Is it me? or has information security completely changed? Give you a bit of a background - I live, breath, eat and sleep computer security. I'm not one of those"masturbating monkeys" as Linus puts it (I was gonna write this blog post, before Marcel told me about his rant about security guys).
I do; Intrusion Detection, Protocol Analysis, Threat and Risk Management - I also do digital forensics etc. I get my hands dirty where ever I can. I'm not one to point out an issue, and say fix it - I prefer to get in there and work with the people in the know to fix the issue as well.
I commend Dan Kaminsky for the epic work done on the DNS flaw - I only wish I had of sent that email to him the 2nd day after the biggest co-ordinated patch release in history. I had almost nailed the issue.
But, that's not what this rant is about. I remember a day when security people were feared - if someone from IS was coming, it probably meant something you were doing was wrong - and you hoped they passed your desk onto someone else's. Now a days it almost seems as tho security is a joke. No back swing for me - I can just sit there and yell - "Somethings wrong!" till I'm blue in the face.. or say "hey, I gotta do this to make sure your safe". Even if there is no impact, no requirements, no nothing - We still get hassled about what we need to do.
Then - it seems as tho, it must be the next big carer boom - the market is flooded with these so called CISSP certified IS professionals. I can't stand them - I'm sure most of them can't even tell the difference between TCP and UDP. Let alone the fact that IPSec is a protocol just like tcp/upd/icmp/gre etc etc etc.
I'd like to see them figure out a routing issue that causes information leakage - or why an IDS can only see half a conversation. Arg.
Don't get me wrong - security needs to change from the police and fire to an EMS type job. Don't be there to police and put out fires. But be there before things happen making sure everyone is safe -- and when something does happen know how to deal with that, and the cleanup afterwards.
For those of you in IT - listen to you security people - not all of them want to stop you from doing things - just keep you safe. A good security person will not only tell you it's not safe - but help solve and make it safe - or at least explain why it's not safe and why there is no alternative.
Good luck, and don't play in the street - try the back yard as an alternative ;)
Q: Is it true that you only have a single master MySQL server running replication to two slaves, and the architecture doesn’t auto-switch to a hot backup when the master goes down?
A: We currently use one database for writes with multiple slaves for read queries. As many know, replication of MySQL is no easy task, so we've brought in MySQL experts to help us with that immediately. We've also ordered new machines and failover infrastructure to handle emergencies.
This past weekend I had the opportunity to visit Canada's Wonderland on a Special Family Day access before the park opened for the year. As you all know, I have a baby girl so most of my time was spent in Hannah Barbara Land - Which I wouldn't have missed for the world. The look on her face as she and Daddy went around the area in Chopper Chase was the best thing in the world!Vaughan, Ontario, 2007 - Canada's Wonderland prepares to change the landscape for thrill seekers in 2008, with the addition of Canada's Biggest, Fastest and Tallest roller coaster - Behemoth. Following 18 months of planning and construction, Behemoth will premiere at Canada’s Wonderland in May 2008.
At over 5,300 feet (1,616m) in length, Behemoth sets the stage for thrills with a climb to a height of 230 feet (70.1m), followed by an adrenaline pumping 75 degree drop with speeds reaching 125 kilometers per hour in 3.9 seconds. The coaster will then take riders through the ultimate coaster experience with high speed twists and turns, including double banked flat loops (horizontal loops) and eight extreme drops. Intensifying the action packed adventure, the ride will feature prototype open-air seating that will allow all riders to experience an unobstructed view of all the thrills and excitement on one of North America's best coasters.
"Behemoth will be the biggest investment in Canada's Wonderland's 27 year history at approximately $26 million dollars," said Raffi Kaprelyan, Vice President and General Manager, Canada’s Wonderland. "With the addition of Behemoth, we wanted to compliment our already impressive line-up of more than 200 rides, shows and attractions with a world class roller coaster that will showcase Wonderland as one of the premier amusement parks in our industry."
I for one, as my twitter stated right after I got off the ride was not impressed. (Kinda reminds me of the description of Earth in the Hitch Hikers Guide to the Galaxy: Mostly Harmless)