Blogroll

I hesitate to use the terms "Microsoft" and "clear" in the same sentence, but you should see

Smartphones, tablets, social networks, and cloud services are all popular, incredibly useful — and a security risk. These days, the security focus is on mobile devices, as they tend to be used a lot to work with corporate information, but the variety of platforms, the fact many are employee-owned, and uneven security capabilities mean it’s a real challenge — sometimes an impossible challenge — to manage them in the same way as the corporate PC.

The majority of Android devices currently in use contain a vulnerability that allows malware to completely hijack installed apps and their data or even the entire device.

The core problem is that Android fails to validate public key infrastructure certificate chains for app digital signatures, said Jeff Forristal, chief technology officer of Bluebox Security, a San Francisco company whose researchers discovered the issue.

You know the saying: Fool me once, shame on you. Fool me twice, shame on me.

You know the saying: Fool me once, shame on you. Fool me twice, shame on me.

In my role as a traveling computer security consultant, I meet with project managers every week.

At the annual OSCON (Open Source Convention) last week, those stuck in a worldview of open source from the previous decade would have suffered serious cognitive dissonance.

Last week, Amazon.com said its cloud business grew by 90 percent last year, but the company was significantly less profitable than the year before. Its AWS (Amazon Web Services) business makes up the majority of a balance sheet item that Amazon.com labels as "other." In the latest quarter, the "other" revenue from that line of business grew by 38 percent, its lowest rate in at least three years.

Long, complex passwords that must be input on tiny screens, often while on the move: Such hassles make password-based security unworkable in a mobile world. But change is coming, thanks to an industrywide backlash that gave rise to a gold rush of new technologies.

Eventually mobile security may no longer hinge on whether a password is long enough, but on how well the device knows the user.