http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspxAnyone who's hung around me for a while knows that I'm a bit of a security geek. As such,I try to keep up on what's going on in the industry and try to keep current on what's going on in the vulnerability research community. Yesterday, someone in myen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#4498964Tue, 21 Aug 2007 23:20:49 GMT91d46819-8472-40ad-a661-2c78acb4018c:4498964SHODAN<p>Shodan recommends unsigned kernel-mode drivers.</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=4498964" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3549502Tue, 26 Jun 2007 21:22:48 GMT91d46819-8472-40ad-a661-2c78acb4018c:3549502Bob<p>Norman, the way you're always complaining about MSDN Japan, your pseudonym should really be rwxrwx---.</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3549502" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3389577Mon, 18 Jun 2007 22:42:51 GMT91d46819-8472-40ad-a661-2c78acb4018c:3389577Skywing<p>Norman: &nbsp;I typically go by both. &nbsp;The reason I don't drop the pseudonym (other than that I happen to like it) is that a lot of people know (or knew) me by it exclusively.</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3389577" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3387831Mon, 18 Jun 2007 21:10:36 GMT91d46819-8472-40ad-a661-2c78acb4018c:3387831Larry Osterman's WebLog<p>Friday's post about security blogs apparently contained a bit of unintended controversy. When describing</p> <img src="http://blogs.msdn.com/aggbug.aspx?PostID=3387831" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3371455Mon, 18 Jun 2007 04:28:09 GMT91d46819-8472-40ad-a661-2c78acb4018c:3371455Norman Diamond<p>&gt; Edit: Sorry Skywing :)</p> <p>Unnecessary ^_^</p> <p>If he wanted people to remember his real name, he wouldn't use a pseudonym ^_^</p> <p>Hmm, I wonder if I should use a pseudonym. &nbsp;rwx---rwx.</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3371455" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3348440Sun, 17 Jun 2007 03:36:11 GMT91d46819-8472-40ad-a661-2c78acb4018c:3348440nksingh<p>Schneier did &nbsp;pretty uncritically link to the Gutman DRM paper. I could see how one could find Schneier in a different light after giving airtime to that tripe.</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3348440" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3342157Sat, 16 Jun 2007 19:13:03 GMT91d46819-8472-40ad-a661-2c78acb4018c:3342157haroon<p>i dont think disagreeing with schneier is that hard to conceive. (his famed ability to divide by 0 aside), he has also gone on record saying things like &quot;i used to think crypto was the answer.. it clearly is not&quot; (a good indication i guess that anyone who disagreed with him between his starting point and his realization would at least by his current perspective be proven correct.)</p> <p>His question on &quot;do we need a security industry&quot; a few months after selling his security company also raised a few eyebrows..</p> <p>Take nothing away from him, he is a smart man with interesting thoughts (which i guess is why the author reads him) but he is human, fallible,comes with his own personal biases, and i suspect will be the first person to tell you that you shouldn't be blindly following _any_ authority figure..</p> <p>/mh</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3342157" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3338179Sat, 16 Jun 2007 15:36:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:3338179JLennox<p>I just keep an RSS feed on milw0rm. </p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3338179" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3333007Sat, 16 Jun 2007 10:49:08 GMT91d46819-8472-40ad-a661-2c78acb4018c:3333007Jani<p><a rel="nofollow" target="_new" href="http://www.f-secure.com/weblog/">http://www.f-secure.com/weblog/</a> </p> <p>I subscribe to F-Secures weblog feed for my small security news needs :)</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3333007" width="1" height="1">http://blogs.msdn.com/b/larryosterman/archive/2007/06/15/where-do-you-go-to-get-your-security-news.aspx#3329555Sat, 16 Jun 2007 07:25:29 GMT91d46819-8472-40ad-a661-2c78acb4018c:3329555Steve Dispensa<p>I generally find myself agreeing with Schneier. Care to elaborate on where you part company with him?</p> <p>Also, Ken, Matt Miller (skape), and a talented group of others regularly publish in uninformed (uninformed.org). Pretty technical / long papers, but some real gems there.</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=3329555" width="1" height="1">