Comments for Adam On... http://www.adamdodge.com/blog Ramblings on Higher Education, Information Security and other Topics Du Jour Tue, 06 Jan 2009 05:16:21 +0000 http://wordpress.org/?v=2.5.1 Comment on CBE: The Data Breach CVE? by Adam Shostack http://www.adamdodge.com/blog/2008/07/10/cbe-the-data-breach-cve/#comment-13 Adam Shostack Sat, 12 Jul 2008 21:19:42 +0000 http://www.adamdodge.com/blog/?p=95#comment-13 We don't need or want a common lexicon. Trying to get to one would have killed the CVE. CVE worked because we didn't do that. What's really needed is someone with time and energy to do this. It might be an interesting experiment to try it and see what problems come up. That might lead to an academic paper or two. (Thus letting you start with grad students. :) We don’t need or want a common lexicon. Trying to get to one would have killed the CVE. CVE worked because we didn’t do that.

What’s really needed is someone with time and energy to do this. It might be an interesting experiment to try it and see what problems come up. That might lead to an academic paper or two. (Thus letting you start with grad students. :)

]]> Comment on The State of Security Sales Calls by alan shimel http://www.adamdodge.com/blog/2008/06/18/the-state-of-security-sales-calls/#comment-11 alan shimel Thu, 19 Jun 2008 11:33:40 +0000 http://www.adamdodge.com/blog/?p=74#comment-11 Adam - thanks for picking up on my theme. Here at StillSecure, we are trying but have learned the hard way too. Am interested in how you would like a security vendor to engage you? Adam - thanks for picking up on my theme. Here at StillSecure, we are trying but have learned the hard way too. Am interested in how you would like a security vendor to engage you?

]]> Comment on Why I Love The Internet, Reason #2 by Kees Leune http://www.adamdodge.com/blog/2008/04/19/why-i-love-the-internet-reason-2/#comment-9 Kees Leune Sat, 19 Apr 2008 15:21:09 +0000 http://www.adamdodge.com/blog/?p=65#comment-9 I can totally related to this post ;-) I used to play and DM a lot 2nd edition and 3rd edition adventures, and I really enjoyed it a lot. Time to start finding the dice and play some slow games on an IRC channel, perhaps? I can totally related to this post ;-) I used to play and DM a lot 2nd edition and 3rd edition adventures, and I really enjoyed it a lot. Time to start finding the dice and play some slow games on an IRC channel, perhaps?

]]> Comment on [UPDATE] Missing Out On Good PR by Sham Sao http://www.adamdodge.com/blog/2008/04/01/missing-out-on-good-pr/#comment-6 Sham Sao Wed, 02 Apr 2008 14:50:38 +0000 http://www.adamdodge.com/blog/?p=33#comment-6 Just wanted to add some information regarding IdentityTruth. IdentityTruth is not just a credit monitoring service - it offers multiple levels of protection against Identity Theft including tracking of breaches like the LaSalle breach, scanning of Internet sites, change of address and phone data, and billions of other database records. There's an interesting timeline on the IdentityTruth website showing how identity theft happens, why Credit Monitoring alone is not enough, and where IdentityTruth helps: http://www.identitytruth.com/services/demo/timeline_audio.html Just wanted to add some information regarding IdentityTruth. IdentityTruth is not just a credit monitoring service - it offers multiple levels of protection against Identity Theft including tracking of breaches like the LaSalle breach, scanning of Internet sites, change of address and phone data, and billions of other database records.

There’s an interesting timeline on the IdentityTruth website showing how identity theft happens, why Credit Monitoring alone is not enough, and where IdentityTruth helps:

http://www.identitytruth.com/services/demo/timeline_audio.html

]]> Comment on [UPDATE] Missing Out On Good PR by Adam Dodge http://www.adamdodge.com/blog/2008/04/01/missing-out-on-good-pr/#comment-4 Adam Dodge Tue, 01 Apr 2008 20:23:02 +0000 http://www.adamdodge.com/blog/?p=33#comment-4 I received this e-mail from an individual claiming to be a "Ruth Shuman" from Lasell College. Given that the IP address traces back to a Verizon Internet account in the Boston area, I'm going to take it as valid Subject: Are all of your reports inaccurate? -- Adam On... contact form From: Ruth Shuman <omitted> I hope that IdentityTruth is paying you a lot of money for its free advertising. If you cared enough to do fact checking before putting out this false information, you would see that Lasell College is offering free credit monitoring through a competitor. IdentityTruth has equally bad practices putting out a press release as if it was on behalf of Lasell to get business. Your business practices, as well as IdentityTruth's are unprofessional and should be scrutinized by the Attorneys General Offices around the country and the Better Business Bureaus in all major markets. If you don't publically correct these false accusations I will be happy to contact them directly. Thank you. --- End E-mail [Adam: By the way, I have received no money from IdentityTruth nor do I expect to] I received this e-mail from an individual claiming to be a “Ruth Shuman” from Lasell College. Given that the IP address traces back to a Verizon Internet account in the Boston area, I’m going to take it as valid

Subject: Are all of your reports inaccurate? — Adam On… contact form
From: Ruth Shuman

I hope that IdentityTruth is paying you a lot of money for its free
advertising. If you cared enough to do fact checking before putting out
this false information, you would see that Lasell College is offering free
credit monitoring through a competitor. IdentityTruth has equally bad
practices putting out a press release as if it was on behalf of Lasell to
get business. Your business practices, as well as IdentityTruth’s are
unprofessional and should be scrutinized by the Attorneys General Offices
around the country and the Better Business Bureaus in all major markets. If
you don’t publically correct these false accusations I will be happy to
contact them directly. Thank you.

— End E-mail

[Adam: By the way, I have received no money from IdentityTruth nor do I expect to]

]]> Comment on Yeah… I Don’t Get It by Adam Dodge http://www.adamdodge.com/blog/2008/03/13/yeah-i-dont-get-it/#comment-3 Adam Dodge Thu, 13 Mar 2008 19:19:09 +0000 http://www.adamdodge.com/blog/2008/03/13/yeah-i-dont-get-it/#comment-3 Yeah, which is why I just don't get it ;) Yeah, which is why I just don’t get it ;)

]]> Comment on Yeah… I Don’t Get It by tkrabec http://www.adamdodge.com/blog/2008/03/13/yeah-i-dont-get-it/#comment-2 tkrabec Thu, 13 Mar 2008 19:11:06 +0000 http://www.adamdodge.com/blog/2008/03/13/yeah-i-dont-get-it/#comment-2 Wouldn't it be more effective to block p2p, rather than IM? Especially when you need to share files with individual users or groups on IM, and all you have to do to share a file with the masses(with p2p) is have it in the wrong folder or share the share the wrong thing. --Tim Krabec Wouldn’t it be more effective to block p2p, rather than IM? Especially when you need to share files with individual users or groups on IM, and all you have to do to share a file with the masses(with p2p) is have it in the wrong folder or share the share the wrong thing.

–Tim Krabec

]]>