Archive of stories published by PhoneBoy’s Security Theater

Homepage

Open in app

All

PhoneBoy in PhoneBoy’s Security Theater

Dec 19, 2015

The Start of my Information Security Career 20 Years Ago

Update: For those who like to listen to audio instead of read, I recorded a version of this story in podcast form.

I’m feeling a bit nostalgic recently as I realized it’s been 20 years since I entered what…

PhoneBoy in PhoneBoy’s Security Theater

Aug 31, 2016

A Word About Competition in the Information Security Industry

PhoneBoy in PhoneBoy’s Security Theater

Feb 27, 2017

How Long is Long Enough for a Password?

As much as we might want to see different authentication methods available, passwords…

PhoneBoy in PhoneBoy’s Security Theater

Feb 23, 2016

Apple vs. The FBI Demonstrates Convenience Versus Security

1 response

PhoneBoy in PhoneBoy’s Security Theater

Jan 3, 2017

Automation, Orchestration, and The Cloud

A while ago, I posted the following as a somewhat cryptic message on Twitter and LinkedIn:

PhoneBoy in PhoneBoy’s Security Theater

Feb 24, 2017

Cloudflares With a Chance of Goatse

As I’m sure you’ve heard by now, Cloudflare had a case of CloudBleed, causing what amounts to a…

PhoneBoy in PhoneBoy’s Security Theater

Feb 22, 2016

Apple, FBI, and The Case Against Mobile Device Management

I will admit, I’ve never been a huge fan of Mobile Device Management (MDM). Given the way this whole kerfuffle between the FBI and Apple is playing out, anyone who cares about their personal digital privacy should think twice…

PhoneBoy in PhoneBoy’s Security Theater

Dec 9, 2015

Shouldn’t A Security Gateway Be Secure By Default?

From Palo Alto Networks: Best Practices for Securing Your Network from Layer 4 and Layer 7 Evasions:

To monitor and protect your network from most Layer 4 and Layer 7 attacks, here are a few recommendations

PhoneBoy in PhoneBoy’s Security Theater

Dec 23, 2015

Palo Alto Networks Is Evading The Truth

Here’s a summary from A Letter to Palo Alto Networks Employees and Customers:

Vulnerabilities in several intrusion detection products were reported by The SANS Institute 3 years ago in a white paper called Beating the IPS, including…