Information Security

The risks from Cyber cime - Hacking - Loss of Data Privacy - Identity Theft and other topical threats - can be greatly reduced by implementation of robust IT Security controls ...

Lachlan Gunn Executive Director at European Association for Secure Transactions

Do you get SMS alerts for debit card transactions?

Does your bank provide SMS alerts for debit card transactions? If it does, do you use the service? According to an article in the Times of India, with effect from July 2011, the Reserve Bank of India (RBI) has made it mandatory for ALL Indian banks to provide this service to debit card holders, and all debit card holders are required to register t...

18 August 2011 /security

Retired Member 

Comparing Mobile and Contactless Payments

As we have seen, contactless payments are beginning to move into the mainstream. As my colleague Mark Carpenter has previously noted in a blog, support for contactless transactions is moving out from the metropolis, even to the rarefied environs of his country retreat. According to Visa Europe, in 2010 it alone issued 10 million contactless card...

25 July 2011 /payments

Retired Member 

Assessing Risk? Ask a pigeon.

I was recently browsing, when I came upon an interesting article. It was discussing the Monty Hall problem. For those of you who don’t know, this problem is based on a US quiz show and has caused a huge amount of debate at various times in the past. The idea is as follows. A contestant is asked to look at three closed doors and told behind tw...

14 July 2011 /security /regulation

Retired Member 

The PCI SSC Publish Virtualisation and Cloud Advice

I have just been reading the new guidance provided by the PCI SSC on Virtualisation. This document has been long anticipated, having been pre - announced at the PCI SSC User Forum back in October 2010. The document includes advice for local virtualised servers and environments as well as advice for those merchants considering a wholesale switch t...

23 June 2011 /security /regulation

Retired Member 

Security: Be very worried NATO uses hbgary

I have to speak out. You must remember hbgary, the company which apparently conspired with BoA/DOJ on ways (some illegal) in which to tackle wikileaks? Well they were allegedly hacked by a 16yr girl in retaliation for their unethical actions and the CEO subsequently quit. The company emails & files for ...well several years... are circulating o...

23 June 2011 /security

Retired Member 

Are you prepared for World IVP6 day?

As I ask the question I can hear the thud of exasperation from overworked network administrators. Surely not another awareness day or preparatory day for the masses; haven’t network administrators enough work to handle. Well, I suspect they do, however World IPv6 Day does have a serious intent. World IPv6 Day is scheduled for June 8th and

07 June 2011 /security /regulation

Retired Member 

Have you looked under the virtual mat?

I wonder what the Japanese is for “when you are in a hole it’s usually a good time to stop digging?" I read the new Sony press release with some bemusement; the one with regard to the loss of 25 million further customer details from Sony Online Entertainment. The release had the following statement: Information from an outdated database

06 May 2011 /security /regulation

Retired Member 

Reset your password or the cat gets it

Today we gained further confirmation of details around the Sony Playstation network breach; millions of account names and personal details have been lost and potentially payment card details including the payment card number and Expiry dates too, but excluding the security code. The types of data rumoured to be lost include: names, addresses, e

27 April 2011 /security /regulation

Retired Member 

Plan, Do, Manage, Review, Cuthbert, Dibble and Grub

Security and Compliance is an ongoing process. Both in personal and corporate activities, it is worthwhile stepping through the simple four-step process to reduce the risk of compromise. Plan In the same way as when you buy a new house, you plan (at least in your head) to change the locks and possibly add locks to the windows, extend insurance to c...

27 April 2011 /security /regulation

Adam Nybäck System Developer at Anyro

Use of 3rd parties in online banking

It's certainly calming to know that Santander/A&L put the advanced-web-analytics.com script there intentionally. However, some people (including the customer who first noticed this issue) continue the discussion and question the 3rd party as well as Santander's use of it. Some examples: "Even if advanced-web-analytics is legit. I can't see...

21 April 2011 /security