<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: ads]]></title>
    <link>http://securityratty.com/tag/ads</link>
    <description></description>
    <pubDate>Wed, 06 Aug 2008 03:51:10 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Creepy Customer Profiling via Facial Recognition]]></title>
      <link>http://securityratty.com/article/dfdb490391ea01b54e8449583b7ebb5b</link>
      <guid>http://securityratty.com/article/dfdb490391ea01b54e8449583b7ebb5b</guid>
      <description><![CDATA[Usually, shopping off-line is usually more ad-free than shopping online. But this is changing, with ads coming in strange places like video screens at Gas Stations, Albertsons, and so on. Googles been...]]></description>
      <content:encoded><![CDATA[<p>Usually, shopping off-line is usually more ad-free than shopping online. But this is changing, with ads coming in strange places like video screens at Gas Stations, Albertson&#8217;s, and so on. Google&#8217;s been using content targeted at users for some time, and now this is coming to offline ads too. Some unlikely retailers like Dunkin Donuts are installing facial recognition systems that change the ads shown, depending whether the viewer is male or female, and in what age range.</p>
<div id="main">
<div id="content">
<div class="post post-permalink">
<div class="entry">
<blockquote><p>The <em>Wall Street Journal</em> says that Dunkin&#8217; Donuts is experimenting with video screens that use facial recognition technology to figure out your age and gender. The screens then display ads targeted specifically to you.</p>
<p>Creepy!</p>
<p>Dunkin&#8217; Donuts is also tailoring the cash register ads to your specific purchase. If you buy a breakfast sandwich, you can expect an ad prompting you to return &#8220;for a coffee break in the afternoon&#8221; to &#8220;try an oven-toasted pizza.&#8221; The system is already in place at two Buffalo, NY locations.</p></blockquote>
<p>Read the<a rel="nofollow" target="_blank" href="http://consumerist.com/5040049/facial-recognition-technology-%252B-video-screens--creepy-dunkin-donuts-ads"> full article here</a>.</div>
</div>
</div>
</div>]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 05:41:08 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ads">ads</category>
      <category domain="http://securityratty.com/tag/cash register ads">cash register ads</category>
      <category domain="http://securityratty.com/tag/display ads">display ads</category>
      <category domain="http://securityratty.com/tag/dunkin donuts">dunkin donuts</category>
      <category domain="http://securityratty.com/tag/screens">screens</category>
      <category domain="http://securityratty.com/tag/video screens">video screens</category>
      <category domain="http://securityratty.com/tag/ads shown">ads shown</category>
      <category domain="http://securityratty.com/tag/age range">age range</category>
      <category domain="http://securityratty.com/tag/wall street journal">wall street journal</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/372009137/">Creepy Customer Profiling via Facial Recognition</source>
    </item>
    <item>
      <title><![CDATA[A Diverse Portfolio of Fake Security Software - Part Three]]></title>
      <link>http://securityratty.com/article/b4ef5891c0afbc0646b24468fff13a9f</link>
      <guid>http://securityratty.com/article/b4ef5891c0afbc0646b24468fff13a9f</guid>
      <description><![CDATA[One would assume that once you've managed to trick leading advertising providers into accepting your malicious flash ads inside their networks, you would do anything but hijack the end user's...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SKvVSMmqHKI/AAAAAAAACE0/uovSJbrTTF0/s1600-h/fake_security_software_august2008.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SKvVSMmqHKI/AAAAAAAACE0/DkJq-6xfUjQ/s200-R/fake_security_software_august2008.JPG" /></a>One would assume that once you've managed to trick leading advertising providers into accepting your malicious flash ads inside their networks, you would do anything but hijack the end user's clipboard and rely on their curiosity in order to direct them to your fake security software site. <a href="http://siteanalytics.compete.com/xp-vista-update.net?metric=uv">Is the curiosity approach working anyway?</a> Naturally, thanks to the effect of "regressive Darwinism".<br />
<br />
