<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] Lattest Articles]]></title>
    <link>http://securityratty.com</link>
    <description></description>
    <pubDate>Sat, 05 Jul 2008 08:55:49 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Interview on IMI Tech Talk / KFNX: Cloud Computing and Security]]></title>
      <link>http://securityratty.com/article/c482caee5a3d90ea348672b0420ed1a8</link>
      <guid>http://securityratty.com/article/c482caee5a3d90ea348672b0420ed1a8</guid>
      <description><![CDATA[A quick post to say a very warm welcome to I MI Tech Talk / KFNX listeners
I was recently approached to take part in an interview about Cloud Computing and Security on IMI Tech Talk, broadcast on KFNX...]]></description>
      <content:encoded><![CDATA[<p><a title="KFNX News Talk Radio - About Us" href="http://www.1100kfnx.com/index.php?/aboutus/"><img style="border: 3px solid black; margin: 5px;" src="http://www.1100kfnx.com/assets/logo.gif" alt="KFNX Radio Logo" width="149" height="115" /></a><a title="IMI Tech Talk Archives" href="http://techtalk.imi-us.com/"><img style="border: 2px solid black; margin: 5px;" src="http://techtalk.imi-us.com/img/IMITTLogo.gif" alt="IMI Techtalk" width="80" height="80" /></a></p>
<p>A quick post to say a very warm welcome to I<a title="IMI Tech Talk" href="http://techtalk.imi-us.com/">MI Tech Talk</a> / <a title="KFNX News Talk Radio" href="http://www.1100kfnx.com/index.php?/aboutus/">KFNX listeners</a>!</p>
<p>I was recently approached to take part in an interview about Cloud Computing and Security on IMI Tech Talk, broadcast on KFNX News Talk Radio.  KFNX is a US based radio station based out of Phoenix, Arizona.  More in-depth than the <a href="http://cloudsecurity.org/2008/05/05/cloud-computing-and-security-for-the-masses-interview-on-npr/">previous opportunity</a>, a range of Cloud Computing technologies were discussed in the 30 minute segment:</p>
<ul>
<li>Who am I?</li>
<li>What is cloud computing? (*that* question!).</li>
<li>Introduction to virtualization.</li>
<li>Examples of cloud computing services that exist today.</li>
<li>Barriers to entry.</li>
<li>Security issues of processing or storing data in the cloud</li>
<li>cloudsecurity.org</li>
</ul>
<div>I will update this post when the audio archive of the show is posted.</div>
<p>I did mention I would provide links to useful Cloud Computing resources (as my mind went totally blank during the interview!) - watch for a post next week covering the blogs I read regularly.</p>
<p>Cloudsecurity.org was born as I couldn&#8217;t find any dedicated web resource discussing Cloud Computing and Security.  If there are subjects you want to see covered, feel free to leave a suggestion in the Skribit sidebar to the right.</p>
<p>I do welcome comments in response to blog posts on the blog itself - don&#8217;t be shy :-).</p>
<p>For private communications I can be reached at <a href="mailto:craig.balding@gmail.com">craig.balding@gmail.com</a>.</p>
<p>My thanks to the IMI Tech Talk team, particularly Tom and Eric.</p>
<p>Enjoy the blog,</p>
<p>Craig</p>
<img src="http://feeds.feedburner.com/~r/CloudSecurity/~4/328349973" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 17:59:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cloud">cloud</category>
      <category domain="http://securityratty.com/tag/imi tech talk">imi tech talk</category>
      <category domain="http://securityratty.com/tag/tech talk">tech talk</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/kfnx">kfnx</category>
      <category domain="http://securityratty.com/tag/blog posts">blog posts</category>
      <category domain="http://securityratty.com/tag/post">post</category>
      <category domain="http://securityratty.com/tag/quick post">quick post</category>
      <category domain="http://securityratty.com/tag/interview">interview</category>
      <source url="http://feeds.feedburner.com/~r/CloudSecurity/~3/328349973/">Interview on IMI Tech Talk / KFNX: Cloud Computing and Security</source>
    </item>
    <item>
      <title><![CDATA[Dont become a statistic in the lost laptop legacy.]]></title>
      <link>http://securityratty.com/article/ac53c500c93a598cdec88a73e732f9db</link>
      <guid>http://securityratty.com/article/ac53c500c93a598cdec88a73e732f9db</guid>
      <description><![CDATA[The article also has a video showing how easy it is for thieves to steal your lappie


