<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security Pie &#187; thoughts</title>
	<atom:link href="http://securitypie.com/category/thoughts/feed/" rel="self" type="application/rss+xml" />
	<link>http://securitypie.com</link>
	<description>The ramblings of three security curmudgeons</description>
	<lastBuildDate>Sun, 04 Jul 2010 07:31:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Luxury blinks</title>
		<link>http://securitypie.com/luxury-blinks/</link>
		<comments>http://securitypie.com/luxury-blinks/#comments</comments>
		<pubDate>Thu, 11 Feb 2010 18:28:41 +0000</pubDate>
		<dc:creator>assafl</dc:creator>
				<category><![CDATA[First Class]]></category>
		<category><![CDATA[Food]]></category>
		<category><![CDATA[general]]></category>
		<category><![CDATA[marketing]]></category>
		<category><![CDATA[thoughts]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=744</guid>
		<description><![CDATA[The wine industry (as we are told) is in crisis. At a recent conference (Vino2010 in New York) a group of panelists discussed the future of luxury wine (see the excellent read at http://www.vinography.com/archives/2010/02/the_future_of_luxury_wine.html). I, for one, am happy. Prices are falling. Not neccessarily for the uber wines, but very decidedly for anything else. I [...]]]></description>
			<content:encoded><![CDATA[<p>The wine industry (as we are told) is in crisis. At a recent conference (Vino2010 in New York) a group of panelists discussed the future of luxury wine (see the excellent read at http://www.vinography.com/archives/2010/02/the_future_of_luxury_wine.html). I, for one, am happy. Prices are falling. Not neccessarily for the uber wines, but very decidedly for anything else. I can walk into wine shops and pick up decent wines that in 2006 were asking for very unreasonable prices.</p>
<p>It is a buyers market, and picking the wrong wine is no longer a very costly mistake. It literally take me back to the 90&#8242;s, right before (and perhaps as) the asian and US markets conspired to jack up the prices of wines. Now that both the Asians and Americans lost their funding sources, they stopped paying exorbitantly for wine.</p>
<p>This is so good. The bubble has funded extensive knowhow in wines. How to extract as blockbuster a wine as possible from newly planted berries: and make a killing in the process. So there are many great wines out there. And they have no buyers, so some great ones sell for 30c on the dollar. Their future prospect is questionable: They may fold, they may redo their business model, who knows. But for now, run out and get them! </p>
<p>Now I do have to watch the calories, though&#8230;</p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/luxury-blinks/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Start a Company. Control Your Destiny</title>
		<link>http://securitypie.com/start-a-company-control-your-destiny/</link>
		<comments>http://securitypie.com/start-a-company-control-your-destiny/#comments</comments>
		<pubDate>Wed, 11 Nov 2009 00:25:11 +0000</pubDate>
		<dc:creator>sharon</dc:creator>
				<category><![CDATA[First Class]]></category>
		<category><![CDATA[sales]]></category>
		<category><![CDATA[thoughts]]></category>
		<category><![CDATA[Destiny]]></category>
		<category><![CDATA[Mark Pincus]]></category>
		<category><![CDATA[zynga]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=665</guid>
		<description><![CDATA[A friend forward me the following article from the Consumerist with links to Zynga&#8217;s CEO Mark Pincus Youtube movie. So here&#8217;s what he said on the video (I guess that he did not know that someone is recording): I knew that i wanted to control my destiny, so I knew I needed revenues, right, fucking, [...]]]></description>
			<content:encoded><![CDATA[<p>A friend forward me the following article from the <a href="http://consumerist.com/5400720/mafia-wars-ceo-brags-about-scamming-users-from-day-one" target="_blank">Consumerist </a>with links to <a href="http://www.zynga.com/" target="_blank">Zynga&#8217;s </a><a href="http://www.zynga.com/about/" target="_blank">CEO </a><a style="outline-width: 0px; outline-style: initial; outline-color: initial; font-size: 12px; font-family: inherit; vertical-align: baseline; color: #383131; text-decoration: none; padding: 0px; margin: 0px; border: 0px initial initial;" title="Click here to read more posts tagged #markpincus" href="http://consumerist.com/tag/markpincus/">Mark Pincus</a> <a href="http://www.youtube.com/watch?v=S7YaVVpK1G4&amp;feature=player_embedded" target="_blank">Youtube </a>movie. So here&#8217;s what he said on the video (I guess that he did not know that someone is recording):</p>
<blockquote><p><span style="background-color: #ffffff;">I knew that i wanted to control my destiny, so I knew I needed revenues, right, fucking, now. Like I needed revenues now. So I funded the company myself but I did every horrible thing in the book to, just to get revenues right away. I mean we gave our users poker chips if they downloaded this zwinky toolbar which was like, I dont know, I downloaded it once and couldn&#8217;t get rid of it. *laughs* We did anything possible just to just get revenues so that we could grow and be a real business…So control your destiny. So that was a big lesson, controlling your business. So by the time we raised money we were profitable.</span></p></blockquote>
