Category Archives: Security

Hawaii Disappearing: USGS Beach Study of Availability

People have been warning me for years that rising sea levels will erode the coastline. It’s hard to fathom (pun not intended) what that really means. Fortunately a new scientific method is being developed by the American government to quantify the situation. A report called “National Assessment of Shoreline Change: Historical Shoreline Change in the Hawaiian Islands” shows a fairly significant (14 mile) loss of beach.

Because the U.S. population continues to shift toward the coast where valuable coastal property is vulnerable to erosion, the U.S. Geological Survey (USGS) is conducting a national assessment of coastal change.

[…]

A principal purpose of the USGS shoreline change research is to develop a common methodology so that shoreline change analyses for the continental U.S., portions of Hawaii, and Alaska can be updated periodically in a consistent and systematic manner. The primary objectives of this study were to (1) develop and implement improved methods of assessing and monitoring shoreline movement, and (2) improve current understanding of the processes controlling shoreline movement.

Ok, so they’re improving our understanding…and then they give a huge caveat:

Rates of shoreline change presented herein may differ from other published rates, and differences do not necessarily indicate that the other rates are inaccurate. Some discrepancies are to be expected, considering the many possible ways of determining shoreline positions and rates of change, and the inherent uncertainty in calculating these rates. Rates of shoreline change presented in this report represent shoreline movement under past conditions and are not intended for use in predicting future shoreline positions or future rates of shoreline change

PCI DSS Requirement 10.7 Changelog

Four years ago I wrote about changes between versions of the PCI DSS with an example of subtlety from Requirement 10.7. This came up again today, so here’s an updated table:

Requirement 10.7:

DSS 1.0 DSS 1.1 DSS 1.2 DSS 2.0
An audit history usually covers a period of at least one year, with a minimum of 3 months available online. Retain audit trail history for at least one year, with a minimum of three months online availability. Retain audit trail history for at least one year, with a minimum of three months immediately available for analysis (for example, online, archived, or restorable from back-up). Retain audit trail history for at least one year, with a minimum of three months immediately available for analysis (for example, online, archived, or restorable from back-up).

Risks of High SPF Sunscreen

Sometimes I hear people explain firewall effectiveness in terms of SPF ratings on sunscreen. I like the concept but it also tempts me to pull out the annual Environmental Working Group (EWG) suncreen hall-of-shame. The EWG offers nuggets of wisdom such as this:

Sky-high SPF products may protect from sunburn, caused primarily by UVB rays, but they leave children vulnerable to skin-damaging UVA rays. Without the warning signal of sunburn, children stay in the sun too long, and UVA damage builds up. Parents who see a high-SPF label on the bottle may think it’s safe to allow their kids hours of sunburn-free beach time, but risks associated with sun exposure begin in childhood and accumulate over a lifetime.

So the next time you tell me the firewall is like 70 SPF, I might ask A or B (e.g. are you just blocking the noise or also the attack). Here’s another good example:

Consumers who shell out the bucks for pricey SPF-labeled moisturizers rarely get the sun protection they expect. There are plenty of sun care products that sell for less than $3 per ounce and offer better sun protection than those that cost up to 90 times more.

This quote is probably my favorite:

The front of a Lavera sunscreen box claims the product is “effective immediately” and there is “no need to wait.” But the side panel warns, “apply… 15 minutes before sun exposure.” Which is it?

Buyer beware. Don’t judge a firewall by its cover.

This day in history: 1862 Robert Smalls Pilots the Planter to Freedom

On this day in 1862, 150 years ago, Robert Smalls commandeered an armed American Confederate ship in Charleston in order to emancipate himself and several others from slavery.

Smalls was hired in 1861 as a deckhand on Planter, the transport steamer serving Brigadier General Roswell Ripley, commander of the Second Military District of South Carolina. Smalls later became its pilot. In the early morning hours of May 13, 1862, while the white crew was ashore, Smalls, then 23, commandeered Planter, loaded with armaments for the rebel forts. With his wife, children and 12 other slaves aboard he gave the correct whistle signal as he passed each rebel fort. He then sailed toward Onward, the nearest Union blockading ship. As Onward prepared to fire on the approaching rebel ship, it raised the white flag of surrender. As Planter came alongside the Union ship, Smalls, elegantly dressed in a white shirt and dress jacket, raised his hat high in the air and shouted, “Good morning, sir! I have brought you some of the old United States’ guns, sir!”

Smalls then served the Union Navy, including duty as the first black captain of a U.S. vessel, and convinced the Union Army to accept black soldiers in August of 1862.

He later became a respected Republican politician in South Carolina where he created the first state law in the United States for free and mandatory public education.