clipped from consumerist.com

Travelers Leave 12,000 Laptops In Airports Every Week


Absentminded travelers...]]></description>
      <content:encoded><![CDATA[<div > The article also has a video showing how easy it is for thieves to steal your lappie. </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/39740F1F-0745-4E7E-814D-B135B15701E7/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/c3b51534-7376-4fa3-87c7-e7a0437e44cd/39740F1F-0745-4E7E-814D-B135B15701E7/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://consumerist.com/tag/laptops/?i=5022174&#038;t=travelers-leave-12000-laptops-in-airports-every-week" href="http://consumerist.com/tag/laptops/?i=5022174&#038;t=travelers-leave-12000-laptops-in-airports-every-week" style="font-size: 11px;">consumerist.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://consumerist.com/tag/laptops/?i=5022174&#038;t=travelers-leave-12000-laptops-in-airports-every-week -->
<div style="margin: 4px 0px; color: #000000; font-size: 20px;"><A href="http://consumerist.com/tag/laptops/?i=5022174&#038;t=travelers-leave-12000-laptops-in-airports-every-week">Travelers Leave 12,000 Laptops In Airports Every Week</A></div>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://consumerist.com/tag/laptops/?i=5022174&#038;t=travelers-leave-12000-laptops-in-airports-every-week --><P><IMG src="http://consumerist.com/assets/images/consumerist/2008/07/SillyTraveler.jpg" />Absentminded travelers flummoxed by <A href="http://consumerist.com/tag/airport-security/" title="Click here to read more posts tagged AIRPORT SECURITY" rel="nofollow" class="autolink">airport security</A> leave 12,000 laptops in airports every single week. Only 30% are ever recovered.</P></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/39740F1F-0745-4E7E-814D-B135B15701E7/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 11:50:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/single week">single week</category>
      <category domain="http://securityratty.com/tag/laptops">laptops</category>
      <category domain="http://securityratty.com/tag/travelers">travelers</category>
      <category domain="http://securityratty.com/tag/airports">airports</category>
      <category domain="http://securityratty.com/tag/airport security">airport security</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/lappie">lappie</category>
      <category domain="http://securityratty.com/tag/easy">easy</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=494">Dont become a statistic in the lost laptop legacy.</source>
    </item>
    <item>
      <title><![CDATA[Changhai Ke of ILOG: The More Part of CEP over ESP is Far from Mature]]></title>
      <link>http://securityratty.com/article/4ccda505bb59db762d5daa487d5ea59e</link>
      <guid>http://securityratty.com/article/4ccda505bb59db762d5daa487d5ea59e</guid>
      <description><![CDATA[This post was originally a comment On CEP Maturity and the Gartner Hype Cycle by Changhai Ke of ILOG . Changhai Kes comment was so well written, I have repostedit as a blog entry
The More Part of CEP...]]></description>
      <content:encoded><![CDATA[<p>This post was originally a <a href="http://www.thecepblog.com/2008/06/01/on-cep-maturity-and-the-gartner-hype-cycle/#comment-498" target="_blank">comment</a> <a href="http://www.thecepblog.com/2008/06/01/on-cep-maturity-and-the-gartner-hype-cycle" target="_blank">On CEP Maturity and the Gartner Hype Cycle</a> by <a href="http://forums.ilog.com/brms/index.php?action=profile;u=16;sa=showPosts" target="_blank">Changhai Ke of ILOG</a>.  Changhai Ke&#8217;s comment was so well written, I have reposted it as a blog entry.</p>
<p>The “More” Part of CEP over ESP is Far from Mature </p>
<p>By Changhai Ke, <a href="http://www.ilog.com" target="_blank">ILOG</a></p>
<p>An EDA and CEP must be understood as 2 different areas. EDA is an architecture pattern for enterprise applications. The components are loosely coupled by the use of events. In its strict sense, this is more an architecture pattern than an algorithm.</p>
<p>CEP, on the other hand, targets at the event processing and pattern recognition level. For me, it’s the research for the right algorithm to use to recognize the situations. Pattern recognition, event correlation are all good characterizations for CEP. Back 15 years ago, the alarm correlation in the telecom area was done using production rules (it is still the case), and this perfectly falls into the CEP area.</p>
