Well the circumstances have changed slightly

Think back to one of your most embarrassing moments in life. It could be the time you were caught cheating in an exam, or one of your parents came back from holiday early to find you had your girlfriend staying over.
Now just visualise that moment… feel uncomfortable… wish that it could be erased from your [...]

If only someone had asked me!

An article entitled Confessions of a Risk Manager appeared on the Economist website a few weeks ago.
Security Focus had a short comment on the article, praising its infinite wisdom and how it goes to prove the point that risk managers are just like security professionals and that good people need to be involved from the [...]

Lose the data, lose the contract!

Interesting article here about PA consulting losing their 1.5 million pound contract after it lost personal details of the entire UK prison population.
If the Home Office entrusted me with a memory stick to keep safe in exchange for 1.5 million I would guard it more closely than I do my own children.
cynic@infosec-cynic.com

The sky is falling (again)…

Not too long ago I wrote a piece which was not too flattering towards the IT Security person. But recently I’ve begun to contemplate what I wrote and well I have to do something which I rarely ever do.
I apologise.
But not for the reasons you’re thinking!
Oh no, I apologise for not being far more critical [...]

Planning or not…

I’ve had the not so pleasurable experience of visiting the hot, dusty, congested artificial city they call Dubai. Never have I been to someplace with such expectations and be let down by everything so badly.
Coming back out of the country through immigration was an experience in itself and I must say Arabs are probably one [...]

Long gone days of dictators

Earlier in the year, like many other professionals I made my way down to infosec in Olympia to see what freebies I could pick up. Armed with half a dozen USB storage devices, pens and notepads I was just about ready to call it a day when I popped by another stand which belonged to [...]

Trusting IT Security

Sometimes I publish an article knowing full well its not good. I set out to write something that will rival the Queen’s annual speech and end up with something that sounds more like George Galloway impersonating a cat on national TV.

But like in many spheres of life, mistakes and even lies are forgotten and life [...]

Data losses

It seems these days not a week passes when we don’t hear an incident of the governments or banks losing data. Whether it be HMRC, the NHS or any one of the banks with whom we trust in and hand over our data, it all seems to get ‘lost’. Examples of data losses can be [...]

Do you want chips with that?

I have invented a new type of body armour.
It is stab-proof, bullet-proof, bomb-proof, grenade proof, in fact it will even keep you protected from a nuclear blast.
To top it off, it weighs less than 5g and drapes easily over any clothing.

So are you interested in buying it? Or maybe some military would be interested in [...]

Relax… but not too much

OK, its the long weekend so I’m going to be a bit lazy. We all like to wind down and kick back, loving the fact we have an extra day off work, making plans to sit in the garden relaxing under the shade of a tree forgetting it all. Of course, that doesn’t stop the [...]

Hollywood influences…

When I’m not at work trying to convince some project manager that he really should consider encrypting the DB whilst desperately resisting the urge to slam his head on the table, I do quite enjoy watching the odd film or two.
Now I know what you’re thinking. But you’re wrong.

Yes, I could go on about how [...]

Making your mind up

I have a deep-rooted hatred for the medical community. Those buffoons in white coats and extra-thick glasses just can’t seem to make their mind up about anything. Asprin is good, then its bad, then it’s a life saver, then it’s the anti-christ. Meat is good for you and then its not. You should exercise moderately, [...]

So what do you do for a living?

Sooner or later, no matter how careful you are, you end up in those unavoidable social situations where you have to mingle with the common folk. People of the kind who haven’t the faintest clue what CISSP, CISM, ISO27001 or PCI DSS stand for.
I mean why is it so difficult to articulate to the common [...]