Ioannis S. Haviaras

Why do companies tend to have users change their passwords themselves as an initial step to interact with employees or consumers after a potential security breach? Isn’t such reaction become too predictable for hackers? If so, aren’t they using this in their own advantage? I’m not saying it’s a bad strategy to suggest so; however, I believe a superior approach should be developed. For example, companies can implement a system that automatically assign a random/temporary password to users, then prompt them to create a new one instantly after a security breach. This will allow more users to change passwords faster and help all internal parties focus better on the best tactic to combat the system breach.

Glad you posted this Ioannis. I saw this earlier this week. It’s an interesting concept, but I imagine this would be really difficult to coordinate. Air-gapped systems also usually have very high physical security controls and are located in rooms with no windows or doors. This is a good reminder of the importance of these controls. The article mentions keeping air-gapped machines in secure rooms away from windows, placing film over a building’s glass designed to mask light flashes, or even putting a piece of tape over the LED. Most data centers I’ve visited are behind closed doors in rooms with no windows.

testing

I agree with this article that there is definitely a skills gap in our field. It is tough for companies to find the right talent at the salaries they are willing to pay. Most have champagne taste and beer money! A lot of the strong talent seems to be getting absorbed by high tech companies, financial industry, and government contracts. These are high risk and usually highly regulated/audited companies that frankly cannot afford to have a skills gap. Therefore they are willing to pay the extra salary for highly qualified individuals.

Well, this should not be a surprise because most private organizations have not taken cyber security serious until recent years. Therefore, it will take some time before students realize demand is rapidly growing in this field. It won’t be long before cyber security talent’s demand catches up with software programming. In fact, these two will go hand-in-hand in the future because whatever is written will certainly need to be protected too. And one of the best ways to accomplish so is to have coders develop and implement proper security strategies. This is how to build on a solid foundation.