now closed permanently. It’s staff have abandoned the scene and the industry
for real world projects - for good, you won’t be seeing us again. You “Won”.

Good luck out there. You’ll need it.

-The Staff

Hoax, hack or real? I have not noticed anything about them closing down. Anybody know more about it?

–Chris

Technorati Tags: whitedust security, whitedust.net

SIEM / IPS vendor NitroSecurity has filed for an IPO according to this article in Mass High Tech.

It is good to see something you had a hand in be successful. I will be watching this one closely.

–Chris

Technorati Tags: NitroSecurity, IPO

I experienced first hand the IPS hype cycle working for a vendor, from early commercial products in 2003 to more mainstream adoption in 2006. My NAC vendor experience was shorter but I still was there for the big hype late last year and early this year. Was there a hype for Data Leak Prevention solutions like Vontu, Code Green Networks, Reconnex and GTB? I remember seeing several DLP vendors at RSA this year.

From a vendor standpoint (where I am now), I am seeing a big jump in awareness of DLP technology in our customer base. Granted we focus on the mid-market….there may be even more awareness in the Fortune 1000 and up. The sales are starting to trickle in for this technology as well.

We are also seeing M&A activity in this space. RSA recently acquired Tablus. This is a natural extension given the information life cycle management offerings that EMC (RSA’s parent company) is selling.

So my question remains, Is DLP the next big security technology? Will it follow in the footsteps of IPS and NAC?

–Chris

Technorati Tags: Data Leak Prevention, DLP, Vontu, Code Green, Reconnex, GTB

I’m working on a new layout / theme. I’ve found a couple bugs in the CSS that affect the layout so you may see some strange behavior until things are fixed.

–Chris

A friend of mine, Jake, recently started blogging and stumbled across blog-tagging so he tags me. I managed to dodge all of the tagging that went around with my fellow security bloggers (Mike F, Mike R, Alan, Mitchell). I am going to cheat a little. Since practically every blogger I know has been tagged I’ll pass on tagging anyone else.

1. I like to restore old cars. Anything pre-1970 General Motors with a big block gets precedence. Shortly after high school I bought a rusted out 1970 Buick GSX with a 4 speed. I never finished the car. It had to be sold when I sold my house and went back to college. I really miss that car. My next project is a little different. It is a 1972 Datsun 240z with low mileage.

2. I wanted to be a Navy SEAL. My hopes of that were put to rest when I attended a mini BUD/S camp. It was a 3 day course and I made it 2 days and quit. I didn’t have what it takes and I knew it at that point. The men who make it through the real course have an incredible mental toughness. It’s nothing short of amazing what a team of these motivated individuals can accomplish. I did eventually join the Navy as an Intelligence Specialist.

3. My satellite radio is set to Hair Nation pretty much 24×7. Having lived through the likes of Whitesnake, Ratt, Quiet Riot, Extreme and Skid Row I still like a lot of the music. There sure was a lot of crappy bands but there was some real talent as well. My favorite band of that era is still making good music. Tesla has a new album out and is on tour. I have tickets to see them at the Hampton Beach Casino on the 30th. Where are my parachute pants and Vuarnet’s???

4. I used to shoot tactical 3 gun matches. Since shooting can be an expensive sport I was in the “Production” class. This means that my guns were not modified, i.e. affordable. In the early nineties my friend Dave (who is now a cop)  and I spent a good portion of our paychecks at the range. Here is a good video of someone shooting a 3 gun match. The last few seconds of the video are where the men are separated from the boys, so to speak. Engaging multiple targets with a handgun while in motion can be a humbling exercise for even experienced shooters. It ain’t as easy as it looks on TV boys and girls.

5. My parents gave me my first computer ( a Tandy Color Computer) in 1982. It used a cassette recorder for storage and hooked to the TV like an Atari. I played with it for a year or so and didn’t pick up another computer until 1990. That is one of the things I regret, skipping almost 8 years of computer related technology. I probably would have been getting myself in trouble anyway.

–Chris

I saw this article on Network World that talks about Illinois’ PKI program and what steps they are taking to keep it moving forward. As someone who worked in the PKI space for a while it is interesting to see PKI still in action, and moving forward.  Public Key Cryptography is a great technology that helps solve many real world problems like privacy and non-repudiation. The problem is that PKI (the implementation of Public Key Crypto) for the most part was / is a disaster.

Gone are the days of $2mm PKI pilot programs, ala 1999.  Remember those Mike???

–Chris

Technorati Tags: PKI, cryptography, Illinois

I read today that KisMAC, the wireless sniffer for Mac’s, is no longer being developed in Germany. The reason behind this is apparently some changes in German law the prohibits the exporting of security software. The home page does  talk about the project moving to the Netherlands to avoid such legal issues.

–Chris

Technorati Tags: kismac, wireless, Germany

A couple friends contacted me recently looking for people to fill open security related positions with their companies. To make things easier and reach a larger audience I have setup a page on my blog with open security positions. You can find it here: www.infosecpodcast.com/jobs

If you have a position you would like to fill I will post it for free. There is one catch, it has to be in the same format / layout as the ones I have posted. I have even provided a page showing the layout I use here. I want to be able yo cut and paste your job position into a blank page and post it. If I have to do any re-working of your ad I’ll just send it back to you. Sorry but I just don’t have the time to be editing job posts.

If you are interested in one of the positions listed send an email with your resume / cv to jobs@infosecpodcast.com

–Chris

Technorati Tags: jobs, employment, security positions