Compared to <a href="http://ddanchev.blogspot.com/2008/02/malicious-advertising-malvertising.html">February, 2008's malicious advertising (Malvertising) attack</a>, the <a href="http://sunbeltblog.blogspot.com/2007/11/rogue-ads-on-ad-networks.html">current one is less comprehensive</a> and not so well thought of -- <a href="http://ddanchev.blogspot.com/2008/05/malware-attack-exploiting-flash-zero.html">thankfully</a>.<br />
<br />
What these campaigns have in common is the <a href="http://ddanchev.blogspot.com/2008/08/diverse-portfolio-of-fake-security.html">fake security software</a> served at the bottom line, next to the malware campaigners persistence in introducing new domains, like the very latest ones :<br />
<br />
<b>adware-download .com<br />
windows-scanner2009 .com<br />
antivirus2008free .com &nbsp;&nbsp;&nbsp; <br />
antivirusfree2008 .net<br />
antispyware2008scanner .com<br />
softwareantivirus2008 .com<br />
free-2008-antivirus .com<br />
free-2008-antivirus .net<br />
free-antivirus-2008 .com<br />
free-antivirus-2008 .net<br />
free2008antivirus .com<br />
free2008antivirus .net<br />
getas2008xp .com<br />
software-2008-antivirus .com<br />
software-2008-antivirus .net<br />
software-antivirus-2008 .com<br />
software2008antivirus .com<br />
software2008antivirus .net<br />
softwareantivirus .net<br />
2008-software-antivirus .net<br />
2008-xp-antivirus .com<br />
2008antivirusfree .com<br />
2008antivirusfree .net<br />
2008antivirussoftware .com<br />
2008antivirussoftware .net<br />
2008antivirusxp .net<br />
2008freeantivirus .com<br />
2008freeantivirus .net<br />
2008softwareantivirus .com<br />
2008softwareantivirus .net<br />
2008xpantivirus .net<br />
2008-antivirus-free .com<br />
2008antivirusxp .com<br />
2008-free-antivirus .com<br />
2008-free-antivirus .com<br />
2008-free-antivirus .net<br />
2008-antivirus-free .net<br />
2008-antivirus-software .net<br />
2008-antivirus .net<br />
antivirus-2008-free .com<br />
antivirus-2008-free .net<br />
antivirus-2008-software .com<br />
antivirus-2008-software .net<br />
antivirus-free-2008 .com<br />
antivirus-software-2008 .com</b><br />
<br />
No matter how fancy malvertising is in respect to demonstrating the creativity of malicious parties wanting to appear at legitimate sites by abusing their advertising providers, there are far more efficient tactics to do so.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=5TtNuK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=5TtNuK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=GJYogK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=GJYogK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=c5x4hk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=c5x4hk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=MPQuTk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=MPQuTk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=LkXemK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=LkXemK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=tqoZ0K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=tqoZ0K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=fWwk4k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=fWwk4k" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/369829425" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 20 Aug 2008 00:36:14 +0000</pubDate>
      <category domain="http://securityratty.com/tag/net">net</category>
      <category domain="http://securityratty.com/tag/fake security software">fake security software</category>
      <category domain="http://securityratty.com/tag/malicious parties">malicious parties</category>
      <category domain="http://securityratty.com/tag/malicious">malicious</category>
      <category domain="http://securityratty.com/tag/malware campaigners persistence">malware campaigners persistence</category>
      <category domain="http://securityratty.com/tag/curiosity">curiosity</category>
      <category domain="http://securityratty.com/tag/curiosity approach">curiosity approach</category>
      <category domain="http://securityratty.com/tag/providers">providers</category>
      <category domain="http://securityratty.com/tag/regressive darwinism">regressive darwinism</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/369829425/diverse-portfolio-of-fake-security_20.html">A Diverse Portfolio of Fake Security Software - Part Three</source>
    </item>
    <item>
