<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: 42-day]]></title>
    <link>http://securityratty.com/tag/42-day</link>
    <description></description>
    <pubDate>Tue, 01 Apr 2008 11:52:09 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[An A to Z of confusion]]></title>
      <link>http://securityratty.com/article/1d340a34dfca897f3be184f083200758</link>
      <guid>http://securityratty.com/article/1d340a34dfca897f3be184f083200758</guid>
      <description><![CDATA[A few days ago I blogged about my paper on email spam volumes comparing aardvarks (email local parts [left of the @] beginning with A) with zebras (those starting with a Z
I observed that provided one...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.lightbluetouchpaper.org/2008/08/25/zebras-and-aardvarks/">A few days ago</a> I blogged about <a href="http://www.cl.cam.ac.uk/~rnc1/aardvark.pdf">my paper on email spam volumes</a> &#8212; comparing &#8220;aardvarks&#8221; (email local parts [left of the @] beginning with &#8220;A&#8221;) with &#8220;zebras&#8221; (those starting with a &#8220;Z&#8221;).</p>
<p>I observed that provided one considered &#8220;real&#8221; aardvarks and zebras &#8212; addresses that received good email amongst the spam &#8212; then aardvarks got 35% spam and zebras a mere 20%.</p>
<p>This has been widely picked up, first in the <a href="http://blogs.guardian.co.uk/technology/2008/08/26/how_to_avoid_spam_start_with_a_z.html">Guardian</a>, and later in many <a href="http://www.itnews.com.au/News/83579,the-a-to-z-of-spamming-exposed.aspx">other</a> papers as well (<a href="http://www.berlingske.dk/article/20080828/verden/80828092/">even in Danish</a>). However, many of these articles have got hold of the <a href="http://www.cartoonstock.com/lowres/aha0007l.jpg">wrong end of the stick</a>. So besides mentioning A and Z, it looks as if I should have published this figure from the paper as well&#8230;</p>
<p><img src="http://www.lightbluetouchpaper.org/wp-content/uploads/2008/08/figure3.png" alt="Figure 3 from the academic paper" class="size-full wp-image-364" /></p>
<p>&#8230; the point being that the effect I am describing has little to do with Z being at the end of the alphabet, and A at the front, but seems to be connected to the relative rarity of zebras.</p>
<p>As you can see from the figure, <a href="http://www.fonts.com/aboutfonts/articles/letterseries/letterm.htm">marmosets</a> and <a href="http://www.fonts.com/aboutfonts/articles/letterseries/letterm.htm">pelicans</a> get around 42% spam (M and P being popular letters for people&#8217;s names) and <a href="http://www.ucmp.berkeley.edu/mammal/mesaxonia/quagga.html">quaggas</a> 21% (there are very few <a href="http://www.brainyquote.com/quotes/authors/q/quentin_crisp.html">Quentins</a>, just as there are very few <a href="http://whimsiedolls.tripod.com/Zach_the_Sack.htm">Zacks</a>).</p>
<p>There are some outliers in the figure: for example &#8220;3&#8243; relates to spammers failing to parse HTML properly and ending up with &#8220;3c&#8221;  (<a href="http://unicode.org/charts/PDF/U0000.pdf">a < character</a>) at the start of names. However, it isn&#8217;t immediately apparent why &#8220;<a href="http://www.unicorncollector.com/legends.htm">unicorns</a>&#8221; get quite so much spam, it may just be a quirk of the way that I have assessed &#8220;realness&#8221;. Doubtless some future research will be able to explain this more fully.</p>
]]></content:encoded>
      <pubDate>Fri, 29 Aug 2008 01:16:28 +0000</pubDate>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/email spam volumes">email spam volumes</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/email local">email local</category>
      <category domain="http://securityratty.com/tag/zebras">zebras</category>
      <category domain="http://securityratty.com/tag/zebras addresses">zebras addresses</category>
      <category domain="http://securityratty.com/tag/aardvarks">aardvarks</category>
      <category domain="http://securityratty.com/tag/real aardvarks">real aardvarks</category>
      <category domain="http://securityratty.com/tag/figure">figure</category>
      <source url="http://www.lightbluetouchpaper.org/2008/08/29/an-a-to-z-of-confusion/">An A to Z of confusion</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Mumbai Blast Leads to Open Network; NullRiver's App Nullified; Copper Substitute]]></title>
      <link>http://securityratty.com/article/321165af2aaf7769bf8ef8224af4125c</link>
      <guid>http://securityratty.com/article/321165af2aaf7769bf8ef8224af4125c</guid>
      <description><![CDATA[Mumbai man's open wireless network used to send bomb claim: An American expatriate, Kenneth Haywood, left his Wi-Fi network open in Mumbai, and police allege it was used to send email claiming...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.guardian.co.uk/world/2008/jul/29/india.terrorism"><strong>Mumbai man's open wireless network used to send bomb claim:</strong></a> An American expatriate, Kenneth Haywood, left his Wi-Fi network open in Mumbai, and police allege it was used to send email claiming responsibility for a bomb blast that killed 42 people. The Guardian reports that Haywood says his email account was also hacked. Police say that someone would need to be within two floors of the 15th-floor apartment Haywood and others occupy, but they may be disregarding high-gain antennas. Haywood's installer demanded he not change his network password.</p>

