Domain: channelinsider.com
Stories and comments across the archive that link to channelinsider.com.
Stories · 19
-
Recent Sales Hint That Tape For Storage Is Far From Dead
hightechchick writes "Staples' business-to-business sales of backup tape for storage are experiencing a bit of a revival. What's next, a return to dumb terminals and mainframes (a la cloud computing)?" -
IT Workers To Get Fewer Perks, No Free Coffee
dasButcher writes "While the economy is showing signs of recovery and tech stocks posted double- and triple-digit gains in 2009, IT workers are facing a less hospitable workplace in the coming year. Many employers say they're going to continue trimming budgets, particularly in human resources. Rather than giving up head count, they're planning to trim 401k contributions, eliminate bonuses, curtail travel and, dare we say, shut off the free coffee (it wasn't that good anyway)." -
Building a Global Cyber Police Force
dasButcher writes "One of the biggest obstacles to fighting hackers and cyber-criminals is that many operate in the safe harbors of their home countries, insulated from prosecution by authorities in foreign countries where their targets reside. As Larry Walsh writes in his blog, several security vendors and a growing number of countries are now beginning to consider the creation of a global police force that would have trans-border jurisdiction to investigate and arrest suspected hackers." -
SarBox Lawsuit Could Rewrite IT Compliance Rules
dasButcher notes that the Supreme Court will hear arguments next week brought by a Nevada accounting firm that asserts the oversight board for the Sarbanes-Oxley Act is unconstitutional. If the plaintiffs are successful, it could force Congress to rewrite or abandon the law used by many companies to validate tech investments for security and compliance. "Many auditing firms have used [Sarbanes-Oxley Section] 404 as a lever for imposing stringent security technology requirements on publicly traded companies regulated by SOX and their business partners. SOX security compliance has proven effective for vendors and solution providers, as it forces regulated enterprises to spend billions of dollars on technology that, many times, doesn’t prevent security incidents but does make them compliant with the law." -
How Much Does a Reputation For Security Matter Anymore?
dasButcher writes "We often hear that businesses risk their corporate reputations if they don't have adequate security. It's been a common refrain among those selling security technologies: protect your data or suffer the reputational consequences. But, as Larry Walsh points out, the evidence is against this notion. Even companies that have suffered major security breaches — TJX, Hannaford, etc. — have suffered little lasting damage to their reputation. So, does this mean that reputational concerns are simply bunk?" -
Poor Passwords A Worse Problem Than Poor Antivirus
dasButcher writes "Viruses and worms get all the headlines, but poor password management is a worse problem according to a new study by Channel Insider and CompTIA. As Larry Walsh writes in his Security Channel blog, VARs and security service providers say they find more problems with password management than antivirus applications when they do security assessments. While password problems are nothing new, Walsh and those posting on his blog correctly assert that users remain cavalier about passwords and businesses are doing too little to address this serious vulnerability." -
Poor Passwords A Worse Problem Than Poor Antivirus
dasButcher writes "Viruses and worms get all the headlines, but poor password management is a worse problem according to a new study by Channel Insider and CompTIA. As Larry Walsh writes in his Security Channel blog, VARs and security service providers say they find more problems with password management than antivirus applications when they do security assessments. While password problems are nothing new, Walsh and those posting on his blog correctly assert that users remain cavalier about passwords and businesses are doing too little to address this serious vulnerability." -
Network Solutions Suffers Massive Data Breach
dasButcher writes "Network Solutions, the domain registration and hosting service company, suffered a massive security breach that lasted three months and exposed tens of thousands of credit card numbers of its customers and of the businesses that use its hosting and online payment processing service. The company is just beginning the victim notification process. 'There is no information on how the code was planted on the sites. While examination of the code shows that it had the ability to ship data off to a third party, and Network Solutions believes that it did just that, the exact code is not available for public review. There is also no public information as to where the data believed to be stolen was sent.'" -
Adobe Gets Regular On Security Patches
dasButcher writes "Adobe joins Microsoft and Oracle on regularly scheduled security patch releases. The first set of patches for Acrobat and Reader are scheduled for today, and Adobe will release future patch batches quarterly." -
Adobe Gets Regular On Security Patches
dasButcher writes "Adobe joins Microsoft and Oracle on regularly scheduled security patch releases. The first set of patches for Acrobat and Reader are scheduled for today, and Adobe will release future patch batches quarterly." -
Hackers Claim To Hit T-Mobile Hard
dasButcher writes "Hackers are claiming to own T-Mobile USA's servers and to have access to the cellular phone carrier's operations, finance and subscriber data." (Here's the seclists.org post of the claimed breach.) -
Hackers Claim To Hit T-Mobile Hard
dasButcher writes "Hackers are claiming to own T-Mobile USA's servers and to have access to the cellular phone carrier's operations, finance and subscriber data." (Here's the seclists.org post of the claimed breach.) -
Should Auditors Be Liable For Certifications?
