Group items tagged

"[P]eople still choose comfort over security.  If you don't enforce a password policy, don't expect your users to do it for you." A fairly large instance of the Pony Botnet Controller produced so much data, we thought it would be interesting to look into some statistics regarding this particular attack. ~1,580,000 website login credentials stolen ~320,000 email account credentials stolen  ~41,000 FTP account credentials stolen ~3,000 Remote Desktop credentials stolen ~3,000 Secure Shell account credentials stolen

As I analysed various breaches I kept finding user accounts that were also disclosed in other attacks - people were having their accounts pwned over and over again. So I built this: HaveIBeenPwned.com

Are these 'expert' users at higher risk because of a false sense of security, or because they are naturally curious and therefore more risk-tolerant? Two Polytechnique academics apply clinical trial method to the design of a first-of-its-kind study on computer security.

Have you ever tried to use your computer with your eyes closed? Even with a screen reader, it's incredibly challenging. The fact is, most computer applications are not designed with disabled users in mind. Trying to navigate the web using a screen reader gave me a new level of appreciation for the amount of effort Envisage Technologies, the company for which I work, has put into improving the overall 508 compliance of the Acadis® Readiness Suite. Section 508 is part of the Rehabilitation Act of 1973, which prohibits discrimination on the basis of disability in programs run by federal agencies, programs that receive federal assistance, in federal employment, and in the employment practices of federal contractors. An amendment to Section 508 requires federal agencies to make electronic and information technology accessible in order to eliminate barriers in information technology and create new opportunities for people with disabilities. The Acadis Readiness Suite is an enterprise software application designed to streamline training management for first responders and other federal, state and local government agencies. While 508 compliance is a requirement for several of our customers, Customs and Border Protection made compliance a priority for this software suite. Their intent was to perform 508 compliance checks on Acadis, and our intent was to be prepared.

Several months ago I taught a class on successful strategies and tactics for implementing on-line training and education. The class curriculum required a "status report" on the state of computer based training in public safety. In preparation for the class I conducted a web based survey of public safety trainers and senior staff officers. The reason for this specific group was to better understand and hear from trainers in the classroom and those in budget decision positions.