<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: auction]]></title>
    <link>http://securityratty.com/tag/auction</link>
    <description></description>
    <pubDate>Fri, 04 Apr 2008 07:45:52 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Vulnerabilities in Antivirus Software - Conflict of Interest]]></title>
      <link>http://securityratty.com/article/99630b84f67151661d9187260dcf552f</link>
      <guid>http://securityratty.com/article/99630b84f67151661d9187260dcf552f</guid>
      <description><![CDATA[Vulnerabilities within security solutions -- antivirus software in this case -- are a natural event, however, the conflict of interests and failure of communication between those finding them and...]]></description>
      <content:encoded><![CDATA[<div class="separator" style="text-align: center; clear: both;"><a href="http://bp3.blogger.com/_wICHhTiQmrA/SIg38-WOQQI/AAAAAAAAB9M/PHaw4e4SYmo/s1600-h/nruns_mcafee_av_vulnerabilities.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp3.blogger.com/_wICHhTiQmrA/SIg38-WOQQI/AAAAAAAAB9M/xp4nOKjGb1Q/s200-R/nruns_mcafee_av_vulnerabilities.JPG" style="border: 0pt none ;" /></a></div>Vulnerabilities within security solutions -- antivirus software in this case -- are a natural event, however, the conflict of interests and failure of communication between those finding them and those failing to acknowledge them as vulnerabilities in general, harms the customer. How they get count, and how is their severity measured in a situation where a vulnerability bypassing the scanning method of an antivirus software allowing malware to sneak in, is less important than a remote code execution through the antivirus software, is a good example of short sightedness. Here's a related development regarding a recent study regarding vulnerabilities in antivirus software - "<a href="http://blogs.zdnet.com/security/?p=1538">McAfee debunks recent vulnerabilities in AV software research, n.runs restates its position</a>" :<br />
<br />
"<i>Several days after blogging about a research conduced by n.runs AG that managed to <a href="http://blogs.zdnet.com/security/?p=1445" title="Approximately 800 vulnerabilities discovered in antivirus products">discover approximately 800 vulnerabilities in antivirus products</a>, McAfee issued a statement basically <a href="http://www.avertlabs.com/research/blog/index.php/2008/07/10/vulnerabilities-in-av-software/" title="Vulnerabilities in AV software">debunking the number of vulnerabilities found</a>, and providing its own account into the number of vulnerabilities affecting its own products :</i><br />
<br />
<i>“A recent <a href="http://blogs.zdnet.com/security/?p=1445">ZDnet blog</a> discusses a large number of vulnerabilities German research team N.Runs says it found in antimalware products from nearly every vendor. The ZDNet posting includes scary graphs to frighten users of security products. We researched the N.Runs claims by analyzing the raw data and found their claims to be somewhat exaggerated. We will discuss our findings (and make available our source data) in the attached <a href="http://vil.nai.com/images/AvertBlog_Vulnerabilities%20in%20AV%20software.pdf">document</a>. We have also provided our <a href="http://vil.nai.com/images/AvertBlog%20-%20800%20vulns.xls">source data</a> for anyone who wishes to examine it.”</i><br />
<br />
<i>Today, n.runs AG has issued <a href="http://www.prweb.com/releases/aps-av/nruns/prweb1134004.htm" title="Over 800 Vulnerabilities in Anti-Virus Software -- Reaction to the McAfee Statement">a response to McAfee’s statement</a>, providing even more <a href="http://www.nruns.com/_downloads/PR-08-02_Reaction_to_McAfee_statement.pdf" title="Response to McAfee Statement">insights into the vulnerabilities they’ve managed to find</a>, how they found them, and why are the affected antivirus vendors questioning the number of flaws in general.</i>"<br />
<br />
Consider going through the <a href="http://blogs.zdnet.com/security/?p=1538">interview with Thierry Zoller</a> as well. <br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2005/12/0bay-how-realistic-is-market-for.html">0bay - how realistic is the market for security vulnerabilities?</a><br />
<a href="http://ddanchev.blogspot.com/2006/01/was-wmf-vulnerability-purchased-for.html">Was the WMF vulnerability purchased for $4000?!</a><br />
<a href="http://ddanchev.blogspot.com/2006/03/wheres-my-0day-please.html">Where's my 0day, please?</a><br />
<a href="http://ddanchev.blogspot.com/2006/07/scientifically-predicting-software.html">Scientifically Predicting Software Vulnerabilities</a><br />
<a href="http://ddanchev.blogspot.com/2006/09/zero-day-initiative-upcoming-zero-day.html">Zero Day Initiative "Upcoming Zero Day Vulnerabilities"</a><br />
<a href="http://ddanchev.blogspot.com/2006/05/delaying-yesterdays-0day-security.html">Delaying Yesterday's "0day" Security Vulnerability</a><br />
<a href="http://ddanchev.blogspot.com/2006/05/shaping-market-for-security.html">Shaping the Market for Security Vulnerabilities Through Exploit Derivatives</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/zero-day-vulnerabilities-market-model.html">Zero Day Vulnerabilities Market Model Gone Wrong</a><br />
<a href="http://ddanchev.blogspot.com/2007/07/zero-day-vulnerabilities-auction.html">Zero Day Vulnerabilities Auction</a><br />