<p><a href="http://www.infoworld.com/article/08/08/04/Apple_resurrects_iPhone_tethering_app_then_kills_it_again_1.html?source=rss&url=http://www.infoworld.com/article/08/08/04/Apple_resurrects_iPhone_tethering_app_then_kills_it_again_1.html"><strong>iPhone tethering application up, down, up, down:</strong></a> The NetShare connection-sharing application from NullRiver has made a couple of appearances on Apple's App Store, the only authorized place from which owners of iPod touch and iPhone devices can purchase software for uncracked equipment. NetShare appears to violate the terms of service for AT&T, although this wouldn't be the case with all carriers worldwide, by bridging 2.5G and 3G network traffic via the Wi-Fi connection on the iPhone. A laptop or desktop needs special configuration to connect to the iPhone, but various reports show it works fine. AT&T offers tethering with other smartphones - but not the iPhone - for typically about $20 more per month, comparable to a national hotspot aggregated subscription.</p>

<p><a href="http://www.usatoday.com/tech/products/2008-07-31-att-tries-to-stay-ahead-of-tech_N.htm?loc=interstitialskip"><strong>Speaking of AT&T, they like WiMax as a wire alternative:</strong></a> AT&T is bullish on WiMax, but the fixed kind used to replace wires in places they have no cable.</p>]]></content:encoded>
      <pubDate>Mon, 04 Aug 2008 05:56:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/haywood">haywood</category>
      <category domain="http://securityratty.com/tag/kenneth haywood">kenneth haywood</category>
      <category domain="http://securityratty.com/tag/iphone">iphone</category>
      <category domain="http://securityratty.com/tag/iphone devices">iphone devices</category>
      <category domain="http://securityratty.com/tag/att">att</category>
      <category domain="http://securityratty.com/tag/15th-floor apartment haywood">15th-floor apartment haywood</category>
      <category domain="http://securityratty.com/tag/att offers">att offers</category>
      <category domain="http://securityratty.com/tag/mumbai">mumbai</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <source url="http://wifinetnews.com/archives/008409.html">Wee-Fi: Mumbai Blast Leads to Open Network; NullRiver's App Nullified; Copper Substitute</source>
    </item>
    <item>
      <title><![CDATA[Terrorists Using Open Wireless Networks]]></title>
      <link>http://securityratty.com/article/67e6c4f7c84b1dfcaac21ded06af4fdf</link>
      <guid>http://securityratty.com/article/67e6c4f7c84b1dfcaac21ded06af4fdf</guid>
      <description><![CDATA[Remember when I said that I keep my home wireless network open ? Here's a reason not to listen to me: When Indian police investigating bomb blasts which killed 42 people traced an email claiming...]]></description>
      <content:encoded><![CDATA[<p>Remember when I said that I <a href="http://www.schneier.com/blog/archives/2008/01/my_open_wireles.html">keep my home wireless network open</a>?  <a href="http://www.guardian.co.uk/world/2008/jul/29/india.terrorism">Here's</a> a reason not to listen to me:</p>

<blockquote>When Indian police investigating bomb blasts which killed 42 people traced an email claiming responsibility to a Mumbai apartment, they ordered an immediate raid.

<p>But at the address, rather than seizing militants from the Islamist group which said it carried out the attack, they found a group of puzzled American expats.</p>

<p>In a cautionary tale for those still lax with their wireless internet security, police believe the email about the explosions on Saturday in the west Indian city of Ahmedabad was sent after someone hijacked the network belonging to one of the Americans, 48-year-old Kenneth Haywood.</blockquote></p>

<p>Of course, the terrorists could have sent the e-mail from anywhere.  But life is easier if the police don't raid <i>your</i> apartment.</p>

<p>EDITED TO ADD (8/1):  My wireless network is still open.  But, honestly, the terrorists are more likely to use the open network at the coffee shop up the street and around the corner.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=6VvG3K"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=6VvG3K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=ZlSeyK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=ZlSeyK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 01 Aug 2008 02:46:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/home wireless network">home wireless network</category>
      <category domain="http://securityratty.com/tag/wireless network">wireless network</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <category domain="http://securityratty.com/tag/indian police">indian police</category>
      <category domain="http://securityratty.com/tag/terrorists">terrorists</category>
      <category domain="http://securityratty.com/tag/wireless internet security">wireless internet security</category>
      <category domain="http://securityratty.com/tag/apartment">apartment</category>
      <category domain="http://securityratty.com/tag/mumbai apartment">mumbai apartment</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/terrorists_usin.html">Terrorists Using Open Wireless Networks</source>
    </item>
    <item>
      <title><![CDATA[Backup tape is stolen from Bristol-Myers Squibb]]></title>
      <link>http://securityratty.com/article/911478f22f756b8e8513c59d7f720d18</link>
      <guid>http://securityratty.com/article/911478f22f756b8e8513c59d7f720d18</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
7/17/08

