Home Projects Pictures Books About PGP Key

Endpoint Security by Mark S. Kadrich

January 17th, 2008 Anthony Towry

Cover of Endpoint Security

This book is just almost worth reading, almost.  I get excited about securing the endpoint.  So, you can imagine how miffed I was when this book turned out to suck.

I agree with the author in that the endpoint has become the perimeter, and as such, shifts and flows as devices enter and leave. The endpoint is critical. The author does a fair job of presenting the concept. However, a communication breakdown starts to occur soon after. Your flag to put the book down is when he introduces the grand scheme for standardizing graphical representations of a network and it's endpoints.

The only place I can see this book being of use is in the hands of a lightly trained desktop manager. The basic steps for keeping a clean box are provided. Implementation may be a tough thing to bring about "by the book" as the recommendations are not necessarily business friendly.

There are some nuggets of wisdom buried in the noise, but it's really not worth the effort to read. I do not recommend this book.

Posted in Books, Management, Security | No Comments »

Common SOA Mistakes

January 8th, 2008 Anthony Towry

The article over at eWeek, "10 Mistakes Companies Make When Implementing SOA Projects and How to Avoid Them" got me thinking about some of the troubles I've seen in adopting architectures. As I was reading through Paul's list I found some things I really liked. He has a few gems that just might save some poor bastard a whole lot of frustration.

I'm going to pull a few numbered points directly from the article.

3. Spending More Time on SOA Products Than SOA Planning
5. Forgetting that SOA is a Business Problem
9. Expecting the SOA Project to Spread Quickly

My feeling is that the members of this dangerous little trifecta belong together. Let me explain why. Read the rest of this entry »

Posted in Management | No Comments »

How to Track a Project Off a Cliff

November 11th, 2007 Anthony Towry

Scott Berkun has posted an article recently that is aimed squarely at the ambiguity surrounding the title of Project Manager. Right away he splits the title into two factions, a Project Tracker and a Project Leader. Right away we get a closeup view of what's wrong with the title in the industry today.

Scott shares some great insight into how he picks out the leaders from the trackers and he's got the questions you need to ask in order to find out "Just what the hell is it you do?".

A Project Manager ought to have some real ownership of where a project is headed.  Anything else is pretty lame.

Posted in Management | No Comments »

  • Recent Posts

    • New ProCheckUp ValidateRequest Bypass
    • Samurai Web Test Framework 0.1
    • Altering the Mac OS X Login Access Window Text
    • Summary on the State of Nmap
    • Android Security Team Says Hi
  • Archives

    • September 2008
    • August 2008
    • July 2008
    • June 2008
    • May 2008
    • April 2008
    • March 2008
    • February 2008
    • January 2008
    • December 2007
    • November 2007
    • October 2007
    • September 2007
    • August 2007
    • July 2007
  • Categories

    • Art
    • Books
    • Community
    • conferences
    • Hardware
    • Management
    • Operating Systems
    • Podcast
    • Programming
    • Projects
    • Security
    • Site News
    • Software
    • Testing
    • Uncategorized
    • Web development
  • Blogroll

    • Defcon 405
    • ha.ckers.org
    • Halvar Flake
    • OSVDB Blog
    • phed.org
    • Scott Berkun’s Blog
  • Tags

    .Net ASP.NET Beta Books browser buffer overflow C Community Compliance Concept conferences Credit Cards dc405 defcon Development exploit Future fuzzing hacking Linux malware Management Metasploit Microsoft oklahoma Open Source osvdb OS X Patterns PCI Perl Podcast Programming protocols Ruby secure coding Security Silverlight SQL Server Testing tools vulnerabilities vulnerability WordPress xss

Calculated Decision has Joomla! under the hood!

Podcast Powered by podPress (v8.8)