<p>In fact, EDA comes after CEP, but the CEP at that period was not explicitly called CEP. The nature of their respective study is not the same, one is at the architecture and middleware level, the other is at the algorithm side. As both are concerned by events, it seems that people more or less implicitly include CEP in EDA, mix the two and introduce confusion. Why not. But it’s important to understand that CEP (on its algorithm side) could mature on its way without being worried about the event transportation layer.</p>
<p>As a system, CEP needs input events for processing. If EDA is considered as the only way to bring and transport events to the CEP systems, then of course CEP won’t become successful without the prior success of EDA. But in my understanding, CEP targets some real-time or close to real-time applications, and the event transport layer in those applications are the most often ad-hoc and over-optimized. I fear that EDA has the same kind of performance goal.</p>
<p>Another distinction needs to be made. CEP is more general than ESP (event stream processing), characterized by an EPL for data aggregation with notifications. Even on the market most of the CEP vendors provide EPL languages, CEP has the vocation to cover more than that. The “more” part is not well defined, at least it should include the event correlation, and correlation is not just data aggregation.</p>
<p>The ESP part of CEP could be considered as quite mature. There are so many EPL languages, and tuning has been made on the runtime side. It seems also that some applications based on ESP have proved to work. But the “more” part of CEP over ESP is far from mature. It is often described that CEP could use several technologies, such as statistical models, Bayesian network, time series, rules, etc. I agree that there are a few systems using rules. But where are the others?</p>
<p>Sincerely,</p>
<p><a href="http://forums.ilog.com/brms/index.php?action=profile;u=16" target="_blank">Changhai Ke</a></p>
]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 07:58:30 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/implicitly include cep">implicitly include cep</category>
      <category domain="http://securityratty.com/tag/cep systems">cep systems</category>
      <category domain="http://securityratty.com/tag/cep targets">cep targets</category>
      <category domain="http://securityratty.com/tag/cep maturity">cep maturity</category>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/correlation">correlation</category>
      <category domain="http://securityratty.com/tag/event transport layer">event transport layer</category>
      <category domain="http://securityratty.com/tag/alarm correlation">alarm correlation</category>
      <source url="http://www.thecepblog.com/2008/07/06/changhai-ke-of-ilog-the-%e2%80%9cmore%e2%80%9d-part-of-cep-over-esp-is-far-from-mature/">Changhai Ke of ILOG: The More Part of CEP over ESP is Far from Mature</source>
    </item>
    <item>
      <title><![CDATA[Firewalls On Your Windows Servers]]></title>
      <link>http://securityratty.com/article/0d3a5ed02686a6d75aef94ae06705f87</link>
      <guid>http://securityratty.com/article/0d3a5ed02686a6d75aef94ae06705f87</guid>
      <description><![CDATA[A survey last year by David Litchfield of NGS Software showed &quot; ...there are approximately 368,000 Microsoft SQL Servers directly accessible on the Internet and around 124,000 Oracle database servers...]]></description>
      <content:encoded><![CDATA[<A href="http://regmedia.co.uk/2007/11/15/thedatabaseexposuresurvey2007.pdf">A survey last year by David Litchfield of NGS Software</A> showed "<i>...there are approximately 368,000 Microsoft SQL Servers directly accessible on the Internet and around 124,000 Oracle database servers directly accessible on the Internet.</i>" Egad! That's almost certainly not a good thing. Many of them are accessible by accident and many of them are run by just plain incompetent people; 4% of the SQL servers were so old they were still vulnerable to the Slammer worm from many years ago.

