Is Google Pushing Security Too Hard?

Google has shortened the disclosure timeline to 7 days for security vulnerabilities it finds.  That is, when Google finds a bug in its or other vendor's software it will only allow the vendor 7 days (after notifying the vendor) to fix the problem before it discloses it to the public.  That is down from 60

Link

We Must Be Guardians of Data.

As stewards of information, all employees of UT Chattanooga must be aware it is part of our job to protect these data.  This means, but is not limited to:

• Practicing Skeptical Computing (Don't trust, Verify)


• Protecting Your PC (Patching, Firewall, Antivirus)


• Archiving with Encryption (Protect it, but Trash it if you don't need it)

 

This article details how a university was fined $400k when a firewall was inactive for 10 months.  This is not a unique occurrence.  Be Safe. Be Careful.  Let's protect our customers and ourselves.

How crackers ransack passwords like “qeadzcwrsfxv1331”

A  team from Ars Technica show how easy it is to crack passwords.

Next Tuesday brings 22 Microsoft Patches and 2 from Adobe

The next set of patches for Microsoft products will bring two that are "critical" and eight that are "important".  The first critical patch is for all versions of Internet Explorer running on any version of Windows.  The second critical patches a flaw in IE 8 that allows an attacker full control.   The full Microsoft bulletin can be found here.  Adobe is releasing patches for Reader and Acrobat, details can be found here.