<a href="http://ddanchev.blogspot.com/2007/01/zero-day-vulnerabilities-cash-bubble.html">The Zero Day Vulnerabilities Cash Bubble</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=uv22wJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=uv22wJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=tablsJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=tablsJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=vwps8j"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=vwps8j" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=5n0xGj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=5n0xGj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=JzfTJJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=JzfTJJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=iUBJIJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=iUBJIJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=MwfvGj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=MwfvGj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/344429091" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 24 Jul 2008 00:38:07 +0000</pubDate>
      <category domain="http://securityratty.com/tag/vulnerabilities">vulnerabilities</category>
      <category domain="http://securityratty.com/tag/day vulnerabilities">day vulnerabilities</category>
      <category domain="http://securityratty.com/tag/security vulnerabilities">security vulnerabilities</category>
      <category domain="http://securityratty.com/tag/antivirus software">antivirus software</category>
      <category domain="http://securityratty.com/tag/day vulnerabilities auction">day vulnerabilities auction</category>
      <category domain="http://securityratty.com/tag/software vulnerabilities">software vulnerabilities</category>
      <category domain="http://securityratty.com/tag/products">products</category>
      <category domain="http://securityratty.com/tag/runs claims">runs claims</category>
      <category domain="http://securityratty.com/tag/security products">security products</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/344429091/vulnerabilities-in-antivirus-software.html">Vulnerabilities in Antivirus Software - Conflict of Interest</source>
    </item>
    <item>
      <title><![CDATA[Are we about to witness a real OS X virus?]]></title>
      <link>http://securityratty.com/article/201c1e516d0f5fa5fb8fdb1563e43467</link>
      <guid>http://securityratty.com/article/201c1e516d0f5fa5fb8fdb1563e43467</guid>
      <description><![CDATA[Mac antivirus maker, Intego, has published an interesting alert about a potential OS X virus that an enterprising individual is trying to sell through auction. With absolutely no technical information...]]></description>
      <content:encoded><![CDATA[Mac antivirus maker, Intego, has published an interesting alert about a potential OS X virus that an enterprising individual is trying to sell through auction. With absolutely no technical information to go on, the antivirus maker is treating the announcement with caution.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=90390?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=90390?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Wed, 23 Jul 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mac antivirus maker">mac antivirus maker</category>
      <category domain="http://securityratty.com/tag/antivirus maker">antivirus maker</category>
      <category domain="http://securityratty.com/tag/technical information">technical information</category>
      <category domain="http://securityratty.com/tag/virus">virus</category>
      <category domain="http://securityratty.com/tag/alert">alert</category>
      <category domain="http://securityratty.com/tag/caution">caution</category>
      <category domain="http://securityratty.com/tag/potential">potential</category>
      <category domain="http://securityratty.com/tag/individual">individual</category>
      <category domain="http://securityratty.com/tag/auction">auction</category>
      <source url="http://www.networkworld.com/news/2008/072408-are-we-about-to-witness.html?fsrc=rss-security">Are we about to witness a real OS X virus?</source>
    </item>
    <item>
      <title><![CDATA[StubHub millionaires?]]></title>
      <link>http://securityratty.com/article/e4f90a71e6864a1ccd8f8d36bd1aa451</link>
      <guid>http://securityratty.com/article/e4f90a71e6864a1ccd8f8d36bd1aa451</guid>
      <description><![CDATA[One of the cool things about the first dot com bubble was the &quot; ebay millionaire &quot;. These were people who built businesses around selling goods at auction on ebay. There has been much written and said...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>One of the cool things about the first <a class="zem_slink" title="Dot-com bubble" href="http://en.wikipedia.org/wiki/Dot-com_bubble" rel="wikipedia">dot com bubble</a> was the &quot;<a href="http://ezinearticles.com/?Ebay-Millionaire-Secrets&amp;id=434692">ebay millionaire</a>&quot;. These were people who built businesses around selling goods at auction on <a class="zem_slink" title="EBay" href="http://www.ebay.com/" rel="homepage">ebay.</a>&nbsp; There has been much written and said about the methods of these people and certainly it was a big attraction to people selling on ebay.&nbsp; I had an interesting plane ride home today where I met someone and discovered todays equivalent. I call it the <a class="zem_slink" title="StubHub" href="http://www.stubhub.com/" rel="homepage">StubHub</a> millionaire. It&nbsp; is a testament to American ingenuity and shows that given the tools, people will find a way to exploit and make money.</p>

