http://www.ranum.com Marcus Ranum's various rants and writings on computer security, photography, and other topics en Copyright Marcus J Ranum, all rights reserved Marcus J. Ranum 180 http://www.ranum.com/fun/lens_work/ambrotypes/why.html I've gotten bored of digital photography; it's time to mix things up a bit. Mon, 23 August 2010 15:24:41 GMT http://www.ranum.com/fun/lens_work/ambrotypes/why.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/disasters/index.html Security problems begin with bad management and lack of vision. Thu, 03 May 2009 15:24:41 GMT http://www.ranum.com/security/computer_security/editorials/disasters/index.html mjr@ranum.com http://cmdln.wordpress.com/2007/05/16/marcus_ranum/ Compared to a point and click interface, the command line is much faster and less likely to give you carpal tunnel syndrome. But I'm actually referring to the podcast! They interviewed me a couple weeks ago. Thu, 17 May 2007 15:24:41 GMT http://cmdln.wordpress.com/2007/05/16/marcus_ranum/ mjr@ranum.com http://www.rearguardsecurity.com Episode 1 of the Rear Guard Security podcast - Ranum's rants taken to audio. Check it out. Tue, 8 May 2007 16:31:18 GMT http://www.rearguardsecurity.com mjr@ranum.com http://www.ranum.com/fun/bsu/ultimatefirewall/index.html A silly firewall graphic on a powerpoint presentation inspires me to load the pickup truck with hay and diesel. Fri, 2 Feb 2007 10:37:12 GMT http://www.ranum.com/fun/bsu/ultimatefirewall/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/google-defacement/index.html Between yesterday afternoon, when I published my last article, and this morning, someone defaced my site. But unlike the site defacements of the 90s this one was intended to be subtle. Looks like an attempt to tweak search ratings. Sun, 7 Jan 2007 19:37:12 GMT http://www.ranum.com/security/computer_security/editorials/google-defacement/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/antivirus/index.html For years I have been saying antivirus is stupid, and bemoaning the lack of a decent executable whitelister. After experimenting with Windows' execution control (ick!) and PrevX (grr!) I found a piece of freeware I really like. Fri, 5 Jan 2007 17:37:12 GMT http://www.ranum.com/security/computer_security/editorials/antivirus/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/codetools/index.html I got a chance to experiment with the state-of-the-art in source code security analysis tools, and ran it against my fifteen-year-old firewall toolkit (FWTK) code-base. Much to my horror, I discovered that my old code had a number of buffer overruns. I also ran the analysis tool against sendmail, Imapd, BIND, and postfix. Wed, 3 Jan 2007 15:37:12 GMT http://www.ranum.com/security/computer_security/editorials/codetools/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/point-counterpoint/ What is "Strategic Software"? I think we've been completely asleep at the switch over a critical issue. In fact, it's so critical it's best everyone continue to ignore it. Mon, 11 Sep 2006 11:58:51 GMT http://www.ranum.com/security/computer_security/editorials/point-counterpoint/ mjr@ranum.com http://www.cigital.com/silverbullet/ Gary McGraw interviews Marcus on various security topics and random stuff, for IEEE Security and Privacy podcast. Mon, 17 Jul 2006 17:26:57 GMT http://www.cigital.com/silverbullet mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/diskcrypt/index.html I have no idea why I was lazy about installing hard disk encryption. It's free. It's easy. What's not to like? Sat, 24 Jun 2006 17:26:57 GMT http://www.ranum.com/security/computer_security/editorials/diskcrypt/index.html mjr@ranum.com http://www.ranum.com/editorials/must-read/index.html A discussion of and links to two brilliant analytical articles by Richard Feynman and Franklin "Chuck" Spinney. Thu, 11 May 2006 19:28:00 GMT http://www.ranum.com/editorials/must-read/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/failure/index.html Apparently I'm not the only crazy out there who believes "information security" is an utter disaster. Thu, 11 May 2006 15:28:00 GMT http://www.ranum.com/security/computer_security/editorials/failure/index.html mjr@ranum.com http://www.ranum.com/editorials/corporate-songs/index.html A friend forwarded me a link to a corporate motivational song for one of the largest computer security companies in the industry. To say it's horrible is an understatement. Sun, 07 May 2006 15:28:00 GMT http://www.ranum.com/editorials/corporate-songs/index.html mjr@ranum.com http://www.ranum.com/fun/lens_work/tutorials/3d_composite/index.html A walkthrough of using photoshop and a slider bar to produce a 3D effect photo. Sun, 09 Apr 2006 15:28:00 GMT http://www.ranum.com/fun/lens_work/tutorials/3d_composite/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/audio/ranum-forum-2006.mp3 An improvised dinner address, delivered without powerpoints and after a few too many bottles of beer. I must make an apology and correction to this talk - I mentioned James Buchanan Eads as the architect of the Golden Gate Bridge, which was wrong. I had Eads, who designed the Mississippi bridge confused with Joseph Strauss, who designed the Golden Gate. The objective of this talk was to take the high ground with respect to treating computing as an engineering discipline, instead of the kettle of kludges that it has become. I realize it's very very idealistic stuff. Sun, 26 Mar 2006 15:28:00 GMT http://www.ranum.com/security/computer_security/audio/ranum-forum-2006.mp3 mjr@ranum.com http://www.ranum.com/fun/bsu/diy-dealy/index.html "Lee Harvey Oswald could not have fired 3 aimed shots with a scope-sighted bolt-action rifle in 10 seconds. Nobody can; it's too hard." Oh? Really? Sat, 22 Oct 2005 15:28:00 GMT http://www.ranum.com/fun/bsu/diy-dealy/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/sans/index.html Computer security practitioners should not trade in hearsay! Sat, 10 Mar 2012 13:00:30 GMT http://www.ranum.com/security/computer_security/editorials/sans/index.html mjr@ranum.com http://www.ranum.com/security/computer_security/editorials/RSA_in_stripper_shoes/index.html Misogyny or stupid marketing? Take your pick. Tue, 19 Feb 2013 10:00:30 GMT http://www.ranum.com/security/computer_security/editorials/RSA_in_stripper_shoes/index.html mjr@ranum.com