Wired News: Complex Passwords Foil Hacks
There's an interesting form of 2-factor authentication mentioned in this article on Wired. Scratchcards that reveal one-time passwords. One thing that does occur to me is that I suppose they will need to be used in sequence (so that only one is valid at any one time), so what would happen if you wanted to skip one, for example if the cover on one rubbed off in your wallet and you weren't sure if someone else had seen it...

Information Security - Downloads
Some downloadable information on information security from the Department of Trade and Industry in the UK

InfoWorld: Network Associates is granted broad antispam patent: June 01, 2004: By : SECURITY
Looks from this article like we'll be seeing some patent lawsuits soon in the security world. This is a good example of what I don't like about software patents, an overly broad patent, for which there may well be prior art, but in order to challenge it there will now have to be an expensive court case out of which no-one will win but the lawyers!!!
sigh

Dana Epp's ramblings at the Sanctuary : Economics of Information Security
Dana has a link from a link on Axel's blog to a great article about Security and economics by Ross Anderson(Gee blogging gets a bit overly linked at times :op)...
As with a lot of Ross Andersons writings it's very thought provoking, with many interesting ideas in it. A recommended read even if you're not into InfoSec as it provides one possible explanation for things like why Microsoft dominates certain computing markets....
One of the many interesting ideas in it was an analysis of why even the best funded security team can fall foul of a relatively poorly funded attacked in the computing world (starts on Page 4)

Dana Epp's ramblings at the Sanctuary : Microsoft releases new Threat Modeling Tool
An interesting post over a Dana Epp's blog, regarding a new Microsoft tool (and a forthcoming book) focusing on Threat modelling. One to download and look at when I get a chance (shame they've not made a Linux version ;op)

Slashdot | Password Memorability and Securability
There's an interesting story on Slashdot, linking to a study on password quality, it has a couple of interesting conclusions amongst some other confirmations of common themes in password quality. Most interesting is probably the conclusion that in practice mnemonic passwords are as strong as randomly chosen passwords and are far easier to remember....

An Interesting Penetration Testing Guide provided by corsaire.
Has some good points about choosing Pen Testing consultantcies and also some good resources at the end...

Over at RouterGod there's a very informative series of articles about various Cisco topics. They're in the News Archives section and they've got an..... interesting way of presenting the information ...

A Good List of Linux Live CDs, there are quite a few useful ones from the Security point of view, including the very useful Local Area Security distro .
Anyone who's not had time to play with Linux LiveCD's, really should, as they are immensly useful tools for work like forensics and system administration....

New evidence points to Cisco network hack
An article providing some more info on the Cisco code theft, over at Network World. One point mentioned in it that I would disagree with though is the comment that
"Unlike open source software products, the security of Cisco's systems, like those of other proprietary software vendors, depends on the source code being kept out of public view, he said"
This is a bit on the sweeping side really... Although it is a salutory lesson that companies shouldn't rely on the secrecy of their code to provide security.