Managing credentials with Counterpane's Password Safe- May 18, 2002 ...http://weblog.infoworld.com/udell/categories/security/2002/05/18.html#a251 Security, insurance, and hard realities- May 16, 2002 Here are some notes from Bruce Schneier's talk. Hard, cold realities. Microsoft and its peers don't care about security, he argues, because it's not rational for them to do so. As businesses, they shouldn't, because they're not liable for their practices. Schneier is running out of options, he says, and what he's left with is a two-pronged strategy. One, require businesses to use insurance to manage risk, just like businesses use it to manage all other risks. Two, beef up prosecution of...http://weblog.infoworld.com/udell/categories/security/2002/05/15.html#a242 PKI: no silver bullet, but not worthless either- May 15, 2002 John Robb's comment -- certification isn't worth doody -- overstates the case. Despite exploitable flaws in the PKISSL infrastructure, I would rather transact business with a company that has identified itself to some third party than with a company that hasn't. ...http://weblog.infoworld.com/udell/categories/security/2002/05/15.html#a240 PKI and SSL: house of cards- May 15, 2002 Richard Forno, chief security officer for ShadowLogic, takes a dim view of the PKI industry. "Digital trust is a slick marketing tool put out by the PKI industry. DoD wants smartcards with certs by 2004. What's the value of that I don't know. They don't know." ...http://weblog.infoworld.com/udell/categories/security/2002/05/14.html#a239 |