Security Blog 


6.16.2005

They're watching in NYC
A map of surveillance cameras in NYC's Meatpacking district.





6.15.2005

Last night
After some research and reading for a project, I had a lot on my mind and couldn't get to sleep. So I went for a drive, ended up washing my car and getting a Slurpee. As I'm walking out of 7-11, I notice a high school age kid, war walking with a laptop. Mind you, this was around midnight in a mixed zoning area (residential and commerical). I just stared, as he wandered down the block - I swear I could hear the pings of Kismet.


6.14.2005

Document destruction
An excellent article at Security Focus on a challenging, often undiscussed issue - document destruction. We worry so much about protecting data, that people often neglect to enforce a destruction policy.

First, you should establish a clear and reasoned and workable policy. Second, to the greatest extent possible, security professionals should automate the process of document destruction (and ensure that the destruction includes all the many places where the document may exist) so you eliminate the inference that you deleted the documents for a nefarious reason. Any time you rely on employees to delete documents manually, you can be virtually assured that the documents won't be deleted -- or won't be deleted properly. Your policy should ensure that it is applied to active and archived documents equally, and paper and electronic documents.