I ran across this story on the ComputerWorld security site.  One of the amazing things I find about security stuff is the amount of thinking (lots all the way to none) that the bad guys do :)

http://blogs.computerworld.com/another_stupid_credit_card_thief?source=NLT_SEC&nlid=38

The owner of a car in New Orleans reported that her purse had been taken from her unlocked car. She also reported that her credit card company said the card had been used to buy a ticket to the Saints / Vikings football game. So the cops showed up at the game right before halftime, and the 15-year old perp's guilty butt was planted right in the assigned seat on his ticket. Brilliant.

So a few points of observation / free advice:

1.  If you steal a credit card and use it to buy a ticket to a football game, DON'T sit in the seat on the ticket. I am pretty sure the cops came there expecting not to find the guy sitting there, but they had to follow the lead and got lucky.

(others removed for brevitiy)...

I have an additional bit of wisdom here:
5.  DON'T LEAVE YOUR PURSE IN AN UNLOCKED CAR!!!!!

Too bad for the 15 year old perp that most of the excement in that game for the Saints happened in the 2nd half (Reggie Bush's 2.5 punt returns for touch downs, i give him .5 for nearly returning one, but instead tripped over a hashmark) :)

jk

I got the pleasure of attending this conference yesterday (it was only $25)!  I took good handwritten notes, and will transcribe them into blog form in the next couple days.  The content could be a bit rough (hey, i have to try and read my own writing...) but some content is better then none!

cheers

jk

I ran across this post from Mr. Phil Haack this morning when doing some ASP.NET MVC research.

I was messing around with my routes and one was not working properly and the technique described by Mr. Haack hooks in a catchall to prevent ugly asp.net error page saying it can't find the route.

We're on an older CTP of asp.net mvc, but when pulling in the 4 C# files into my solution, it worked flawlessly...now, onto solving the problem!

cheers

jk

Joe Stagner is back!  http://www.misfitgeek.com/The+Digital+Blackbelt+Webcast+Series+Is+BACK.aspx.  He has 3 upcoming webcasts on the following (security related) topics:

11/3/2008; 11:00 AM (PST)
Convincing Management: The Business Case for Adding Security to the Development Life Cycle
[ Click HERE to Register ]

11/10/2008; 11:00 AM (PST)
Security Development Lifecycle: Building an Intentionally Secure Development Process
[ Click HERE to Register ]

11/24/2008; 11:00 AM (PST)
Threat Modeling for Software Developers
[ Click HERE to Register ]

'See' you there!

stay safe

jk 

I will be migrating content from my old Magenic blog in the next couple of days to help preserve my contributions (insert giggles here...).  I'll probably leave the blogspot site alone for now...I hate having content in multiple locations though.

 Hopefully this new engine will be easier for me to work with and publish on, thus inspiring more (and hopefully better) content!

jk