<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/abc" -->
<rss version="0.92">
<channel>
	<title>Cryptosmith</title>
	<link>http://www.cryptosmith.com</link>
	<description>Authentication, crypto, information security, and life with gadgets - Rick Smith</description>
	<lastBuildDate>Mon, 06 Oct 2008 22:36:24 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>Interesting Summary of Data Breaches</title>
		<description><![CDATA[Verizon&#8217;s security blog has published a summary report of data breaches investigated by their security team. The report covers 500 security breaches they investigated between 2004 and 2007. There are a lot of graphs and tables summarizing threats and impacts.
The authors sensibly point out that this is based on a limited sample, but it&#8217;s great [...]]]></description>
		<link>http://www.cryptosmith.com/archives/406</link>
			</item>
	<item>
		<title>Teaching Programming</title>
		<description><![CDATA[I&#8217;ve taught programming on-and-off since the 1970s. Most recently I&#8217;ve taught some Java and C. If you&#8217;re teaching the mechanics of programming to lots of people (not just the few who instantly &#8220;get it&#8221;) then you must take an incremental approach. You start with simple concepts and mechanisms and work up from there.
In particular, you [...]]]></description>
		<link>http://www.cryptosmith.com/archives/396</link>
			</item>
	<item>
		<title>Computers don&#8217;t work when you lie to them</title>
		<description><![CDATA[Here is a terrific (but depressing) article by Saul Hansell explaining how the Wall Street meltdown was fueled by feeding nonsense to the risk management systems in the big investment houses.
The systems did not have models of those weird derivative instruments being traded, so traders would say they were trading a generic (safe, well-understood) loan [...]]]></description>
		<link>http://www.cryptosmith.com/archives/391</link>
			</item>
	<item>
		<title>Revising OpenID for WordPress</title>
		<description><![CDATA[Will Norris is working on a revision to OpenID for WordPress. This is good, and I have some observations and suggestions. At the moment the OpenID plugin works pretty well - I have separate logins delegated through domains I own. I routinely log in through OpenID for both routine and administrative activities.
I&#8217;ll briefly note the [...]]]></description>
		<link>http://www.cryptosmith.com/archives/325</link>
			</item>
	<item>
		<title>SSL with WordPress 2.6</title>
		<description><![CDATA[This is more of a reminder to myself - you can enable SSL on WordPress, but it&#8217;s essentially an undocumented feature. This afternoon all I could find was a forum posting on enabling SSL.
There doesn&#8217;t seem to be genuine documentation on it in the Codex, at least, not documentation that pops out when you do [...]]]></description>
		<link>http://www.cryptosmith.com/archives/322</link>
			</item>
	<item>
		<title>Easily Reset Passwords and OpenID</title>
		<description><![CDATA[It&#8217;s no surprise that someone managed to reset Sarah Palin&#8217;s password on a freebie e-mail account.  She&#8217;s a public figure and the answers to her so-called &#8220;security questions&#8221; are on the public record. It&#8217;s one thing to do personal and political e-mail on a Yahoo account but it&#8217;s DUMB to use such an account for [...]]]></description>
		<link>http://www.cryptosmith.com/archives/310</link>
			</item>
	<item>
		<title>&#8220;Design Patterns&#8221; for Identity Systems</title>
		<description><![CDATA[These are design patterns in the Christopher Alexander sense rather than the object oriented design sense: they address the physical and network environment rather than focusing on software abstractions. The patterns were introduced in my book Authentication.
There are four patterns: local, direct, indirect, and off-line.

Here is a brief description of each authentication pattern:

Local: All checking [...]]]></description>
		<link>http://www.cryptosmith.com/archives/300</link>
			</item>
	<item>
		<title>Senator McCain and &#8220;Internet Cryptography&#8221;</title>
		<description><![CDATA[In honor of the electoral season, I&#8217;m sharing an old photograph. The occasion was a visit by Senator John McCain (R-AZ) to Secure Computing in June, 1999. We discussed possible revisions to cryptographic export controls, and he posed for photos, holding a copy of Internet Cryptography, which was &#8216;recently published&#8217; back then.

I don&#8217;t want to [...]]]></description>
		<link>http://www.cryptosmith.com/archives/279</link>
			</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 1.023 seconds -->
<!-- Cached page served by WP-Cache -->
