Cluelessness abounds

So yesterday I received a rather interesting email. Subject: “INFOSEC Scholarships & Fellowships for PhD or MS + Free CISSP Exam Prep Events.” Hm, I didn’t know that “information security” suddenly became an all-caps acronym. How come no one asks me first about these things? Anyway, it purports to come from the University of Fairfax,…

2

New column – debunking security myths

There is a lot at stake in security configuration guidance. First, it is easy to understand why people are clamoring for it. Everyone can see the benefit in turning on some setting and blocking an attack. In some environments, doing so is not even an option. A system must be configured in accordance with some…