Kai Roer – Stuck in the lift with the Cynic
Posted by The Cynic in Interviews, Uncategorized on July 30, 2009

It’s been claimed from time to time that I actually sabotage lifts in order to ensure some face time with someone. But I put it down to just bad luck. A bit like how Bruce Willis in the Die Hard films always ends up at the wrong place at the wrong time.
Today, sharing my luck [...]
IronKey S200
Posted by The Cynic in Blog, Uncategorized on July 27, 2009
A few hours ago I was pondering what to write about. But that problem was solved when a friend asked if I’d written about the fantastically new and secure USB stick by Iron Key. The truth is that I’d forgotten about it so could only muster up a few Hugh Grant-esque “gosh” and “jollys”. [...]
Nathan Reynolds – Stuck in the lift with the cynic
Posted by The Cynic in Interviews, Uncategorized on July 22, 2009
Getting stuck in a lift with any stranger can be a daunting experience. Contrary to what many claim, there is no scientific evidence to prove that getting stuck in a lift with the Infosec Cynic causes any form of long term damage.
Recently, the Cynic found himself stuck in a lift with Nathan Reynolds, a [...]
1 giant step to improve security
Posted by The Cynic in Blog, Uncategorized on July 20, 2009
These days it’s pretty bad for a company when they lose their sensitive data and it’s even worse if they lose their customers data. Not a day goes past where some numpty doesn’t leave their laptop in the back of a taxi. Many solutions have been suggested, tried and implemented, often at great cost.
I’ve [...]
Is it easier to kill than lose data?
Posted by The Cynic in Blog, Uncategorized on July 16, 2009

According to the beeb an 84 year old man killed his wife whilst reversing his car in the driveway. There aren’t much details on the story, but apparently it wasn’t intentional and no, the man hadn’t been plucking up the courage all these years. It was simply tragic accident…
Contrast this to the corporate world, where [...]
Perception is Reality – not always
Posted by Another Cynic in Blog, Guest Column, Uncategorized on July 9, 2009
I recently decided to go out and upgrade my vehicle from a little panda to a monster XC90. I like to do my bit for the environment you see – and I don’t know about most of you, but I would be quite happy to not have to pay high energy bills to heat my [...]
A Million English Words and IT security
Posted by Calum Macleod in Guest Column, Uncategorized on July 8, 2009
Apparently we have hit the million word mark in English, according to some American organization that monitors such things. Now I know that most of you will probably be inclined to make some disparaging remark about Americans and the English language but it just goes to show that there’s probably about nine hundred and [...]
Road signs
Posted by The Cynic in Blog, Uncategorized on July 2, 2009
Whilst driving in London, one can’t help but notice that nearly every lamp post, every telegraph pole, every branch in every tree is plastered with instructions about what the motorist can or cannot do at that particular moment.
You’re on a red route so you have a sign, then another, and then another explaining exactly [...]
The cynics mailbox
Posted by The Cynic in Uncategorized on June 30, 2009
I remember watching some TV shows and at least once in a series they’d have a kind of ‘recap episode’. It will be one of those kinds of episodes where right in the beginning one of the characters, say Starsky gets knocked on the head and loses his memory. Hutch would then help him [...]
Fermat’s last theorem and the cynics first
Posted by Another Cynic in Blog, Guest Column, Uncategorized on June 28, 2009
I have always been impressed by the dedication of mathematicians to tirelessly push the boundaries of understanding and reasoning in both the abstract and real world. One famous problem that was recently solved (recently in the context of the history of mathematics) was Fermat’s Last Theorem (1637).
The Theroem states that that no three positive [...]
Referee’s, umpires and infosec
Posted by The Cynic in Blog, Uncategorized on June 21, 2009
I’m not really a big sports fan, yet whenever there is a world cup or championship of any sort, I’ll sometimes buy into the hype and watch some, if only so that I don’t come across as completely ignorant during those water-cooler conversations in the office.
Recently the 20-20 cricket world cup took place. Its [...]
8 things not to say to your Infosec guy
Posted by The Cynic in Fun, Uncategorized on June 18, 2009
You may not be an infosec person, but maybe you’ve worked with infosec people, or hired them or have them fix all your mistakes.
From experience and what I’ve gleaned from interactions, I’ve put together this list of things you should not say to your security consultant.
1.You’re a chick?
Just from the title of this list [...]
Sun Tzu: The art of war for infosec
Posted by The Cynic in Blog, Uncategorized on June 16, 2009

Sun Tzu was a military General. But his principles are timeless and can be applied to many different kinds of battlefields.
Here we examine Sun Tzu’s ten principles in light of being successful in Infosec.
Learn to fight
Don’t step into the infosec arena without knowing how to defend yourself and attack the opponents. Importantly, know when to [...]
Why do infosec consultants move jobs?
Posted by The Cynic in Guest Column, Uncategorized on June 15, 2009
Infosec professionals are sometimes caught in between two worlds. We’re not strictly IT people and we’re not really business people. I’d like to think that we take the best qualities from both worlds and combine them to make the perfect worker that any organisation could ever hope to employ.
Being a slightly different breed of [...]
5 hacking forefathers
Posted by The Cynic in Blog, Uncategorized on June 13, 2009
As a security consultant, as much as I owe my livelihood to Microsoft for creating such insecure products, I owe just as much to hackers and criminals out there who keep on doing bad stuff that keeps me employed.
However, modern day hackers like Gary McKinnon owe a lot to the original forefathers of hacking who [...]
Underground Security Assessment
Posted by The Cynic in Blog, Uncategorized on June 11, 2009

For readers based outside of London, you’re probably oblivious to the fact that yesterday and today London’s tube (trains that run underground) union decided they weren’t getting paid enough or that they wanted a bigger pension pot or something and threw their toys out of the pram and decided to go on strike.
Charming…
The streets of [...]
A chat with the boss
Posted by The Cynic in Blog, Uncategorized on June 10, 2009
So today was one of those rare days I came up with a good business plan. I was so excited about it I phoned up my boss to run the idea past him. Transcript of the call is below:
Boss – Hello
Cynic – Whassup chief.
Boss – Oh, it’s you. What can I do for you?
Cynic [...]
Is PCI DSS Useless?
Posted by The Cynic in Blog, Uncategorized on June 7, 2009
There seems to be much debate ongoing these days regarding the effectiveness of PCI DSS. There have been several high profile cases such as Heartland and RBS WorldPay where these companies had PCI DSS certification, yet still suffered card data breaches.
Some commentators are of the opinion that the standard is flawed, useless, merely a [...]
Infosec Dream Team
Posted by The Cynic in Blog, Uncategorized on June 2, 2009
Lately there’s been a lot of hype surrounding President 2.0, Obama’s intentions to protect America’s digital infrastructure. Mr Obama stated, “It is now clear,” he said, “this cyber threat is one of the most serious economic and national security challenges we face as a nation.”
It’s quite refreshing that a modern leader of the day has [...]
Security challenges Italian Style
Posted by David Aminzade in Guest Column, Uncategorized on June 1, 2009
Three years ago I bought a house in the south of Italy and since then I have been trying to immerse myself in the local culture. It recently occurred to me that actually there was a great deal of similarity between the nuances and national characteristics of Italy and the challenges faced by security [...]