<p><span style="background-color: #ffffff;">Personally, I do not see ANY problem with that. In fact, despite the somehow graphic langue and maybe some over bragging, I think that <a style="outline-width: 0px; outline-style: initial; outline-color: initial; font-size: 12px; font-family: inherit; vertical-align: baseline; color: #383131; text-decoration: none; padding: 0px; margin: 0px;" title="Click here to read more posts tagged #markpincus" href="http://consumerist.com/tag/markpincus/">Mark Pincus</a> was/ is doing the right thing. All we have to do is wait and see how it goes&#8230; </span></p>
<p><span style="background-color: #ffffff;"><img class="aligncenter size-medium wp-image-667" title="control your destiny" src="http://securitypie.com/wp-content/uploads/2009/11/control-your-destiny-300x200.jpg" alt="control your destiny" width="300" height="200" /><br />
</span></p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/start-a-company-control-your-destiny/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>How Spam Works?</title>
		<link>http://securitypie.com/how-spam-works/</link>
		<comments>http://securitypie.com/how-spam-works/#comments</comments>
		<pubDate>Tue, 30 Jun 2009 05:23:33 +0000</pubDate>
		<dc:creator>sharon</dc:creator>
				<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[thoughts]]></category>
		<category><![CDATA[Security Business]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=538</guid>
		<description><![CDATA[Every few days I am sorting through Securitypie&#8217;s spam queue. Our anti-spam engine detects most of the spam messages but there are few that it asks one of the administrators to approve. Most of those messages are targeting a single post. Assaf&#8217;s self confession &#8220;Why I miss the Soviet Union is like a spam magnet. [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_540" class="wp-caption aligncenter" style="width: 310px"><img src="http://securitypie.com/wp-content/uploads/2009/06/howitworks-300x226.png" alt="How it works?" title="howitworks" width="300" height="226" class="size-medium wp-image-540" /><p class="wp-caption-text">How it works?</p></div>
<p>Every few days I am sorting through Securitypie&#8217;s spam queue. Our anti-spam engine detects most of the spam messages but there are few that it asks one of the administrators to approve. Most of those messages are targeting a single post. Assaf&#8217;s self confession &#8220;<a href="http://securitypie.com/?s=Why+I+miss+the+Soviet+Union" target="_blank">Why I miss the Soviet Union</a> is like a spam magnet.</p>
<p>Why? What is so unique about those <a href="http://securitypie.com/why-i-miss-the-soviet-union/" target="_blank">875 </a>words that make it different? Could it be that the desire to see &#8220;<em>a visionary CTO with a set of brass balls. Not a Cisco kowtowing CIO</em>&#8221; makes the difference?<br />
It would be interesting to see how the spammers threat this post. If you have a clue, send us a comment. </p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/how-spam-works/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Memories, security and what makes the perfect pie?</title>
		<link>http://securitypie.com/memories/</link>
		<comments>http://securitypie.com/memories/#comments</comments>
		<pubDate>Sun, 10 May 2009 23:44:19 +0000</pubDate>
		<dc:creator>assafl</dc:creator>
				<category><![CDATA[Travel]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[thoughts]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=500</guid>
		<description><![CDATA[So I like it when I can take the learnings of one field and apply it to another. When we started PortAuthority, it was clear to me that data security was important. I came from the defense industry which (for the most part) values data security more than it does systems &#8211; and for good [...]]]></description>
			<content:encoded><![CDATA[<p>So I like it when I can take the learnings of one field and apply it to another. When we started PortAuthority, it was clear to me that data security was important. I came from the defense industry which (for the most part) values data security more than it does systems &#8211; and for good reason: if enemies get access to confidential data, it is a very short while to losing military superiority.</p>
<p>However, I was disappointed and somewhat frustrated to learn that at the time (2000-2003) little thought was given by corporations to data security. Words to that effect were used, but the majority of security was dedicated to the A(vailability) in CIA and some were dedicated to the I(ntegrity). Very little (with a few exceptions) were dedicated to the C(onfidentlity).</p>
<p>As it turns out, what was missing was knowhow. This knowhow which is rampant across DOD corridors, was virtually non-existant in the corporate world. And the few that did understand the concepts were ex-defense employees.</p>
<p>So the knowhow for data security is now being built, and ever more security folk get up in the morning and say &#8220;how do I help enhance our competitive standing in the industry&#8221; vs. &#8220;how do I ensure I don&#8217;t get to clean up all the machines over the weekend&#8221;.</p>
<p>So &#8211; what is in this knowhow? Well, to me it appears that the knowhow consists of knowledge (theories), experience (past experiences, witnessing others, reading case studies), and language (how do I communicate to all parties involved in the activities). Or &#8211; as I will explain later &#8211; the common memories in the field (similar to the so called &#8220;muscle memory&#8221; in the organization).</p>