      <title><![CDATA[Mac, Windows clipboards poisoned by URL attacks]]></title>
      <link>http://securityratty.com/article/43d63112d7898b8e1b4494611586bcab</link>
      <guid>http://securityratty.com/article/43d63112d7898b8e1b4494611586bcab</guid>
      <description><![CDATA[In what a security researcher called a cunning attack, infected Web ads are poisoning Mac and Windows users' clipboards with URLs designed to trick people into visiting sites touting bogus security...]]></description>
      <content:encoded><![CDATA[In what a security researcher called a cunning attack, infected Web ads are poisoning Mac and Windows users' clipboards with URLs designed to trick people into visiting sites touting bogus security software.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=Y69kEH"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=Y69kEH" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/369315537" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/bogus security software">bogus security software</category>
      <category domain="http://securityratty.com/tag/web ads">web ads</category>
      <category domain="http://securityratty.com/tag/windows users">windows users</category>
      <category domain="http://securityratty.com/tag/security researcher">security researcher</category>
      <category domain="http://securityratty.com/tag/clipboards">clipboards</category>
      <category domain="http://securityratty.com/tag/trick people">trick people</category>
      <category domain="http://securityratty.com/tag/mac">mac</category>
      <category domain="http://securityratty.com/tag/sites">sites</category>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/369315537/article.do">Mac, Windows clipboards poisoned by URL attacks</source>
    </item>
    <item>
      <title><![CDATA[Mac, Windows clipboards poisoned by URL attacks]]></title>
      <link>http://securityratty.com/article/01e8c93b636ba1aad52bc5733a7c0b33</link>
      <guid>http://securityratty.com/article/01e8c93b636ba1aad52bc5733a7c0b33</guid>
      <description><![CDATA[Infected Web ads are poisoning Mac and Windows users' clipboards with URLs, researchers said Tuesday, in a &quot;very cunning&quot; attack designed to trick people into visiting sites touting bogus security...]]></description>
      <content:encoded><![CDATA[Infected Web ads are poisoning Mac and Windows users' clipboards with URLs, researchers said Tuesday, in a "very cunning" attack designed to trick people into visiting sites touting bogus security software.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=5668?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=5668?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/bogus security software">bogus security software</category>
      <category domain="http://securityratty.com/tag/web ads">web ads</category>
      <category domain="http://securityratty.com/tag/windows users">windows users</category>
      <category domain="http://securityratty.com/tag/trick people">trick people</category>
      <category domain="http://securityratty.com/tag/clipboards">clipboards</category>
      <category domain="http://securityratty.com/tag/mac">mac</category>
      <category domain="http://securityratty.com/tag/sites">sites</category>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <category domain="http://securityratty.com/tag/researchers">researchers</category>
      <source url="http://www.networkworld.com/news/2008/081908-mac-windows-clipboards-poisoned-by.html?fsrc=rss-security">Mac, Windows clipboards poisoned by URL attacks</source>
    </item>
    <item>
      <title><![CDATA[Malicious Adobe Flash Ads Hit High-Profile Websites]]></title>
      <link>http://securityratty.com/article/7c521d10841f7c3d7edf4f1828800d37</link>
      <guid>http://securityratty.com/article/7c521d10841f7c3d7edf4f1828800d37</guid>
      <description><![CDATA[According to a post on the Bluetack Internet Security Solutions site, Newsweek.com is suspected of running rogue banner advertisements that try to trick visitors into installing fraudulent...]]></description>
      <content:encoded><![CDATA[According to a post on the Bluetack Internet Security Solutions site, Newsweek.com is suspected of running rogue banner advertisements that try to trick visitors into installing fraudulent anti-malware programs. Newsweek.com is one of several high-profile websites accused of exposing its readers to dangerous ads.