dasButcher writes "Enterprises and mid-size business rely on auditors and service providers to certify their systems as compliant with such security regs and standards as PCI-DSS or SOX. But, as Larry Walsh speculates, a lawsuit filed by a bank against an auditor/managed service provider could change that. The bank wants to hold the auditor liable for a breach at its credit card processor because the auditor certified the processor as PCI compliant. If the bank wins, it could change the standards and liabilities of auditors and service providers in the delivery of security services." -
Should Auditors Be Liable For Certifications?
dasButcher writes "Enterprises and mid-size business rely on auditors and service providers to certify their systems as compliant with such security regs and standards as PCI-DSS or SOX. But, as Larry Walsh speculates, a lawsuit filed by a bank against an auditor/managed service provider could change that. The bank wants to hold the auditor liable for a breach at its credit card processor because the auditor certified the processor as PCI compliant. If the bank wins, it could change the standards and liabilities of auditors and service providers in the delivery of security services." -
Who Would Want To Be Obama's Cybersecurity Czar?
dasButcher writes "President Obama is expected to name a new cybersecurity czar sometime soon. This person will be charged with defending the digital boards from attack by hostile nation-states and terrorist organizations. But the question Larry Walsh asks is: Who really wants the job? The previous three people who held the post barely made a dent in solving the security problems. Government bureaucracy and private sector resistance make it nearly impossible to find any measure of meaningful success in this job, he writes." Reader eatcajun contributes a related link to the long-awaited US cyberspace policy review. -
1 In 3 Windows PCs Still Vulnerable To Worm Attack
CWmike writes "The worm that has infected several million Windows PCs, Downadup or 'Conficker,' is having a field day because nearly a third of all systems remain unpatched 80 days after Microsoft rolled out an emergency fix, security firm Qualys said. Downadup surged dramatically this week and has infected an estimated 3.5 million PCs so far, according to Finnish security company F-Secure Corp. The worm exploits a bug in the Windows Server service used in Windows 2000, XP, Vista, Server 2003, and Server 2008. Qualys' CTO said, 'These slow [corporate] patch cycles are simply not acceptable. They lead directly to these high infection rates.'" This is indicative of why some are calling for Microsoft to rethink Patch Tuesday, as reader buzzardsbay pointed out. -
Tech Companies That Won't Survive 2009
buzzardsbay writes "Fresh off their annual market survey, eWEEK channel folks have compiled the list of tech vendors their readers think will fail, falter, or be sold off in 2009. It's important to note that these aren't the opinions of the magazine or its editors. The list comes from folks who work in IT, mostly technology resellers, who are out in the field selling, installing and maintaining this stuff. If there were ever canaries in the tech coal mine, they'd be these service and solution providers who live and die by the slightest shift in the markets. Some of the companies on this list, like Sun and AMD, are shocking because of their size. Others, like CA and Symantec, not so surprising." What other companies are headed for implosion, or should be if all were right with the universe? -
Recession Pushes IT To Find New Value In Old Gear
buzzardsbay writes "Trying to put a bright spin on a gloomy subject, the folks at eWEEK unearth an emerging trend: There's a booming cottage industry of dealers in refurbished computer and networking gear serving folks on the hunt for 'slightly used' and 'new to you' equipment. The dealers selling the stuff tell eWEEK the equipment is practically new, most of it less than a year old, and that the prices for things like servers and routers are lower than they have been since the post dot-com / Sept. 11 days in 2001. Used gear isn't for everybody, obviously. The story points out that while many of these used IT dealers offer configuration services, they don't do installs, and most are not authorized resellers. They do, however, offer decent warranties, so if you can do some of the work yourself, you'll probably be OK." -
IT Workers Are Getting Fatter
buzzardsbay writes "While technologies such as virtualization, multi-threading, and blade servers have made the data center leaner, those who work there are getting... well... not leaner. According to a new study by CareerBuilder.com, 34 percent of IT workers say they have gained more than ten pounds in their current jobs. And 16 percent say they've gained at least twice that. The culprits seem to be the stressful-yet-sedentary nature of tech work coupled with our famously poor eating habits. According to the survey, some 41 percent of IT workers eat out for lunch twice or more per week, making portion and calorie control difficult. Eleven percent buy their lunch out of a vending machine at least once a week."