Ready? Secure? Disclose

Grok Headline matches for Ready? Secure? Disclose

Biometrics 'not yet ready to secure
corporate IT'

Biometrics 'not yet ready to secure
corporate IT' 09/20/2004 09:17 PM
Computer Weekly Sep 21 2004 1:21AM GMT

Bremer Says Iraqis Not Ready to Secure
Country; 5 Marines Killed

Bremer Says Iraqis Not Ready to Secure
Country; 5 Marines Killed 04/18/2004 03:03 PM
The U.S. administrator stressed that U.S.-led armies were needed in the country after the handover of sovereignty on June 30.

Microsoft Prodded to Disclose More

Microsoft Prodded to Disclose More 04/15/2004 02:31 AM
Los Angeles Times Apr 15 2004 7:13AM GMT

Google to Disclose Financials

Google to Disclose Financials 07/19/2004 10:10 PM
AP via ABCNEWS.com Jul 20 2004 2:42AM GMT

AP: Derby Winner Didn't Disclose Record
(AP)

AP: Derby Winner Didn't Disclose Record
(AP) 05/07/2004 05:57 PM
AP - Kentucky Derby winning jockey Stewart Elliott pleaded guilty to assault three years ago, but didn't disclose the information when applying for a license to ride at Churchill Downs.

Google to Disclose Financials (Reuters)

Google to Disclose Financials (Reuters) 07/19/2004 09:36 PM
Reuters - Google is expected to give an indication of how much it expects bidders to pay for its shares in an updated initial public offering filing as soon as this week, according to potential investors.

Intel, HP disclose design flaws

Intel, HP disclose design flaws 06/27/2004 01:13 PM
News 24 Jun 27 2004 4:32PM GMT

Broadbandaction Inc to Deliver Echoworx
Secure Email™ Secure Messaging
Solution Designed to Meet the Nee

Broadbandaction Inc to Deliver Echoworx
Secure Email™ Secure Messaging
Solution Designed to Meet the Nee 04/05/2005 09:12 AM
Computer Security News Apr 5 2005 1:18PM GMT

Max Secure Spyware Detector - Secure
your Corporate Network from Spies

Max Secure Spyware Detector - Secure
your Corporate Network from Spies 04/18/2005 03:55 AM
Max Secure Software, developer and global leader in information security products varying from a broad range of security software solutions, and services designed to help individuals, small and mid-sized businesses, and large enterprises security announces release of new product, Spyware Detector Enterprise Edition. [PRWEB Apr 18, 2005]

Google to disclose proposed IPO price
range

Google to disclose proposed IPO price
range 07/19/2004 06:24 AM
Stuff.co.nz - Mon Jul 19, 05:37 am GMT

Google to disclose proposed IPO price
range: WSJ

Google to disclose proposed IPO price
range: WSJ 07/19/2004 04:31 AM
Hindustan Times Jul 19 2004 8:54AM GMT

Shaw to disclose digital phone
subscriber numbers

Shaw to disclose digital phone
subscriber numbers 04/16/2005 05:47 AM
globetechnology.com Apr 16 2005 10:14AM GMT

Google to disclose financials, share
price range

Google to disclose financials, share
price range 07/19/2004 10:10 PM
Reuters Jul 20 2004 2:42AM GMT

U.S. Reporters to Defy Order to Disclose
Sources (Reuters)

U.S. Reporters to Defy Order to Disclose
Sources (Reuters) 01/07/2004 03:25 PM
Reuters - Amid concerns that journalists' rights may be under attack, the first of three reporters from major U.S. media outlets will defy on Wednesday an order by a federal judge to disclose their sources in an unfounded espionage case, their lawyers said.

Telegraph | News | Diplomats failed to
disclose their own Arab links

Telegraph | News | Diplomats failed to
disclose their own Arab links 05/02/2004 04:49 PM
"But none of this has anything to do with why I and others signed the letter." .. "Diplomats failed to disclose their own Arab links." .. PETRODOLLAR

telegraph.co.uk/news/main.jhtml?xml=/news/2004/05/02/ndi ps02.xml&sSheet=/portal/2004/05/02/ixportal.html
track this site | 4 links

Scoop: Diebold Memos Disclose Florida
2000 E-Voting Fraud

Scoop: Diebold Memos Disclose Florida
2000 E-Voting Fraud 10/28/2003 11:09 PM

With deadline near, Google expected to
file for IPO SEC law could compel
company to disclose its financial dat

With deadline near, Google expected to
file for IPO SEC law could compel
company to disclose its financial dat 04/24/2004 06:04 AM
San Francisco Chronicle Apr 24 2004 10:24AM GMT

SONY PICTURES TO MAKE FEATURE FILM OF
CLARKE'S BOOK; Neither party would
disclose financial terms

SONY PICTURES TO MAKE FEATURE FILM OF
CLARKE'S BOOK; Neither party would
disclose financial terms 04/10/2004 11:23 AM
Hollywood Reporter .. Great idea!!

hollywoodreporter.com/thr/article_display.jsp?vnu_content_id= 1000484839
track this site | 4 links

OpenOffice World-Readable Temporary
Files Disclose Files to Local Users

OpenOffice World-Readable Temporary
Files Disclose Files to Local Users 09/10/2004 01:05 PM
Jérôme (Sep 10 2004)

Wi-Fi gets more secure

Wi-Fi gets more secure 12/10/2003 05:24 PM
Products designed to make wireless networks safer and more stable take center stage at conference.