One point it raises, even if you don't in intend for your server to be accessible directly on the Internet, is defense in-depth. There should be a firewall on the server so that at least the attack surface is somewhat restricted. Out of this philosophy, starting with Windows Server 2008, the Windows Firewall is turned on by default.

Many users will notice this change in the form of connectivity failures, but that's a good thing because it forces you to think about what's open and closed on your server and make a decision about it. <a href="http://blogs.msdn.com/sqlsecurity/archive/2008/07/01/sql-server-and-the-windows-server-2008-firewall.aspx">An entry on the SQL Server Security Blog</a> discusses these changes and how you can approach them to make your Windows Server 2008-hosted SQL Servers secure.

First you have to locate your servers; it's a good bet that quite a few owners of those Internet-facing servers that Litchfield found don't even know the servers are up. You need to review the host security implementations on those servers to make sure that they conform to your policy. You also need to review your <i>network</i> firewall policies to make sure that the two are compatible. Verify that it's all working as expected; in other words, test the configuration. Then remedy the problems.

Read the blog for more details. On your Windows Server 2003 servers you might even want to turn the firewall on as a defensive measure. Or you might want to turn it off on 2008. But it should be you making a conscious decision.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=35d3a5c73bd4a65ab2f70def6ff10c2c" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=35d3a5c73bd4a65ab2f70def6ff10c2c" style="display: none;" border="0" height="1" width="1" alt=""/><img src="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~4/328040439" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 04:37:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/servers">servers</category>
      <category domain="http://securityratty.com/tag/sql servers">sql servers</category>
      <category domain="http://securityratty.com/tag/sql servers secure">sql servers secure</category>
      <category domain="http://securityratty.com/tag/server">server</category>
      <category domain="http://securityratty.com/tag/windows server">windows server</category>
      <category domain="http://securityratty.com/tag/firewall">firewall</category>
      <category domain="http://securityratty.com/tag/network firewall policies">network firewall policies</category>
      <category domain="http://securityratty.com/tag/windows firewall">windows firewall</category>
      <category domain="http://securityratty.com/tag/litchfield">litchfield</category>
      <source url="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~3/328040439/firewalls_on_your_windows_servers.html">Firewalls On Your Windows Servers</source>
    </item>
    <item>
      <title><![CDATA[WTF?Internet addressing agency (ICANN) loses its addressess]]></title>
      <link>http://securityratty.com/article/fdd8dcf969a5e48a9e322921dd9a2e39</link>
      <guid>http://securityratty.com/article/fdd8dcf969a5e48a9e322921dd9a2e39</guid>
      <description><![CDATA[The nonprofit agency (ICANN) in charge of the Internet's addresses recently lost track of its...]]></description>
      <content:encoded><![CDATA[The nonprofit agency (ICANN) in charge of the Internet's addresses recently lost track of its own.]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 00:46:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/icann">icann</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <category domain="http://securityratty.com/tag/nonprofit agency">nonprofit agency</category>
      <category domain="http://securityratty.com/tag/charge">charge</category>
      <source url="http://digg.com/security/WTF_Internet_addressing_agency_ICANN_loses_its_addressess">WTF?Internet addressing agency (ICANN) loses its addressess</source>
    </item>
    <item>
      <title><![CDATA[The Microwave Scream Inside Your Skull]]></title>
      <link>http://securityratty.com/article/41b2312482d3e889cce2a13ba0033e46</link>
      <guid>http://securityratty.com/article/41b2312482d3e889cce2a13ba0033e46</guid>
      <description><![CDATA[The U.S. military bankrolls early development of a non-lethal microwave weapon that creates sound inside your head. But in the end, the gadget may be just as likely to wind up in shopping malls as on...]]></description>
      <content:encoded><![CDATA[The U.S. military bankrolls early development of a non-lethal microwave weapon that creates sound inside your head. But in the end, the gadget may be just as likely to wind up in shopping malls as on battlefields.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=17d32638e44cfb962be965a2d2d5f3b7" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=17d32638e44cfb962be965a2d2d5f3b7" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=QzCPWJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=QzCPWJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=PmNV5j"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=PmNV5j" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=mL3y0j"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=mL3y0j" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=CIQxsJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=CIQxsJ" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=HhAzFJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=HhAzFJ" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=SbK15j"><img src="http://feeds.wired.com/~f/wired/politics/security?i=SbK15j" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=pZJaMj"><img src="http://feeds.wired.com/~f/wired/politics/security?i=pZJaMj" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=Oz6ijJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=Oz6ijJ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/328204083" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/328204095" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 00:30:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/non-lethal microwave weapon">non-lethal microwave weapon</category>
      <category domain="http://securityratty.com/tag/military bankrolls">military bankrolls</category>
      <category domain="http://securityratty.com/tag/sound inside">sound inside</category>
      <category domain="http://securityratty.com/tag/gadget">gadget</category>
      <category domain="http://securityratty.com/tag/head">head</category>
      <category domain="http://securityratty.com/tag/battlefields">battlefields</category>
      <category domain="http://securityratty.com/tag/malls">malls</category>
      <category domain="http://securityratty.com/tag/development">development</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/328204095/the-microwave-s.html">The Microwave Scream Inside Your Skull</source>
    </item>
    <item>
      <title><![CDATA[Life Is A Technology Museum]]></title>
      <link>http://securityratty.com/article/e03c2c1f709b1fd2b9485bcd6500f448</link>
      <guid>http://securityratty.com/article/e03c2c1f709b1fd2b9485bcd6500f448</guid>
      <description><![CDATA[I went this morning with my family to the Museum of Natural History on Manhattan's Upper West Side. In the subway I noticed one of the machines that sells MetroCards (the fare cards for the NYC...]]></description>
      <content:encoded><![CDATA[I went this morning with my family to the Museum of Natural History on Manhattan's Upper West Side. In the subway I noticed one of the machines that sells <a href="http://www.mta.info/metrocard/">MetroCards</a> (the fare cards for the NYC transit) rebooting;. I wasn't able to get my cell phone camera going until it was in the boot-time banner. Turns out the machine was a bit of a museum piece itself.

