Geek Reading

Started reading this a week ago. Still in the early chapters of this book. The first few chapter are there to inform you as to the earlier work and theory that will be needed to understand the later discussion. For a Cosmologist Greene does an admiral job cover topics that can be at times a bit dry. More later as I get through the book.

PHP is one area that really needs work when it comes to security. Its wide spread implementation has lead to numerous security concerns. In the last year we have seen several books on the topic. I can only hope that those that write PHP will take the time to read what is available, including this book. Too many times as a have I heard for customers/programmers say that security is not their problem… let the Sys. Admin’s take care of that…. Other PHP books is O’Reilly’s Essential PHP Security by Chris Shiflett and Pro PHP Security by Chris Snyder and Michael Southwell

Check out the Amazon reviews

Just got my hands on this book. To be honest I’m surprised a book like this took so long to make it to print. As a Linux user I chain commands together through something called bash scripting. So why wouldn’t crackers be doing the same thing. Lets be realistic, most crackers are automating their attacks and they’ve been doing this for a long time. So isn’t chaining various attacks together just good sense? I mean from the perspective of the bad guys.

Okay, who does not need a quick reference on grep. This is one of the utility knives of the *nix world.

Though I’m not programmer I do know a programming book with reading, after all I’ve been selling computer books for more the 12 years. This might not be K&R’s C Programming Language, or Programming Pearls by Jon Bentley, another favourite of my customers is The Pragmatic Programmer: From Journeyman, to Master by Andrew Hunt. Interestingly enough there is not one line of sample code included anywhere in this book.

This book is for the highest level of security professional, the individual best suited for this book is someone who controls the security or assurance, and governance of a company.
The author set out to develop a strategy for governance in 9 steps.

1. Define and enumerate the desire outcomes for the information security program.
2. Determine the objectives necessary to achieve those outcomes.
3. Describe the attributes and characteristics of the desired state of security.
4. Describe the attributes and characteristics of the current state of security.
5. Perform a comprehensive gap analysis of the requirements to move from the current state to the desired state of security.
6. Determine available resources and constraints.
7. Develop a strategy and roadmap to address the gaps, using available resources within existing constraints.
8. Develop control objectives and controls in support of strategy.
9. Create metrics and monitoring processes to:
Measure progress and guide implementation.
Provide management and operational information for decision support.

This book is not exactly my cup of tea. But still a interesting looking into the highest levels of security implementation considerations.

I’ve been working my way through this book for a while now. I’m no expert on Oppenheimer in fact my best image of him was the shadowy figure behind the atom bomb. Having not known much of this period I’m finding it quite fascinating. Seeing that the book has been around for a while now, I won’t bother trying to do a review of it. That would be sort of stupid as well, there are others who have written great reviews already and it takes a solid knowledge of the era and personalities involved to do it any justice.

I can say that the back story about the Jewish schooling system, US and European educations systems of the time was very interesting. The part of the book I’ve got a bit of a tough time with is the post bomb stuff. I’m not finding that part of the story quite as compelling. From an astronomy point of view here is a snippet from wikipedia.

Oppenheimer did important research in theoretical astronomy (especially as it relates to general relativity and nuclear theory), nuclear physics, spectroscopy, and quantum field theory (including its extension into quantum electrodynamics). The formalism of relativistic quantum mechanics also attracted his attention, although because of the then existing well-known problem of the self-energy of the electron, he doubted the validity of quantum electrodynamics at high energies. His best-known contribution, made as a graduate student, is the Born-Oppenheimer approximation mentioned above. He also made important contributions to the theory of cosmic ray showers and did work that eventually led toward descriptions of quantum tunneling.

There one thing you learn about Oppenheimer real quick, was he was a conflicted man, someone who one was never be sure of. He was both brilliant and capable, but who ever really saw his own strengths. This lack of self confidence would be the achilles heel that would plague him all his life and affect almost all his decisions and actions. To understand the North American/American 20th century one must understand the events that surround the life of this man and it was for these very reasons that I chose to read this book.


Found out about this book while listening to the podcast of The Silver Bullet Security Podcast Having listened to the interview with the author I’ve decided to add this my reading list. It is about time I read something that is not a technical journal or dense tech book.
So you thought you knew very thing there was to know about the Linux Kernel. Well here is a book that just might add to you vast knowledge and show you something you just might have missed.
I’ve only briefly flipped through this book and it looks like a keeper. I covers a topic that has needed a book for a while. Hopefully I’ll get back to with some more intelligent comments later.
So you think you can program? Now it is time to put these practises in your own life. Here is one man’s opinion on just how to do that. Only a geek is going to get the best out of this book. But if you do, you just might better off for it.

No Responses to “Geek Reading”

Care to comment?