Just like regular mail, email has an envelope. The email envelope includes the sender’s address. Just like regular mail, the sender can write anything they want on the envelope, there is no verification. Even worse, in email a sender can include a human-friendly name that is displayed by the email client. (Oh, so that’s whyRead more
Read More
Blog
Adam Shostack (currently at Microsoft in the role of security program manager and with whom I worked on a security audit of the service delivery platform at Radialpoint) and Andrew Stewart recently published The New School of Information Security. The authors want to change our way of thinking about Information Security a tall order. Basically,Read more
Read More
Recent Posts