Organization
Bristol-Myers Squibb Co. (&quot;BMS

Contractor/Consultant/Branch
Unknown

Victims
Current and former employees and some dependants
...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/bms.jpg" width="198" align="right" height="160"><font size="2"><b>Date Reported: </b><br>7/17/08<br><br><b>Organization: </b><br><a href="http://www.bms.com/landing/data/index.html">Bristol-Myers Squibb Co. ("BMS")</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>Unknown<br><br><span style="font-weight: bold;">Victims:</span><br>Current and former employees and some dependants<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown*<br><br><font size="1">*Bristol-Myers Squibb had "about 42,000 employees as of Dec. 31, the last date for which work force figures were available in regulatory filings.", Source: <a href="http://money.cnn.com/news/newsfeeds/articles/djf500/200807171514DOWJONESDJONLINE000844_FORTUNE5.htm">CNN Money</a></font> <br><br><span style="font-weight: bold;">Types of Data:</span><br>"name, address, date of birth, Social Security number, marital status, gender, salary, hire date, termination date, retirement date, and, in some instances bank account information"<br><br><span style="font-weight: bold;">Breach Description:</span><br>"On June 4, 2008, Bristol-Myers Squibb Company ("BMS") learned that a back-up data tape containing BMS-related data was stolen while it was being transported for storage.&nbsp; Through subsequent forensic work, it was determined that the data tape included personal information of current and former BMS employees"<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.pharmalot.com/wp-content/uploads/2008/07/bms_letter.pdf">Pharmalot (copy of notification letter)</a> <br><a href="http://www.pharmalot.com/2008/07/bristol-myers-security-breach-hits-untold-thousands/">Pharmalot</a> <br><a href="http://money.cnn.com/news/newsfeeds/articles/djf500/200807171514DOWJONESDJONLINE000844_FORTUNE5.htm">CNNMoney</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Ed Silverman, Pharmalot<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>The drugmaker sent letters over the past week saying a data tape containing reams of personal information was stolen several weeks ago<br><br>On June 4, 2008, Bristol-Myers Squibb Company ("BMS") learned that a back-up data tape containing BMS-related data was stolen while it was being transported for storage. <br><span style="font-style: italic;">[Evan] This statement prompted me to list the contractor as "unknown" instead of "none".&nbsp; I presume that the data tape was being transported by a third-party vendor when it was stolen.&nbsp; I am looking for more information on this.</span><br><br>Through subsequent forensic work, it was determined that the data tape included personal information of current and former BMS employees, such as name, address, date of birth, Social Security number, marital status, gender, salary, hire date, termination date, retirement date, and, in some instances, bank account information.<br><span style="font-style: italic;">[Evan] Ugh, this looks like very sensitive HR and benefits data.</span><br><br>The names, addresses, and Social Security numbers of some employee dependents also were included on the tape.<br><br>an untold number of current and former employees - and their dependents - could be affected<br><br>BMS has initiated an investigation of this incident.<br><br>To date, BMS has no reason to believe that any of your personal information has been inappropriately accessed from the data tape by an unauthorized party, or that any identity theft, fraud or misuse of your personal information has occurred.<br><span style="font-style: italic;">[Evan] I agree with most of this statement except for the "misuse" part.&nbsp; There may be no evidence of misuse post stolen tape, but there may be an argument for misuse by BMS themselves.&nbsp; BMS is the data custodian in this scenario, not the data owner.&nbsp; If a data custodian does not care for the owner's information in a manner that is expected or communicated, does it constitute misuse?</span><br><br>In addition, there is no evidence that the data tape or the information contained on it was the target of the theft.<br><span style="font-style: italic;">[Evan] I am interested in knowing more about who was transporting the tape and whether or not other items were taken.</span><br><br>As a precaution, to help you detect any possible misuse of your data, BMS has arranged for you to enroll in credit monitoring for one full year, at no cost to you.<br><span style="font-style: italic;">[Evan] There is that "misuse" mention again.&nbsp; One year of free credit monitoring does nothing to protect a victim against fraud that occurs after one year, supposing the victim does not renew at his/her own expense.&nbsp; I wonder how many people renew on average.</span><br><br>If you have any questions, you may call the dedicated Privacy Help Line at 1-877-214-0689.&nbsp; Our representatives will be available to assist you Monday through Friday, between 8 a.m. and 5 p.m. ET.<br><br>the drugmaker is issuing this statement: "Bristol-Myers Squibb regrets that this incident occurred and is committed to providing appropriate assistance for affected individuals who had their personal information on the stolen data tape. We are committed to protecting the privacy and security of employee and dependent information. Maintaining the trust and confidence of our employees is paramount to Bristol-Myers Squibb."<br><br>Protecting the privacy and security of your information is extremely important to us.<br><br>In this regard, BMS wishes to reiterate that it does not have any evidence indicating that your personal information has been misused.<br><span style="font-style: italic;">[Evan] Another "misuse" mention.</span><br><br>the company is taking appropriate remedial steps, including enhancing security protocols regarding the handling of personal information and our back-up data tapes.<br><span style="font-style: italic;">[Evan] Like what? Encryption maybe?</span><br><br>On behalf of BMS, I apologize for any inconvenience or concern that this matter may cause for you.<br><br><span style="font-weight: bold;">Commentary:</span><br>I couldn't find any mention about encryption or whether or not police were called.&nbsp; You would think that a large, well-repected company like Bristol-Myers Squibb encrypts confidential data on tape, right? <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown<br></font><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/07/18/bms.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Fri, 18 Jul 2008 07:26:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tape">tape</category>
      <category domain="http://securityratty.com/tag/back-up data tape">back-up data tape</category>
      <category domain="http://securityratty.com/tag/data tape">data tape</category>
      <category domain="http://securityratty.com/tag/owner">owner</category>
      <category domain="http://securityratty.com/tag/data owner">data owner</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/bristol-myers squibb">bristol-myers squibb</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <source url="http://breachblog.com/2008/07/18/bms.aspx">Backup tape is stolen from Bristol-Myers Squibb</source>
    </item>
    <item>
      <title><![CDATA[Lompoc's Comeback]]></title>
      <link>http://securityratty.com/article/d8cd53c51e38bfdb65f16dbc0871b978</link>
      <guid>http://securityratty.com/article/d8cd53c51e38bfdb65f16dbc0871b978</guid>
      <description><![CDATA[I've been citing Lompoc, Calif., as a poster child of what can go wrong in municipal Wi-Fi for a few years: But I apparently have to change my tune. Lompoc, near Santa Barbara, had unreasonable...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/lock.jpg" align="right" border="0" hspace="5" /><a href="http://news.yahoo.com/s/pcworld/20080714/tc_pcworld/148403"><strong>I've been citing Lompoc, Calif., as a poster child of what can go wrong in municipal Wi-Fi for a few years:</strong></a> But I apparently have to change my tune. Lompoc, near Santa Barbara, had unreasonable expectations, if you read their first and second RFPs. The first provider built a network that Lompoc found unacceptable and they bid it out for a second network to be built (some of these details are murky and some under dispute).</p>

