

Paul F. Roberts
Paul Roberts is an experienced technology reporter and editor who writes about hacking, cyber threats and information technology security. When he's not writing for InfoWorld, Paul edits The Security Ledger, a blog focused on securing the Internet of things.

The state of open source security
Recent high-profile vulnerabilities have put the lie to the 'many eyes' theory -- but also driven real progress in securing the open source ecosystem.

Survey finds faith in Internet trust system fading fast
IT professionals are more reliant on public key encryption than ever before. They’re also more doubtful than ever before that the technology will keep their critical data and assets safe, according to a Ponemon survey of more than...

How an acute shortage of cyber talent gave rise to 'spooks as a service'
As the list of victims of sophisticated cyber attacks expands, so does the need for high-priced talent to help investigate and recover from those attacks. The latest solution: Hosted services offering access to cyber intelligence and...
Cyber insurance: Only fools rush in
Mega breaches at Fortune 100 firms have put the spotlight on the need of enterprises to manage cyber risk like never before. But experts say that the market for cyber insurance is still young and, when it comes to insuring against...
Weary of takedowns, Microsoft looks for partners in crime fighting
Microsoft has grown weary of its role as the Internet's Dirty Harry and, increasingly, is looking for partners to share the load of fighting cyber crime.
Beware the next circle of hell: Unpatchable systems
Insecure by design and trusted by default, embedded systems present security concerns that could prove crippling.
In wake of Snowden, U.S. cloud providers face calls to wall off data
Behind closed doors, U.S. cloud providers and hosting firms say that customers are asking them to wall off data out of fear of government eavesdropping
Breaking Bad(ware): Micro-targeting hits the spam world
A new spam run targeting fans of the cult show Breaking Bad proves that for spammers (and other business folk) we are the sum of the niche groups we align ourselves with.
DIY security: Cool tools you can build yourself
DIY electronics is entering a golden age with the help of powerful, cheap, programmable devices like the Arduino micro controller and Raspberry Pi mini computer. But the DIY potential of these new platforms isn't limited to consumer...
Secure email is dead
Recent revelations about wide ranging and warrantless government surveillance don’t mean that email is dead – just that you can’t ever trust it again!
IPMI: The most dangerous protocol you've never heard of
Another week, another terrifying presentation about security holes in IPMI – a widely used technology for remote management of servers. But will IT administrators heed the warning?