Julie Amero -- I've Been Silent for Too Long!! -- Phase 2
I promised in my initial post on the Julie Amero issue that I would update the matter when a couple of articles that I knew were in development became available to the public. Personally, I am very pleased with these articles and what they present to the public. One of them is quite long, 17 pages, but an extremely informative well written read. The other is of similar quality from a totally different, mostly technical perspective. There is no question that both authors see the Julie Amero issue as a travesty of justice as do I. ...
MORE >>
Posted by Bob Johnston CISSP at 2/22/2007 5:21 PM | View Comments | Add Comment | Trackbacks
Julie Amero -- I've Been Silent for Too Long!!
Ok....where have I been for so long; working studying and maintaining another blog on a daily basis along with following/working on the Julie Amero case with my law professor. I know...I should have said something sooner, but quite frankly with everything that has been going on with Julie Amero I am barely keeping up with my studies and my wife is quite unhappy as well but is also outraged regarding this case.I could overwhelm you with the facts, but rather than repeat what some many others have said so well with much more to come in the near future ...
MORE >>
Posted by Bob Johnston CISSP at 2/17/2007 4:18 PM | View Comments | Add Comment | Trackbacks
Editorial Malpractice?
Over the past few years it has become evident that the media spends less and less space relative to their journalistic responsibilities but rather tend to simply discuss a topic without providing perspective or credentials. The following is an example which I have already submitted to the editors of Network World.Your article "guide to security", "The six worst security mistakes and how to avoid making them", page 50, 8/26/06, is a classic example of modern journalism which often states facts but provides no provable background supporting data. This is, as a bare minimum, a dereliction ...
MORE >>
Posted by Bob Johnston CISSP at 9/5/2006 4:36 PM | View Comments | Add Comment | Trackbacks
Opinion: Student CISSPs Place Additional Value on the Certification and the Industry
As stated at CCCure.org, "On May 12, SearchSecurity.com’s newsletter and site led with an opinion piece by Sean Walberg, "Opinion: 'Student CISSPs put cert's value in jeopardy" under the title "The Demise of the CISSP?" In the article, he confuses two (ISC)² programs that are separate from one another - the Associate of (ISC)² program and the CBK ® education program - and he misrepresents both.", the article is without merit. Anyone interested should review the original article and its many responses. including the (ISC)²® response. ...
MORE >>
Posted by Bob Johnston CISSP at 6/9/2006 4:50 PM | View Comments | Add Comment | Trackbacks
VA Time Delay in Reporting Incident is a Favor to All Veterans
There has been a rash of data losses as a result of theft that included significant personal financial information (PFI), the most recent being the VA and Fidelity/HP Retirees. There is quite a brouhaha revolving around the fact that the VA theft incident was not reported for 2 weeks + 3 days after it was first known within the agency. While the reason for the delay is not yet known, the reality is that the delay is a favor to all veterans. I know, there is the Freedom of Information act which I fully support; however, at the same time ...
MORE >>
Posted by Bob Johnston CISSP at 6/4/2006 5:15 PM | View Comments | Add Comment | Trackbacks
Think Security First!
Think Security First! is a program initiated in 2003 in California and appears to have been successful for a short while. (ISC)²® promoted the site through its constituents until it discovered some of its inadequacies and could not get any response from its sponsor. In the Spring of 2006 InfraGard discovered misuse of its logo and instructed the sponsor to remove same from its materials. During the same time frame (ISC)²® withdrew its support. The staff at ASC reviewed the program and believed it had great potential if fully developed and set forth to do so. ...
MORE >>
Posted by Bob Johnston CISSP at 6/2/2006 10:39 AM | View Comments | Add Comment | Trackbacks
Should Uninvited Security Examiners Be Punished?
Recently another "good samaritan" has been criminally charged (SAN DIEGO COMPUTER EXPERT CHARGED WITH HACKING INTO U.S.C. COMPUTER SYSTEM CONTAINING STUDENT APPLICATIONS, http://www.usdoj.gov/usao/cac/pr2006/045.html) relative to the discovery of a security risk which was then revealed; all efforts having been made without the knowledge of the owner of the database. Rather than discuss the specific case, the basic question is do we as a society allow/encourage or punish those that practice vigilante like security tests?While a well intentioned individual that were to walk around a neighborhood and check whether doors and windows were locked, it would not take too long ...
MORE >>
Posted by Bob Johnston CISSP at 5/3/2006 7:15 AM | View Comments | Add Comment | Trackbacks
Looks Too Good to Be True -- But It Is
Security awareness, phishing, Internet fraud is constantly on our minds. I am developing a public education program for Senior Citizens and another for younger adults and small business on safe usage of the Internet including banking and purchasing as well as identity theft. Both are almost ready for prime time and I started looking for supporting materials on the web. Well, well, well...look what I found...a good web site with FREE corroborating materials. Not even a charge for postage. Just what is this world coming to? And just who is the great benefactor? None other than the US Postal Service.
MORE >>
Posted by Bob Johnston CISSP at 4/8/2006 7:16 PM | View Comments | Add Comment | Trackbacks
2005 FBI Computer Crime Survey Report
An interesting, albeit questionable, survey was released earlier this month that has drawn a lot of media attention as well as other interested groups
MORE >>
Posted by Bob Johnston CISSP at 1/27/2006 9:00 AM | View Comments | Add Comment | Trackbacks
Should There be More Than One Wide Web?
There are activiites in Europe, the Middle East and Far East that are likely to create Internet locations independent of what we know as the World Wide Web (WWW).
MORE >>
Posted by Bob Johnston CISSP at 1/22/2006 10:28 AM | View Comments | Add Comment | Trackbacks