<p>Up until fairly recently you bought tickets to sporting events and other entertainment from a box office or ticket agent such as ticketron.&nbsp; The &quot;after market&quot; in ticket sales or scalping as it was called in NY was often times illegal.&nbsp; There were though some legal ticket brokers that you could buy tickets from. Now with the advent of StubHub and similar type of ticket reselling outlets on the web though, the infrastructure is in place for anyone to sell tickets on line.&nbsp; You would think that most of these people selling tickets were people who had either extra tickets to an event or perhaps a season ticket holder looking to unload some tickets to help defray the costs. Not the case!</p>

<p>There is a now a whole class of businessman who buys season tickets to multiple teams, sports and cities and than uses outlets like StubHub and others to sell these tickets.&nbsp; The guy I spoke to today had season tickets to 6 different NFL teams, 3 major league baseball teams and multiple basketball and hockey teams.&nbsp; Many of his tickets are sold months and weeks before the event. If any are left within 14 days of the event he puts them on ebay.&nbsp; His average mark up is about 40 to 50% of face value, but by buying season tickets he pays below face, so his actual margin is closer to 60 to 70%. He keeps a few tickets for him and his family to go to a few games a year.&nbsp; </p>

<p>This started as a hobby for him with Yankee season tickets, but he has done an analysis and compared to what he would make investing that money in the market, he has come out way, way ahead.&nbsp; He thinks that on a 12,500 investment, he makes about 40k!&nbsp; That is not bad.&nbsp; This year when all is said and done he will make six figure income from the resale of tickets he bought.&nbsp; Think about it, no office or anything.&nbsp; Just list your tickets and let people buy them.&nbsp; Take some of the money and buy more tickets. </p>

<p>So what the heck am I doing trying to show people why it is important that they put good security in place on their computers?&nbsp; There has got to be a better way. </p>

<fieldset class="zemanta-related"><legend class="zemanta-related-title">Related articles by Zemanta</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a href="http://arstechnica.com/news.ars/post/20071019-in-battle-over-resale-rights-ticket-site-must-reveal-scalpers-identities.html">In battle over resale rights, ticket site must reveal &quot;scalpers'&quot; identities</a> </li>

<li class="zemanta-article-ul-li"><a href="http://mashable.com/2007/12/18/ticketmaster-nfl/">NFL and Ticketmaster to Take On StubHub Next Season</a> </li>

<li class="zemanta-article-ul-li"><a href="http://chicagoist.com/2008/05/21/city_gets_fee_e.php">City Gets Fee Envy, Sues eBay And StubHub</a> </li>

<li class="zemanta-article-ul-li"><a href="http://mashable.com/2008/01/15/iac-buys-ticketsnow/">IAC Acquires TicketsNow to Bolster StubHub Competitor</a> </li>

