Monthly Archives: January 2009

Choosing a PCI DSS Auditor? Does WMQ awareness count?

Posted on January 26, 2009 by T.Rob

James DeLuccia’s post about choosing a PCI DSS QSA auditor has some good advice.  I would add to his list a criteria one of my own: the auditor should at least know how to spell WMQ.  Or JMS.  Or “message … Continue reading →

Posted in General, News, WMQ Security | Tagged , , , , , | Leave a comment

Must-read article – Secure Software: 'See No Evil' is Not a Strategy

Posted on January 23, 2009 by T.Rob

Given that software currently enables or imperils most aspects of our buying, selling, and communicating, it is time that responsible people acknowledge that this is a massive problem, and stop looking in the opposite direction. “See No Evil” is not … Continue reading →

Posted in News | Tagged , , , , , , | Leave a comment

developerWorks live chat on WMQ

Posted on January 15, 2009 by T.Rob

developerWorks is hosting a live text chat at Noon Eastern US time on January 22nd on the topic of WMQ Best Practices.  The panel will include some folks from the WebSphere MQ online community that you may know: Chris Frank, … Continue reading →

Posted in Events, WMQ | Tagged , , , , , , , | Leave a comment

Whoops! Podcast audio restored.

Posted on January 14, 2009 by T.Rob

Hmmm…maybe I need to take Andy Piper’s advice and switch my WordPress plugins.  Sure, I’ll blame it on PodPress – as if! Well, some of you may have noticed that Episode #6 of The Deep Queue was a PDF, depending … Continue reading →

Posted in Change Log, Errata | Leave a comment

Signed C&C messages? What a novel idea!

Posted on January 8, 2009 by T.Rob

I’ve been saying for a while now that Command and Control messages to be signed.  It’s a question of authentication.  When you pass a message to perform an administrative action, what assurance do you have that the message got to … Continue reading →

Posted in News, WMQ, WMQ Security | Tagged , , , , , , , | Leave a comment

The Deep Queue – Episode #6: The Myth of the Trusted Internal Network

Posted on January 1, 2009 by T.Rob

In this episode of The Deep Queue I explain why I believe the “trusted internal network” is a myth.  Many of the problems that I see on consulting assignments would have been prevented by the same security measures I recommend … Continue reading →

Posted in DeepQueue, Podcast, WMQ, WMQ Security | Tagged , , , , , , , | 1 Comment