<p><strong>Well here&#8217;s to the topic at hand: food, &#8221;foodies&#8221; and what makes a great dish &#8220;great&#8221;.</strong></p>
<p><span id="more-500"></span></p>
<p>Over the past couple of years I have become a &#8220;foodie&#8221; -  I have always loved food. But a dinner at Moto changed my understanding of eating forever. I thoroughly enjoyed the meal but was perturbed by some of the concepts at Moto: Great dishes like the squid and the amazing beet combinations contrasted the the chef&#8217;s abilities to create things that I could not bring myself to enjoy &#8211; like the nachos dessert.</p>
<p>The Nachos at Moto was an excellent dish. But it played with expectations that I could not resolve &#8211; Grated mango took the place of Jack cheese, Creme Anglais substitiuted for Mexican cream, and beignets instead of Nachos. The dichotomy was just too much. I repeat &#8211; the food was tasty. It was delicious (I mean &#8211; really, how bad can fresh mango, custard sauce and beignets be? Had they not been <strong>perfectly</strong> shaped like nachos!).</p>
<p>I had to figure it out &#8211; <strong>What made a great dish?</strong> Previously I was convinced that tasty food was good food. But here was a tasty dish that was not &#8220;great&#8221;. Obviously I was wrong &#8211; but little did I know how wrong I was!</p>
<p>So as usual, it was a start of a learning exercise that spanned a few years as I dug deeper into the cooking trend commonly referred to as &#8220;molecular gastronomy&#8221;. I have dined at many leading proponents of the techniques, places such as WD-50, Moto, COI, TFL and Per Se, Manresa, and others. I have had great dishes and not-so-great dishes. And I purchased books. Not your small friendly simplified cookery books, but the heavily detailed stuff that is coming out of Barcelona and San Sebastian and Chicago (the modern Meccas of avante Garde cuisine).</p>
<p>The answer came from the catalogs of Ferran Adria&#8217;s El-Bulli restaurant. Ferran fastidiuously analyzed the diner&#8217;s experience. He built a map of all the influences on a diner. And this map contained the answer.</p>
<p>But I will start with an example given by Ferran when he explains that some dishes will forever be lost on global diners. Example in point was a dish called &#8221;Cala Montjoi Goose Barnacles&#8221;. As Ferran explains, this is not really Goose Barnacles because Goose Barnacles do not grow in Cala Montjoi. Only a resident of the Costa Verde will know that!  As for me, I: 1. did not know Barnacles were edible; 2. Did not know there was such a thing as Goose Barnacles and 3. Would not know what the heck I was eating and how to put it in context.</p>
<p>The diners problem would <strong>not relate to the quality of the food</strong> &#8211; no; in this case the entire dish would miss because of a lack of experiental context: <em>The associate memories were just not there</em>. Or as Ferran put it in his diagram &#8211; Memory is a key influencer on the diner.</p>
<p>Looking back I can say with conviction that Memory is probably the number 1 ingredient in a chef&#8217;s arsenal. Unfortunately, not all chef&#8217;s understand that! My proof comes from endless interactions with people who fixate on the same stuff &#8211; like the grilled chicken, the steak place, their favorite wine or their disdain from Gefilte fish or German ham hocks (<em>are all Gefilte fish or pickled ham hocks really bad? Or is one brain cell immediately sending the all important &#8220;I didn&#8217;t like the texture when I was 7&#8243; signal and the diner succumbing to what was really 1 bad experience too long ago to remember)</em>.</p>
<p>Like their security bretheren trying to cope with data security demands, all diners cannot be confronted with dishes outside their realm of understanding. All foodies can really do is try to absorb the experience the way an anthropologist would a tribal dance. Given time, the Memories will be formed and the foodie&#8217;s range of interest will increase.</p>
<p>It is like the early days of sushi: simple, unthreatening dishes in rolls like smoked (not live) salmon; philly rolls; spicy tuna; egg omlet; cooked crab. 20 years later and people eat Sashimi (look mom &#8211; no roll!) buy fresh tuna at Whole foods to eat raw and Ikura Uzura (salmon roe and quail egg yolk) are a standard dish.</p>
<p>For Japanese cuisine memories were built, language was developed, allowing us to experience more of the exquisite Japanese cuisine. And the diners understood fish more than ever before. And it took some 20 years!</p>
<p>Like nouvelle cusine and fusion I believe the avante garde cuisine is a trend rather than fad. I believe it will force us to learn  more about what we eat than ever before. And it is about time.</p>
<p>And here&#8217;s to some practical advice: can you control you mind or does your mind control you? Can you open YOUR mindto new concepts? Try that next time you see locals eating something weird at a faraway land. You might be surprised just how good those things are! And if you can&#8217;t &#8211; well, remember the plasticity of the brain. More details here: <a href="http://www.youtube.com/watch?v=MPSdWY5VdEE&amp;NR=1"><span style="font-size: small; color: #0000ff; font-family: Calibri;">http://www.youtube.com/watch?v=MPSdWY5VdEE</span></a><br />