<p>What's been clear is that after spending more than $3m, the city couldn't acquire more than a few hundred regular subscribers, about 10 percent of the point they'd need to pay expenses and pay down capital outlay. But it turns out that the backend was as important as their network deployment, IDG News Service reports.</p>

<p>The latest city network administrator brought in Aptilo Networks for backend authentication and session processing, opened the network to 15-minute free trials, and started accepted ad hoc payment. The new network guru also let outsourced contracts expire and brought customer support and other services back in house to reduce expenses and improve the feedback loop. He discovered their existing authentication system was licensed for 500 users, so that might have explained their failure to grow, too.</p>

<p>The city now has 1,000 regular users at all levels, from pay-as-you-go to monthly household subscriptions. They've revised breakeven down to 2,000 subscribers, and say they are breakeven for expenses.</p>

<p>The other problem Lompoc had, by the way, is that the cable and telephone companies didn't sit still. I exaggerate, but when Lomopoc was planning its network, it had very poor coverage for its 42,000 residents for DSL and cable modem service. When the Wi-Fi network was announced, the incumbents started pulling copper, coax, and fiber, and dramatically improved network coverage. The $3m wasn't entirely ill spent so far: it was a kind of reverse incentive to the private companies to get their act together.</p>]]></content:encoded>
      <pubDate>Tue, 15 Jul 2008 06:57:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/city network administrator">city network administrator</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/network coverage">network coverage</category>
      <category domain="http://securityratty.com/tag/network guru">network guru</category>
      <category domain="http://securityratty.com/tag/lompoc">lompoc</category>
      <category domain="http://securityratty.com/tag/network deployment">network deployment</category>
      <category domain="http://securityratty.com/tag/cable">cable</category>
      <source url="http://wifinetnews.com/archives/008396.html">Lompoc's Comeback</source>
    </item>
    <item>
      <title><![CDATA[Power Outages Are A Major Risk That Most Companies Overlook]]></title>
      <link>http://securityratty.com/article/b24235544fb02ac0b71dbf39b267d95f</link>
      <guid>http://securityratty.com/article/b24235544fb02ac0b71dbf39b267d95f</guid>
      <description><![CDATA[TechCrunchIT reported today that a Rackspace data center went down for several hours during the evening due to a power grid failure. Because Rackspace is a managed service provider (MSP), the downtime...]]></description>
      <content:encoded><![CDATA[<p><img border="0" title="Stephanie Balaouras" alt="Stephanie Balaouras" src="http://www.forrester.com/role_based/images/author/imported/forresterDotCom/Analyst_Photos/Silhouette/Color/Stephanie-Balaouras.gif" style="margin: 0px 5px 5px 0px; float: left;" /></p>
<p><a href="http://www.techcrunchit.com/2008/07/10/rackspace-downtime-a-reminder-that-all-are-vulnerable/">TechCrunchIT</a> reported today that a <a href="http://www.rackspace.com/">Rackspace</a> data center went down for several hours during the evening due to a power grid failure. Because Rackspace is a managed service provider (MSP), the downtime affected several businesses hosted in the data center.</p>

