March 2011
Security Innovation Grant by Dragon Research Group
Here it is - 10 000 USD are in wait for their new owner :)
Forensic books on mobile platforms expected in 2011
Two books from Syngress on mobile platforms security and forensics are to be on the market in June 2011.
One of them is focused on iOS security and forensic techniques and is authored by bobile forensic experts Andrew Hoog and Katie Strzempka.
The other one is solo work of Andrew Hoog. According to the draft outline published in viaForensics blog it will contain comprehensive review of Android platform, its security concepts and description of different android forensics techniques.
Good luck to the authors, keeping my fingers crossed everything to work well and the books to come out on time.
New Forensics challenge by Honeynet project
If you enjoy challenges, especially forensic ones - here is another one brought by Honeynet project. It is suitable even for beginners :). The solutions should be submitted by 30th of March so hurry up :)
Enjoy!
Moskov's professional blog
My colleague's blog. He updates it from time to time with some good articles.
Lance Mueller Forensics Blog
Nice and tidy blog that Lance keeps updated with interesting articles and interesting forensics puzzles as well.
Enjoy!
Why the shoemaker walks barefoot?
For a long time I've retained myself from commenting on the HBGary case. And that's because everyone already spoke out - louder and not that louder - their own opinions. So I thought that everything on that theme is already said by different guys. Today I found small chunk of time to read some RSS feed entries left behind of my reading schedule. One of them a "The H" publication of course was follow up on HBGary case. Found it pretty interesting and decided to share it.
But most important - now I'm really on my way to write down my thoughts on a theme that really bother me for some time now.
In my mother's country there is saying - "The shoemaker walks barefoot".
My experience as a person involved somehow in the security filed confirmed that this saying is all valid for that field as well. The case with HBGary is just an another example. But before that I've came across on so many different manifestations of that particular maxim that I've lost their count. Amongst them - security products having so serious security flows that you simply cannot trust their output, security personnel that does not follow their own recommendations in their personal life, security consultants and security blogs you've been trusting got hacked and exposed ... so I just can not ask the question "Why?" - is it a matter of overlooking your job, or a matter of loosing your passion for the things you do simply because you got bored doing the same thing on and on as you profession and just differentiate your personal life from what you do for the living - what?
I keep thinking and cannot seem to find out clear answer for now, but will keep updating that post with new thoughts on the topic.
Have a nice day!

