True’s very own Michael Oglesby was recognized within the credit statement of the Oracle January 2012 CPU for identifying specific vulnerabilities addressed in the report. In a future post, Michael will share insights into the vulnerabilities he uncovered.
True Consultant Uncovers Oracle Vulnerabilities Addressed in January 2012 CPU
January 23rd, 2012 | Posted by in Uncategorized - (0 Comments)From the what-is-the-world-coming-to department:
Attention parents of teenagers. This story has made the front page of Slashdot: Teens Share Passwords as a Form of Intimacy. First, you had to talk to your teens about alcohol and drugs. Then, the birds and the bees. Now add another item to your list of topics during The Talk: abstinence from pre-marital password sharing!
Oracle dropped a bomb today on DBAs everywhere: the January 2012 CPU addresses 79 vulnerabilities! Affected Oracle products range from the 10g and 11g releases of Oracle Database, to WebLogic, VirtualBox, and even MySQL. One of the Oracle Database patches fixes a vulnerability that is remotely exploitable without authentication. In other words, PATCH NOW! (After testing, of course.)Read more
On Tokenization: Tokenization & Payment Channels
January 4th, 2012 | Posted by in PCI | Tokenization - (0 Comments)Implementing tokenization is much more about understanding how your organization interacts with payments than it is simply rolling out a device that will tokenize payment card data. Many tokenization solutions in the market today are a “silver bullet” and can remove your environment from PCI scope. Beware though, most solutions address only one piece of the tokenization puzzle.Read more
On Tokenization: Implementing Tokenization
December 27th, 2011 | Posted by in PCI | Tokenization - (0 Comments)Don’t be fooled. Implementing tokenization may not be as easy as they say. In fact, depending on your environment, implementing tokenization can be quite complex. For instance, if your company is a wholesaler and takes payments through multiple channels, implementing tokenization in all of those channels can be quite challenging.Read more






