Security: Cloud Meltdown, or Is It?

Do Meltdown and Spectre invalidate the cloud? Do modern security issues invalidate the cloud? Does lack of provable security invalidate the cloud? But isn’t it provable? These are pretty strong statements, but the latest Spectre patch microcode recall for certain CPUs is starting to make some companies rethink their use of the cloud. What type …

Threat Modelling: The Now of IT

Threat modelling was the subject of the latest Virtualization Security Podcast (which I am still trying to upload, so time for a new service). Threat modelling is what every security person does, but not necessarily formally. Threat modelling in many ways takes an architecture and looks for well-known threats. One such threat that could come …