“Warren & Brandeis Cringe”- Identification through Typing March 21, 2012
Posted by Chris Mark in InfoSec & Privacy, Laws and Leglslation.Tags: Chris Mark, DARPA, InfoSec & Privacy, mark consulting group, privacy, security, the right to privacy, typing authentication, warren and brandeis
add a comment
Several years ago a few researchers demonstrated that the way in which people type is unique enough to be used to identify that person with a high degree of confidence. It is not simply speed but includes cadence, time between particular keystrokes and other aspects. This week DARPA announced that they are working to make the solution a reality. Due to the uniqueness of a person’s typing DARPA says: “mimicking keystroke dynamics is physiologically improbable,” This means that it would increase the challenge of masquerading as another person. I mark this up as “good in theory and terrifying in practice”. In a talk last year a DARPA representative explained the process as such: “is move to a world where you sit down at a console, you identify yourself, and you just start working, and the authentication happens in the background, invisible to you, while you continue to do your work without interruptions.” This is precisely where the issue comes to life. (more…)
Social Media – Dangerously Anonymous & Plausibly Deniable March 19, 2012
Posted by Chris Mark in Industry News, InfoSec & Privacy, Risk & Risk Management, terrorism.Tags: Chris Mark, facebook, hacktivism, mark consulting group, plausible deniability, Social media, terrorism
add a comment
Today on Foxnews was a story about a person who claimed to be an occupy Wall Street protester who tweated a threat to kill a police officer. A user with the name “Smackema1” tweeted: “We won’t make a difference if we don’t kill a cop or 2,” What is interesting about this is that the person had never attended any Occupy protests and was actually in Florida when he sent the tweet. The author, who police are trying to identify, clarified his remarks to a Florida newspaper when he said: “It’s not like I meant anything of it. Who takes anything like that seriously? I’m in Florida, what am I going to do?” (more…)
More Security Theater – “CyberCops and Robbers” March 15, 2012
Posted by Chris Mark in Industry News, Risk & Risk Management, Uncategorized.Tags: bank robberies, Chris Mark, fbi, mark consulting group, risk, security, security theater
add a comment
Today in my Google alerts, I had a story from FoxNews (…ahemm) titled “CyberCops and Robbers; Digital Posses to Bust Bank Robbers” After reading the article, I had to write a post and discuss (rant?) about the fluff that is being proposed. The article talks about a new initiative by the FBI and select banks where banks that comply with certain rules and agree to be involved in the program get to post a “badge” on their door like the one in this post.
There are so many flaws and issues with this approach, I don’t know where to start. This is Security Theater at its finest. For those who are unfamiliar with the term, Bruce Schneier, in his book Beyond Fear, coined the phrase security theater. Security theater describes security countermeasures intended to provide the feeling of improved security while doing little or nothing to actually improve security. (more…)
Articles by Brad Carr- 2nd Force Reconnaissance Commanding Officer March 14, 2012
Posted by Chris Mark in Risk & Risk Management, weapons and tactics.Tags: 2nd force recon, airborne, brad carr, Chris Mark, HAHO, HALO, USMC, weapons and tactics
2 comments
I received a call from an old friend last night. I served with Brad Carr years ago when we were both young, enlisted Marines. Brad is the former CO of 2nd Force Reconnaissance Company and served with Her Majesty’s Royal Marines. has recently completed a Command course and his Masters Degree in Military Science. As we were rehashing old days, he sent me a few articles he had published. I am republishing (with his permission) his articles here because they are interesting reading. Additionally, they should assuage any concerns that Marines are simply knuckle dragging meat-heads 😉 Congrats to Major Carr on his accomplishments!
22 Arrested in Iranian Backed Plot Against US and Israeli Embassies March 14, 2012
Posted by Chris Mark in Industry News, Risk & Risk Management, terrorism.Tags: Azerbaijain, Chris Mark, Iran, risk management, security, Stuxnet, terrorism
add a comment
According to FoxNews and Agence France Presse, 22 people have been arrested inside Azerbaijan suspected of planning attacks against the US and Israeli embassies inside Baku. According to the reports, the attacks were planned for the benefit of Iran.
“Twenty-two citizens of Azerbaijan have been arrested by the national security ministry for cooperating with the Iranian Sepah,” the ministry said, referring to the Iranian Revolutionary Guards, according to AFP. “On orders of the Sepah, they were to commit terrorist acts against the US, Israeli and other Western states’ embassies and the embassies’ employees.” (more…)
Global Security, Privacy, & Risk Management 