Welcome to Collaborative Strategy Guild Where insights are transformed into actions at the intersection of collaboration, information management, security, and business strategy.
|
IaaS gives you plenty of rope. It’s up to you not to hang yourself. For example consider how IaaS allows you to rapidly create and deploy new virtual machines within the production environment. Without proper care and feeding, this can quickly result in VM sprawl. If a VM remains dormant for a long time and sits out many rounds of updates and patches, what happens when it finally reawakens?
For the rest of Ed’s latest column at TechNewsWorld, please click here.
Does Your IaaS Environment Have Sleeper Cells?
Thanks for the memories
It turns out that Google, maker of the Android mobile operating system, takes it one step further. Android apps do not need permission to get a user’s photos, and as long as an app has the right to go to the Internet, it can copy those photos to a remote server without any notice, according to developers and mobile security experts. It is not clear whether any apps that are available for Android devices are actually doing this.
Et Tu, Google? Android Apps Can Also Secretly Copy Photos – NYTimes.com
Continue reading: Et Tu, Google? Android Apps Can Also Secretly Copy Photos – NYTimes.com
Check the full article for some extreme travel tips
What might have once sounded like the behavior of a paranoid is now standard operating procedure for officials at American government agencies, research groups and companies that do business in China and Russia — like Google, the State Department and the Internet security giant McAfee. Digital espionage in these countries, security experts say, is a real and growing threat — whether in pursuit of confidential government information or corporate trade secrets.
“If a company has significant intellectual property that the Chinese and Russians are interested in, and you go over there with mobile devices, your devices will get penetrated,” said Joel F…. Continue reading: Electronic Security a Worry in an Age of Digital Espionage – NYTimes.com
Interesting times
Conventional spyware is a piece of code that invisibly tracks a user’s movements and habits without his or her knowledge, and silently reports what it learns back to an evil enterprise (which we can define as anything from “A Russian crime syndicate” to “Facebook”). Prey is a special kind of “white hat” spyware that lies dormant and never tracks a device’s legitimate user. But when your hardware is stolen, you can remotely activate Prey and it’ll begin to invisibly and regularly report the hardware’s location, and the thief’s activity, back to you. Prey isn’t designed to make your life miserable; it’s designed to help you get your gear back.
Prey takes over your devices to… Continue reading: Prey takes over your devices to keep thieves under surveillance – Chicago Sun-Times
As the second law of thermodynamics tells us, all things trend toward chaos and this is no less true with a virtual environment. Sprawl can have a real security impact, and it takes discipline and planning to control sprawl — discipline and planning that won’t occur without someone from the security team actively monitoring the problem and formulating strategies for how to address the issue.
VVirtualization has been one of the most rapidly and widely adopted technologies in recent memory. It’s huge, and it’s here to stay.
And as security professionals know, setting up a virtual environment securely isn’t easy. Significant effort goes into tasks like evaluating off-premise service providers, ensuring regulatory… Continue reading: Post Virtualization Security
|
|