<object width="480" height="385"><param name="movie" value="http://www.youtube.com/v/MPSdWY5VdEE&#038;hl=en&#038;fs=1&#038;rel=0"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/MPSdWY5VdEE&#038;hl=en&#038;fs=1&#038;rel=0" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="480" height="385"></embed></object><br />
<span style="font-size: small; color: #0000ff; font-family: Calibri;"><br />
</span></p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/memories/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How do you secure carrier pigeons?</title>
		<link>http://securitypie.com/how-do-you-secure-carrier-pigeons/</link>
		<comments>http://securitypie.com/how-do-you-secure-carrier-pigeons/#comments</comments>
		<pubDate>Sat, 09 May 2009 03:40:21 +0000</pubDate>
		<dc:creator>arikb</dc:creator>
				<category><![CDATA[theory]]></category>
		<category><![CDATA[thoughts]]></category>
		<category><![CDATA[Fiction]]></category>

		<guid isPermaLink="false">http://securitypie.com/how-do-you-secure-carrier-pigeons/</guid>
		<description><![CDATA[We have people with keen enough an eye and an ear to detect these pigeons. Trained as they are, they sit in pairs in the highest tower of your castle, ever watching for pigeons. Not all pigeons, your majesty, only what we call “egress” pigeons, who fly in a direction clearly meant to depart your [...]]]></description>
			<content:encoded><![CDATA[<p>We have people with keen enough an eye and an ear to detect these pigeons. Trained as they are, they sit in pairs in the highest tower of your castle, ever watching for pigeons. Not all pigeons, your majesty, only what we call “egress” pigeons, who fly in a direction clearly meant to depart your kingdom. Targeting only “egress” pigeons is easier because it saves on the drugged arrows they use to fell them.</p>
<p>Then once a pigeon is felled, the trained hounds are released. These specially trained hounds find the pigeon and bring it back into your castle unharmed and intact. Then, the pigeon is take to a special room where it is left to recover the effect of the drug. If the message carries the royal seal, which only your majesty wears, then it is reattached to the pigeon and sent &#8211; while a cryptologist reads the rest of the messages and deliver it to your majesty after it has been duly decoded.</p>
<p>After you get to trust our cryptologists, you may order them to perform an action on your behest your majesty, for example, to burn the message so it never reaches its destination, or to send it unharmed, based on its content. Some messages may not be of interest to your majesty, and may be taken to one of your trusted viziers for consultation to await their decision, so your majesty may be free to rule the kingdom. Others may be delivered to your majesty directly, while others may just be copied verbatim and saved for later reference.</p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/how-do-you-secure-carrier-pigeons/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I&#8217;m MORE Productive When I&#8217;m NOT</title>
		<link>http://securitypie.com/im-more-productive-when-im-not/</link>
		<comments>http://securitypie.com/im-more-productive-when-im-not/#comments</comments>
		<pubDate>Fri, 17 Apr 2009 22:29:39 +0000</pubDate>
		<dc:creator>sharon</dc:creator>
				<category><![CDATA[thoughts]]></category>
		<category><![CDATA[productivity]]></category>
		<category><![CDATA[WILB]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=492</guid>
		<description><![CDATA[Our friends down under at the University of Melbourne completed a study showing that surfing the net at work for pleasure actually increases the employee concentration levels and helps make a more productive workforce.  According to the study of 300 workers, 70% of people who use the Internet at work engage in Workplace Internet Leisure Browsing (WILB). Among the most popular [...]]]></description>
			<content:encoded><![CDATA[<p class="MsoNormal"><span>Our</span><span> </span><span>friends</span><span> </span><span>down under at the University of Melbourne completed a</span><span> </span><span><a href="http://uninews.unimelb.edu.au/news/5750/" target="_blank"><span>study </span></a>showing that surfing the net at work for pleasure actually increases the employee concentration levels and helps make a more productive workforce. </span></p>
<p class="MsoNormal"><span>According to the study of 300 workers, 70% of people who use the Internet at work engage in Workplace Internet Leisure Browsing (WILB). Among the most popular WILB activities are searching for information about products, reading online news sites. Playing online games was the fifth most popular, while watching YouTube movies was seventh.</span></p>
<p class="MsoNormal"><span>In today&#8217;s world, I can&#8217;t understand how &#8220;searching for information about products&#8221; is considered not work related, unless of course the study talks about products that are not related to work. In this case, I would categorize this action as &#8220;surfing&#8221;. But then, the reports adds that “People who do surf the Internet for fun at work &#8211; within a reasonable limit of less than 20% of their total time in the office &#8211; are more productive by about 9% than those who don’t&#8221;.</span></p>