Are You Secure?

Are You Secure? 04/29/2004 01:27 PM
This small company carries a big stick.

How secure is your Wi-Fi?

How secure is your Wi-Fi? 06/01/2004 08:16 PM
USA Today Jun 1 2004 11:31PM GMT

How to keep your PC secure

How to keep your PC secure 04/17/2005 06:59 PM
Economictimes Apr 17 2005 9:49PM GMT

Can IM ever be secure?

Can IM ever be secure? 04/13/2005 01:43 AM
ZDNet Apr 13 2005 5:33AM GMT

Secure XP v1.0

Secure XP v1.0 11/07/2003 03:11 AM
Secure XP provides (password protected) access to various settings that allow you to make your XP computer more secure in a multi-user environment by applying either standard XP security options or registry tweaks. It allows you set restrictions for Active Desktop, Control Panel, Display, Desktop and Explorer, Login and Authentication, and more. The interface combines more than 100 XP settings in categorized tabs for easy access. [Shareware $19.97 7 Days 1.71 MB]

Of course Linux is more secure...

Of course Linux is more secure... 08/09/2004 07:52 AM

Unofficially secure

Unofficially secure 07/30/2004 11:53 AM
USA Today Jul 30 2004 3:34PM GMT

Secure UI: Phishmarking

Secure UI: Phishmarking 02/16/2004 04:08 PM

This post describes variations of an idea that reduce the vulnerability discussed in Visual Spoofing and Visual Illusions posts.

Below is an example of a phishing attempt using the visual spoofing techinque (clickthrough to see it fully).  It shows a browser window containing an image of a explorer window and an fake HTML form inside a DIV section.  While wary experienced users will catch on to what is going on, naive users are not likely to.

The idea of phishmarking is to introduce features to the UI that clearly distinguish the real UI from the fake UI.  Appearance of the feature should vary depending on on who (user), when (time), and possibly what (site).  Site dependent feature is a big topic so I'll discuss it in future posts.

When I came up with the idea of phishmarking, I was thinking about tigers, so I originally thought of using tigerprint-like patterns to be embossed into the background of UI components like toolbars and titlebars.  Other patterns will work just as well as long as the pattern is not a simple geometric shape and has some random elements to it.  I call these patterns phishmarks.

Note that phishmarks doesn't have to be present all the time on the UI as long as the phishmark appears briefly within the time frame that typically takes to be fooled by a fake UI.  In fact, I recommend brief display of animated (to draw attention) phishmark over static phishmark which could clutter up the UI.

A simple, easily implemented, form of phishmarking is changing UI colors.  But this technique is not as effective as using animated phishmarks as you can see for yourself in the following screenshot.  It's same as the screenshot above except I have changed the UI theme from default blue XP theme to silver XP theme.

In this example, the color change was not drastic enough to cancel the illusion created by the fake UI and the power of branding (logo, graphics, layout).  Making more drastic color changes is possible, but not without affecting aesthetics negatively.  More research is needed in this area to find the right balance between protection against phishing and aesthetics.

I have other ideas related to visual spoofing and visual security and will post them in the near future under the Secure UI series.  Stay tuned.

Mac OS X ? Unix? Secure?

Mac OS X ? Unix? Secure? 07/22/2004 08:19 AM

Secure Your Email

Secure Your Email 07/12/2004 02:24 AM
Welcome to the new age of the internet! It's the age of fake identities, hidden motives, and stolen/intercepted email. In this day and age, it's actually difficult to be certain about the origins of a recently received email. How can you trust that the email you just received is genuine? It's time for a long-awaited Power User Monday Tip of the Week.

" Yup. I definitely feel more secure
now. "

" Yup. I definitely feel more secure
now. " 08/11/2004 08:52 PM

Keeping it secure

Keeping it secure 12/08/2003 11:17 PM
Sunday Times South Africa Dec 8 2003 10:14PM ET

Secure Transfers

Secure Transfers 03/19/2005 02:38 AM
You spend plenty of time making sure your passwords are secure, but its easy to take for granted that traditional file transfer methods aren't secure.

Drop in this week's Freeloader Friday for a list of free SFTP/SSH file transfer clients, including a sneak peek at the new Fetch 5 beta.

Secure WebMail

Secure WebMail 02/10/2004 05:29 PM
Release notes...

IRC Secure Shell

IRC Secure Shell 01/28/2004 05:38 PM
Formal Design Document

Secure FTP Bean 2.0.11

Secure FTP Bean 2.0.11 11/05/2003 03:03 AM
A Java bean for performing secure FTP transfers.

Ten Steps to a Secure PC

Ten Steps to a Secure PC 06/18/2004 05:01 AM

Be secure: Think like bad guys

Be secure: Think like bad guys 04/11/2005 04:04 AM
ORLANDO - Security managers at last week's InfoSec World conference say they're combating the risks posed by outsider attacks and insider exploits by thinking - and sometimes acting - like hackers.

Is Firefox Really Secure?

Is Firefox Really Secure? 02/01/2005 09:40 PM

Grok Description matches for Ready? Secure? Disclose
GrokA matches for Ready? Secure? Disclose

Ready? Secure? Disclose

The following phrases have been identified by the grok system as matching this entry: