I have been meaning to write this post for some time, initially instigated by a discussion with friends about motorcycle and bicycle safety and helmets. Bruce’s recent blog post about risk intuition made me think I had already waited too long. Bruce asserts an odd position that he says is based on a professor’s theory … Continue reading Risk Intuition and Helmets →

The BBC has tried to document serious addictions to methampetamine in America. They focus on Fresno, California in a story called “The City Addicted to Crystal Meth” There’s a big why. Why meth? Why is that particular drug so prevalent? But it’s not hard to solve – lack of opportunity, lack of guidance, the cheapness … Continue reading Meth in America →

Trey Ford raises some good questions that are very much the same as asking about systems that may (or do not have) cardholder data but are important enough to beg scope creep analysis. Of course it’s easy for us to say “test all of them” when we sell security testing services. However, in my experience … Continue reading PCI DSS Scope →

The traffic police in California have provided a convenient guide to excuses they will and will not accept. The San Jose Mercury News is the first to publish the details. The two men in their 20s said they had studied U.S. traffic laws before heading to the United States and were told that speed limit … Continue reading Speed Ticket Excuse Guide →