<p>When companies think of disaster recovery and downtime, they typically think of catastrophic events such as hurricanes, tornadoes, and earthquakes. What companies don't realize is that the most common cause of downtime is power failures. In a <a href="http://www.forrester.com/Research/Document/0,7211,42949,00.html">joint study by Forrester Research and The Disaster Recovery Journal of 250 disaster recovery decision-makers and influencers, 42% of respondents indicated that a power failure was the cause of their most significant disaster declaration or major business disruption.</a> </p>

<p>To prevent power failures, businesses must ensure that they have multiple diverse connections to the power grid as well as install backup power generators and uninterruptible power supplies (UPS) at the data center. But it's not enough to have these preventative measures in place, businesses must test the ability to switch over to backup power must at least twice year. And if your business has a recovery data center, it's best if the recovery data center is on a different power grid and is also equipped with backup power generation.</p>

<p>But despite all these measures, failures might still happen, in the case of the Rackspace power failure, the company successfully failed over to its backup power generators but some of its chillers did not start up correctly.</p>

<p>In North America, the risk of power failures is likely to remain high for the foreseeable future. According to a 2007 <a href="ftp://ftp.nerc.com/pub/sys/all_updl/docs/pubs/LTRA2007.pdf">report by the North American Electric Reliability Corporation (NERC), long-term capacity margins are still inadequate and significant investment in transmission is still required.</a></p>



<p>So businesses must not only invest in preventative measures such as backup power generators, they must think about where they locate their data centers. <a href="http://www.forrester.com/Research/Document/0,7211,44875,00.html">You must avoid areas that have clearly identified congestion issues and focus on areas that have access to cheap and abundant power.</a> And, don't take it for granted that your service provider has effectively managed the risk of power failures.</p>]]></content:encoded>
      <pubDate>Thu, 10 Jul 2008 13:31:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/prevent power failures">prevent power failures</category>
      <category domain="http://securityratty.com/tag/failures">failures</category>
      <category domain="http://securityratty.com/tag/data center">data center</category>
      <category domain="http://securityratty.com/tag/recovery data center">recovery data center</category>
      <category domain="http://securityratty.com/tag/backup power">backup power</category>
      <category domain="http://securityratty.com/tag/backup power generators">backup power generators</category>
      <category domain="http://securityratty.com/tag/power failures">power failures</category>
      <category domain="http://securityratty.com/tag/power failure">power failure</category>
      <category domain="http://securityratty.com/tag/rackspace power failure">rackspace power failure</category>
      <source url="http://blogs.forrester.com/srm/2008/07/power-outages-a.html">Power Outages Are A Major Risk That Most Companies Overlook</source>
    </item>
    <item>
      <title><![CDATA[The Last HOPE List of Talks posted]]></title>
      <link>http://securityratty.com/article/a586fe982561096a17ae94cd6d3138f4</link>
      <guid>http://securityratty.com/article/a586fe982561096a17ae94cd6d3138f4</guid>
      <description><![CDATA[The 1337 bastards at 2600 have posted the list of talks for The Last HOPE conference being held July 18-20 at the Hotel Pennsylvania in NYC
List of Scheduled Talks Posted
Posted 18 Jun 2008 22:42:50...]]></description>
      <content:encoded><![CDATA[<p>The 1337 bastards at 2600 have posted the list of talks for The Last HOPE conference being held July 18-20 at the Hotel Pennsylvania in NYC.</p>
<blockquote><p>List of Scheduled Talks Posted</p>
<p>Posted 18 Jun 2008 22:42:50 UTC</p>
<p>With a record number of 97 scheduled talks to be presented in three different areas, The Last HOPE has posted a <a href="http://www.thelasthope.org/talks.php">list of talks</a> with time and room assignments forthcoming.<br />
We do plan on having an additional track for unscheduled talks so if you missed this deadline, you still have a shot in the somewhat smaller unscheduled track room. Look for the unscheduled track sign up sheet at the conference.
</p></blockquote>
<p>Of course you&#8217;ll be able to find Dave and I there. Wouldn&#8217;t miss it for the world.</p>
<p>Oh - and you might want to scroll that <a href="http://www.thelasthope.org/talks.php">list of talks</a> down&#8230; maybe just to the Featured Speakers section&#8230; or maybe just below that.</p>
<p>See you in NYC.</p>
<p> Tags: <a href="http://technorati.com/tag/2600" rel="tag">2600</a>, <a href="http://technorati.com/tag/HOPE" rel="tag"> HOPE</a>, <a href="http://technorati.com/tag/the+Last+HOPE" rel="tag"> the Last HOPE</a>, <a href="http://technorati.com/tag/hackers" rel="tag"> hackers</a>, <a href="http://technorati.com/tag/conferences" rel="tag"> conferences</a>, <a href="http://technorati.com/tag/NYC" rel="tag"> NYC</a></p>

