Information as Money

People often ask how they should protect information.  The closest analogy I have is to treat information as money.  This is because information has value (in most cases, it has a monetary value.)  For example, sales data of one manufacturer has value to its competitor.

Money Tree

And just like money, they have different values.  For example, a euro bill has a different value than a one hundred euro bill.  You also treat them differently according to their value.  This is the same as information.  Information like this blog information is treated differently compared to information containing your personal information or employee information (Hint: Personal and Employee Information are more valuable).

You would not leave valuables unprotected for just anyone to take, and when you are not using valuable information (just like money), you should put it in a safe place equivalent to its value (e.g. a locked cabinet or by encrypting it).  Yet a number of people leave sensitive information out in the open just for anyone to take.

So please remember the next time your company entrusts you with information, understand its value and treat it like money.

{ 0 comments }

Java Change in Behaviour in Web Browsers

From Java 7 Update 21 (7u21), browser based Java content (like Applets and Applications) will be

  1. Presenting additional security information (https://www.java.com/en/download/help/appsecuritydialogs.xml); and
  2. Requiring confirmation before being allowed to run.

An example of the confirmation is shown below:

In the above example, it specifies the location (i.e., URL) as well as potential risks (like the application being unsigned).

Oracle is now recommended that applications be signed by a legitimate Certificate Authority.  This increase in visibility will hopefully help bring better awareness on the risks of running 3rd party applications.  Though I wonder how long will it take before users will similarly treat this like the SSL warnings we get and folks will just click on ‘Run’ regardless.

Reference:

https://www.java.com/en/download/faq/signed_code.xml

{ 0 comments }

Our weather forecast is from WP Wunderground