<li class="zemanta-article-ul-li"><a href="http://money.cnn.com/2007/12/28/commentary/sportsbiz/index.htm?section=money_latest">StubHub's winning ticket</a></li></ul></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/8d1b9139-a023-4940-9253-d846c185b0bf/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=8d1b9139-a023-4940-9253-d846c185b0bf" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>
]]></content:encoded>
      <pubDate>Wed, 02 Jul 2008 22:07:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tickets">tickets</category>
      <category domain="http://securityratty.com/tag/yankee season tickets">yankee season tickets</category>
      <category domain="http://securityratty.com/tag/buys season tickets">buys season tickets</category>
      <category domain="http://securityratty.com/tag/ticket">ticket</category>
      <category domain="http://securityratty.com/tag/ticket agent">ticket agent</category>
      <category domain="http://securityratty.com/tag/season">season</category>
      <category domain="http://securityratty.com/tag/ticket sales">ticket sales</category>
      <category domain="http://securityratty.com/tag/season ticket holder">season ticket holder</category>
      <category domain="http://securityratty.com/tag/extra tickets">extra tickets</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/07/stubhub-million.html">StubHub millionaires?</source>
    </item>
    <item>
      <title><![CDATA[StubHub millionaires?]]></title>
      <link>http://securityratty.com/article/a08ecf2c0ba84405e6e9e8692094e3fb</link>
      <guid>http://securityratty.com/article/a08ecf2c0ba84405e6e9e8692094e3fb</guid>
      <description><![CDATA[One of the cool things about the first dot com bubble was the &quot; ebay millionaire &quot;. These were people who built businesses around selling goods at auction on ebay. There has been much written and said...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>One of the cool things about the first <a class="zem_slink" title="Dot-com bubble" href="http://en.wikipedia.org/wiki/Dot-com_bubble" rel="wikipedia">dot com bubble</a> was the &quot;<a href="http://ezinearticles.com/?Ebay-Millionaire-Secrets&amp;id=434692">ebay millionaire</a>&quot;. These were people who built businesses around selling goods at auction on <a class="zem_slink" title="EBay" href="http://www.ebay.com/" rel="homepage">ebay.</a>&nbsp; There has been much written and said about the methods of these people and certainly it was a big attraction to people selling on ebay.&nbsp; I had an interesting plane ride home today where I met someone and discovered todays equivalent. I call it the <a class="zem_slink" title="StubHub" href="http://www.stubhub.com/" rel="homepage">StubHub</a> millionaire. It&nbsp; is a testament to American ingenuity and shows that given the tools, people will find a way to exploit and make money.</p>

<p>Up until fairly recently you bought tickets to sporting events and other entertainment from a box office or ticket agent such as ticketron.&nbsp; The &quot;after market&quot; in ticket sales or scalping as it was called in NY was often times illegal.&nbsp; There were though some legal ticket brokers that you could buy tickets from. Now with the advent of StubHub and similar type of ticket reselling outlets on the web though, the infrastructure is in place for anyone to sell tickets on line.&nbsp; You would think that most of these people selling tickets were people who had either extra tickets to an event or perhaps a season ticket holder looking to unload some tickets to help defray the costs. Not the case!</p>

<p>There is a now a whole class of businessman who buys season tickets to multiple teams, sports and cities and than uses outlets like StubHub and others to sell these tickets.&nbsp; The guy I spoke to today had season tickets to 6 different NFL teams, 3 major league baseball teams and multiple basketball and hockey teams.&nbsp; Many of his tickets are sold months and weeks before the event. If any are left within 14 days of the event he puts them on ebay.&nbsp; His average mark up is about 40 to 50% of face value, but by buying season tickets he pays below face, so his actual margin is closer to 60 to 70%. He keeps a few tickets for him and his family to go to a few games a year.&nbsp; </p>

<p>This started as a hobby for him with Yankee season tickets, but he has done an analysis and compared to what he would make investing that money in the market, he has come out way, way ahead.&nbsp; He thinks that on a 12,500 investment, he makes about 40k!&nbsp; That is not bad.&nbsp; This year when all is said and done he will make six figure income from the resale of tickets he bought.&nbsp; Think about it, no office or anything.&nbsp; Just list your tickets and let people buy them.&nbsp; Take some of the money and buy more tickets. </p>

<p>So what the heck am I doing trying to show people why it is important that they put good security in place on their computers?&nbsp; There has got to be a better way. </p>

<fieldset class="zemanta-related"><legend class="zemanta-related-title">Related articles by Zemanta</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a href="http://arstechnica.com/news.ars/post/20071019-in-battle-over-resale-rights-ticket-site-must-reveal-scalpers-identities.html">In battle over resale rights, ticket site must reveal &quot;scalpers'&quot; identities</a> </li>

<li class="zemanta-article-ul-li"><a href="http://mashable.com/2007/12/18/ticketmaster-nfl/">NFL and Ticketmaster to Take On StubHub Next Season</a> </li>

<li class="zemanta-article-ul-li"><a href="http://chicagoist.com/2008/05/21/city_gets_fee_e.php">City Gets Fee Envy, Sues eBay And StubHub</a> </li>

<li class="zemanta-article-ul-li"><a href="http://mashable.com/2008/01/15/iac-buys-ticketsnow/">IAC Acquires TicketsNow to Bolster StubHub Competitor</a> </li>

