Zappos Explaining How They Got Zapped

It's one of those emails you really hate to receive, so I'm sharing parts of it with you, along with my reactions: "First, the bad news:" [Don't you hate it when an email starts like that?] "We are writing to let you know that there may have been illegal and unauthorized access to some of your customer account information on Zappos.com, including one or more of the following: your name, e-mail address, billing and shipping addresses, phone number, the last...

Dear Santa,

All I want for Christmas is a few easy items to throw in your bag: Single-sign on for all applications -- so I don't have to constantly go through several levels of security to look up my passwords that are hidden in well guarded files on well-secured devices. I'll settle for biometrics that really work. Anything that minimizes all the steps required to just get through the day, get real work done and live our lives. True connectivity everywhere --...

Maybe Sherlock Can Solve the Password Dilemma

Security is a wonderful thing, but the constant need for passwords and elaborate screening has become maddening. Last night was a great example. I had several tasks to accomplish with my wireless carrier and another vendor. As I always do, I tried to manage the transaction online, only to be told that my user name and password were incorrect. I checked my password keeper to confirm I had it right (I did), after needing to remember the password to the...

RSA 2009 - bang or bust?

As the old saying goes, "if a tree falls in the forest and there's nobody there to hear it, does it make a sound?" The same can be said about RSA 2009, which took place last week in San Francisco. Arguably the biggest IT security show of the year, RSA typically arrives with much fanfare and a flurry of activity as security vendors, researchers and writers prepare to take in all that the show usually has to offer. I had...