Blog

Get as RSSSyndicate content
Castelain blog articles

Top 10 Security terms and phrases that really annoy the pants off me…..

1. “We’ll tidy the code up later…” – no, you won’t. (See ‘Service Pack’ below)

2. “We’ll do the security bit afterwards…” – and there goes Miss Piggy drag racing a Boeing 767.

Advocating Security Awareness and Operational Security Principles

There are a number of basic guidelines that may be used to promote a culture of security awareness and effective operational security within an organisation.

Security Awareness

Wireless Network Security Considerations for the Home Office

Wireless networks seem to be everywhere. The problem is that they do not seem to be secure. The general issue is that of awareness. The average home computer user has no awareness of the abuse potential that an unsecured wireless access point invites.

Too Much Security?

Can you have too much Security? I know it sounds strange coming from a Security consultant, but it’s a question that I believe more people should be asking.

The importance of usable security

The Internet is a dangerous place, and it’s not getting better. The number and severity of security breaches is going up. Identity theft is on the rise, and still more commerce is conducted online. As security professionals we all know this, but why is it the case?

Online Gaming Scams

I learnt about the World of Warcraft with the release of Warcraft II way back in 1995. Who would have projected that the future iteration of the Warcraft series, World of Warcarft (WoW) would be such a world wide phenomenon? World of Warcraft, often referred to as WoW, is a massively multiplayer online role-playing game (MMORPG) by Blizzard Entertainment.

If You Tell Someone a Secret, You No Longer Control It

Back in March I wrote about how to protect your privacy when using Facebook. One of the pieces of advice I gave was not to install any of the multitude of applications available – unless you have a really good reason for doing so.

Privacy Concerns with Deep Packet Inspection

Deep Packet Inspection (DPI) has been around since the early 2000’s. It started out as a security feature – enabling organisations to interrogate messages and make sure they aren’t concealing a virus or other nasty content, before forwarding them on to their destination.

Key Management

I’ve just read Robert Harris’ book ENIGMA which inspired me to watch the video starring Kate Winslet as plain (!) Hester and to do some digging into the cryptography behind the story. Some background… The Enigma machine was developed in the 1920s to encrypt text for commercial purposes, and was adapted and improved by the German military.

VPNs: in the belly of the beast

 Did you know that a significant number of wireless hotspots in New York are provided by organised cyber-crime syndicates? These hotspots are used to facilitate identity theft and man-in-the-middle attacks against people connecting to them.