<p><a href="http://feeds.feedburner.com/~a/Liquidmatrix?a=tTlbER"><img src="http://feeds.feedburner.com/~a/Liquidmatrix?i=tTlbER" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=cycoHI"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=cycoHI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=8jMe3i"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=8jMe3i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=r9yJdi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=r9yJdi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=JEyU8i"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=JEyU8i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=Kzjyui"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=Kzjyui" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/Liquidmatrix/~4/315522947" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 19 Jun 2008 12:10:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/hope">hope</category>
      <category domain="http://securityratty.com/tag/list">list</category>
      <category domain="http://securityratty.com/tag/conference">conference</category>
      <category domain="http://securityratty.com/tag/hope conference">hope conference</category>
      <category domain="http://securityratty.com/tag/track">track</category>
      <category domain="http://securityratty.com/tag/additional track">additional track</category>
      <category domain="http://securityratty.com/tag/track sign">track sign</category>
      <category domain="http://securityratty.com/tag/nyc">nyc</category>
      <source url="http://feeds.feedburner.com/~r/Liquidmatrix/~3/315522947/">The Last HOPE List of Talks posted</source>
    </item>
    <item>
      <title><![CDATA[Helping to Deliver at Interop, One Flashing Light at a Time!]]></title>
      <link>http://securityratty.com/article/5882cde382c7029ca957a6c787430ce8</link>
      <guid>http://securityratty.com/article/5882cde382c7029ca957a6c787430ce8</guid>
      <description><![CDATA[Technical Opportunities for increasing the EM7 visibility at Interop
I have been manning the NOC help desk for the past week and it has been a complete blast working with a world class team of...]]></description>
      <content:encoded><![CDATA[<p><em>Technical Opportunities for increasing the EM7 visibility at Interop.</em></p>
<p>I have been manning the NOC help desk for the past week and it has been a complete blast working with a world class team of engineers to set-up the &#8220;largest Temporary network in the world!&#8221;</p>
<p><strong>First you start with the problem.</strong></p>
<p>The problem was how to collect and real-time graph the aggregate inbound and outbound bandwidth from 4 Enterasys core network routers (Enterasys XSR 3250 Routers) on 42&#8221; &amp; 52&#8221; flat screens used in the NOC at Interop Las Vegas.</p>
<p><a href="http://blog.sciencelogic.com/wp-content/uploads/2008/05/bandwidth-consumption-graph.png"><img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="165" alt="Bandwidth Consumption Graph" src="http://blog.sciencelogic.com/wp-content/uploads/2008/05/bandwidth-consumption-graph-thumb.png" width="391" border="0" /></a></p>
<p> <a href="http://blog.sciencelogic.com/helping-to-deliver-at-interop-one-flashing-light-at-a-time/05/01/2008/#more-76" class="more-link">(more&#8230;)</a></p>
<p><a href="http://sharethis.com/item?&wp=2.3.3&amp;publisher=f8a81d13-50d0-4a5c-833d-8e5f2341e305&amp;title=Helping+to+Deliver+at+Interop%2C+One+Flashing+Light+at+a+Time%21&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fhelping-to-deliver-at-interop-one-flashing-light-at-a-time%2F05%2F01%2F2008%2F">ShareThis</a></p>]]></content:encoded>
      <pubDate>Thu, 01 May 2008 13:03:55 +0000</pubDate>
      <category domain="http://securityratty.com/tag/interop">interop</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/world class team">world class team</category>
      <category domain="http://securityratty.com/tag/interop las vegas">interop las vegas</category>
      <category domain="http://securityratty.com/tag/noc">noc</category>
      <category domain="http://securityratty.com/tag/real-time graph">real-time graph</category>
      <category domain="http://securityratty.com/tag/em7 visibility">em7 visibility</category>
      <category domain="http://securityratty.com/tag/past week">past week</category>
      <category domain="http://securityratty.com/tag/technical opportunities">technical opportunities</category>
      <source url="http://blog.sciencelogic.com/helping-to-deliver-at-interop-one-flashing-light-at-a-time/05/01/2008/">Helping to Deliver at Interop, One Flashing Light at a Time!</source>
    </item>
    <item>
      <title><![CDATA[Links for 2008-04-03 [del.icio.us]]]></title>
      <link>http://securityratty.com/article/267178aadef12876bdbbc5bdc97a1501</link>
      <guid>http://securityratty.com/article/267178aadef12876bdbbc5bdc97a1501</guid>
      <description><![CDATA[Information Security as Insurance
Security Thoughts: Information Security, Governance, Compliance and Safety Belts I have seen a lot of complaints about PCI and SOX etc etc in the same way that people...]]></description>
      <content:encoded><![CDATA[<ul>
<li><a href="http://dmiessler.com/blog/information-security-as-insurance">Information Security as Insurance</a></li>
<li><a href="http://securethink.blogspot.com/2008/03/information-security-governance.html">Security Thoughts: Information Security, Governance, Compliance and Safety Belts</a><br/>
I have seen a lot of complaints about PCI and SOX etc etc in the same way that people complain about &quot;self protection&quot; laws like safety belt laws.</li>
<li><a href="http://www.itbusinessedge.com/blogs/ssg/?p=283">The Evolution of Compliance Technology - Sarbox Survival Guide</a></li>
<li><a href="http://stage.vambenepe.com/archives/178">William Vambenepe&rsquo;s blog &raquo; Blog Archive &raquo; Another IT event standard? I&rsquo;ll believe it when I CEE it.</a></li>
<li><a href="http://searchsecurity.techtarget.com/tip/0,289483,sid14_gci1307430,00.html?track=NL-430&ad=632806USCA&asrc=EM_NLT_3408753&uid=832109">Worst practices: Recognizing the biggest compliance mistakes</a></li>
<li><a href="http://blog.tenablesecurity.com/2008/03/cybercrime-cybe.html">Tenable Network Security: CyberCrime, CyberTerror, CyberEspionage, and CyberWar</a><br/>
The final point I'd like to make on cybercrime is that the current set of problems show us nothing about how bad it can possibly get.

