tag:blogger.com,1999:blog-4088979.post2488754982815294629..comments2023-10-16T06:06:25.012-04:00Comments on TaoSecurity Blog: Security Book Publishing WoesRichard Bejtlichhttp://www.blogger.com/profile/13512184196416665417noreply@blogger.comBlogger12125tag:blogger.com,1999:blog-4088979.post-5255305618164368032009-02-10T03:52:00.000-05:002009-02-10T03:52:00.000-05:00This comment has been removed by a blog administrator.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4088979.post-59845477060789554222008-11-02T23:52:00.000-05:002008-11-02T23:52:00.000-05:00This comment has been removed by a blog administrator.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4088979.post-9102227571819942512008-10-31T20:32:00.000-04:002008-10-31T20:32:00.000-04:00SS,It really depends on the book and how deeply I ...SS,<BR/><BR/>It really depends on the book and how deeply I decide to get involved with it. A "hands-off" book that's more theory and less application is faster than a book where I try most or all of the exercises or examples. Still, I might read a book like that faster than the theory book because I prefer practice to theory. "It depends" I guess.Richard Bejtlichhttps://www.blogger.com/profile/13512184196416665417noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-76799885714131902432008-10-31T13:10:00.000-04:002008-10-31T13:10:00.000-04:00As for books I'd like to see? Perhaps something i...As for books I'd like to see? Perhaps something in the live response or malware analysis topics. There aren't many books out there which dedicate themselves to "new" security topics and I understand the reason behind why. When it can take more than a year to get a book published, the information becomes old.<BR/><BR/>I'm curious - how long does it take you to read a book? You seem to be able to read them very quickly.Tylerhttps://www.blogger.com/profile/15411793726236555303noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-36511180268806363582008-10-27T11:31:00.000-04:002008-10-27T11:31:00.000-04:00Funny you should list PUIS. I was in the COAST La...Funny you should list PUIS. I was in the COAST Lab under Spaf at the time and we got the "privilege" of reviewing the chapters :-). AKA slave labor :-). <BR/><BR/>Personally, I agree with the Syngress comment above and think proliferation has led to decline in quality. It used to be that industry luminaries (Ches, Larry Wall, Eric Allman, Cricket, etc...) published books, now anyone can be convinced to put together a book.Steve Lodinhttps://www.blogger.com/profile/02314415775918817324noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-39925919152316320942008-10-27T10:51:00.000-04:002008-10-27T10:51:00.000-04:00My big problem is the fact that by the time a book...My big problem is the fact that by the time a book is published on a specific topic, it is already dated. This industry is way to much of a moving target to try and publish anything that will be relevant by the time it hits the bookshelves.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4088979.post-56699332667180481872008-10-27T10:38:00.000-04:002008-10-27T10:38:00.000-04:00A couple problems for me. Just to illustrate, I pr...A couple problems for me. Just to illustrate, I probably buy about 10-40 technical books a year, although I am definitely at the low end of the scale so far this year. That has nothing to do with any financial situation.<BR/><BR/>a) Syngress has too often left a bad taste in my mouth. I can pull out $40-$60 for a really crappy book that is put together poorly or just not all that useful. One bad publisher leads to a tendency to not look at as many books. Or at least be careful with those I do look at.<BR/><BR/>b) I'm a big book-store user; I spend many lunch hours in Barnes & Noble. Sadly, I've witnessed the security section continue to dwindle, in some cases to nearly nothing. This means I don't get the chance to idly browse various books and find ones I didn't know about. I find it difficult to "browse" books online, as I do like to open them up and get a feel for the content and presentation before picking something up. I understand computer security books are not a lucrative niche to spend shelf space on, but some of us care! :) The number of books I've bought has been roughly directly related to the selection I have at my bookstores.<BR/><BR/>Of note, other than your blog and the book shelves, I really also don't get notified of any new books in security either. I'm not sure how to fix that, as I also don't want email advertisements either. That might mean there is room for an RSS feed/blog about books and book releases?<BR/><BR/>c) As a group, I feel IT is still pretty overworked and misunderstood. Any sort of economic downturn certainly doesn't help issues (my company is not hurting, but even we have lost a needed position in the past few months). This means less free time available for technical endeavors.Unknownhttps://www.blogger.com/profile/15357840241031190415noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-9555695321379048792008-10-26T12:49:00.000-04:002008-10-26T12:49:00.000-04:00I'd love to see a good solid book on a recent vers...I'd love to see a good solid book on a recent version of Snort. Perhaps you can write it :) ?<BR/><BR/>Also, I'd love to see a book on using modsecurity as a WAF.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4088979.post-37419561058085424002008-10-25T20:43:00.000-04:002008-10-25T20:43:00.000-04:00Does the decline have to be about quality?From my ...Does the decline have to be about quality?<BR/><BR/>From my discussions with publishers the issue exists across the publishing industry - people are buying fewer books. Less people read.<BR/><BR/>Niche areas - like technical books - and within those niches smaller niches - security books - are being hit hard.<BR/><BR/>I think we're seeing a change in the way people want to get information rather than a backlash against any quality issues.<BR/><BR/>- James TurnbullKartarhttps://www.blogger.com/profile/13144558492172625275noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-27537023447870359302008-10-25T20:42:00.000-04:002008-10-25T20:42:00.000-04:00This comment has been removed by the author.Kartarhttps://www.blogger.com/profile/13144558492172625275noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-60972344156782410572008-10-25T20:40:00.000-04:002008-10-25T20:40:00.000-04:00This comment has been removed by the author.Kartarhttps://www.blogger.com/profile/13144558492172625275noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-19774907091221898692008-10-25T16:05:00.000-04:002008-10-25T16:05:00.000-04:00I dont think there are too many books but I think ...I dont think there are too many books but I think there are too few GOOD books and they are usually too expensive. <BR/><BR/>I'd like to see more books addressing current threats published but I don't think the people that can write those books want to share that information in that medium at this time :-(CGhttps://www.blogger.com/profile/11061967917509053185noreply@blogger.com