The malicious ads have been appearing on Newsweek&#8217;s website via feeds that [...]]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 19:17:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/high-profile websites">high-profile websites</category>
      <category domain="http://securityratty.com/tag/fraudulent anti-malware programs">fraudulent anti-malware programs</category>
      <category domain="http://securityratty.com/tag/rogue banner advertisements">rogue banner advertisements</category>
      <category domain="http://securityratty.com/tag/malicious ads">malicious ads</category>
      <category domain="http://securityratty.com/tag/newsweeks website">newsweeks website</category>
      <category domain="http://securityratty.com/tag/newsweek">newsweek</category>
      <category domain="http://securityratty.com/tag/trick visitors">trick visitors</category>
      <category domain="http://securityratty.com/tag/dangerous ads">dangerous ads</category>
      <category domain="http://securityratty.com/tag/feeds">feeds</category>
      <source url="http://cyberinsecure.com/malicious-adobe-flash-ads-hit-high-profile-websites/">Malicious Adobe Flash Ads Hit High-Profile Websites</source>
    </item>
    <item>
      <title><![CDATA[Beware of Rogue Anti-Malware]]></title>
      <link>http://securityratty.com/article/56bc0c383527b10009c2841b8cf095c1</link>
      <guid>http://securityratty.com/article/56bc0c383527b10009c2841b8cf095c1</guid>
      <description><![CDATA[Rogue anti-virus and anti-spyware products are not a new story, but they are a relatively growing threat. One of these threats made some news this week and taught some lessons about just how...]]></description>
      <content:encoded><![CDATA[Rogue anti-virus and anti-spyware products are not a new story, but they are a relatively growing threat. One of these threats made some news this week and taught some lessons about just how suspicious you have to be of them.

We had heard of <i>XP Antivirus</i>&#151;also known by a plethora of name variants, including <i>Antivirus XP</i> and year variants like <i>Antivirus XP 2008</i>. <a href="http://research.sunbelt-software.com/threatdisplay.aspx?name=Antivirus XP 2008 (Winifixer)&threatid=310434"target="_blank">Click here for a description from Sunbelt Software.</a> Last week, <a href="http://blogs.pcmag.com/securitywatch/2008/08/googlesyndicated_malware_ads_h.php"target="_blank">advertisements for this product started appearing on CNET</a> (specifically their Download.com service) through syndicated Google ads. Not to pick on CNET specifically; Google ads are likely to be appearing elsewhere, but we were referred to them on that site.

The hallmark of such malware is to start with a free version. This version conducts a fake malware scan that finds lots of malware on the system, and the user is told to pay for the "premium" version in order to remove the malware that doesn't really exist in the first place. Often rogue anti-malware software such as this is not strictly malicious in the sense of spreading itself to other systems or hiding any functions; it is simply a scam. Of course, by buying the product you may also expose personal and credit card details to untrustworthy people.

Later last week, GlobalSign, the certificate authority that had issued a code signing certificate for use with Antivirus XP 2008, <a href="http://www.theregister.co.uk/2008/08/16/certified_malware/"target="_blank">revoked that certificate after complaints that the software was malicious</a>. They verified that the company existed but couldn't contact them. The investigation is ongoing.