If you're part of an organzation that does business online, cybercrime is going to be part of your personal future, fo</li>
<li><a href="http://www.security-works.com/blog/2008/03/nice-grc-write-up-and-how-it-relates-to.html">practical risk management: Nice GRC write-up and how it relates to log management initiatives</a></li>
<li><a href="http://www.wired.com/politics/security/commentary/securitymatters/2008/03/securitymatters_0320">Commentary: Inside the Twisted Mind of the Security Professional</a></li>
<li><a href="http://briefingsdirectblog.blogspot.com/2008/03/splunk-goes-platform-to-extend-it.html">Dana Gardner's BriefingsDirect: Splunk goes 'platform' to extend IT search benefits across more IT management functions</a></li>
<li><a href="http://www.sans.edu/resources/securitylab/hoelzer_david_dad.php">SANS Technology Institute: An Interview with David Hoelzer, author of DAD, a log aggregator</a></li>
<li><a href="http://paranoidmike.blogspot.com/2008/02/which-security-event-log-audit_12.html">ParanoidMike: Which Security Event Log audit categories are most useful on a Windows client?</a></li>
<li><a href="http://www2.csoonline.com/exclusives/column.html?CID=33575">Do Your Vendors Have Information Security That's Aaa Good? - Web Exclusives - Online Column - CSO Magazine</a></li>
<li><a href="http://www.s-ox.com/dsp_getNewsDetails.cfm?CID=2220">Sarbanes-Oxley: Growing Dependence on Log Data for Compliance and Threat Response</a><br/>
Results of note from the SenSage survey respondents include:

    *  Eighty-eight percent collect log data for compliance reasons, while 42 percent do so as part of best practices/industry standards initiatives such as ITIL.

