Multiple reputable security solutions in the market that calls itself AI, including some I have personally used, is not even close to what I would consider an AI system. So I started asking a simple question: is there anyone actually checking these claims? The answer is not very encouraging. The term AI has become another […]
“Talk doesn’t cook rice.” Ancient Chinese Proverb There is a saying in Persian…you won’t taste sweetness in your mouth just by say Sweet, Sweet, Sweet…but it looks like industry believe we can be Secure just by saying Secure, Security, Sec… just by putting a Sec in front or end of a product, service, name, process, […]
we presume Security is always equal inconvenient, either form consumer point of view, or developer. as a consumer you have to remember passwords and configure stuff, and as a developer to need to make sure you put controls around authentication process and how passwords are being used. I agree that is inconvenient but are we […]
cyber attacks that you hear about them in news these days are not advanced at all, this is security community acting so naive and blind, knowingly and unknowingly which then implies into thinking that attacks are sophisticated. in mature industries like agriculture, professionals study their enemies and for centuries they have been able to defeat […]
Software is the core of any computerized system and it is the most effective way of introducing insecurities to cyberspace with all its entities. eliminate fancy tools like synthesizer if you want your child be a musician. root cause of all security vulnerabilities (mainly) resides with the software, the foundation of all computer systems, where […]
Security is a matter of usability and one of elements of quality of a system. ain’t it literally a matter of “safety”? how come Quality does care about a defect related to safety of a user in physical world but not the virtual world? security bug is named differently: security vulnerability, but ain’t just a […]
It has been logically proven to me that some elements of cyber security of any internet user is solely on shoulder of ISP but that has been the last thing we ever cared perhaps because we tend to complicate simple things! ISP is supposed to be the only owner, or main layer to internet user […]
I came across an article the other day on Legal Considerations when Gathering Online Cyber Threat Intelligence and Purchasing Data from Illicit Sources! A publication from justice.gov with interesting insight but opened an old wound for me! Trying to regulate an environment which is naturally unregulated sounds not reasonable. it is like saying you can […]
Have we really been fixing cyber-security issues and challenges, or we just want to make money out of “lack of awareness”? The simplest analogy I can think of is cigarette and generally tabaco industry. If we really believed that those are against society and individual health, how much is cost of cancer and other complications […]
One of the effective techniques to handle ISO 27001 or any other security management standard or framework is to go deep into a matter regardless of where you want to start or even where to are forced to start. In practice, the main challenging question and the answer for that to many organizations, when they […]
I have seen many official statements about EFS being so insecure and we should not use it blah blah…and that is so surprising for me something from professional sources hearing a unprofessional statement, or better say, inaccurate assumption about one of the simplest and effective ways towards cryptographic practices! Assuming you know what Encrypting File […]
The same problem, only louder Looks like nothing has changed. The same leadership failures I talked about years ago are still here, only more polished, more decorated, and more destructive. Companies keep pretending they have “leadership,” but what they really have is a chain of people giving deadlines without understanding the work behind them. The […]