The bottom line and moral of the story is that rogue anti-malware vendors are merciless and shameless when it comes to masquerading as legit software. Ads on legit sites don't prove anything, and code-signing certificates don't prove anything. You still need to use common sense and exercise precautions, like running well-known and respected anti-malware, like Sunbelt Software's. They have a lot of special in-house expertise on rogue products like this.<img src="http://feedproxy.google.com/~r/RSS/cheap_hack/~4/r_W79eeC5GM" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 06:16:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/anti-malware">anti-malware</category>
      <category domain="http://securityratty.com/tag/rogue anti-malware vendors">rogue anti-malware vendors</category>
      <category domain="http://securityratty.com/tag/legit software">legit software</category>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/sunbelt software">sunbelt software</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/rogue anti-malware software">rogue anti-malware software</category>
      <category domain="http://securityratty.com/tag/fake malware scan">fake malware scan</category>
      <category domain="http://securityratty.com/tag/google ads">google ads</category>
      <source url="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~3/r_W79eeC5GM/beware_of_rogue_antimalware_1.html">Beware of Rogue Anti-Malware</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Meraki Modifies, Drops Standard; Tempe's Phoenix?; Remote Wake, Wi-Fi Need Not Apply]]></title>
      <link>http://securityratty.com/article/a930349b033e6f56c6098e0b152daddf</link>
      <guid>http://securityratty.com/article/a930349b033e6f56c6098e0b152daddf</guid>
      <description><![CDATA[Meraki reworks product line, drops new sales of community flavor: The cheap mesh router company has mutated slightly once again. The partly-Google-backed firm founded by MIT RoofNet &quot;graduates&quot; built...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://meraki.com/"><strong>Meraki reworks product line, drops new sales of community flavor:</strong></a> The cheap mesh router company has mutated slightly once again. The partly-Google-backed firm founded by MIT RoofNet "graduates" built the company on the notion that they could sell $50 routers that could mesh with each other, and use a robust central management system they developed. Over time, the $50 price didn't hold up for commercial networks of scale. Last October, the <a href="http://wifinetnews.com/archives/007973.html"><strong>company mishandled a change</strong></a> in its business model when they abruptly announced a $100 increase in price for newly purchased nodes under their Meraki Pro level for any network that wanted to control whether or not ads appeared, have user accounts, and charge for service. (They eventually <a href="http://wifinetnews.com/archives/007979.html"><strong>recovered, apologized, and reworked</strong></a> some of the transition details.) <img src="http://wifinetnews.com//images/2008/meraki_indoor.jpg" alt="meraki_indoor.jpg" border="0" width="175" height="111" align="right" />The company continued to offer a $50 indoor and $100 outdoor Standard level nodes for networks that required ads and had other limits. As of a few days ago, Standard is dead, and the Meraki mini has been upgraded to the <a href="http://meraki.com/products_services/hardware/indoor/"><strong>Meraki Indoor</strong></a> ($150). The Indoor has signal strength LEDs on the side for better help in placing units, an internal antenna, and better resilience against power fluctuations. The company <a href="http://meraki.com/support/faq/"><strong>explains its move</strong></a> in eliminating Standard by noting that most customers moved to Pro. It's not precisely the end of idealism (nor did that happen last October), as Meraki is still one of the major commercial mesh vendors, and their products are still vastly easier and a fraction of the cost of higher-end competitors.<br clear="all"></p>

<p><a href="http://www.eastvalleytribune.com/story/123037"><strong>New life for dead Tempe network?</strong></a> Another firm has expressed interest in buying the pennies on the dollar assets that remain of the former Kite Networks installation in Tempe from the firm that financed the venture as long as they can negotiate a new, more favorable deal with the city for mounting and removal rights. CTC, Inc., which the East Valley Tribune reports runs networks in the Kansas City, Mo., area, thinks there's an opportunity. The article notes that reception problems were due in part to the prevalence of stucco in Tempe, common in the southwest. Stucco walls layer plaster or other materials on a wire mesh for strength that turns a house into a bit of an accidental <a href="http://en.wikipedia.org/wiki/Faraday_cage"><strong>Faraday cage</strong></a>, partially shielding the home from electromagnetic radiation. (Could I go so far to say that Tempe's network could be a phoenix? Ouch.)</p>