    * Seventy-eight perce</li>
</ul><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/263759259" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 03 Apr 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security professional">security professional</category>
      <category domain="http://securityratty.com/tag/tenable network security">tenable network security</category>
      <category domain="http://securityratty.com/tag/compliance">compliance</category>
      <category domain="http://securityratty.com/tag/compliance reasons">compliance reasons</category>
      <category domain="http://securityratty.com/tag/information security">information security</category>
      <category domain="http://securityratty.com/tag/compliance mistakes">compliance mistakes</category>
      <category domain="http://securityratty.com/tag/compliance technology">compliance technology</category>
      <category domain="http://securityratty.com/tag/safety belt laws">safety belt laws</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/263759259/anton18">Links for 2008-04-03 [del.icio.us]</source>
    </item>
    <item>
      <title><![CDATA[HACKED BY THE RBN!]]></title>
      <link>http://securityratty.com/article/14894413156ade1ed1214fcfffa39a2d</link>
      <guid>http://securityratty.com/article/14894413156ade1ed1214fcfffa39a2d</guid>
      <description><![CDATA[The RBN 0wnZ 7th1$ Bl0g! April 1st, 2008, St.Petersburg, Russia. The Russian Business Network, an internationally renowned cyber crime powerhouse is proud to present its very latest malware cocktail...]]></description>
      <content:encoded><![CDATA[<a href="http://bp0.blogger.com/_wICHhTiQmrA/R_KeKF281LI/AAAAAAAABho/-NysWxyPiGM/s1600-h/snake_malware_CC.jpg"><img id="BLOGGER_PHOTO_ID_5184380017265398962" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R_KeKF281LI/AAAAAAAABho/-NysWxyPiGM/s200/snake_malware_CC.jpg" border="0" /></a>The RBN 0wnZ 7th1$ Bl0g! April 1st, 2008, St.Petersburg, Russia. The Russian Business Network, an internationally renowned cyber crime powerhouse is proud to present its very latest malware cocktail by embedding live exploit URLs within one of the top ten blogs to be malware embedded due to their overall negative attitude regarding the RBN's operational activities. A negative attitude that's been nailing down the RBN's cyber coffin as early 2007, prompting us to hire extra personel, thereby increasing our operational costs.<br /><br />Hijacked readers of this blog, executing the harmless to a VMware backed up PC setup files below, will not just strengten our relationship by having your computer contact ours, but will also help us pay for the infrastructure we use to host these, and let us continue maintaining our 99% uptime even in times of negative attitude on a large scale against our business services.<br /><br />How can you too, support the RBN, just like hundreds of thousands customers whose computers keep on connecting to ours already did? Do the following :<br /><br />- Execute our very latest, small sized executable files and let them do their job<br /><br /><strong>58.65.239.42/jdk7dx/ inst250.exe</strong><br /><strong>58.65.239.42/jdk7dx/ alexey.exe</strong><br /><strong>58.65.239.42/jdk7dx/ 6.exe</strong><br /><strong>58.65.239.42/jdk7dx/ 1103.exe</strong><br /><strong>58.65.239.42/jdk7dx/ eagle.exe</strong><br /><strong>58.65.239.42/jdk7dx/ krab.exe</strong><br /><strong>58.65.239.42/jdk7dx/ win32.exe</strong><br /><strong>58.65.239.42/jdk7dx/ pinch.exe</strong><br /><strong>58.65.239.42/jdk7dx/ ldig0031242.exe</strong><br /><strong>58.65.239.42/jdk7dx/ 64.exe</strong><br /><strong>58.65.239.42/jdk7dx/ system.exe</strong><br /><strong>58.65.239.42/jdk7dx/ bhos.exe</strong><br /><strong>58.65.239.42/jdk7dx/ bho.exe</strong><br /><br />- Once you've executed them, make sure you initiate an E-banking transaction right way. Do not worry, you don't to give us your banking details for the donation, we already have them, and will equally distribute your income by meeting our financial objectives<br /><br />- Now that you're done transfering money, authenticate yourself at each every web service that you've ever been using. Trust is vital, and so that we've trusted you by providing you with our latest small sized executable files, it's your turn to trust us when asking you to do so<br /><br />- Don't forget to plug-in any kind of writeble removable media once you've executed the files above as well, as we'd really like to deepen our relationship by storing them, and having them automatically execute themselves the next time you plug-in your removable media<br /><br />- Sharing is what drives our business. Just like the way we've shared and trusted with by providing you with direct links to our executables, in exchange we know you wouldn't mind sharing some of that free hard disk space you have for our own distributed hosting purposes<br /><br /><strong>Stop hating and start participating, join our botnet TODAY! Don't forget, diamonds degrade their quality, hosting services courtesy of the RBN are forever!</strong><br /><br />Sincerely yours,<br />"HostFresh" - RBN's Hong Kong subsidiary<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ueGn6wG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ueGn6wG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=wqZpMEG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=wqZpMEG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=d2cLodg"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=d2cLodg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=WQEdo6g"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=WQEdo6g" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1y4CHjG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1y4CHjG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=qctlNeG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=qctlNeG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Gl6h5Ig"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Gl6h5Ig" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/262207220" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 01 Apr 2008 11:52:09 +0000</pubDate>
      <category domain="http://securityratty.com/tag/42jdk7dx">42jdk7dx</category>
      <category domain="http://securityratty.com/tag/42jdk7dx pinch">42jdk7dx pinch</category>
      <category domain="http://securityratty.com/tag/42jdk7dx system">42jdk7dx system</category>
      <category domain="http://securityratty.com/tag/42jdk7dx ldig0031242">42jdk7dx ldig0031242</category>
      <category domain="http://securityratty.com/tag/42jdk7dx inst250">42jdk7dx inst250</category>
      <category domain="http://securityratty.com/tag/42jdk7dx bhos">42jdk7dx bhos</category>
      <category domain="http://securityratty.com/tag/42jdk7dx win32">42jdk7dx win32</category>
      <category domain="http://securityratty.com/tag/exe">exe</category>
      <category domain="http://securityratty.com/tag/42jdk7dx bho">42jdk7dx bho</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/262207220/hacked-by-rbn.html">HACKED BY THE RBN!</source>
    </item>
  </channel>
</rss>
