Government


Former Pennsylvania CSO Maley Speaks

Robert Maley was fired from his job as the chief information security officer for the state of Pennsylvania earlier this month after he spoke, without proper authorization, about security incidents involving the state during a panel discussion at the RSA trade show. In this interview, Maley gives his side of the events that led to his dismissal. Read the full article. [Computerworld]

Researchers Can Keep Web Servers Up During Attack

MIT researchers funded by DARPA (U.S. Defense Department’s Defense Advanced Research Projects Agency) have developed a system to keep web servers — or, for
that matter, any Internet-connected computers — running even when
they’re under attack. Read the full article. [MIT News]


Over the past week, security researchers and vendors have been playing a cat-and-mouse game with a cybercrime-friendly ISP known as TROYAK-AS. The results so far? A series of attempts by the cybercriminals to restore access to their botnet, and an invaluable learning experience for the community, with the gang exposing node after node of malicious activity. Read the full article. [ZDNet]

Pasquale Manfredi, 33, who reportedly calls himself Scarface and
allegedly runs the ‘Ndrangheta mafia, was captured in Calabria using
intelligence gleaned from the social networking site. Manfredi, who
used the alias Georgie on Facebook, is suspected of using social
networking to exchange coded instructions and stay in contact with
other mobsters. Read the full article. [The Register]

The Public Interest Registry will add an extra layer of security known
as DNS Security Extensions (DNSSEC) to the .org domain
in June — a move that will protect millions of non-profit
organizations and their donors from hacking attacks known as cache
poisoning. Read the full article. [Network World]

The news that Pennsylvania CISO Bob Maley lost his job for publicly discussing a security incident at last week’s RSA Conference really shouldn’t come as a surprise, but it does. Even for a government agency, this kind of lack of understanding of what actually matters is appalling and it is a glaring example of the sickness of secrecy that’s infected far too much of the security community.

WhitePages.com has stopped ad networks from delivering ads to its site after they were found to contain fake antivirus malware. Visitors to the Drudge Report, The New York Times, the San Francisco Chronicle, and other Web sites were found to be delivering ads containing malware last year. Read the full article. [CNet]