Posts Tagged ‘security’

Behavior Detection: Don’t Worry, Be Happy…Or Else

Filed under Commentary ··· Leave a Comment

Patti Davis, special commentator to Newsweek magazine, has a darkly humorous rant available on MSNBC today about the TSA’s latest invention to combat terrorists in airports: “Behavior Detection Officers.” These specially-trained security guards’ sole duty will be to scrutinize the facial expressions of airport patrons, looking for tiny outward signs that passengers may be attempting to deceive them. Expressions of “fear” or “disgust,” for example, are cited as highly suspicious in nature.

As Ms. Davis snarks, “Let’s see, fear and disgust in an airport? I’m frightened and disgusted weeks before I have to show up at an airport.” She’s got that one right. In fact, I dare say that I’d rather take my chances with being blown up than succumb to the dystopian, hyper-Orwellian future that the American government apparently sees for us. The mere prospect of making a living in the United States is going completely to hell in a handbasket, and in case you all may have forgotten, that was ultimately what the terrorists sought.

When Apple and I embark on our road trip to Michigan this October, it will be with great excitement and a sense of adventure — two things that seem to have altogether disembarked, no pun intended, from the typical American’s travels. Although traveling by car is statistically more dangerous than by plane, I don’t need statistics to tell me how much less of a pain in the ass it’s going to be. And that’s without even touching on how much fun it will be to have my own car in which to tool around my hometown again.

If you protect a free man from harm by isolating him in a locked chamber, you have essentially secured him from outside forces, yes? But in the process, have you not robbed him of his freedom and, in turn, the very reason for which someone would wish to do him harm? Quite a paradox we have brewing here, isn’t it?

Comments (0)

What’s Your Phishing IQ?

Filed under News ··· 3 Comments

You’ve probably heard of those false emails and websites that try to trick you into giving away your passwords, credit card numbers and soforth by pretending to be legitimate — a practice called phishing. McAfee has posted a ten-question “Phishing Quiz,” where you can test your knowledge and observation skills by correctly identifying 10 common phishing sites and emails. Give it a shot and see how well you know this stuff.

I scored a 10 out of 10 — making me a so-called “Safety Guru.”

Here’s a hint: Do you really think Bank of America would direct you to a page full of misspellings and poor grammar? Hmm!

Comments (3)

Nuke Plant Gets SQL Slammed

Filed under Commentary ··· Comments Off

In light of the big northeastern blackout last week, I’ve heard some jokes spread around that maybe the infamous LoveSan computer virus took out the grid. Not bloody likely—or so we thought. According to SecurityFocus, the SQL Slammer worm of a few weeks ago nearly did just that…at Ohio’s Davis-Besse nuclear power plant.

The Slammer worm entered the Davis-Besse plant through a circuitous route. It began by penetrating the unsecured network of an unnamed Davis-Besse contractor, then squirmed through a T1 line bridging that network and Davis-Besse’s corporate network. The T1 line, investigators later found, was one of multiple ingresses into Davis-Besse’s business network that completely bypassed the plant’s firewall, which was programmed to block the port Slammer used to spread.

From the business network, the worm spread to the plant network, where it found purchase in at least one unpatched Windows server. According to the reports, plant computer engineers hadn’t installed the patch for the MS-SQL vulnerability that Slammer exploited. In fact, they didn’t know there was a patch, which Microsoft released six months before Slammer struck.

By 4:00 p.m., power plant workers noticed a slowdown on the plant network. At 4:50 p.m., the congestion created by the worm’s scanning crashed the plant’s computerized display panel, called the Safety Parameter Display System.

Continue Reading…

Commenting Disabled