+ Telecom, Security and P2P +

News and comments at Telecom, Security and P2P, bridging china security to the ...

Last Update: Sun Jun 7 12:37:11 2009

+ My new blog at sbin.cn + Due to the publicly known reasons, this blog at wordpress.com has been not accessible at China for a long time till last Spring [...] me to update and manage this blog, while most of my readers from mainland can not read it since then. So I decide move it to [...]

+ Security 2.0, Security 1.0 SP2 … Web 3.0 … + Feld expressed his dislike to those fashion words in his famous blog:  I’m personally going to boycott the phrase “Web 3.0” [...] system about this, including Gordon Weakliem’s “I haven’t even gotten around to upgrading to Web 1.0 Service Pack 2”, [...]

+ SANS Top 20 Internet Security Attack Target List for 2006 includes VoIP for the first time + Today SANS announced the 2006 version of their annual “Top-20 Internet Security Attack Targets” and for the first time, VoIP is [...] technology has seen rapid adoption during the past year. At the same time, there has been an increase in security scrutiny of [...]

+ China Mobile say no to 802.11i + China has adopted WAPI as its national wireless access standard in 2003, instead of  802.11i, which lead to furious debate at that [...] in China – China Mobile has conducted a security testing to 802.11i and found security vulnerabilities in it. Test [...]

+ A whitepaper on audit of SSH and RDP + A startup at China, BMST, is exploring a new field in security audit by rolling out their ground-breaking product – [...] like audit systems, SA can audit those encrypted protocols transparently, without necessity to install expensive agents [...]

+ It’s Cool. Go to Yahoo Mail Beta + I have a Yahoo Mail account to receive some mailing lists. For a long time I didnot login to check those messages. Today I found it [...] Beta, very cool interface. See the below screenshot. I had very different experience with Live Mail beta from Microsoft, slow [...]

+ The pain of patch management + There are always more and more vulnerabilities and patches in our IT life. It has become one part of our job. Isn’t it? [...] just go ‘windows update’”, then you must be a individual computer user, not an administrator. The hardest is [...]

+ This is a samle. + This morning I found this interesting offer by Google. It’s more convenient and powerful than the old Writely. Moreover, it ...

+ China telecom operators and Sarbanes Oxley Act Compliance + In recent 2 years in China, the main rhythm in telecom industry is the compliance journey of Sarbanes Oxley Act (SOX). The four major [...] Netcom, China Unicom, all have public-list at USA stock market. In a similar time schedule, each of them has spent a lot of [...]

+ In 2006, China has issued 15 national security standards + In China, network and information security have been getting rising attention in these years, not only from the government and those [...] and internal control manuals are made and executed in FSI (Financing, Securities and Insurance) and telecom enterprises as well [...]

+ WP’s first step to profit + The largest free blog hosting service provider – wordpress.com rolled out a new service – CSS customization, to give the [...] own flavor. This service is not free, instead you have to pay 15 credits for it. You can buy a credit point for 1$ through [...]

+ What Hamachi brings? + Bill recommended one “new” application to me. That’s Hamachi. It gave me a very complicated feeling. It’s a [...] makes use of P2P technology and has the capability to tranverse the NAT/FW enterprise perimeter. Additionally, it brings us an [...]

+ Ground-breaking audit tool for SSH and Windows Remote Desktop Protocol (RDP) + A startup company in China, BMST Co. Ltd., is bringing security managers and auditors a ground-breaking product which can audit SSH [...] layer applications. The product is named Session Auditor. It can record, replay, query, correlate those session data from most [...]

+ UTM in China + In China, UTM (Unified Threats Management) has been rocketing in recent months, not only in the media, but also in the real market [...] and other soft-ad everyday, while Cisco, Juniper, Symantec, Securecomputing, McAfee and etc. keep talking on their vision [...]

+ 12345678! Pyramid Framework + Yesterday afternoon, WHY and I worked out a holistic enterprise internal control framework. We named it as 12345678! Pyramid [...] Layers: Decision Makers, Managers, and Execution Four Phases: Plan, Do, Check, Act Five Layer Controls: Control Environment, [...]

+ VoIPsa Blog + Here is coming an eye-catching blog at VoIP security at VoIPsa Blog. ...

+ Go Security 2.0 + When I try to dig "Security 2.0" via Google, only one noticeable hit was found from CSOonline by Sarah. Sarah summarized the [...] security and so on. Sarah reported a case study from Constellation Energy Group on convergence of physical security and IT [...]

+ China’s “Plan” – A Question of (a) Character + As a Chinese, from my birth at the end of 60s, last century, I witnessed the great impressive change in China in the passing 20 [...] Five-year Plan, it used the official four-character phrase wu nian ji hua (五年计划), which has been in use since the [...]

+ Best practice on password management + This morning I read a good essay named "Security Myths and Passwords" by Prof. Eugene Spafford. Prof. Eugene told us his doubt [...] origin of this "best practice". The defects and even failures in most of enterprise security defense systems can be [...]

+ Will Net Neutrality come again? + See comment at Register, named "Net Neutrality bid gone for good" by Andrew.  A bunch of Internet giants expressed their [...] fashion", and even "with better branding". The key point in my brain, for its possible recoming, is the [...]