<p class="MsoNormal"><span>To me, it makes a lot of sense. I&#8217;m more productive and have the time to &#8220;clean&#8221; my mind, not to mention the expsure to related technologies. </span></p>
<p class="MsoNormal"><span>Assaf might want to comment on the following statement: </span></p>
<blockquote>
<p class="MsoNormal"><span>“Firms spend millions on software to block their employees from watching videos on YouTube, using social networking sites like Facebook or shopping online under the pretense that it costs millions in lost productivity, however that’s not always the case.&#8221;</span></p>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/im-more-productive-when-im-not/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PTSD and the Iphone</title>
		<link>http://securitypie.com/ptsd-and-the-iphone/</link>
		<comments>http://securitypie.com/ptsd-and-the-iphone/#comments</comments>
		<pubDate>Thu, 29 Jan 2009 10:10:23 +0000</pubDate>
		<dc:creator>assafl</dc:creator>
				<category><![CDATA[general]]></category>
		<category><![CDATA[thoughts]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=432</guid>
		<description><![CDATA[JG Ballard likes to discuss the psychological effects of space travel on astronauts. It is one of those topics of inconvenience for NASA, whose spokespeople prefer to shrug at and move to the next question (perhaps about the budget, anyone?). For Ballard, the question stems from a science fiction curiosity. Could man ever do long [...]]]></description>
			<content:encoded><![CDATA[<p>JG Ballard likes to discuss the psychological effects of space travel on astronauts. It is one of those topics of inconvenience for NASA, whose spokespeople prefer to shrug at and move to the next question (perhaps about the budget, anyone?). For Ballard, the question stems from a science fiction curiosity. Could man ever do long distance space travel? or are we destined to send robots and machines to do the next step of space exploration. Ballard&#8217;s concerns stem from the apparent lack of consistancy in the astronaut&#8217;s lives. Most seem unable to move to the next stage (like new jobs), and some, like Armstrong, refrain from discussing what was perhaps man&#8217;s greatest achievement &#8211; the landing on the moon.</p>
<p>Having listened to an NPR special on PTSD (post traumatic stress disorder) it got me thinking whether that is an angle of the astronaut&#8217;s predicament. I am talking about, specifically, the dichotomy between life in the fast lane (Iraq, Investment banking, prepping for space flight, quarter end, etc.) and life in docile Americana. Especially if you don&#8217;t live in one of the big cities.</p>
<p>My assumption is, that once a soldier returns or an astronaut lands, life becomes simple. You have done the deed and now it is time to rest. But if you are of astronaut calibre mentality, rest is the farthest thing from your personality. Hence you have conquered your dragon and really have nothing to look forward to. You were used to action and now life is missing rythm. And very few are like John Glen who was both an astronaut and moved to an equally hectic life in politics.</p>
<p>Now I have a feeling that it is the same with most of us who are addicted to our Iphones, emails and facebook updates. For us the constant shaking of the phone, the bling sounds of facebook and the chirp of inbound email becomes a part of our psyche. And when our internet dies &#8211; we get the onset of mild PTSD.</p>
<p>You may feel that hurtling down from the ski slopes and catching up on email on the gondola.I felt that during our spa day in Mongolia (during the other days we were bicycling all day and concentrated on that).</p>
<p>And I&#8217;ve devised a test for this: If both your oven (appliance important to life) and internet gateway break &#8211; who would you fix first?</p>
<p>/Cheers</p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/ptsd-and-the-iphone/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Perspectives</title>
		<link>http://securitypie.com/perspectives/</link>
		<comments>http://securitypie.com/perspectives/#comments</comments>
		<pubDate>Tue, 18 Nov 2008 05:09:02 +0000</pubDate>
		<dc:creator>assafl</dc:creator>
				<category><![CDATA[First Class]]></category>
		<category><![CDATA[Food]]></category>
		<category><![CDATA[Politics]]></category>
		<category><![CDATA[Travel]]></category>
		<category><![CDATA[general]]></category>
		<category><![CDATA[thoughts]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=278</guid>
		<description><![CDATA[So yesterday we went for dinner at The French Laundry, an upscale restaurant located in Yountville in Napa valley. It is widely considered to be one of the best restaurants in the world, and definitively the best in the bay area. It was an exquisite dinner, with great company, good wine*, and excellent food. And the most [...]]]></description>
			<content:encoded><![CDATA[<p>So yesterday we went for dinner at <a href="www.frenchlaundry.com">The French Laundry</a>, an upscale restaurant located in Yountville in Napa valley. It is widely considered to be one of the best restaurants in the world, and definitively the best in the bay area. It was an exquisite dinner, with great company, good wine*, and excellent food.</p>
<p>And the most interesting dish just happened to be on the Vegetable Tasting menu. Very interesting indeed.</p>
