what we're reading, week of 3/23
von VPNHaus | 26.03.2009 |Highlights
From Lori MacVittie’s Blog…
Can the Cloud survive regulation?
Lori MacVittie questions whether a more regulated cloud would survive new laws and regulations? Concerns have been raised by multiple industries on the reliability and security of the cloud in general. Until conflicts between security, regulations, reliability, and privacy are addressed, the cloud may be unsuitable for any organizational use.
From around the Blogosphere…
Since the CanSecWest conference there has been much buzz surrounding vulnerabilities and their price tag. Here are three different perspectives on the issue.
ZDNet | Zero Day
"No more free bugs"? There never were any free bugs
Adam O’Donnell argues that vulnerabilities were never free, and that vulnerability researchers were always compensated some way. Adam continues his argument by briefly describing the history of vulnerability research, and how it has remained relatively the same.
Vulnerability Research: Times They Are A-Changin’
Dave Goldsmith believes the trend of selling and buying vulnerabilities has changed. Dave outlines the different components which go in to research and describes how its changed over time.
The Mac Security Blog
Interview with Mac Hacker Charlie Miller
Peter interview Charlie Miller, the security researcher who hacked a Mac in ten seconds at the conference. In the interview, Charlie vows he’ll never give a bug for free.