Shahid Sharif

Social-networking apps?

Did you know everytime you download an application to add more bells and whistels to you social-networking website you are consenting to allowing the developers of that application access to your profile, minus your address.  This even works if you have set yourself as private as you can.  People remember that, if you are providing …

Social-networking apps? Read More »

Risk Assessment

Risk Assessment methodologies have been a controversial topic for a while.  There are to ways to asses risk: Qualitative Quantitative One school of thought believes that Qualitative is the way to go, hence they contend with High/Medium/Low kind of ranking. The other school of thought believes that Quantitative is the way to go where the …

Risk Assessment Read More »

PCI DSS

Just attended a PCI-DSS workshop organized by VISA, wow, sure was worth it.  Have read the PCI-DSS docs a number of times but the whole classroom experience was very valuable. Some important items worth noting: The idea behind the PCI program is to “Render the credit card data unreadable”, they way you could accomplish is: …

PCI DSS Read More »

VIOP Phone awes

Came across this news article VoIP tragedy underlines need for up-to-date information, a child dies only because the parents choose to use a VoIP phone.  VoIP services provide a load of features for a very low price compared to the conventional phone system (POTS).  Consumers always shopping for a bargain, with all the features, VoIP …

VIOP Phone awes Read More »

RSA2008

Attended the RSA2008 Conference, wow! what an experience. Where else would you get all Security buffs and related technologies under one roof? As per a RSA newsletter about 17000 Security Professionals attended the event.  If you would like to get upto speed on the latest trends in security industry, RSA Conference is the place to …

RSA2008 Read More »