<div id="attachment_279" class="wp-caption alignnone" style="width: 243px"><a href="http://securitypie.com/wp-content/uploads/2008/11/scan0001bmp-1.jpg"><img class="size-medium wp-image-279" title="scan0001bmp-1" src="http://securitypie.com/wp-content/uploads/2008/11/scan0001bmp-1-233x300.jpg" alt="" width="233" height="300" /></a><p class="wp-caption-text">Hmmm. Delectable meal. Hmmm.</p></div>
<p> It was a dish labelled: <em><strong>Chickpea &#8220;Croquette&#8221; &#8211; </strong>Sweet Peppers, English Cucumbers, Sesame Seed Yogurt and Eggplant Confit.</em> Now Larousse Gastronomique defines a croquette as a &#8220;small savoury or sweet preparation&#8230;&#8230; Croquettes are shaped into corks, sticks, balls or rechtangles. They are usually coated with breadcrumbs, plunged into very hot oil and fried until they are crisp and golden&#8230;&#8221;.</p>
<p>So why is a Chickpea &#8220;Croquette&#8221; interesting to a group of Israelis eating at the French Laundry?</p>
<p><span id="more-278"></span>Well, because most people from Mediterranean states have another name for it. We call it &#8220;Falafel&#8221;. And whatever the disputed origin of this dish - it is <strong>THE</strong> fast food choice in Israel.</p>
<div id="attachment_280" class="wp-caption alignnone" style="width: 310px"><a href="http://securitypie.com/wp-content/uploads/2008/11/p1000461.jpg"><img class="size-medium wp-image-280" title="p1000461" src="http://securitypie.com/wp-content/uploads/2008/11/p1000461-300x225.jpg" alt="" width="300" height="225" /></a><p class="wp-caption-text">Hmmm. Falafel. (I apologize for the dark picture, I didn&#39;t want to disturb the other diners with a flash)</p></div>
<p>This was a great Falafel, on par with that served at the best Falafel stands in Israel, but for me it was a mere ball of Falafel. At any Falafel stand you&#8217;ll get 5-6 balls for about 5 bucks. Was this going to be a McDonald&#8217;s like &#8220;fast food&#8221; experience (and thus the disappointment of the meal), or was this another epitomy of world cuisine where the recognition of quality just happened to be masked by mere abundance, and thus serving as the East Mediterranean equivalent of Joel Robuchon&#8217;s famous Mashed Potatoes?</p>
<p>And I was immediately reminded of Dima, an Army buddy who had originally been from one of the Russian cities directly situated on the Caspian sea. In one of our discussions my mention of just how great Sturgeon Caviar can be and how lucky he was to have lived on the shores of the Caspian sea, was greeted with a shrug and the remark that he despised Caviar. Caviar for them was just plain Caviar. They had lots of it. In large jars. Everywhere.  Growing up he got fed up with Caviar. Having left Russia he became surprised at just how revered the stuff actually was by Westerners. In Dima&#8217;s perspective, Caviar was farmer food. It was not the stuff you serve at restaurants awarded 3 stars by the prestigious Michelin &#8221;Red Guide&#8221;. </p>
<p>It is a matter of perspective. For me, falafel is fast food. Great fast food, but still fast food. However, there are too few good falafel places in the US (unfortunately in the US, most so called &#8220;mediterranean&#8221; places serve soggy, microwave reheated falafel balls), so a really good falafel <strong>can</strong> <strong>and should </strong>be served at 3 star Michelin rated place. In fact, it seemed right-at-home with the &#8220;salsify croquant&#8221; and other eclectic, world dishes.</p>
<p>Perhaps, one day, the ancient chickpea and it&#8217;s dishes will become popular in the US. At that point it will join the other successful imports from countries such as Germany (e.g. Frankfurter and Hamburger) and France (double fried &#8220;French&#8221; fries) and Italy (Pizza). It will also join the original American dishes such as Burrito, Taco, Popcorn, Tomatoes, Chocolate, Potatoes, Corn and many more. We look the those staples of fast food and forget just how good they can be when done right. Abundance makes us ignore the greatness of these dishes.   </p>
<p>Returning to falafel: And like everything else around the <strong>Mediterranean Sea</strong>, falafel is way too old to have a clear history. And as can be expected, falafel has it&#8217;s place in providing fodder for the animosities between the inhabitants of the levant. So it seems the Lebanese have decided to explore <a href="http://query.nytimes.com/gst/fullpage.html">suing it&#8217;s neighbor to the South</a> claiming falafel is somehow a &#8220;controlled appelation&#8221; like Feta.</p>
<p>Luckily for us, in the odd chance that Lebanon succeeds, we now have a new name for falafel. We can now call it <strong>Chickpea &#8220;Croquette&#8221;</strong>. As in &#8220;<em>Te&#8217;n li bevakasha mana Chickpea &#8220;Croquette&#8221; be&#8217; pita, im thina, salat, veksat hamutsim. Meh-at zhug. Toda</em>&#8221; (Translation from Hebrew: &#8220;<em>Please give me a portion of Chickpea &#8220;Croquette&#8221;  in pita bread with tahini sauce, salad and few pickles. A little hot sauce. Thanks&#8221;</em>).</p>
<p>Life is like data security: One simply cannot have a sense of security without backup plans.</p>
<p>Thank you Thomas Keller (owner/chef) for an amazing meal and for saving the Israeli falafel. Now that I know that my favorite fast food is safe I can rest easy and concentrate on computer and data security.</p>
