Archive for June 22nd, 2006

Info security: U - R - IT

realtor secure logo small.jpgThe key to security is embedded in the word itself:

U R IT

If not you, then who?
If not now, then when?

During your typical day, you may be exposed to situations where you are vulnerable to a security breach. (e.g. PDA or laptop left in a car, unmonitored office doors open to public, contracts in plain view). And then there are the risks to your computers themselves - viruses, hacks and phishers.

You need to be prepared to:
Access - Remediate - Monitor

Infosec wheelBuilding and sustaining an effective information security rogram requires resolve, commitment and know-how. This is why educating agents, staff and executive management on security fundamentals has become essential. As a result, NAR’s Center for REALTOR(R) Technology is launching the ‘Summer of Security’ educational initiative. We want to continue to offer you the "know-how." Together with your resolve and commitment, sound information security is achievable!

The Summer of Security initiative is a part of the REALTOR Secure program and consists of a weekly e-mail containing helpful and relevant information on security issues. Our goal is to create a culture through which you become more conscious of the need for security and better understand why security measures are relevant to you and your business. Our purpose is not just to convey information, but also to compel you to evaluate what you do and how you do it, and make changes as appropriate. This topic is important for you and for our industry.

The Summer of Security effort represents NAR’s commitment to bring you practical information and guidance . Ideas that you can put into action immediately to improve your security and enhance
your business position.

We look forward to presenting this educational initiative to you throughout this summer. We encourage you to share these mail messages with others in your organizations, post them to your web site and publish them in your newsletters, etc. If you would like to recieve the summer of security series on newsletterplease drop me a note andyou’ll be added to the list.

Thanks for tuning in.

PolicyPage 1.0.3 released

policyPage-logo120_35.jpgPolicyPage release 1.0.3 is now available. In release 1.0.3 only the documentation and FAQs changed. The changes make the app easier to understand, install and use.

The changes for v 1.0.3 include:
- Updated email configuration documentation.
- Enhanced the Frequently Asked Questions for those questions received over the past several months.

There is no need for 1.0.2 PolicyPage users to upgrade. The revised documentation is available online. With the release of 1.0.3 the development effort now focuses on spidering to test  all pages on a web site.

PolicyPage comments (and bugs) can be posted to the project mail list.
You can download PolicyPage application by visiting the project site.

We continue to look to the community to guide future development priorities. We invite and welcome your input.

Patents and Standards

This week I’ve been working with/looking into Web Services, specifically SOAP and its related standards.  In the course of my investigations I found that one of the related security standards, SAML, is under patent by RSA.  I tripped across this fact when reading the front page of the OpenSAML project.  For all I know, other parts of SOAP might be under patent as well, but I haven’t tripped across a reference, nor have I gone looking.

This got me thinking about how, in my view, patents and open standards shouldn’t mix.  If a standard is to be truly open, it needs to be freely implementable by everyone.  Without open standards we wouldn’t have much of the technology we now take for granted:  e-mail and the web being two obvious examples.  A standard that has parts of it under patent could potentially harm small businesses as well as the open source developer.

I started to do some research to write this blog post, and came across a paper that covers everything I would have wanted to talk about and then some.  The Problem of Software Patents in Standards is written by Bruce Perens.  Its a fairly short paper and talks about the current situation in software patents, what various standards bodies are doing to address the problem, and he make recommendations about resolving the problems around this issue.

As more technology standards are being defined in the real estate industry, it is my hope that the standards bodies in the industry keep thoughts like this in mind.