<li class="zemanta-article-ul-li"><a href="http://money.cnn.com/2007/12/28/commentary/sportsbiz/index.htm?section=money_latest">StubHub's winning ticket</a></li></ul></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/8d1b9139-a023-4940-9253-d846c185b0bf/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=8d1b9139-a023-4940-9253-d846c185b0bf" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=YXjxOa"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=YXjxOa" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Iv43eJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Iv43eJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=UMlxZJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=UMlxZJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=tOlSEJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=tOlSEJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Tpw9PJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Tpw9PJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=9YqtSj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=9YqtSj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=jNv5lj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=jNv5lj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/325522395" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 02 Jul 2008 21:08:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tickets">tickets</category>
      <category domain="http://securityratty.com/tag/yankee season tickets">yankee season tickets</category>
      <category domain="http://securityratty.com/tag/buys season tickets">buys season tickets</category>
      <category domain="http://securityratty.com/tag/ticket">ticket</category>
      <category domain="http://securityratty.com/tag/ticket agent">ticket agent</category>
      <category domain="http://securityratty.com/tag/season">season</category>
      <category domain="http://securityratty.com/tag/ticket sales">ticket sales</category>
      <category domain="http://securityratty.com/tag/season ticket holder">season ticket holder</category>
      <category domain="http://securityratty.com/tag/extra tickets">extra tickets</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/325522395/stubhub-million.html">StubHub millionaires?</source>
    </item>
    <item>
      <title><![CDATA[NYPD to FCC: Don't re-auction safety spectrum]]></title>
      <link>http://securityratty.com/article/17948fe191c2c72a23e0c52e08626565</link>
      <guid>http://securityratty.com/article/17948fe191c2c72a23e0c52e08626565</guid>
      <description><![CDATA[The U.S. Federal Communications Commission should not attempt to re-auction a piece of wireless spectrum that failed to sell earlier in the year, but instead should give that spectrum to...]]></description>
      <content:encoded><![CDATA[The U.S. Federal Communications Commission should not attempt to re-auction a piece of wireless spectrum that failed to sell earlier in the year, but instead should give that spectrum to emergency-response agencies, the New York City Police Department said Friday.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/wirelessmobile;sz=468x60;ord=53502?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/wirelessmobile;sz=468x60;ord=53502?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Thu, 19 Jun 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/spectrum">spectrum</category>
      <category domain="http://securityratty.com/tag/federal communications commission">federal communications commission</category>
      <category domain="http://securityratty.com/tag/wireless spectrum">wireless spectrum</category>
      <category domain="http://securityratty.com/tag/re-auction">re-auction</category>
      <category domain="http://securityratty.com/tag/piece">piece</category>
      <category domain="http://securityratty.com/tag/attempt">attempt</category>
      <category domain="http://securityratty.com/tag/friday">friday</category>
      <category domain="http://securityratty.com/tag/agencies">agencies</category>
      <source url="http://www.networkworld.com/news/2008/062008-nypd-to-fcc-dont-re-auction.html?fsrc=rss-security">NYPD to FCC: Don't re-auction safety spectrum</source>
    </item>
    <item>
      <title><![CDATA[JetBlue Buys Airfone's Network]]></title>
      <link>http://securityratty.com/article/7a55daf99f652ef4db0517a95ab1d883</link>
      <guid>http://securityratty.com/article/7a55daf99f652ef4db0517a95ab1d883</guid>
      <description><![CDATA[The LiveTV division of JetBlue will assume Verizon Airfone's operations, which includes 100 towers with communication gear in the US: While Airfone ceased commercial operations in 2006 following their...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" hspace="5" height="80" width="80" border="0" /><strong><a href="http://www.emailthis.clickability.com/et/emailThis?clickMap=viewThis&etMailToID=639666403&pt=Y">The LiveTV division of JetBlue will assume Verizon Airfone's operations, which includes 100 towers with communication gear in the US:</a></strong> While Airfone ceased commercial operations in 2006 following their giving up early in the bidding for plum spectrum won by AirCell, they still have governmental and corporate ("general aviation") customers. JetBlue's LiveTV won the smaller of two licenses (1 MHz); AirCell won the 3 MHz auction. AirCell built its own network (an expansion of previous general aviation service), and is launching very shortly with Virgin America and America Airlines.</p>

