Foundstone Blogging

It's back! Some of the FS gang have started blogging again through official McAfee channels. Check it out here (or better yet, see the Foundstone-only archive here).

It may be a few days before this sees any action, so be patient!

Applet Security

Alex has written one of the clearest explanations I have seen to date of the applet security model. I was previously mistaken in some of my thoughts on this issue. Alex set me straight yesterday during a (virtual) work conversation (mmmm, Skype) and blogged about it to make sure everyone else understands it too.

Read it here: A Brief History of Applet Security

iPhone == iP0wn

I think Brian Chess and I are sharing the same thoughts about Apple's SDK for the iPhone. I'm happy developers can write apps for the iPhone, but this is a craptacular mechanism for writing apps, since they depend on connectivity to the network to function. And using security as the excuse? I guess Steve Jobs has never seen an insecure web app...

In other news, I am still lusting after the iPhone...

The Rich Web Experience & No Fluff, Just Stuff

Thanks to my good friend and coworker Roman Hustad I have been hooked up with the guys from No Fluff, Just Stuff where I will be presenting a few talks.

The first group of talks will be in London at a No Fluff, Just Stuff seminar series. You can find the list of presentations I am making here.

The following week I'll be talking at the Rich Web Experience in San Jose, CA... details on this conference coming soon.

Cf.Objective() Preview Talk

My preview talk for Cf.Objective(), Security and the SDLC: Threat Modeling, i online at Charlie Areharts User Group TV. Check it out here.

Behind on posting... again

I'm behind on posting about HFD again due to work... I've been on the road the past two weeks from Sunday to Friday, so it has definitely slowed me down.

Last week I was in Madison, WI for the final blast of winter weather. We got more than 6" of snow in a day, more snow than I have seen in many, many years. Thankfully, Madison doesn't just shut down when it snows.

I returned home to much warmer weather on Friday, just in time to hike at Amicalola Falls on Saturday. We were expecting severe thunderstorms, so it was decided that we'd do a short hike of 10 miles to the Len Foote Hike Inn and back. This is a pretty easy trail with no difficult climbs or descents, so we knocked out the 10 miles and a short break at the Hike Inn in about 3.5 hours. After sharing some homebrew with the team, we all headed back to town and took shelter from the storms which never materialized... Sure, it rained, but it wasn't the downpour that was expected.

This week I'm in Nashville, TN, home of bad bouffant hairdos and some really questionable "western" clothing. I feel like I've been transported back in time... I really can't wait to leave.

The next few weeks will be light on posting since I'm going to be traveling a lot. Sunday morning I'll be hiking on the Benton MacKaye Trail with the team before running back to ATL for a flight to Memphis. I'm going to be presenting a seminar on software security in Memphis and meet with some potential customers for a few days before returning home. The following week I'll be back to the cold, white north — hopefully a lot less cold and white this time — to teach a class and present at Cf.Objective(). This trip is going to involve a LOT of driving. I fly into Green Bay, WI on Sunday, drive to central WI that afternoon and spend the next 4 days teaching a software security class. Then I'm driving 200+ miles to Minneapolis to catch the first day of Cf.Objective() where I will be presenting a talk entitled Security and the SDLC: A Strategic Approach to Software Security. But I won't be spending a lot of time at the conference since I need to be in NYC that night. So I'll be making a mad dash to the airport after my talk to catch a flight.

Damn... its going to be a busy few weeks. Hopefully things will calm down as we get into May... but I doubt it. Work hard... play harder!