July 31, 2007

Publish All SSNs!

Now is your chance for the best opportunity to reduce identity theft. Submit comments to the FTC here. I suggest saying something like this.

Jul 31, 2007 7:40:40 PM | Identity Management

The comments to this entry are closed.

NEXT POST
Ten Points about Security ROI and ROSI It keeps coming up, and I believe there are some misconceptions about Return on Investment and Return on Security Investment that should be clarified. Here are ten points to consider: 1) NPV does not compare to ROI as the NPV result is expressed in dollars and ROI is ultimately a percentage (of the investment dollars). In the case of cost centers, NPV is more consistently (and appropriately) compared to TCO, another measure expressed in dollars. NPV will be lower than TCO, unless the period in question is a year or less. 2) IRR is generally considered a better measure of...
PREVIOUS POST
On Vulnerability Auctions Recently, WabiSabiLabi, a new vulnerability auction site launched and hit the trade press and blogosphere hard. It is interesting these days to see how "in vogue" economics impacts the security world, and certainly auctions are interesting "experiments." Today, there are six vulnerabilities active on the site, with the highest bid for a single vulnerability at 200 euros, or about $280. There are two types of people who may use this auction site - people who want to exploit the vulns (Exploiters) and people who want to fix the vulns (Fixers). Exploiters Exploiters want to exploit software in ways that provide...

I'm a guy with some ideas and opinions.

The Typepad Team

Search

Recent Comments