<p>Ostensibly this purchase allows JetBlue a faster and simpler path into operations. Whether it's worth it to JetBlue is hard to tell, except that they will likely be marketing this service to other airlines as a differentiator. It will be lower bandwidth than AirCell, but could be likewise cheaper and used for shorter-haul flights. </p>

<p>Verizon notes some of the technical details of their service's business status on a <strong><a href="http://www22.verizon.com/airfone/af_ga_faqs.html#qa_5">FAQ for their corporate customers</a></strong>, which has an oddly large amount of business detail. Verizon was obligated within two years of the end of the auction for the spectrum they occupied with their very inefficient narrowband analog service to cease operations on those frequencies. That date is about now (the certification of the auction results was close to two years ago), and Verizon clearly worked out the details to allow current customers to maintain continuity through the spectrum vacation and into JetBlue's hands on January 1.</p>

<p>As I noted a few days ago, a few sources had already tipped me that JetBlue's test aircraft with Wi-Fi onboard and email was using the ancient Airfone network, which is capable of slow dial-up modem speeds, rather than using the 1 MHz which could conceivably carry over 500 Kbps of data in each direction per plane. </p>]]></content:encoded>
      <pubDate>Sun, 08 Jun 2008 17:47:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/airfone">airfone</category>
      <category domain="http://securityratty.com/tag/jetblue">jetblue</category>
      <category domain="http://securityratty.com/tag/ancient airfone network">ancient airfone network</category>
      <category domain="http://securityratty.com/tag/verizon">verizon</category>
      <category domain="http://securityratty.com/tag/verizon notes">verizon notes</category>
      <category domain="http://securityratty.com/tag/auction">auction</category>
      <category domain="http://securityratty.com/tag/auction results">auction results</category>
      <category domain="http://securityratty.com/tag/assume verizon airfone">assume verizon airfone</category>
      <source url="http://wifinetnews.com/archives/008350.html">JetBlue Buys Airfone's Network</source>
    </item>
    <item>
      <title><![CDATA[Hard drives purchased at Oklahoma auction contained personal information]]></title>
      <link>http://securityratty.com/article/077a7836ac972db81a40645143ce4ecf</link>
      <guid>http://securityratty.com/article/077a7836ac972db81a40645143ce4ecf</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
5/19/08

Organization
State of Oklahoma

Contractor/Consultant/Branch
Oklahoma Tax Commission
Oklahoma Corporation Commission