<img alt="metrocard.nt4.sp3.small.jpg" src="http://blogs.pcmag.com/securitywatch/metrocard.nt4.sp3.small.jpg" width="300" height="400" />

Before that I watched it in blue-screen mode and observed that it was running Windows NT 4.0 Workstation Service Pack 3. Wow, that's pretty old. There hasn't been any support at all for NT 4 since January 2005, and that was for Service Pack 6 I believe. To date the software, <a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=121A62A5-1086-4DE9-AE38-C1ED6DE86B9A&displaylang=en">SP3 was released 8 years ago</a>.

Back to the MetroCard machine itself, there's some more detail on the screen:

<img alt="metrocard.nt4.sp3.banner.jpg" src="http://blogs.pcmag.com/securitywatch/metrocard.nt4.sp3.banner.jpg" width="398" height="278" />

The banner is customized with "Metropolitan Transportation Authority" and it says, I think, "with CTS AVM". I did a little Googling and struck out on what that means. If any of you can help me out I'm curious.

The moral of this story is an old one, how technology users can be incredibly conservative, or perhaps "thrifty" is the right word. I ought to follow up with the MTA to see if they plan to leave these systems as-is. Yeah, maybe "if it ain't broke don't fix it," but why did it reboot?<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=b3d6a575cf38e1a99dacb11f50f76d11" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=b3d6a575cf38e1a99dacb11f50f76d11" style="display: none;" border="0" height="1" width="1" alt=""/><img src="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~4/327710269" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sat, 05 Jul 2008 16:13:08 +0000</pubDate>
      <category domain="http://securityratty.com/tag/museum">museum</category>
      <category domain="http://securityratty.com/tag/workstation service pack">workstation service pack</category>
      <category domain="http://securityratty.com/tag/service pack">service pack</category>
      <category domain="http://securityratty.com/tag/cell phone camera">cell phone camera</category>
      <category domain="http://securityratty.com/tag/metropolitan transportation authority">metropolitan transportation authority</category>
      <category domain="http://securityratty.com/tag/metrocard machine">metrocard machine</category>
      <category domain="http://securityratty.com/tag/machine">machine</category>
      <category domain="http://securityratty.com/tag/banner">banner</category>
      <category domain="http://securityratty.com/tag/boot-time banner">boot-time banner</category>
      <source url="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~3/327710269/life_is_a_technology_museum.html">Life Is A Technology Museum</source>
    </item>
    <item>
      <title><![CDATA[Russian Hackers To Lithuania: All Your Base Are Belong To Us]]></title>
      <link>http://securityratty.com/article/e13cd6fa18a684c1925f2d4bd1987d44</link>
      <guid>http://securityratty.com/article/e13cd6fa18a684c1925f2d4bd1987d44</guid>
      <description><![CDATA[Hundreds of Lithuanian government and corporate Web sites were hacked and plastered with Soviet-era symbols and other digital graffiti this week in what appears to be a coordinated cyber attack...]]></description>
      <content:encoded><![CDATA[Hundreds of Lithuanian government and corporate Web sites were hacked and plastered with Soviet-era symbols and other digital graffiti this week in what appears to be a coordinated cyber attack launched by Russian hacker groups.]]></content:encoded>
      <pubDate>Sat, 05 Jul 2008 14:36:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/russian hacker">russian hacker</category>
      <category domain="http://securityratty.com/tag/cyber attack">cyber attack</category>
      <category domain="http://securityratty.com/tag/soviet-era symbols">soviet-era symbols</category>
      <category domain="http://securityratty.com/tag/web sites">web sites</category>
      <category domain="http://securityratty.com/tag/digital graffiti">digital graffiti</category>
      <category domain="http://securityratty.com/tag/lithuanian government">lithuanian government</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/appears">appears</category>
      <category domain="http://securityratty.com/tag/hundreds">hundreds</category>
      <source url="http://digg.com/security/Russian_Hackers_To_Lithuania_All_Your_Base_Are_Belong_To_Us">Russian Hackers To Lithuania: All Your Base Are Belong To Us</source>
    </item>
    <item>
      <title><![CDATA[Storm botnet stages Fourth of July attacks]]></title>
      <link>http://securityratty.com/article/1d7b2231099ea5206c82a9b7927d5255</link>
      <guid>http://securityratty.com/article/1d7b2231099ea5206c82a9b7927d5255</guid>
      <description><![CDATA[Hackers tried to entice users into downloading the Storm bot Trojan on July 4 with a flood of Fourth of July spam containing links to malicious sites, several security companies...]]></description>
      <content:encoded><![CDATA[Hackers tried to entice users into downloading the Storm bot Trojan on July 4 with a flood of Fourth of July spam containing links to malicious sites, several security companies reported.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=ZLwRCg"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=ZLwRCg" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/327450506" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sat, 05 Jul 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/july">july</category>
      <category domain="http://securityratty.com/tag/storm bot trojan">storm bot trojan</category>
      <category domain="http://securityratty.com/tag/july spam">july spam</category>
      <category domain="http://securityratty.com/tag/malicious sites">malicious sites</category>
      <category domain="http://securityratty.com/tag/security companies">security companies</category>
      <category domain="http://securityratty.com/tag/entice users">entice users</category>
      <category domain="http://securityratty.com/tag/fourth">fourth</category>
      <category domain="http://securityratty.com/tag/flood">flood</category>
      <category domain="http://securityratty.com/tag/hackers">hackers</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/327450506/article.do">Storm botnet stages Fourth of July attacks</source>
    </item>
    <item>
      <title><![CDATA[Daily Mail publisher admits to stolen laptop]]></title>
      <link>http://securityratty.com/article/9af68c57ed3f10d814be79e5d395b72b</link>
      <guid>http://securityratty.com/article/9af68c57ed3f10d814be79e5d395b72b</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
7/4/08

