Often people ask me why I don’t like the use of DNA and other biological markers as identities. My answer can be expressed in two points: Biometric data cannot be repudiated. If your biometrics are compromised you cannot change them like you can do when your personal certificate (or password) is compromised. Biometric data are [...]
Here is an interesting point of view on security business today from an IBM Security Strategist: http://www.networkworld.com/news/2009/081709-8-dirty-secrets-of-the.html Among the eight points some are tightly related to enterprise strategy and enterprise architecture. Points 2, 6 and 7 focus on external concerns, regulations and security product vendors, but others may be summarized like this: what do I [...]
Here is a very good post of security guru Bruce Schneier on how we as individuals are good at evaluating risks: http://www.schneier.com/blog/archives/2009/08/risk_intuition.html. We often hear that people do not follow rules because they do not understand risks and Schneier shows us that the error is to forget that we do not live in a world [...]
Last post on dvau