Victims
Residents

Number...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/occ.jpg" align="right" height="73" width="200"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>5/19/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.ok.gov/">State of Oklahoma</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.oktax.state.ok.us/">Oklahoma Tax Commission</a> <br><a href="http://www.occ.state.ok.us/">Oklahoma Corporation Commission</a> <br><br><span style="font-weight: bold;">Victims:</span><br>Residents<br><br><span style="font-weight: bold;">Number Affected:</span><br>More than 5,000<br><br><span style="font-weight: bold;">Types of Data:</span><br>Names, addresses, and Social Security numbers<br><br><span style="font-weight: bold;">Breach Description:</span><br>"OKLAHOMA CITY -- The Oklahoma Corporation Commission is removing hard drives from all surplus computer equipment after a server containing the names and Social Security numbers of thousands of residents was sold at an auction recently."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.koco.com/news/16333215/detail.html">KOCO Channel 5 News</a> <br><a href="http://www.tulsaworld.com/news/article.aspx?articleID=20080521_12_OKLAH32253">Associated Press via Tulsa World</a> <br><a href="http://www.kten.com/Global/story.asp?S=8357581">KTEN Channel 10 News</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>KOCO Channel 5 News<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>An Oklahoma City man discovered the names, addresses and Social Security numbers of thousands of Oklahomans on a computer he bought at a government auction.<br><span style="font-style: italic;">[Evan] There are people who buy computer equipment at auctions online and in-person specifically for the information they find on the hard drives.&nbsp; This was not the case here, but criminals can (and do) find a plethora of personal information, intellectual property and other confidential information on used computer equipment.</span><br><br>Joe Sill bought 50 computers last month to refurbish and resell as part of his business.<br><br>When he found the confidential information from 2003 he said he wanted the public to know.<br><br>"I was stunned that the government actually left all this information on the computer."<br><br>"People's identities are at risk," he said.<br><span style="font-style: italic;">[Evan] Absolutely.&nbsp; Purchasing used hard drives and other data storage devices is one of the easiest methods for crooks to get their hands on confidential information.</span><br><br>The computer was a server labeled for the Oklahoma Tax Commission.<br><br>A representative from the commission said in 2005 some computers were transferred to the Corporation Commission where the computer came from.<br><br>Corporation Commission spokesman Matt Skinner said the commission is investigating why the computer's hard drive was not cleaned before the auction.<br><span style="font-style: italic;">[Evan] Does the commission have the necessary policy and procedures in effect to dictate how the information on hard drives is destroyed when no longer needed?&nbsp; I doubt it.</span><br><br>The Social Security numbers are likely tied to trucking industry data kept on the server by both agencies, Corporation Commission spokesman Matt Skinner said.<br><br>"We're backtracking through the inventory sheet and we're working with DCS and tax commission to bring all the paperwork together on this machine."<br><br>The Corporation Commission does not usually hold confidential information so it left hard drives in the computers after they are decommissioned, though they are supposed to be erased.<br><span style="font-style: italic;">[Evan] No hard drives should ever leave an organization without being processed according to information security policy and procedures (supposing they exist and address data destruction).</span><br><br>Commission representatives say now they will not allow computers to leave their building with hard drives still in them.<br><span style="font-style: italic;">[Evan] Then what becomes of the hard drives?&nbsp; Are they destroyed, stored securely, or just discarded?&nbsp; I don't see any problem with leaving hard drives in the computers as long as they are securely wiped.&nbsp; Using a free program like <a href="http://dban.sourceforge.net/">Darik's Boot and Nuke</a> works fine for many applications but can be time consuming.</span><br><br><span style="font-weight: bold;">Commentary:</span><br>If information is no longer needed by an organization, destroy it.&nbsp; If encryption had been employed by the commission, this would have provided an additional layer in a defense-in-depth approach to information security.<br><br>My suggested policy statements state something like (at a minimum):<br><br>Confidential Data:<br></font><ul><li><font size="2">When stored on mobile devices and media, protections and encryption measures provided through mechanisms approved by Management must be employed.</font></li><li>Must be encrypted with strong encryption when transferred electronically to any entity outside of XYZ.</li><li>Must be destroyed when no longer needed subject to the XYZ Data Retention Policy.&nbsp;&nbsp; Destruction may be accomplished by:</li><ul><li>“Hard Copy” materials must be destroyed by shredding or another approved process that destroys the data beyond either recognition or reconstruction as per the XYZ Data Destruction and Re-Use Standard.</li><li>Electronic storage media that will be re-used must be overwritten according to the XYZ Data Destruction and Re-Use Standard.</li><li>Electronic storage media that will not be re-used must be physically destroyed according to the XYZ Data Destruction and Re-Use Standard.</li><li>Deleting files or formatting the media is NOT an acceptable method of destroying Confidential Data<br></li></ul></ul><font size="2">If management has decided that it is necessary to collect and store confidential information, it must also be decided that they are willing to take the necessary steps to protect it.&nbsp; The two decisions go hand-in-hand.<br><br><span style="font-weight: bold;">Past Breaches:</span><br>April, 2008 - <a href="http://breachblog.com/2008/04/21/oklahomadoc.aspx">Oklahoma Department of Corrections SQL exposure</a></font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/05/26/occ.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Mon, 26 May 2008 10:48:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/oklahoma">oklahoma</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/oklahoma tax commission">oklahoma tax commission</category>
      <category domain="http://securityratty.com/tag/store confidential information">store confidential information</category>
      <category domain="http://securityratty.com/tag/oklahoma corporation commission">oklahoma corporation commission</category>
      <category domain="http://securityratty.com/tag/corporation commission">corporation commission</category>
      <category domain="http://securityratty.com/tag/information security">information security</category>
      <category domain="http://securityratty.com/tag/tax commission">tax commission</category>
      <source url="http://breachblog.com/2008/05/26/occ.aspx">Hard drives purchased at Oklahoma auction contained personal information</source>
    </item>
    <item>
      <title><![CDATA[Sprint's Public Safety Deal for Nextel Comes Home to Roost]]></title>
      <link>http://securityratty.com/article/62fc7be1eb4d0fe80bd5f1d1a21fbcbb</link>
      <guid>http://securityratty.com/article/62fc7be1eb4d0fe80bd5f1d1a21fbcbb</guid>
      <description><![CDATA[Sprint seemed awfully clever when it navigated a public safety deal and gained new spectrum as part of its acquisition of Nextel: That's all unraveling now. The FCC and the courts are saying that a...]]></description>
      <content:encoded><![CDATA[<p><a href="http://telephonyonline.com/wireless/news/sprint-rebanding-appeal-0502/"><strong>Sprint seemed awfully clever when it navigated a public safety deal and gained new spectrum as part of its acquisition of Nextel:</strong></a> That's all unraveling now. The FCC and the courts are saying that a 26-June-2008 deadline for vacating its 800 MHz holdings in favor of public safety groups would hold even if the new users weren't on the band. The delays for new users getting on the band are reportedly Sprint's, given that it had the responsibility for this migration.</p>

