Posts
In God we trust. All others must bring data.
RLRAA - Real Life Risk Assessment Acronyms
All the following newly-minted risk assessment types have been inspired by actual situations. Hopefully you get to stick to just the proper OCTAVE/FAIR/NIST/etc. ones where you…
A Fully Operational OS X dbClone
The app can now backup/restore of local config, clone dropbox configs to a URL/file and also impersonate a captured Dropbox…
dbClone "hack" for OS X
Moloch built a Windows & Linux impersonation/cloning utility in Python that was/is meant to be used from a USB/external volume. The utility can save the cloned host id to a local file and also has the capability to use a simple HTTP GET…
"Flatten" HTML Content (i.e strip tags) in Cocoa/Objective-C [UPDATED] [BUG-FIX]
One of my most popular blog posts — 24,000 reads — in the old, co-mingled site was a short snippet on how to strip HTML tags from a block of content in Objective-C. It's been used by many-an-iOS developer (which was the original…
Checkboxes Fail To Defend Maine Department of Conservation Against Attacks
I tweeted a quick note about the 2010 Maine Department of Conservation state park pass ordering system breach . The brief AP story indicated that the breach itself was caused by a malware infection on systems at their SasS provider…
"Repairing" Strict Transport Security in Chrome on OS X
One of my subdomains is for mail and I was using an easy DNS hack to point it to my hosted Gmail setup (just create a CNAME pointing to ghs.google.com ). This stopped working for some folks this week and I've had no time to debug exactly…
Crossroad of ERM and the Parallels to IRM
I was reviewing the - er - highlights? - from the ninth ERM Symposium in Chicago over at Riskviews this morning and was intrigued by some of the parallels to the current situation in enterprise security risk management (the ERM symposium…
Remote Assistance/Information Gathering Aid - SupportDetails
I'm putting together a computer & online safety presentation for an upcoming talk at a senior center in Portsmouth (NH) and came across Support Details in my information hunting trek. This site makes it dirt simple to get basic information…
Behind The Mask : Supporting The New CIO Personas
This morning, @joshcorman linked to an article in the Harvard Business Review " The Conversation " blog that put forth the author's view of The Four Personas of the Next-Genereation CIO . The term persona is very Jungian and literally…
Micropwns :: Risk Microprobabilities for Infosec?
I had not heard the term micromort prior to listening to David Spiegelhalter's Do Lecture and the concept of it really stuck in my (albeit thick) head all…