<p><a href="http://www.usatoday.com/tech/products/2008-08-14-intel-wake-up-pcs_N.htm"><strong>Wake up, you darn computer:</strong></a> Intel's new Remote Wake motherboards won't work with Wi-Fi, it's important to note. The feature, announced today, will let an incoming VoIP call (the articles all say "phone call over the Internet") to wake a computer, as long as the call comes from a particular source. Of course, the standard SIP protocol for VoIP doesn't have the kind of security and integrity that would allow this; Intel has to overcome the problem with network address translation that renders most computer unreachable from outside the local network without a separate service like GoToMyPC or LogMeIn; and it will only work for computers connected via Ethernet to a local network, because Wi-Fi is off when a computer sleeps, while Ethernet can remain lightly active. I don't have the protocol details yet, but there's long been a <a href="http://en.wikipedia.org/wiki/Wake-on-LAN"><strong>Wake on LAN protocol</strong></a> that required support in a router, operating system, and Ethernet card; Intel may be leveraging this.</p>]]></content:encoded>
      <pubDate>Thu, 14 Aug 2008 06:32:51 +0000</pubDate>
      <category domain="http://securityratty.com/tag/meraki">meraki</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/network address translation">network address translation</category>
      <category domain="http://securityratty.com/tag/dead tempe network">dead tempe network</category>
      <category domain="http://securityratty.com/tag/dead">dead</category>
      <category domain="http://securityratty.com/tag/tempe">tempe</category>
      <category domain="http://securityratty.com/tag/standard">standard</category>
      <category domain="http://securityratty.com/tag/meraki indoor">meraki indoor</category>
      <category domain="http://securityratty.com/tag/meraki mini">meraki mini</category>
      <source url="http://wifinetnews.com/archives/008420.html">Wee-Fi: Meraki Modifies, Drops Standard; Tempe's Phoenix?; Remote Wake, Wi-Fi Need Not Apply</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: iPhone Penetration, Hotspots Undercounted, Warballoon, Cincy Bus-Fi]]></title>
      <link>http://securityratty.com/article/e40f33339b59735e12dc94589ccb5479</link>
      <guid>http://securityratty.com/article/e40f33339b59735e12dc94589ccb5479</guid>
      <description><![CDATA[iPhone sleeper cell: Security researchers demonstrated the use of an iPhone with an external battery pack as a method of sniffing networks from a mailroom, to find information that a business might...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/lock.jpg" align="right" border="0" hspace="5" /><a href="http://www.tgdaily.com/content/view/38814/108/"><strong>iPhone sleeper cell:</strong></a> Security researchers demonstrated the use of an iPhone with an external battery pack as a method of sniffing networks from a mailroom, to find information that a business might not feel that it has to secure in the heart of its operations. Errata Security performed distant penetration testing for a client in this way, and found most of their wireless networks unprotected. This is sort of absurd, and I'll be curious what Errata posts on their own site about this project--the scope sounds wrong in the reporting on their talk--because every firm of any scale has some kind of encryption on their internal networks. If they don't, you have concerns at a much higher level than penetration testing. </p>

<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.pcworld.com/article/149620/2008/08/.html?tk=rss_news"><strong>Four chains, four Wi-Fi pay policies:</strong></a> CIO magazine looks at Borders, McDonald's, Panera, and Starbucks, and how they're offering Wi-Fi. I'd like to suggest you read this article, but the author writes, "Right now, according to <a href="http://www.hotspot-locations.com/"><strong>Hotspot Locations</strong></a>, there are more than 33,000 WLAN hotspots worldwide, and more than 10,000 in the United States alone." I don't know who "Hotspot Locations" is, and I need to disclose that I have a financial interest in what must be their competitor, JiWire, but any hotspot finder that calls them "WLAN Hotspots" and reports 11,712 in the U.S. and 33,106 worldwide just isn't working very hard. JiWire <a href="http://www.jiwire.com/search-hotspot-locations.htm"><strong>lists over 230,000 hotspots worldwide</strong></a>, and notes over 60,000 in the U.S., while <a href="http://boingo.com/what-is-boingo.php?btn_learn_more="><strong>Boingo</strong></a> and <a href="https://www.ipassconnect.com/main"><strong>iPass</strong></a> each resell access to over 100,000 hotspots worldwide.<br />
