# information-security Published articles for information-security. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## My Career Pivot: From IT recruiter to information security DevFeed: [My Career Pivot: From IT recruiter to information security]() Original publisher: [Read original article]() Author: Skyscanner Engineering Published: 2022-06-24T08:08:19Z Content type: article Language: en Sources: [Stories by Skyscanner Engineering on Medium]() Topics: [Security](), [Cybersecurity]() Tags: [career](), [engineering](), [female-engineers](), [information-security](), [pci-dss](), [security](), [security-engineering](), [women-in-tech]() ### AI overview This profile follows Maria Sepulveda's career transition from customer service and IT recruitment into information security. As a Senior Security Engineer at Skyscanner, she discusses her role, career development, and responsibility for leading the recertification of the company's PCI DSS compliance. ### Source excerpt Senior Security Engineer Maria Sepulveda As we celebrate International Women in Engineering Day this week, we're profiling female-identifying engineers across our business. Maria Sepulveda is a Senior Security Engineer at Skyscanner. An expert within information security, Maria led the recertification of Skyscanner's PCI DSS (Payment Card Industry data Security Standard) compliance. Maria took an unconventional path to information security, starting her career in customer service and IT recruitment. Here, she discusses her journey, imposter syndrome and what her role looks like today. Maria, as a Senior Security Engineer, what does your role involve? Well, I only recently joined Skyscanner so a typical day for me today might look different to a typical day in a couple of months time! Having said that, I have already been given responsibility to lead the recertification of our PCI-DSS compliance. It's great that I can be trusted so early on in my Skyscanner journey. My day typically starts with following up on tasks that are due in the coming week. During the day I meet with people and various teams to understand what they do. I'll also attend internal events, often to better understand the Skyscanner culture and the way things work here -- as well as to make connections. Focus Time in the afternoon allows me to re-read my notes and absorb information I obtained during the day. The day might end with a recap of the day with my team, allowing me to ask questions I haven't already asked or just generally talk about how the day went. What was your career journey to this point? I took an unconventional path into information security. Originally from Australia, I worked in customer service roles and IT recruitment. I arrived in London and found a job working at an in-house recruitment team for an online betting company. I knew that I wanted to move into a more tech-focussed role but still interfacing with the business. My colleague who was recruiting for the security team ## A Vulnerable System DevFeed: [A Vulnerable System]() Original publisher: [Read original article]() Author: Adam Published: 2021-09-13T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Cybersecurity](), [Security](), [Computing](), [vulnerability]() Tags: [book](), [hacking](), [history](), [information-security](), [security](), [vulnerability]() ### AI overview A review of Andrew J. Stewart's book A Vulnerable System, which traces the history of computer security and examines why the field's recurring problems, guiding mantras, and narrow debates remain relevant today. ### Source excerpt Andrew Stewart has an excellent new book, A Vulnerable System. ## Apple Guidance on Intimate Partner Surveillance DevFeed: [Apple Guidance on Intimate Partner Surveillance]() Original publisher: [Read original article]() Author: Adam Published: 2021-05-06T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security & Privacy](), [Cybersecurity](), [Security]() Tags: [apple](), [cybersecurity](), [information-security](), [safety](), [surveillance]() ### AI overview The article examines Apple's "Device and Data Access when Personal Safety is At Risk" guidance for reviewing and changing access to devices, accounts, shared information, and location. It connects intimate partner surveillance with information-security challenges and argues for a cybersecurity public health discipline that complements traditional information security. ### Source excerpt Apple has released 'Device and Data Access when Personal Safety is At Risk' and I wanted to explore it a bit. ## CyberSecurity Hall of Fame DevFeed: [CyberSecurity Hall of Fame]() Original publisher: [Read original article]() Author: Adam Published: 2018-08-06T00:00:00Z Content type: news Language: en Sources: [Shostack & Friends Blog]() Topics: [Cybersecurity](), [Computer science](), [Encryption]() Tags: [computer-science](), [cybersecurity](), [des](), [information-security](), [news](), [people]() ### AI overview The article congratulates the 2016 CyberSecurity Hall of Fame inductees, highlighting seven figures associated with information security, computer science, cryptography, and related fields. ### Source excerpt [no description provided] ## Just Culture and Information Security DevFeed: [Just Culture and Information Security]() Original publisher: [Read original article]() Author: Adam Published: 2018-05-09T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [passwords](), [Architecture & Design](), [Availability]() Tags: [information-security](), [password](), [password-manager](), [passwords](), [patterns](), [security]() ### AI overview The article reflects on just culture in information security after Twitter disclosed that plain-text passwords had been stored in log files without evidence of access or a known breach. It revisits criticism of password-management systems with centralized storage, arguing that locally distributed storage may avoid more catastrophic failure modes while acknowledging tradeoffs in monitoring, response, upgrades, and availability. ### Source excerpt [no description provided] ## Voter Records, SSN and Commercial Authentication DevFeed: [Voter Records, SSN and Commercial Authentication]() Original publisher: [Read original article]() Author: Adam Published: 2017-07-05T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [Authentication](), [data]() Tags: [authentication](), [data](), [identity](), [information-security](), [security]() ### AI overview The article examines the information-security implications of a request for voter data, including dates of birth and the last four digits of Social Security numbers. It questions whether exposing those details undermines their use as an authentication factor and discusses uncertainty about the applicable law. ### Source excerpt [no description provided] ## Information Security and Privacy News Quiz Materials for Twitter Hackweek DevFeed: [Information Security and Privacy News Quiz Materials for Twitter Hackweek]() Original publisher: [Read original article]() Published: 2014-01-11T19:50:55Z Content type: article Language: en Sources: [Signs of Triviality]() Topics: [Security](), [X (Twitter)]() Tags: [information](), [information-security](), [news](), [privacy](), [security-and-privacy](), [twitter]() ### AI overview Materials, stories, and links for a variation of the NPR News Quiz focused on information security and privacy news, created for Twitter's quarterly Hackweek. ### Source excerpt For this quarter's Hackweek at Twitter, I put together a variation of the NPR News Quiz with a focus on information security and privacy news. These are the materials, stories, and links.