November 2004 IEEE Security and Privacy

Great article on certifying Linux at EAL2. Not much else really interesting. The article on JetBlue's privacy policy violations was a whole lotta nothing. Gee, we knew that it was bad to give away customer data against the privacy policy like they did. But your further analysis reveals that JetBlue commits a policy violation by not revealing in the policy the fact that they allow a 3rd party image to set a cookie. Whoop de doo.