Security For All

Practical security analysis and commentary on enterprise security, privacy, and industry trends.

• My Christmas Vacation from Hell, a Cautionary Tale. | Security For All
  January 26, 2013
• Why are you still at Facebook? | Security For All
  July 7, 2012
• Captain X-Ploit: Another Crack in the Wall | Security For All
  April 6, 2012
• Thanks for all the phishing in 2011 | Security For All
  November 24, 2011
• Why I Left Facebook
  After years of increasingly uncomfortable compromises, I finally deleted my Facebook account. Here is what pushed me over the edge.
  July 10, 2011
• Thanks for all the phishing in 2010 « Security For All
  November 24, 2010
• Helping Your Online Shadow Rest in Peace
  What happens to your digital footprint when you die? Estate planning has not caught up with the reality of our online lives.
  November 19, 2010
• Social Network Privacy: Officially an Oxymoron
  Facebook's latest privacy changes confirm what many of us suspected - the concept of privacy on social networks is fundamentally broken.
  November 16, 2010
• E-Discovery Is Hard
  Electronic discovery in litigation has become a massive technical and financial burden - and most organizations are still not prepared for it.
  August 10, 2010
• Moving On
  After four years, I am leaving my current role for a new opportunity. Some reflections on the transition.
  June 4, 2009
• Strange Week for Microsoft
  Between Conficker cleanup, an unusually large Patch Tuesday, and some curious product announcements, Microsoft had quite a week.
  April 14, 2009
• Computers Everywhere
  Embedded computing in critical infrastructure is expanding the attack surface in ways most security programs are not prepared to address.
  April 7, 2009
• Technology Generation Gap
  The gap between how younger employees use technology and how enterprise IT policies govern it is creating real security tensions.
  January 26, 2009
• Sam Spade, CISSP
  Michigan now requires digital forensic investigators to hold a PI license or CISSP. Does certification really equal competence in security?
  December 6, 2008
• Wherefore Art Thou, TCG IF-MAP?
  TCG's IF-MAP protocol promises to unite NAC vendors under a single metadata standard - but will the industry actually adopt it?
  November 11, 2008
• Great Stuff That Never Happened
  A look back at security technologies and standards that promised to change the industry but never achieved meaningful adoption.
  September 27, 2008
• I So Want to Be a Forrester Analyst
  Forrester analysts wield enormous influence over enterprise security purchasing. What would it be like to have that kind of power?
  September 24, 2008
• NAC: Answering the Right Questions
  Network Access Control promises to solve enterprise security problems, but only if you are asking the right questions in the first place.
  September 6, 2008