About InfoWorld : Advertise : Subscribe : Contact Us : Awards : Events : Store
InfoWorld HomeNewsTest CenterOpinionsProduct GuideTechIndex
 COLUMN ARCHIVE  FORUMS
 

COLUMN

 
Security Adviser
P.J. Connolly

Santa Claus is coming

GIVEN THAT IT'S holiday time, I ought to hand out some lumps of coal to misbehaving folks, and oranges to the good boys and girls. So while I hunt through my attic for the Santa drag, and check my list once or twice, dream of those sugarplums.

   ADVERTISEMENT
  

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

RELATED LINKS
»  IE 7 bug reopens debate over patch responsibilities
»  Woman ordered to pay for file-sharing will appeal
»  McAfee to buy SafeBoot for $350M
»  Security RSS feed 

IDG ENTERPRISE NETWORK
Research Reports  (CIO)
Ask the Expert  (CIO)

TOP NEWS 


IT SOLUTION SEARCH
The first lump of coal goes to Red Hat for promising to coordinate the release of exploit details with other Linux vendors, then unilaterally posting a warning of a flaw in the Washington University WU-FTPd program and blaming the leak on an administrator who didn't get word of the embargo.

An orange goes to the National Security Agency for releasing tools to harden Linux and Windows. The gang from Fort Meade has done such a good job that NSA Security-Enhanced Linux may become the Chinese government's OS of choice. Someone should have told the Department of the Interior about this, but hindsight is 20/20.

Novell gets a lump of coal for sitting on the details of a GroupWise exploit for more than three months after releasing the "Padlock" fix, thereby preventing any test of the patch's effectiveness.

Judge Alex Kozinski of the Ninth Circuit U.S Court of Appeals receives an orange for pointing out that computer monitoring and privacy rights always conflict.

A lump of coal goes to Symantec for raising the cost of virus definition subscriptions for individual consumers by 150 percent.

Kevin Poulsen of SecurityFocus, who has morphed from hacker poster boy to computer security journalist rather well, gets an orange for demonstrating the value of street credibility to computer security journalists.

John Pescatore of Gartner earns two oranges for recommending that companies investigate alternatives to Microsoft's IIS (Internet Information Server) Web server software -- and by extension, the Windows platform -- and for telling software vendors that if they can't fix their software's security flaws in two weeks, they should get into another line of work.

Earthlink gets an orange for being one of the few ISPs to encourage customers to install and use firewall software. Unfortunately, too many ISPs get a dump truck of coal for discouraging firewall use or refusing to support customers who install them.

Finally, security guru Winn Schwartau gets an orange for writing one of the few coherent and polite dissents to my position vis-à-vis the value of protecting against electromagnetic pulse attacks. I'm not convinced yet, but I'm keeping an open mind. On that note, happy holidays and I'll see you next year.


P.J. Connolly (pj_connolly@infoworld.com) covers collaboration, networking, operating systems, and security for the InfoWorld Test Center. Get this column free via e-mail each week. Sign up at www.iwsubscribe.com/newsletters .




RELATED SUBJECTS

Security

MORE >


SPONSORED WHITE PAPERS
EMC - Lower costs and improve reliability-Get the EMC CLARiiON white paper!
Ciphertrust - Are you ready for Sobig.G? Learn how to protect your email systems.
CDW - Personal attention. CDW. The Right Technology. Right Away.
EMC - Explore key performance features and capabilities of EMC ControlCenter 5.1.1.
Intel - Free Intel white paper shows you how to deploy a secure wireless LAN
Cisco - FREE WHITE PAPER: BLUEPRINT to design and implement secure VPNs
Verity, Inc. - "Mass Consolidation Hits the Web-Search Market"
McDATA - Download a FREE storage consolidation white paper from McDATA(R).
Lucent Technologies - Overcoming Common Firewall Limitations
Lucent Technologies - Leverage Your Mobile High Speed Data Access. Download Free White Paper!
Nokia - Get the scoop! Mobilizing business white papers & case studies.
BMC Software - Maximize the Potential of Enterprise Data: Free white paper!
Network Associates - Free white paper - Strategies for Optimizing Network Costs and Benefits
Entrust - Manage identities across applications. Improve productivity.
Stalker Software - CommuniGate Pro - Transform your Email and Calendaring
Remedy - A NEW Gartner Research Note:Producing Quality IT Services

Search the IDG White Paper Library:


SPONSORED LINKS

INFOWORLD MARKETPLACE


» IT Compliance Conference: Nov. 5-7 in San Diego
Best Practices, Peer Experiences, & Expert Advice for Building a Defensible IT Compliance Program
» FREE Sophos Threat Detection Test
Is your AV catching everything it should? Free virus, spyware and adware scan.
» IT Audit Checklists
Prepare for your next internal IT audit. Checklists cover security, risk management, PCI, and more.
» FREE White Paper: Mitigating Rock Phish Attacks
Standard anti-phishing methods cannot defeat complex Rock Phish attacks. Learn how to fight back...
» Apply BPM and ITIL at your IT Help Desk
ServiceWise brings BPM to complete IT service while eliminating integration cost. Learn more here.




 HOME  NEWS  TEST CENTER  OPINIONS  PRODUCT GUIDE  TECHINDEX   About : Advertise : Subscribe : Contact Us : Awards : Events 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy

All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses, phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

Computerworld :: Network World :: CIO :: PC World :: Darwin :: CMO :: CSO
IT Careers :: JavaWorld :: Macworld :: Mac Central :: Playlist :: GamePro :: GameStar :: Gamerhelp
ITWorld Canada :: Computerwoche :: Techworld UK :: tecChannel :: IDG.se :: IDG.no