John Pescatore

A member of the Gartner Blog Network

Archives for July, 2009


Book Review Thursday: The Myth of the “Responsible” User

by John Pescatore  |  July 16, 2009  |  2 Comments

I’m a big public library kind of guy. There’s something about the experience of standing in front of a big shelf of brand new books that Amazon, eBay, Apple, NetFlix, whoever just can’t replicate online. I usually try to take out at least one non-fiction book every time I’m there.  I recently read two interesting, [...]

2 Comments »

Category: Uncategorized     Tags:

Securing Wireless LANs

by John Pescatore  |  July 15, 2009  |  Submit a Comment

John Girard and I are in the midst of updating the WLAN IPS MarketScope research note. NetworkWorld reports that the Payment Card Industry Security Standards Council will be issuing some guidance on WLAN security where credit card processing is involved.  Though it looks like they have pushed out the release by a day, it looks [...]

Submit a Comment »

Category: Uncategorized     Tags:

Twelve Word Tuesday: Since Many ISPs are Phone Companies, Why Don’t They Act Like Them?

by John Pescatore  |  July 14, 2009  |  3 Comments

Hey, ISPs: telcos would disconnect anyone whose phone started launching damaging attacks.

3 Comments »

Category: Uncategorized     Tags:

Security When Everything is “Free”

by John Pescatore  |  July 13, 2009  |  2 Comments

It has been entertaining watching all the hoohaw over the publication of Chris Anderson’s book Free – The Future of a Radical Price. First, it turns out that you actually have to buy the hardcopy version. But you can view the free version if you do it through Scribd (annoying), and soon you can get [...]

2 Comments »

Category: Uncategorized     Tags:

Feedback Friday: Security Comments on All Those Other Gartner Blog Posts

by John Pescatore  |  July 10, 2009  |  5 Comments

It has not been a quiet week in Lake WobeBlog, my hometown. I could never get that sentence into a Gartner research note, as the reference to Prairie Home Companion would be deemed too “non-global,” so apologies to those of you who don’t know who Garrison Keillor is or what uff da means. Anway, there [...]

5 Comments »

Category: Uncategorized     Tags:

This Weeks Cyberattacks: The Targets Are Interesting, The Attacks Not So Much

by John Pescatore  |  July 9, 2009  |  Submit a Comment

With North Korea lobbing missiles left and right, cyber attacks that are coming from compromised PCs in Korea and are targeting many US and South Korean targets have sure captured the interest of the press. However, the Wall Street Journal reports that Ahnlabs analysis of the threat code shows that it is not particularly sophisticated [...]

Submit a Comment »

Category: Uncategorized     Tags:

Another Windows Internet Explorer Critical Vulnerability Being Attacked – Investigate Disabling Microsoft Video ActiveX Control

by John Pescatore  |  July 8, 2009  |  2 Comments

Microsoft put out a security bulletin reporting attacks against an unpatched vulnerability in the msvidctl.dll that hosts the Microsoft Video ActiveX Control.  The vulnerability is serious, per Microsoft: “An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not [...]

2 Comments »

Category: Uncategorized     Tags:

Twelve Word Tuesday: Does Encryption Solve Cloud-based Security Issues?

by John Pescatore  |  July 7, 2009  |  1 Comment

Trick Question: If you encrypt backups, can’t you encrypt onto cloud-based storage?

1 Comment »

Category: Uncategorized     Tags:

Guest Blogger: Lawrence Orans With an Update On Managing Risks of Skype Use

by John Pescatore  |  July 6, 2009  |  1 Comment

Lawrence Orans is our lead on Internet telephony security issues, and he kicks off the week with a guest post with an update on enterprise Skype security issues: I’ve just returned from Gartner’s 15th Annual Information Security Summit in Washington, D.C.  One of my favorite things about any Gartner conference is sitting down face-to-face with [...]

1 Comment »

Category: Uncategorized     Tags:

Guest Blogger: John Girard on Simple Steps to Avoid Common WLAN Hot Spot Security Pitfalls

by John Pescatore  |  July 3, 2009  |  1 Comment

Today we have a guest blogger, John Girard, who leads Gartner’s coverage on the security aspects of remote access, teleworking and mobile computing: At this week’s Gartner Information Security Summit, we arranged for Motorola (an event sponsor) to perform a scan of all Wi-Fi activity to help us understand the level of defense throughout the [...]

1 Comment »

Category: Uncategorized     Tags: