ACLs don't scale, accountability does- August 28, 2002 On Monday I got to meet Jamie Lewis face-to-face for the first time, and we had a great talk about a lot of things. We're both looking forward to the upcoming Digital Identity Conference. Chatting about PingID and XNS, Jamie quipped that for longtime industry watchers like us, it becomes necessary to qualify acronyms with date ranges. So for example: XNS2000 versus XNS1975. ...http://weblog.infoworld.com/udell/categories/security/2002/08/28.html#a389 Telling stories about web services security- August 27, 2002 I spent yesterday in Boston at a joint W3COASIS Forum on Security Standards for Web Services, part of the XML Web Services One conference. (If you're going there this week, note that although the conference page says the event is at the Seaport Hotel across the street from Boston's World Trade Center, it is in fact at the WTC.) ...http://weblog.infoworld.com/udell/categories/security/2002/08/27.html#a388 "Sir, were there reasonable alternatives at the time"- August 14, 2002 Having recently found his voice, Ray Ozzie is also finding that he has a lot to say -- both on his his blog and elsewhere. In an article today on news.com (the decorated version is better), he concludes: ...http://weblog.infoworld.com/udell/categories/security/2002/08/14.html#a384 Patterns of cooperation without vulnerability- August 9, 2002 Collaxa's Edwin Khodabakchian (whom I have interviewed -- small world -- for an InfoWorld story on web services orchestration) is writing a blog that's a nice example (along with Ray Ozzie's) of how a tech exec can use this medium to project a persona, clarify a mission, and float ideas that may provoke useful reactions. ...http://weblog.infoworld.com/udell/categories/security/2002/08/09.html#a377 Homeland Insecurity- August 2, 2002 The September issue of the Atlantic Monthly has a remarkable special report called Homeland Insecurity (not yet excerpted online). It features none other than Bruce Schneier. I am delighted to see Schneier's philosophical transformation -- from crypto-infatuated fortress builder to pragmatic watchguard -- detailed in a mainstream magazine. People who would never have read Secrets and Lies will read this excellent article, and I hope will ponder Schneier's message: ...http://weblog.infoworld.com/udell/categories/security/2002/08/02.html#a362 |