Posts tagged Security

Another IT Quote of the Week: Dr. Stephen Hawking

Dr. Stephen Hawking is a genius and his thinking on all topics is worth pause and reflection.  His ability to explain the complexities of science at an understandable level has always amazed me.  This man is no insightful that we are giving him a second IT Quote of the Week spot!

I like Information Age quotations.  I find some of them very inspirational and like to carry a new one around about every week.  I thought that i could share mine with you from time to time.

image

Here is my quote of the day:

“I think computer viruses should count as life.  I think it says something about human nature that the only form of life we have created so far is purely destructive.  We’ve created life in our own image.”
Dr. Stephen Hawking

You can learn more about our quote source at Wikipedia.

So how do you think that this relates to Information Technology?  How do you think that it could be important to Information Technology Professionals?

Do you like quotations? Do you collect them, too?  What did you think of when you read this one?  Do you agree or disagree with it?  Please comment below.

That is my Information Technology Thought of the Day (ITTOD) for March 18, 2010  by Scott Coughlin.

Image credit: geocentrism.com

Quote Source: DevTopics

What are Zero Day Attacks?

Yesterday, I heard four different people use the term “Zero Day Attack”.  Strangely, only two were in the information technology business.  I figured that it was time to explicitly discuss its meaning.image

The Information Technology (IT) Vocabulary Builder series aims to deliver a very concise summary of a currently relevant topic to Information Professionals.  It is done mostly by collecting a small number of highly relevant web links to save you the time of combing through search results yourself.  

So, what exactly is a “Zero Day Attack”?

This is how Wikipedia defines it:

“A zero-day (or zero-hour or day zero) attack or threat is a computer threat that tries to exploit computer application vulnerabilities that are unknown to others, undisclosed to the software developer, or for which no security fix is available. Zero-day exploits (actual code that can use a security hole to carry out an attack) are used or shared by attackers before the software developer knows about the vulnerability.

The term derives from the age of the exploit. When a developer becomes aware of a security hole, there is a race to close it before attackers discover it or the vulnerability becomes public. A "zero day" attack occurs on or before the first or "zeroth" day of developer awareness, meaning the developer has not had any opportunity to distribute a security fix to users of the software.”

Please understand that I am not condoning, approving, or commenting on the morality of this issue, just pointing out a popular word that should be understood by all Information Technology Professionals.

Here are some other great sites that discuss this issue:

I hope that helps you.  Enjoy the new word!

That is my Information Technology Thought of the Day (ITTOD) for March 16, 2010 ©Scott Coughlin.

Image Credit: The Toilette Paper Entrepreneur

News Commentary: Cyber Crooks

This morning, CNN.com featured a very thought provoking front page story on Cyber Crime.  What I especially liked was the discussion of return on investment and whether having the police try to catch them was even worth the effort.  I highlight it as a good thought piece for a Monday morning commute.

image

Here is the link to the story –

CNN.com – Is chasing cybercrooks worth it? by John D. Sutter

This week’s arrests of three men in connection with one of the world’s largest computer-virus networks may seem like great news — perhaps even a sign authorities are starting to win the war against cyberthieves.

But the real situation is more complicated.”

I have to admit that I think that the story is a little disingenuous to the whole problem of cyber crime.  I am not so sure that the argument that it is hard, expensive, and confusing is really a good one for not doing it.  It is a very similar argument that those opposed to the “War on Drugs” use to justify legalizing drug use.  Nevertheless, it is a popular, and now public, discussion that information technology professionals should be involved in.

I, for one, think that we need to increase the size of our counter-cyber crime units at all levels of law enforcement.  I believe that there is nothing, but a growth industry when it comes to crime online.  I doubt that we have even seen 1% of what is possible for criminal activity that involves cyberspace.  I say more, not less, engagement is needed by the police.

What do you think about this topic?  Do you agree or disagree with me? Do you have a recommended news story for next week? Please share your ideas below.

That is my Information Technology Thought of the Day (ITTOD) for March 8, 2010  by Scott Coughlin.

Image Credit: Money Magazine