Gbitten

Hoje de manhã flagrei um carro com o logotipo do Google gravando imagens provavelmente para o Google Street View.

Augusto Paes de Barros iniciou um debate no Goggle Wave sobre o processo de tomada de decisão de segurança. Segue a minha resposta sobre o assunto:

Hello Augusto
Security decisions are risk decisions (directly or indirectly), but what kind of risk does it matter? For me, the most important is the risk of a company doesn't achieve its objectives. Although all these security decision processes that we have today are deficient to address the organizations' objectives.
Let's see ourselves. Most of security professionals don't "waste" their time to define which is the objective of a security control and if it is aligned with company objectives . Even an enlightened professional, when proposes a control to minimize some threat, almost never evaluates the impact of controls on company's opportunities. A control, once it has been implemented, became sacred and no one can even propose its revoke, why? I would like to see something like "zero-based budgeting" on security process, so every year security personnel should justify every existing and planning security controls.

Marcadores: Gestão de segurança

Tentei instalar uma atualização de segurança hoje. Mas a Microsoft não me permite fazer o download da atualização sem que o Windows Genuine Advantage (WGA) esteja instalado. O FAQ do WGA diz o seguinte:

P: As atualizações de segurança exigem validação?
R: As atualizações de segurança não fazem parte do WGA ou do OGA. Você pode instalar atualizações de segurança com o recurso Atualizações Automáticas do Windows ou baixá-las do Centro de Download.

Mentira! Não há como abaixar a atualização que apontei acima. Em resumo, sempre me recusei a instalar o WGA simplesmente por que ele não me agrega nenhum benefício. Agora, a Microsoft me nega a possibilidade de realizar uma atualização de segurança importante. Me sinto ultrajado.

Em tempo, meu Windows não é pirata, eu pagei à Microsoft por ele.

Marcadores: Windows

Nesta nota, a T-Mobile e a Microsoft praticamente não deixam esperança de recuperação dos dados dos clientes no serviço T-Mobile Sidekick. É impressionante como as organizações continuam a não implementar, ou implementam de forma deficiente, controles para mitigação de riscos básicos porem de grande impacto. Neste caso específico, aparentemente faltou gestão de mudança e backup.

DEAR valued T-Mobile Sidekick customers:

T-Mobile and the Sidekick data services provider, Danger, a subsidiary of Microsoft, are reaching out to express our apologies regarding the recent Sidekick data service disruption. We appreciate your patience as Microsoft/Danger continues to work on maintaining platform stability, and restoring all services for our Sidekick customers.

Regrettably, based on Microsoft/Danger’s latest recovery assessment of their systems, we must now inform you that personal information stored on your device – such as contacts, calendar entries, to-do lists or photos – that is no longer on your Sidekick almost certainly has been lost as a result of a server failure at Microsoft/Danger. That said, our teams continue to work around-the-clock in hopes of discovering some way to recover this information. However, the likelihood of a successful outcome is extremely low. As such, we wanted to share this news with you and offer some tips and suggestions to help you rebuild your personal content. You can find these tips at the T-Mobile Sidekick Forums (http://www.t-mobile.com/sidekick ). We encourage you to visit the Forums on a regular basis to access the latest updates as well as FAQs regarding this service disruption.

In addition, we plan to communicate with you on Monday (Oct. 12) the status of the remaining issues caused by the service disruption, including the data recovery efforts and the Download Catalog restoration which we are continuing to resolve. We also will communicate any additional tips or suggestions that may help in restoring your content.

We recognize the magnitude of this inconvenience. Our primary efforts have been focused on restoring our customers’ personal content. We also are considering additional measures for those of you who have lost your content to help reinforce how valuable you are as a T-Mobile customer.

We continue to advise customers to NOT reset their device by removing the battery or letting their battery drain completely, as any personal content that currently resides on your device will be lost.

Once again, T-Mobile and Microsoft/Danger regret any and all inconvenience this matter has caused.

Marcadores: Backup, Controle

• Helping users keep plugins updated

Marcadores: Firefox

Esta é uma lei (muito) boa.

Marcadores: Direito

http://twitter.com/forasarney