<p>/al</p>
<p>* Not to be a wine bore, the wines we had were excellent: a white Mas De Daumas Gassac 2007 and Nuit St. George 1er Cru Clos de L&#8217;Arlot 2004</p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/perspectives/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Why I miss the Soviet Union</title>
		<link>http://securitypie.com/why-i-miss-the-soviet-union/</link>
		<comments>http://securitypie.com/why-i-miss-the-soviet-union/#comments</comments>
		<pubDate>Thu, 13 Nov 2008 17:32:32 +0000</pubDate>
		<dc:creator>assafl</dc:creator>
				<category><![CDATA[Politics]]></category>
		<category><![CDATA[general]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[theory]]></category>
		<category><![CDATA[thoughts]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=249</guid>
		<description><![CDATA[OK. So this blog is both not about security at all and all about security at the same time. That is like catching two stones with one bird. My inbox today carried a fresh bit of news from CIO magazine. An opinion column by Eric Lundquist, labelled “We need a national CIO, not a CTO” stipulated [...]]]></description>
			<content:encoded><![CDATA[<p>OK. So this blog is both not about security at all and all about security at the same time. That is like catching two stones with one bird.</p>
<p>My inbox today carried a fresh bit of news from CIO magazine. An opinion column by Eric Lundquist, labelled <a href="http://www.cioinsight.com/c/a/Opinion/We-Need-A-National-CIO-Not-A-CTO/?kc=CIOMINEPNL11132008">“We need a national CIO, not a CTO” </a>stipulated that CIO are a better match for US national role than a CTO. To paraphrase Lundquist’s message, CIO’s are firmly planted in the business realities of the day, while CTO focus on technologies “looking for uses”. Reminds me of the old adage of “legs firmly planted” vs. “head in the clouds”.</p>
<p>I firmly disagree.</p>
<p><span id="more-249"></span></p>
<p>Now I understand that I read CIO magazine and that is why I received this message. I also assume that by the nature of politics, all kinds of special interest groups raise their heads, so I would expect a similarly opinioned “Shepard’s Weekly” would have discussed a similar topic ”We need a national shepard, not a CTO” and that the international association of circus performers would like to propose “We need a national court jester, not a CTO”.</p>
<p>Joking aside, Mr. Lundquist put forth some good arguments. He stipulated that CIO can better manage a project. That CIOs hold the business first and technology second. To quote “Technologists are great at creating new companies, new products and new markets. They are not great at orchestrating lots of conflicting opinions, managing projects or – especially in the political realm – settling on the best possible choice given budget constraints and political realities.”. Mr. Lundquist is correct, but altogether misses the point.</p>
<p>YAPM (Yet another project manager) is NOT what the US needs. In a former life I frequented Crystal City often. There were many project managers there. 25% of them were very good. 50% were mediocre. 25% were awful. But there were lots of them. They crammed public transportation, caused the beltway to jam, and filled the cafeteria’s at lunch. You could not throw a rock without hitting a project manager for some obscure government entity.</p>
<p>The US needs a future. To be driven, its future needs to be based on a seemingly unachievable target. We had been driven like that many times in the past. The US developed the trasistor and the chip (which 40 years later made our lives mobile). The external combustion engine for the torpedo (which crammed power into tiny spaces). Composite materials for space exploration (and which later improved our golf and tennis games). It was a government sponsored program (DARPA) that created the Internet. Not Google, nor Microsoft, nor Facebook. Nor was it rear view mirror preening dudes on Sand Hill road on their way to their ranches outside Bozeman in a well appointed G5. No. It was the government. And for all the wrong reasons. A lot of it was due to the US government chasing the Soviet’s dream of ruling space. How I miss the Soviet’s for that reason (if only for that reason!).</p>
<p>While both the technology industry and the venture capital industry oppose “leapfrog” technologies (they can ”eat your cheese” and thus risky for business and are difficult to predict and thus risky for VCs, respectively), the US government should indeed drive technology forward. But not on a predictable, linear trajectory, as Sand Hill road does with social networking and other &#8220;me too&#8221; technologies, but in a hockey stick fashion. Sending a man to mars. Cloning sheep. <span style="text-decoration: underline;">Really </span>analyzing our climate. Teleportation. Whatever.</p>
<p>For that you need a visionary CTO with a set of <span style="text-decoration: underline;">brass balls</span>. Not a Cisco kowtowing CIO. And to address Mr. Lundquist’s example of the revolving doors for the national cybersecurity czar: Nor does the standard Symantec or McAfee worshipping CISO make a good cybersecurity czar.</p>
