* Posts by George Capehart

7 publicly visible posts • joined 24 Jun 2008

Forget Hillary, HP's ex CARLY FIORINA 'wants to be next US Prez'

George Capehart
FAIL

OMFG . . . Sarah Palin redux

I first started using HP equipment in the mid '70s in grad school. At the time, HP and DEC had a lock on the lab and mini-computer market. To this day, I don't think that there has ever been equipment as well made and as of high quality as HP gear. And I mean both lab equipment and business and scientific computing. As my career evolved, I became more involved with the HP culture and "The HP Way" . . .

There had always been a tension between the technical side and the marketing side of HP. Along with that was the tension between the entrepreneurial psyche inspired by Bill and Dave and the realities of running a large and successful corporation. HP was forever undergoing restructuring of one sort or another, to the chagrin of the techies, the sales team and the customers. Having said that, it was all "in the family" and everyone realized that the universe was changing and everyone was struggling to deal with the changes. But there was always, way down deep inside, a sense of "family" and, well, here we go again, but we'll get through this one, too.

All of that changed with Carly. Looking back on it, the real problem was the Board of Directors. They were then, and are to this day, incompetent. They took an incredible organization and ruined it. When Fiorina was named CEO I was gobsmacked. Her track record speaks for itself. She is as qualified to run for president of the US as Palin was to run for VP. At least Palin had the sense to quit before she got fired . . .

'Arrogant' Snowden putting lives at risk, says NSA's deputy spyboss

George Capehart

Checks and balances?!?!?!?!? We don't need no steenkin' checks and balances!

"The bigwig said that the US President James Madison, one of the key writers of the US Constitution, would be "would be proud" that the checks and balances enunciated by America's fourth president still worked in today's digital age."

Um, well, no. If they were working as intended, normal governance processes would have stuck a stake in the plan to do mass surveillance before it got off the ground. The NSA has been deliberately evasive, obtuse, obstructionist and lied about what it's been doing . . . to the committees that were (supposed to) provide oversight.

The NSA truly does have a bad PR problem, and Ledgett just adds to it . . .

What Adobe could learn from The Flying Wallendas

George Capehart
FAIL

Re: Good Article

I think I get the point you're making, but I don't think it's what you think it is . . . ^_^ I'm going to get a bit pedantic, but this is a /*very*/ important issue and is the result of one of the most egregious errors a company can make. The problem is a key management issue on the part of the private keyholder, not a problem between the CA and the keyholder. Verisign did it's job correctly. Vantage Credit Union fscked up /*ROYALLY*/. They let someone get their private key. That is the biggest, primary, WTF-did-you-do, I-can't-believe-you-would-allow-that-to-happen screw-up that can be committed in a PKI. Whomever has the private key /*IS*/ the entity, as far as trust goes. This is a /*ROYAL*/ failure of their key management process. Heads should roll on this. Obviously there was a significant lack of risk management process, governance, information security policy definition and enforcement and plain ol' slack system administration. It's not like there is no guidance on the issue. For starters see: http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57-Part1-revised2_Mar08-2007.pdf, http://csrc.nist.gov/publications/nistpubs/800-57/SP800-57-Part2.pdf, http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57_PART3_key-management_Dec2009.pdf, http://www.verisign.com/static/005308.pdf. Key management is the Achilles heel of PKIs, and these folks committed the ultimate in screw-ups. This is the greatest sin that can be committed. It is also why I recommend against using public key cryptography when a company /*really*/ needs to protect data.

Google's Android code deleted from Linux kernel

George Capehart
FAIL

Re: Forking hell

Dang, that's exactly what I was going to say!

Way to go, Google! Sounds just like Microsofties! fsck the collective wisdom! We're better and smarter than you are!

Just understand that the diameter of limbs gets smaller and smaller the farther out one goes . . .

Microsoft! and! Yahoo! finally! sign! search! deal!

George Capehart
FAIL

Ahhhh, I see you have the machine that goes "Bing!"

Michael Palin's Hospital Administrator says it all . . . Oh, and goodbye, Yahoo! Enjoy it while it lasts, Carl.

Furse should not resign, she should be sacked

George Capehart
Paris Hilton

What GRC?

Just one more example of the total lack of awareness of governance and operational risk management in business. And financial services seems to lead the pack in spite of all of the regulatory activity directed at it. The Peter Principle is alive and well at the C*O and Board levels . . .

Police detain Tariq Aziz's cigar case

George Capehart

Whew!

It's /*great*/ to see that politics in the UK is just as petty as it is here in the US! I don't feel so badly now . . .