With much of the world observing holidays today, the mail has been a little slow except for the P2P malware using tcp port 8.  That gives me the opportunity to mention a couple of other things that might be of interest to our readers.  Now, some consider me a neo-luddite for not embracing blogs and such, but one of these days maybe I'll join the 21st century and set up an RSS reader.  Anyway, a week or so ago, I came across this essay from Dr. Gene Spafford at Purdue.  He's one of those really smart people whose opinions carry some weight with me and always gets me thinking (Bruce Schneier is another one, I've subscribed to his Crypto-Gram newsletter, I believe, since the first issue).  It is good to periodically reexamine the roots of our "best practices" and see if the underlying assumptions still apply.

-----------------------------------
Jim Clausing, jclausing //at// isc.sans.org