 <br />
<a href="http://www.networkworld.com/news/2008/081008-covert-operation-floats-network-sniffing.html?hpg1=bn"><strong>Up, up, and away in my beautiful, my beautiful warballoon:</strong></a> Defcon hackers deployed a balloon with Wi-Fi receivers on it 150 feet in the air to scan for network vulnerabilities in Las Vegas last week. They found 1/3rd of networks had no encryption--although I always wonder if they're using passive scanning where 802.1X allows a limited connection for authentication and appears "open" in some ways, or if they were actively scanning, in which case 802.1X networks would be unavailable.</p>

<p><a href="http://news.cincinnati.com/apps/pbcs.dll/article?AID=/20080809/NEWS01/808090335"><strong>Cincinnati Metro service has Wi-Fi on 20 buses:</strong></a> The free service supplied by AT&T in an ads-for-access deal with the authority was placed after a couple years of testing on a relatively long commuter run. The authority spends $15,000 per bus to setup a connection, which seems rather pricey. Other authorities are paying in the low thousands, from what I've seen, so I'm not sure what their particular case is.</p>]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 05:49:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wlan hotspots worldwide">wlan hotspots worldwide</category>
      <category domain="http://securityratty.com/tag/wlan hotspots">wlan hotspots</category>
      <category domain="http://securityratty.com/tag/hotspots worldwide">hotspots worldwide</category>
      <category domain="http://securityratty.com/tag/worldwide">worldwide</category>
      <category domain="http://securityratty.com/tag/iphone">iphone</category>
      <category domain="http://securityratty.com/tag/wireless networks">wireless networks</category>
      <category domain="http://securityratty.com/tag/networks">networks</category>
      <category domain="http://securityratty.com/tag/penetration">penetration</category>
      <category domain="http://securityratty.com/tag/internal networks">internal networks</category>
      <source url="http://wifinetnews.com/archives/008416.html">Wee-Fi: iPhone Penetration, Hotspots Undercounted, Warballoon, Cincy Bus-Fi</source>
    </item>
    <item>
      <title><![CDATA[08/08/08 was not a lucky day for MS Vista]]></title>
      <link>http://securityratty.com/article/737487aedd8d4569a35d25bb2614114e</link>
      <guid>http://securityratty.com/article/737487aedd8d4569a35d25bb2614114e</guid>
      <description><![CDATA[Read about this over at Valleywag.com . As the post says, a good explanation is at Electronista.com
For many users of Vista, its just another reason to not like it
How does it apply to you, the casual...]]></description>
      <content:encoded><![CDATA[<p>Read about this over at <a title="Valleywag.com" href="http://valleywag.com/5034983/vista-security-completely-end+run-by-hack" target="_blank">Valleywag.com</a>. As the post says, a good explanation is at <a title="Electronista.com" href="http://www.electronista.com/articles/08/08/08/vista.security.gutted/" target="_blank">Electronista.com</a></p>
<p>For many users of Vista, its just another reason to not like it.</p>
<p>How does it apply to you, the casual user? It should convince you to insure your online safety. Use a alternate Browser like Firefox. Simply because its less of a target for exploits so far.</p>
<p>Make sure your MS updates are current. Practice good surfing, stay away from sites that may harbor porn, malicious ads and such. Make sure you have a reliable AntiVirus, AntiSpyware and Firewall program up.</p>
<p>And wait for the patch to fix the exploit.</p>
]]></content:encoded>
      <pubDate>Sat, 09 Aug 2008 12:55:20 +0000</pubDate>
      <category domain="http://securityratty.com/tag/online safety">online safety</category>
      <category domain="http://securityratty.com/tag/casual user">casual user</category>
      <category domain="http://securityratty.com/tag/vista">vista</category>
      <category domain="http://securityratty.com/tag/reliable antivirus">reliable antivirus</category>
      <category domain="http://securityratty.com/tag/malicious ads">malicious ads</category>
      <category domain="http://securityratty.com/tag/firewall program">firewall program</category>
      <category domain="http://securityratty.com/tag/harbor porn">harbor porn</category>
      <category domain="http://securityratty.com/tag/exploit">exploit</category>
      <category domain="http://securityratty.com/tag/browser">browser</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=547">08/08/08 was not a lucky day for MS Vista</source>
