Everyone is reporting it now but here’s one feature from the SMH. You gutsta love the spin put on the announcement:

http://www.hannaford.com/Contents/News_Events/News/News.shtml

Somehow they make the following sound like it’s not too bad at all! Good luck guys:

(more…)



We’re seeing this so much lately as more and more organisations are either realising they should, or are being forced into thinking about their IT security practices (eg; through the likes of PCI DSS) more.

Good businesses that have been around for 10-20+ plus years and then moving almost everything on-line…..(fair enough reasons and business opportunities need to be taken and competitive moves must be made), but gees, many do it so wrong and put a successful bricks and mortar business into enormous risk.

(more…)



Click on the link above in the menu or here. Just for a bit of fun.

Posted in: news


Nick Ellsmore and Rob McAdam are guys you would term as competitors, (to Securus Global) and also just competitors in all they do. As CEOs of SIFT and Pure Hacking respectively, they have a good insight into the IT Security industry in Australia. I thought it would be good to get Nick and Rob onto Beast or Buddha for a chat. (You can’t accuse me of using BorB as purely a marketing tool for SG).

(more…)



The Vatican has updated what is bad:
http://www.timesonline.co.uk/tol/comment/faith/article3517050.ece

How stuff like this is not front page news amazes me!

About 6 months ago, what should have been front page news world wide, was but a small column on about page 15 in the Sunday paper here in Australia. Limbo is gone….after about 1700 years!
http://en.wikinews.org/wiki/Vatican_abolishes_Limbo

WTF!?!?

Now to work on that devil character and that place called hell that was also invented…….

…………..okay back to exciting IT security topics……..

Posted in: WTF


Cyber Storm II was launched recently. Darren Pauli covers it here in ComputerWorld.

Did we learn much from the last one? I’m not close enough to anyone involved so I can’t really say. On the face of it, who’s doing what and how, to come to a conclusion that it will add value? That would be interesting to know.

I know there’s a heap of companies I’d rather have testing security than the ones mentioned but maybe I’m over-complicating things by suggesting some really bad-arsed hacker dudes get a shot at this. It is termed an “international hacking exercise” in the article though.

Edith Cowan University IBM professor of Computer and Information Security, Bill Hutchinson raises some good points.



The following is an interview I did with Patrick Gray that was published in the recent AISA (Australian Information Security Association) March Newsletter. It will be available under “News” at www.aisa.org.au. As a friend of BorB and we of his work as one of few journos who really understand our industry, I thought people would like to see a view on things from the other side. I really enjoyed doing this but also seeing a refreshing view from the media that differs greatly to the majority of rubbish we are fed daily. The rest is the published interview:

(more…)



Adam Boileau, our old colleague, 18 months down the track is getting some serious traffic now for this. Why freeze some RAM?

ComputerWorld

Sydney Morning Herald

Gees, even Slashdot! :-)

I hear even some guitar mags may be picking this up also now based upon the pic in The Age and The Sydney Morning Herald. Onya Metl!

Additions: I just fixed the SMH link with the photo. Also, it was interesting to talk with Patrick Gray today about this:
“Hi Draz — your readers might want to hear the Risky Business interview I did with Metl about this whole thing. The Sydney Morning Herald actually picked up this story from the podcast and linked back to it… no one else bothered. Que sera, what can you do?”
That’s a bit slack not passing the credit back to where it’s due. Anyway, here is the original source from Pat: Risky Business #52.



Click here if the video is not working:
http://www.youtube.com/watch?v=SRuCzIO2wb0

Posted in: Bad Stuff, Too cool


In 2008, PCI DSS finally seems to have some good traction (in Australia and New Zealand at least). Most organisations that should be compliant are now aware of the requirements imposed upon them – many still though are at the early stages. Compliance levels in terms of percentage of compliant organisations are still low from what we see but progress is being made – albeit slowly.

But, there are some organisations who are not budging and have decided that they will not be doing it. They have stated they see no business value in it, with costs of compliance not being worth their investment. As a rule, these organisations have been large companies who believe their value to the acquiring bank gives them the right to say no. (Under threat of taking business elsewhere should the bank push the point).

(more…)

Posted in: PCI, PCI DSS, governance


« Newer PostsOlder Posts »