Author Archive for A. Ely

01
Jun

Securing Data OffShore

By A. Ely 0 Comments
Categories: a. ely and security

I recently wrote an article for InformationWeek, How To Assess Offshore Data Security. You should read it, it is a good piece. Of course I am biased.

There are a few points I want to add that did not fit directly into the article. These points apply to all infosec programs, so even if you don’t care about offshore security keep reading.
Continue reading ‘Securing Data OffShore’

26
Aug

REVIEW: Summercon 2007

By A. Ely 0 Comments
Categories: a. ely, briefs, experience and review

For those not familiar with Summercon, it is "a strong tradition of last minute disorganized last-minute planning".

Continue reading ‘REVIEW: Summercon 2007′

24
Aug

DISCLOSURE: XSS Fun

By A. Ely 2 Comments
Categories: a. ely, security and vulnerability

If we are going to release security flaws which might lead us into an industry shakedown, we may as well go for the trifecta.

Continue reading ‘DISCLOSURE: XSS Fun’

July 2008
S M T W T F S
« Jun    
 12345
6789101112
13141516171819
20212223242526
2728293031  

Months

Recent Entries

Worth Reading

    robert hansen [rsnake] (sectheory)

  • XSSFilter Released - You may have already seen the news about the new XSSFilter in IE8.0 but I wanted to echo it here as well, because it’s a pretty major new release. It does a great job of preventing most of the
    Read more...  


    • chris eng, chris wysopal [weldpond] &
    christien rioux [dildog] (veracode)

  • The Government?s Top Hackers? - Popular Mechanics recently published an article about the NSA Red Team, which caught my interest, having been a part of that organization for a short stint back in early 2000. The article does a
    Read more...  


    • amrit williams

  • AV Industry on the Run - All too accurate cartoon from Ikarus Security Software, brought to my attention from Dancho Dankev (here), who has become one of my favorite bloggers to read.
    Read more...  


    • dave goldsmith, jeremy rauch &
    thomas ptacek [matasano chargen]

  • CitySec Updates And Now More Ways To Stalk Us! - STLSec. Shawn @ Agurasec yelled at me for not letting everyone know that St. Louis has an active CitySec meetup: The next STLSec is July 10 @ the Fox and Hound. Be there or be square. We had a
    Read more...  


    • bruce schneier [bt]

  • Friday Squid Blogging: Giant Squid Found off Santa Cruz Coast - It's twenty-five feet long, with tenticles the size of human legs....
    Read more...  


    • spacerogue

  • CitiBank Card Numbers and PINS Stolen in Server Breach - Many years ago, (like ten or more) there was a major US bank (BoA, CitiBank I don’t remember) that had a major security breach. I don’t remember all the details, and Google has been less
    Read more...  


    • dino dai zovi

  • ARDAgent.app Vulnerability Analysis - Apple recently released Mac OS X 10.5.4 with accompanying security updates for 25 vulnerabilities.  Notably absent, however, is a fix for the recently brouhaha’d ARDAgent.app local privilege
    Read more...  


Blogroll