Greg Young

Gartner has just published our 2008 Vendor Rating on Nortel Networks.  My colleague John Girard and I have included a new section on security.

[Read more →]

Three cheers for faster bootups.  So what is the security nexus? Most patches require a bootup to be effective, and long bootup times means users push off bootups after a patch download widening the window of exposure.  It wasn’t so long ago that mandatory restart prompts became unacceptable and the option for restarting later were [...]

[Read more →]

Custom web applications represent a weak link that attackers are going after.  Because they are custom, they are only as secure as our own organizations’ ability to code them securely, and the vulnerabilities are fairly unique even if the exploits are not.  Attacks like SQL injection and cross-site scripting mean custom web application exploits.  The [...]

[Read more →]

 
Before Virtualization                                                         After-Virtualization
 

[Read more →]

In the military we had an expression to describe when people got so focused on a single source of feedback that they ignore other data, to their detriment.  "Scope-Lock" described pilots who fixed their attention on the radar display and didn’t look up to see the power lines.  25 years later I can still clearly [...]

[Read more →]

It was reported that French President Nicolas Sarkozy had a small amount of funds swindled from his personal bank account.
This however seems to be another case of the Security Article Generator going into production mode. For a G8 leader, losing a small amount of money from your personal bank account is the best of all [...]

[Read more →]

It has become a federal election tradition in Canada that there will be a hub-bub about transmitting election results and the Internet.  Canada has 6 time zones, and people out west have no fun voting when they find out that the race has already been decided.  The current election law says:
No person shall transmit the [...]

[Read more →]

Below is a picture of my brother Gary.  He is an airline pilot who just converted over from flying the four engine 747-400 to the two-engine 777-300ER.  Well, they call it converting but if he had gone back over to an Airbus it would be a conversion, so this is more like moving to a [...]

[Read more →]

Our 2009 spending forecast was released at the Gartner Symposium/ITExpo in Orlando yesterday by our Global Head of Research, Peter Sondergaard.  Inside enterprises, IT spending will be basically flat which means no big gains for IT security.
What will be on the increase is desperate marketing in IT security.  We’ve seen this before during tough [...]

[Read more →]

As an omnivorous reader, I end up maintaining about a ratio of 2:1:1 for technical books, general business or non-fiction, and just-because books.
In the span of the last few weeks, here is what I am reading or have read:

Linux Firewalls, Michael Rash.  I had the pleasure of meeting Michael last week.  So far I [...]

[Read more →]