Why I’m not on Facebook

If Tom decides to share his own work history with the world, that’s Tom’s business. Imagine he decides to go job hunting. He puts together his resumé and shares it with a headhunter. I think we all expect that he is not supposed to take all of his friends’ resumés and hand them to the headhunter as part of looking for a job. If a headhunter asked him to do that, we’d call it pretty sleazy. And if Tom went along with it, we’d be upset with him.

Yet that’s exactly what’s going on in the world of Facebook by default.

[via raganwald]

NIST SP 800-53r4 now in draft

We finally have a draft NIST SP 800-53r4. My lord, this is taking forever. For good reason, but… still. It’s to be finalized in July, with comments on this draft due to sec-cert@nist.gov by April 6th. Here are the highlights, in their words since I haven’t had a chance to read it myself:

Continue reading →