<p>And to conclude, Eric Lundquist is, however correct (even if for the wrong reason) in identifying the fallacy in the current dredge of proposed CEOs. None of the proposed CEO’s is a visionary. Sure, they navigated their ships admirably through the murky tempramental waters of the American economy, but none have really shown a vision for disruptive innovation. They have been keen followers, seeking the market scouts and then bearing down upon their cheese with their mighty heft. Cheese snatching should never be confused with vision and innovation. For that you need the likes of J. Craig Venter or even some “down to earth” science fiction writers. People who’d invest even if the future is still murky and the benefits, for now, unclear.</p>
<p>/al</p>
<p>PS &#8211; The opinions expressed are my own. Not my employer’s, Barack Obama’s, nor Cisco’s. As an entrepeneur and business man, I like my customers to stick with me. I dislike churn, except my competitor’s churn. I therefore dislike the term disruptive.</p>
<p>But I also know that healthcare for generations X Y and Z, as well as fuel costs, etc. are liable to eat up a vast chunk of our GDP, and the only way to prevent that is to increase our GDP. To increase GDP we need disruptive technologies, techniques and methodologies. I also know that the linear thinking preferred by the bankers that manage industry in general favors baby steps within established markets and does not foster disruptive technology.</p>
<p>Hence the opinion piece.</p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/why-i-miss-the-soviet-union/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Unfortunately, I Can&#8217;t Use an iPhone</title>
		<link>http://securitypie.com/unfortunately-i-cant-use-an-iphone/</link>
		<comments>http://securitypie.com/unfortunately-i-cant-use-an-iphone/#comments</comments>
		<pubDate>Mon, 13 Oct 2008 07:52:13 +0000</pubDate>
		<dc:creator>sharon</dc:creator>
				<category><![CDATA[review]]></category>
		<category><![CDATA[thoughts]]></category>
		<category><![CDATA[usability]]></category>
		<category><![CDATA[iphone]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=199</guid>
		<description><![CDATA[Trying to looks trendier, I decided that it&#8217;s about time to upgrade my not-so-new Blackberry. I just need to get &#8216;em to stare at my device, I thought to myself. My standards are not too high. I don&#8217;t need a camera, movies, mp3, sliders, voices or anything like it. It just need to be cool, [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_200" class="wp-caption alignleft" style="width: 246px"><a href="http://securitypie.com/wp-content/uploads/2008/10/a-phone.jpg"><img class="size-medium wp-image-200" title="a-phone" src="http://securitypie.com/wp-content/uploads/2008/10/a-phone-236x300.jpg" alt="Similar to my phone " width="236" height="300" /></a><p class="wp-caption-text">Similar to my phone </p></div>
<p>Trying to looks trendier, I decided that it&#8217;s about time to upgrade my not-so-new Blackberry. I just need to get &#8216;em to stare at my device, I thought to myself. My standards are not too high. I don&#8217;t need a camera, movies, mp3, sliders, voices or anything like it. It just need to be cool, trendy, light and above all, attune to my email habits. The first device that I tested was the iPhone 3G. I asked the <a href="http://blog.imperva.com/2008/10/advanced-risk-management.html" target="_blank">doctor</a> to land me his phone and after installing active sync server and protecting it with the <a href="http://www.imperva.com/products/waf_se.html" target="_blank">SE</a>, I was ready to go.</p>
<p>The good things:</p>
<p>The device is sexy and cool. The UI is simple to use (I do not read manuals) and intuitive. The app store is amazing. I will not be the first nor the last person to say that Apple changed the world with this application. Two big thumbs up for the idea and execution. Web surfing is great: it works fine in multiple languages, handles dynamic content well. Attachment management works well as well.</p>
<p>But sadly I report that the iPhone is almost unusable when it comes to handling my emails. Here&#8217;s why:<br />
<span id="more-199"></span><br />
I like email. I like to send and receive. I like to be updated by email: I receive more than 200 emails per day to my inbox. This number does not include automatic notifications (e.g. content updates, log etc), regular support calls, spam, general information inquires etc. I send more than 100 emails per day. Most of them are one or two liners with some call for action. To make a long story short, I need my email-phone to be more of an email tool than a phone.</p>
<p>I also like to web. I read the links that are sent to me. If there&#8217;s a link embedded into an email, I&#8217;m gonna read it. my email-phone, should be capable to handle the web properly. To be Sharon worthy, the iPhone should have the following issues fixed:</p>
<ul>
<li> I need to search my emails.</li>
<li>I need to be able to click fast, without looking on the keyboard. It looks like jagged keyboard allows me to type faster, with less mistakes. True, the built-in error correction is very nice, but it will not compensate for time.</li>
<li>I need more characters in my keyboard, without the need to switch between alphanumeric, numeric and sign keyboards.</li>
<li>I need more space. Make the screen rotate like the browser.</li>
</ul>
<p>I&#8217;ll wait to see what the Android can do for me.</p>
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/unfortunately-i-cant-use-an-iphone/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
