Tag: infosec

Posted on

Weekly Wrap 61: Exhaustion in the forest

A weekly summary of what I’ve been doing elsewhere on the internets, two days late and without a picture. After the intensity of the previous three weeks, I’d predicted a slow-down, and here it is. I was simply exhausted last week, and spent a couple of days staring at the eucalypts from Rosella Cottage.

Last week also marked six months since I moved from Enmore. Living at Bunjaree Cottages was originally intended to be a temporary measure, or so I thought. I’ve ended up settling into the routine quite well, though I’ve found it impossible to save money for moving house. That said, I’m really not sure where I want to live now. But that’s a story for another time. Maybe later today.

Podcasts

  • Patch Monday episode 99, “When apps go wild: beyond the SOE”. Dr Paul Ashley from IBM’s Gold Coast Security Development Laboratory talks about their new technology that sniffs packets to identify applications, and Neil Readshaw, cloud security lead architect with IBM Global Services, talks about, erm, cloud security.

Articles

Media Appearances

  • On Thursday I appeared with Paul Wallbank on Phil Dobbie’s BTalk podcast, an episode called Google Plus, Inside Out. I got to spout my anti-Google stuff again.
  • Also on Thursday, I made a small appearance on Phil Dobbie’s Twisted Wire podcast. The episode was called The battle for mobile dominance, and if I remember correctly I gave some sort of opinion about Apple iOS versus Android versus Nokia.

Corporate Largesse

None. What is going on here?

Elsewhere

Most of my day-to-day observations are on my high-volume Twitter stream, and random photos and other observations turn up on my Posterous stream. The photos also appear on Flickr, where I eventually add geolocation data and tags.

Posted on

Patch Monday: When apps go wild: beyond the SOE

Businesses have lost control of the applications their employees are running in a process that’s been dubbed the consumerisation of the enterprise.

They use web-based tools like Facebook and Twitter and YouTube at home, they download any software they think will improve their lot, and expect to be able to do the same at work. Locking them into a standard operating environment (SOE) cramps their style.

At IBM’s Pulse 2011 event in Melbourne last week, which I attended as their guest, I spoke with Dr Paul Ashley, engineering manager at IBM’s Gold Coast Security Development Laboratory. He reckons the days of the SOE are pretty much over. His team been working on tools that can identify the applications users are running and spot any problems by looking at the network traffic they generate.

For this week’s Patch Monday podcast I also spoke with Neil Readshaw, cloud security lead architect with IBM Global Services. He says that over the last year or so, people started to understand the differences between public clouds, private clouds and hybrids, and what those differences can mean for security.

You can listen below. But it’s probably better for my stats if you listen at ZDNet Australia or subscribe to the RSS feed or subscribe in iTunes.

Please let me know what you think. Comments below. We accept audio comments too. Either Skype to stilgherrian or phone Sydney +61 2 8011 3733.

Posted on

Talking LulzSec/Anonymous vs PayPal on TripleJ’s Hack

On Wednesday afternoon, LulzSec and Anonymous joined forces to encourage people to boycott PayPal by withdrawing their money and closing their accounts.

The back story is that PayPal has cut off WikiLeaks’ account, meaning that people could no longer donate money to WikiLeaks via PayPal. Anonymous launched distributed denial of service (DDoS) attacks against PayPal. Last week the FBI and others arrested people alleged to have been responsible for those attacks. So this week, the boycott of PayPal.

The joint statement by LulzSec and Anonymous makes for interesting reading. It describes DDoS attacks as “ethical, modern cyber operations”. Such things are actually a criminal act, despite what Anonymous may imagine the law to be. “Law enforcement continues to push its ridiculous rules upon us,” they write, when it’s not law enforcement who makes the laws, but governments.

The call for the boycott was unfolding as Triple J’s current affairs program Hack was going to air, and I phoned in a report. Here’s the audio.

Podcast: Play in new window | Download (1.7MB)

I found it interesting that presenter Tom Tilley responded to my comment that DDoS is a crime by saying “Yeah I imagine there’d be people with lots of different points of view about what they’re doing and whether it’s indeed lawful.”. Personally I reckon the law in this is pretty clear. Pandering to their audience?

The audio is ©2011 Australian Broadcasting Corporation. It has been extracted from the full program audio [MP3].

Posted on

Visiting Melbourne for IBM’s Pulse 11

I’m heading to Melbourne this week to cover IBM’s Pulse 11 for ZDNet Australia. The event runs 27 to 28 July at the Crown Promenade, although I’ll be flying down late Tuesday afternoon and returning on Friday.

“Pulse is your premier event for accessing the solutions and expertise that can help your organisation transform the way it designs, delivers and manages business services,” says the promo material in a sentence remarkably free of concrete nouns. About eight pars in you’ll discover that it’s about things like managing cloud services and making sure your IT systems are secure and compliant with regulations.

I simply do not understand this corporate aversion to being specific.

It’s my first trip to Melbourne in about five years, so I’m looking forward to it. I’ll have a little free time on Thursday afternoon and evening, so do feel free to make suggestions.

I’m attending Pulse 11 as a guest of IBM.

Posted on

Weekly Wrap 59: Making paragraphs while the rain pours

A weekly summary of what I’ve been doing elsewhere on the internets. While Sydney dealt with its wettest July since 1950, I was at the Bunjaree Cottages in Wentworth Falls, writing and writing and writing and writing. And talking on the radio.

“Make hay while the sun shines,” goes the old saying. But for a writer, it’s about making paragraphs while the rain pours. Being stuck indoors with a magnificent view really helps.

Podcasts

Articles

Media Appearances

Corporate Largesse

None. But there’ll be plenty next week. I’ll tell you more about that later this morning.

Elsewhere

Most of my day-to-day observations are on my high-volume Twitter stream, and random photos and other observations turn up on my Posterous stream. The photos also appear on Flickr, where I eventually add geolocation data and tags.

[Photo: Potholes on Frenchmans Road, Wentworth Falls, photographed on 20 July 2011. This is a slightly modified version, here’s the original.]

Posted on

Talking Tasmanian goverment hack on ABC 936 Hobart

Yesterday the Tasmanian government was hit by a hacker.

Sp1d3r from the hacking crew S4t4n1c_s0uls got into a Debian Linux box and inserted his graphic into an email sent to state’s media.

I reported this for CSO Online.

S4t4n1c_s0uls has claimed responsibility for almost 100 website defacements this month, including sites in Brazil, Jamaica, China, India and the Philippines. Five Chinese government websites were hit, and one in the Philippines.

I spoke about the hack with Louise Saunders on ABC 936 Hobart, and here’s the audio.

Podcast: Play in new window | Download (1.9MB)

The audio is ©2011 Australian Broadcasting Corporation, but it hasn’t been posted on their website so here it is. In return, I reckon you might choose to listen to Louise Saunders’ drive program some time soon.