354_  This is More Than a High-Level Alert for Your Computer

              Trent Hein and
Ned McClain, co-founders of Applied Trust discuss one of the scariest Internet subjects we have ever heard. They talk about the topic in a way that business people can understand and gives your IT staff some geart security ideas.

Their number one suggestion is to
check the Open Web Application Security Project or OWASP. "These guys publish a lot of interesting information about what’s going on with application security on the web. They publish a Top 10 Vulnerability list. The 2007 list is out and anyone who has a web site, large or small, should be aware of what’s on this list. There's also a wonderful guide that talks through how to mitigate and address the top ten vulnerabilities in your environment.

In 2007, Cross site scripting aka XSS, has risen to the number one spot of the top ten web security vulnerabilites. Sites that allow users to post content to the site might mean that a bad guy could post malicious code to the site.

No. 2 Threat: Injection Flaws. A lot of web sites have a data base behind them and any of those servers speak a language that you can use to say, “Hey, I would like to get information from the data base, or I’d like to put information into the data base.” This has been used for a whole variety of exploits.

No. 3 Malicious File Execution, really means having good website hygiene. Demo files that came with your computer, or a sample application should be cleaned up so that a ‘bad guy’ can’t take advantage of that file and take control of your computer.

Trent and Ned give a whole new meaning to TRUST.

Related Links:  Applied Trust Engineering || OWASP Home || OWASP Top 10 || Cross Site Scripting || Channels: Safe Surfing, Women in IT, Software, Cyber Security >> Keywords: Applied Trust, Trent Hein, Ned McClain, OWASP, Open Web Application Security Project, Cross Site Scripting, XSS, Malicious Content> Bytes: 13761204 >8/6/07
LISTEN

325_ Open Source, a pathway to innovation and much, much more

Imagine you buy a software company. The transaction is completed. There’s a knock on your door. A stranger is here to confirm that you are not in breach of his ‘open source software license’. You call your attorney for help. That’s where Jason Haislmaier, HRO, enters the scene. He is recognized by many as the “Open Source Legal Guru” in Colorado. When we asked how he got into this field? his reply was direct and to the point. "Simply put, I was driven by client need."

Having earned an engineering degree prior to law school, Jason has a natural affinity and appreciation for the technical issues he handles today.  "As a software vendor, it's not uncommon to have your software product comprised of software that you've developed in-house, that you would consider proprietary, perhaps third party software that you've licensed in, and from open source software, and it's all working together. It is that co mingling or interaction of the softwares that, from a legal standpoint, creates some of the stickier areas under the open source license. Even if you're not a vendor, if you're a data center, it's the same thing.

"Open source software, at its core, is licensed. Licenses can be breached and that can create liability; and in come the lawyers. And that’s where a lot of the legal aspects of open source come about. It’s very difficult to talk about open source software without talking about the legal aspects of open source software.

Related Links: Holme Roberts & Owen || GPLv3 || It's the Law Interviews || Find It || Keywords: Open Source Software, HRO, Holme Roberts & Owen, Jason Haislmaier, Lucky Vidmar> Channels: Software Bytes: 7984172 LISTEN 6/11/07

Part 2: 351_ Brad Talks About the Future and
Gives Some Great Funding Advice
Dramatic innovation is here. More is coming our way and will transform many things in our personal and business lives. Brad Feld, managing partner of the Foundry Group is very open about predictions for the next few to twenty-years, and lays it on the line for a range of different topics: Why he supports NCWIT? Why he and Jason Mendelson started the 'Ask the VC' Blog? Why Colorado must invest more in education? ..as he weaves in other hot topics. Larry and Pat asked, "What are the 3 most common mistakes made by entrepreneurs when asking for money?" You have to hear it in Brad's words but here is a hint: Wrong amount of money; A disconnect between what's needed and reality; and the team that is talking today and going forward with the plan. Brad points out he has never met a company whose revenue plan was accurate. He shares some ideas. Bytes: 6784630 LISTEN Part 2 of 2 8/6/07

Related Links:  Foundry Group || Mobius Venture Capital || TechStars || Brad's Blog || Ask The VC || w3w3.com Blog ||Channels: VCs, Entrepreneurs > Keywords: Brad Feld, Foundry Group, Mobius Venture Capital, TechStars, FeedBurner, Postini, PhotoBucket, Me.dium, NewsGator, Dogster > Bytes: 9763007> LISTEN Part 1 of 2 7/30/07

Part 1: 350_ Brad Feld: Venture Capitalist; New Name, New Office, New Outlook
Getting the latest scoop about venture backed companies in Colorado from Brad Feld, was more fun for Pat and Larry than going to an over-the-top Sci-Fi movie…in fact, some of what they heard sounded over-the-top and with a Sci-Fi flavor but steeped in exciting reality. Brad talked about the Web resurgence the past 24 months and cited a number of companies. Those Colorado companies included FeedBurner, Postini, PhotoBucket, Me.dium, NewsGator, Dogster, and more (none of which are liked in spell-check).
      Brad also talked about the successes and challenges of TechStars. We reflected on the 2003 investor perspective where words like "cautiously optimistic" were commonly voiced, and Brad joked about that oxymoron. That's not him, he says he prefers, "encouragingly pessimistic". Brad is managing partner of the Foundry Group which has opened a new office in the middle of Boulder. Brad had Larry sit next to a 1980s Donkey Kong game. There is a bunch of valuable information packed in with the humor..