Sometimes They Just Never Learn

It's been about a year and a half since the VA breach and, though laptops have been encrypted, they're still far away from setting a standard for IT security, according to a GAO report. It was an unencrypted laptop that was at fault in last year's breach.

In the same vein, my other favorite security breach, TJX (how did you guess?) has finally been unraveled by a Canadian security probe mandated by their breach notification laws. The culprit -- weak wireless security that allowed hackers in a parking lot of a TJX facility in Miami to start burrowing their way into the network. This is the full text of the report.

Here's some related point-counterpoint on wireless security that followed the report.