Global Security Watch > Cryptography in the Database: The Last Line of Defense
[Vinny Carpenters blog] I just saw this new book on Addison-Wesley’s site and it caught my interest. Encryption in the database is really becoming a necessity as the last line of defense.
Some related posts from Technorati and Google.
[Vincent Oberle] On Skype security: They called Skype “insecure”, but the reasons are in fact all others. The origin of this ban came from the defense ministry and they have in fact good reasons for not liking Skype: It is too secure for them and contrary to email, wired or wireless phone, they cannot intercept such communications.
[Schneier.com] Security Pitfalls in Cryptography: Strong cryptography is very powerful when it is done right, but it is not a panacea. Focusing on the cryptographic algorithms while ignoring other aspects of security is like defending your house not by building a fence around it, but by putting an immense stake into the ground and hoping that the adversary runs right into it.
[Cl.cam.ac.uk] Ross Anderson's Home Page: 21st July 2005 - Here is a paper on combining cryptography with biometrics, which shows that in those applications where you can get some benefit from biometrics, you don't need a large central database.(as proposed in the ID card Bill). There are smarter and less privacy-invasive ways to arrange things.
[Privacydigest.com] Privacy Digest: Privacy News (Civil Rights, Encryption, Free ...: According to Greg Hoglund, co-author of "Exploiting Software, How to Break Code," this hidden program opens every process on a gamer[base ']s computer, from email programs to privacy managers, and sniffs email addresses, website URLs open at the time of the scan, and the names of all running programs[~]whether or not those programs, emails, or websites could conceivably have anything to do with hacking.
Reflected tags on Technorati: Blog, Security, Global Security Watch