Organization
Daily Mail and General Trust plc

Contractor/Consultant/Branch
Northcliffe Media
Associated Newspapers Ltd

Victims
Staff, suppliers...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/dailymail.jpg" width="203" align="right" height="43"><font size="2"><b>Date Reported: </b><br>7/4/08<br><br><b>Organization: </b><br><a href="http://www.dmgt.co.uk/">Daily Mail and General Trust plc</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.thisisnorthcliffe.co.uk/">Northcliffe Media</a> <br><a href="http://www.associatednewspapers.com/">Associated Newspapers Ltd</a> <br><br><span style="font-weight: bold;">Victims:</span><br>Staff, suppliers and contributors<br><br><span style="font-weight: bold;">Number Affected:</span><br>"thousands"<br><br><span style="font-weight: bold;">Types of Data:</span><br>"name, address, bank account number and bank sort code"<br><br><span style="font-weight: bold;">Breach Description:</span><br>"Daily Mail publisher Associated Newspapers has admitted that a laptop containing financial and personal details of thousands of staff, suppliers and contributors has been stolen."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.computerworlduk.com/management/security/data-control/news/index.cfm?newsid=9904">ComputerWorldUK</a> <br><a href="http://www.guardian.co.uk/media/2008/jul/04/dailymail.dmgt1?gusrc=rss&amp;feed=media">Guardian News (UK)</a> <br><a href="http://www.guardian.co.uk/media/2008/jul/04/dailymail.dmgt?gusrc=rss&amp;feed=media">Guardian News (UK) additional info</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Guardian Newspaper<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>Daily Mail publisher Associated Newspapers has admitted that a laptop containing financial and personal details of thousands of staff, suppliers and contributors has been stolen.<br><br>A Daily Mail &amp; General Trust spokeswoman said: "DMGT confirms that a laptop company computer containing certain confidential information was stolen last week.<br><br>After months of criticising "criminally careless" government departments for losing confidential records, the company has been forced to send out an embarrassing letter telling journalists they may now be at risk of identity theft<br><span style="font-style: italic;">[Evan] This is the same Daily Mail managed by Associated Newspapers that according to The Guardian "has been at the forefront of coverage of the recent bank and government department missing data scandals".&nbsp; It would be very difficult for Associated Newspapers to claim that they didn't know any better than to store confidential information on a poorly protected laptop.</span><br><br>Details such as names, addresses, bank account numbers and sort codes were on the laptop<br><br>the laptop was "password protected" but tell recipients to contact their banks and also "consult the government website ... for advice on avoiding or dealing with identity theft"<br><span style="font-style: italic;">[Evan] The mention of password protection is nothing more than an effort to minimize the effect of the breach.&nbsp; It does very little (if anything) to protect the personal information.</span><br><br>In a letter to those who details were affected, Simon Dyson, finance director at Daily Mail publisher Associated Newspapers, and Martyn Hindley, his counterpart at sister company Northcliffe, said it was likely that the details had been erased by the thief.<br><span style="font-style: italic;">[Evan] How is the conclusion drawn?&nbsp; I don't see how there could be enough information to determine what the thief was likely to do.