    </item>
    <item>
      <title><![CDATA[Strange Digg.com Spamming]]></title>
      <link>http://securityratty.com/article/7756a909ad9e37edfadb259e480b7179</link>
      <guid>http://securityratty.com/article/7756a909ad9e37edfadb259e480b7179</guid>
      <description><![CDATA[I saw this in the security section earlier today






Click to Enlarge

Each one links to a page on a website called Tubeteases(dot)com, and each page streams a Youtube video - usually females...]]></description>
      <content:encoded><![CDATA[
        I saw this in the security section earlier today:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/diggspam1.html" onclick="window.open('http://blog.spywareguide.com/images/diggspam1.html','popup','width=699,height=579,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/diggspam1-thumb-399x330.jpg" alt="diggspam1.jpg" class="mt-image-none" style="" height="330" width="399" /></a></span><br /> </div><div><div align="center"><br />Click to Enlarge<br /></div><br />Each one links to a page on a website called Tubeteases(dot)com, and each page streams a Youtube video - usually females bouncing around in various states of undress.<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/diggspam2.html" onclick="window.open('http://blog.spywareguide.com/images/diggspam2.html','popup','width=715,height=612,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/diggspam2-thumb-315x269.jpg" alt="diggspam2.jpg" class="mt-image-none" style="" height="269" width="315" /></a></span><br /></div></div><div><div align="center"><br />Click to Enlarge<br /></div><br />Usually with spam like this, there's a financial incentive - however, I'm having a hard time working out what the motive is here. There are no clickable ads to make money from on the site - it's just page after page of miniaturised Youtube clips.<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/diggspam3.html" onclick="window.open('http://blog.spywareguide.com/images/diggspam3.html','popup','width=771,height=610,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/diggspam3-thumb-371x293.jpg" alt="diggspam3.jpg" class="mt-image-none" style="" height="293" width="371" /></a></span><br /></div></div><div><div align="center"><br />Click to Enlarge<br /></div><br />No popups, no flashing banners, no mousetraps.....nothing.<br /><br />I thought I'd worked it out when I scrolled down the page and saw a large advert for a webcam site. Aha! Obviously the gimmick is luring you to the above video site then get you to pay up for webcam access, right?<br /><br />Well, not exactly...<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/diggspam4.html" onclick="window.open('http://blog.spywareguide.com/images/diggspam4.html','popup','width=615,height=422,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/diggspam4-thumb-315x216.jpg" alt="diggspam4.jpg" class="mt-image-none" style="" height="216" width="315" /></a></span><br /></div></div><div><div align="center"><br />Click to Enlarge<br /></div><br />...."Free"? Oh dear, this isn't going well. They don't even have the advert for the webcam site at the top of the page, it's stuffed down at the bottom somewhere so I can't even claim "in-your-face" advertising.<br /><br />At the very bottom, I saw a set of weblinks to other sites - surely this is the gimmick then? Entice potential webmasters to pay up for links placed on-site? Well, as it turns out, no. Clicking the "free slots available" link simply takes you to a page offering a free link placement script.<br /><br />Normally spam = profit. Here though, I can't see that this follows the usual pattern. Perhaps someone woke up feeling philanthropic and randomly decided the best course of action for Digg.com users was watching hundreds of postage-stamp sized clips of semi-naked females.<br /><br />We can tell them off for spamming Digg though, so we've got them there...<br /></div>
        
    ]]></content:encoded>
      <pubDate>Wed, 06 Aug 2008 03:51:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/page">page</category>
      <category domain="http://securityratty.com/tag/page streams">page streams</category>
      <category domain="http://securityratty.com/tag/video site">video site</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/on-site">on-site</category>
      <category domain="http://securityratty.com/tag/webcam site">webcam site</category>
      <category domain="http://securityratty.com/tag/digg">digg</category>
      <category domain="http://securityratty.com/tag/enlarge">enlarge</category>
      <category domain="http://securityratty.com/tag/click">click</category>
      <source url="http://blog.spywareguide.com/2008/08/strange-diggcom-spamming.html">Strange Digg.com Spamming</source>
    </item>
  </channel>
</rss>
