ISC2 Blog

The sad state of Java security

The problem of Oracle is that they bought a technology that was stretched out to be actually “write once, run everywhere”. The Virtual Machine that provides this functionality had to be ported to all devices, and lately (in the past few years) also on mobile devices. As written in the news, even if the “run everywhere” meant initially “run on every platform” – so cross platform - this concept has been now extended to actually run on platforms used by mobile devices as well (ubiquitous computing). During the last years, Java evolved while it has been ported to the new... Read more →

You should care about the EU Data Protection Regulation

It can be easy for an Information Security professional to watch the ongoing debate over Europe’s pending Data Protection Regulation with a skeptical eye. While parliamentarians dicker over the Right to Erasure (formerly known as the Right to Be Forgotten) and Privacy by Design, you’re worried about practical matters like managing BYOD or preventing the next DDoS attack. Read more →

Unlinking from LinkedIn

Like lots of people, I have an account on LinkedIn, the social networking website used by so many professionals in IT (and other areas, of course). It must be said, though, that at this point I don’t access it much. Being already semi-retired, I’m not too concerned about having a network of people I can approach about alternative employment if I suddenly lose my customers in the security industry. The groups I’m a member of sometimes flag an interesting issue, but an increasing number of the messages I get via LinkedIn are a little annoying. For instance: People I barely... Read more →