I don’t like the term “Best Practices.” Andrew and I railed against it in the book (pages 36-38). I’ve made comments like “torture is a best practice,” “New best practice: think” and Alex has asked “Are Security “Best Practices” Unethical?“ But people keep using it. Worse, my co-workers are now using it just to watch [...]
Filed under: Amusements, best practice, Doing it Differently by adam on Friday, February 12, 2010
15 Comments »
There is no better illustration of the institutional and social taboos surrounding data breach reporting and information security in general than the Google-Adobe-China affair. While the Big Thinkers at the World Economic Forum discussed every other idea under the sun, this one was taboo.
Filed under: Amusements, breaches, government by Russell on Monday, February 1, 2010
2 Comments »
A vivid image of Fear, Uncertainty, and Doubt (FUD), from an email promotion by NetWitness.
Filed under: Amusements by Russell on Wednesday, January 20, 2010
6 Comments »
Yesterday, Russell posted in our amusements category about the avoidance of data sharing. He gives an anecdote about “you,” presumably a security professional, talking to executives about sharing security information. I’d like to offer an alternate anecdote. Executive: “So we got the audit report in, and it doesn’t look great. I was talking to some [...]
Filed under: Amusements by adam on Friday, January 15, 2010
No Comments »
“Meta-taboo”: The topic itself is not taboo, but any discussion about how to actually get there or deal with the topic is taboo.
Filed under: Amusements by Russell on Thursday, January 14, 2010
1 Comment »
America’s Finest News Source teaches an excellent lesson on how to spin data: Labor Dept: Available Labor Rate Increases To 10.2% WASHINGTON—In what is being touted by the Labor Department as extremely positive news, the nation’s available labor rate has reached double digits for the first time in 26 years, bringing the total number of [...]
Filed under: Amusements, Links by Chandler on Saturday, December 5, 2009
No Comments »
A lesson in miscommunication of risk from “abstinence only” sex education aimed at teenagers. The educators emphasize the failure rate of condoms, but never mention the failure rate of abstinence-only policies when implemented by teenagers.
Filed under: Amusements, presentation, Science of Risk Management by Russell on Wednesday, December 2, 2009
4 Comments »
Politics and power can manipulate the “ground truth data” we depend upon. Case in point: the VP residence image on Google Earth is still blurred, even though VP Dick Cheney has been out of office for almost a year. Could similar things happen in InfoSec data if it were more visible and public? You bet.
Filed under: Amusements by Russell on Thursday, September 24, 2009
1 Comment »
The Telegraph reports: More than half of all Britons have been injured by biscuits ranging from scalding from hot tea or coffee while dunking or breaking a tooth eating during a morning tea break, a survey has revealed. Who knew that cookies could be so dangerous? So forget worrying about AV or even seat belts, [...]
Filed under: Amusements, metrics by David Mortman on Wednesday, September 9, 2009
No Comments »