</span><br><br>From the letter to affected persons from the Associated Newspapers group finance director, Simon Dyson, and his Northcliffe counterpart, Martyn Hindley:<br><br>"Unfortunately one of the company's laptops has been stolen."<br><br>"The contents included personal data, some of which related to you."<br><br>"The laptop was password-protected. "<br><span style="font-style: italic;">[Evan] So what?&nbsp; This won't adequately protect the information on the laptop, so why mention it?</span><br><br>"We are writing to you as quickly as possible to alert you to the fact that the theft has happened and to inform you of the data types lost, so that you can take appropriate action."<br><span style="font-style: italic;">[Evan] I guess we should give some credit for the quick notification, if nothing else.</span><br><br>"In your case, your name, address, bank account number and bank sort code were the sensitive information lost."<br><br>"The likelihood is that this theft was carried out in an opportunistic manner by a thief who will not realise that there is any personal data on the laptop and who may just erase what is on the hard disk in order to disguise the fact that the laptop is stolen."<br><span style="font-style: italic;">[Evan] This is nothing more than speculation.&nbsp; I can't imagine that there are any specific facts for which this conclusion is based on.</span><br><br>"We have, of course, notified the police of the theft of the laptop and are talking to the Office of the Information Commissioner about what has happened."<br><br>"On behalf of the company, I would like to offer my sincere apologies for any annoyance and inconvenience to you that this breach of security may cause."<br><br>"I can assure you that we take security of personal data very seriously and have, since this incident, which was inadvertently caused by a technical issue, already further strengthened procedures."<br><span style="font-style: italic;">[Evan] This breach was caused by a "technical issue"?&nbsp; Like what?&nbsp; I presume that the technical aspects surrounding this breach were working exactly as they were designed to in the manner of which that they were implemented.&nbsp; Without further elaboration, "strengthened procedures" is subjective and means little.&nbsp; Organizations should offer details, instead of general statements in order to bolster some sense of confidence.</span><br><br><span style="font-weight: bold;">Commentary:</span><br>This breach must be embarrassing for Associated Newspapers.&nbsp; A breach like this should be embarrassing for any organizations.&nbsp; Unencrypted lost of stolen laptops storing personal (or other confidential) information is a pretty well-known risk nowadays.&nbsp; An unacceptable risk for most. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown<br></font><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/07/05/dailymail.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Sat, 05 Jul 2008 08:55:49 +0000</pubDate>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/daily mail publisher">daily mail publisher</category>
      <category domain="http://securityratty.com/tag/daily mail">daily mail</category>
      <category domain="http://securityratty.com/tag/personal">personal</category>
      <category domain="http://securityratty.com/tag/store confidential information">store confidential information</category>
      <category domain="http://securityratty.com/tag/laptop">laptop</category>
      <category domain="http://securityratty.com/tag/personal data">personal data</category>
      <category domain="http://securityratty.com/tag/laptop company computer">laptop company computer</category>
      <source url="http://breachblog.com/2008/07/05/dailymail.aspx">Daily Mail publisher admits to stolen laptop</source>
    </item>
  </channel>
</rss>