<p>Nextel had splintered holdings in the 800 MHz band that were difficult to administer, and caused verifiable interference with (and vice versa) splintered public safety spectrum in that band. Sprint agreed to pay the estimated multi-billion-dollar cost of getting new equipment to public safety agencies in exchange for a hunk of spectrum that they wouldn't have to buy at auction from the FCC. The <a href="http://www.usatoday.com/money/companies/regulation/2004-07-08-cell-interference_x.htm"><strong>cost for a whole set of swaps</strong></a>, migrations, and givebacks was $4.8b, but there was technically no limit on how much Sprint would have to pay for public safety migration--as much as it cost is the true limit.</p>

<p>Last August, the Wall Street Journal did a <a href="http://publicsafety.wifinetnews.com/archives/2007/08/sprint_nextels_move_off_old_sp.html"><strong>lengthy update of the 2005 deal</strong></a>, explaining that the effort was vastly behind schedule, and was vastly underbudgeted, too. One county in Pennsylvania estimated that its costs could run $18.5m to $150m, with the low number far above Sprint's own estimates.</p>

<p>It would be seemingly unfair to allow Sprint's delays in moving fire, police, and first responders off the band to also delay Sprint's requirement in vacating the band. We'll see how the FCC chooses to respond. It could cost Sprint billions and further accelerate the loss of Nextel customers, because Sprint would lose a number of active iDEN sites.</p>

<p>They have no one to blame but themselves. Sprint's management has blundered through this merger for years. They kept separate Kansas and Virginia headquarters, failed to produce high-quality dual-network devices, gave few incentives for Nextel customers to move to Sprint's dominant CDMA network, bled employees, and botched this migration.</p>

<p>Now Sprint did have the problem of needing to help move incumbents in the 1.9 GHz spectrum it received and the 800 MHz spectrum it was giving up. The articles on this court decision don't note whether Sprint's 1.9 GHz network is free and clear, nor whether Sprint had been working for the last three years to get its Nextel users to get dual-band handsets that would work with the new frequency.</p>

<p>With the WiMax plan also on the table, Sprint was basically committed to building or rebuilding and supporting four network architectures: CDMA (for 2G), EVDO (for 3G), WiMax (for 4G), and iDEN  (for 2G).</p>

<p>Sprint is in the position where it may variously be sold (<a href="http://www.bloomberg.com/apps/news?pid=20601103&sid=aBPRL6WdZcUU&refer=us"><strong>to Deutsche Telekom to merge with its T-Mobile USA division</strong></a>, which would add both GSM and UMTS/HSPA to the mix!), sell off its Nextel division (<a href="http://www.bloomberg.com/apps/news?pid=20601103&sid=aBPRL6WdZcUU&refer=us"><strong>to a public safety venture headed by Cyren Call</strong></a>), and/or spin off its WiMax division or form a broad venture with Clearwire to build and market it.</p>]]></content:encoded>
      <pubDate>Mon, 05 May 2008 10:25:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/public safety deal">public safety deal</category>
      <category domain="http://securityratty.com/tag/public safety">public safety</category>
      <category domain="http://securityratty.com/tag/sprint">sprint</category>
      <category domain="http://securityratty.com/tag/cost sprint billions">cost sprint billions</category>
      <category domain="http://securityratty.com/tag/cost">cost</category>
      <category domain="http://securityratty.com/tag/nextel">nextel</category>
      <category domain="http://securityratty.com/tag/reportedly sprint">reportedly sprint</category>
      <category domain="http://securityratty.com/tag/public safety migration">public safety migration</category>
      <category domain="http://securityratty.com/tag/delay sprint">delay sprint</category>
      <source url="http://wifinetnews.com/archives/008305.html">Sprint's Public Safety Deal for Nextel Comes Home to Roost</source>
    </item>
    <item>
      <title><![CDATA[Controversy surrounds Royal Perth computers and patients]]></title>
      <link>http://securityratty.com/article/83dcaba58d53659a2c31a965a79f2d77</link>
      <guid>http://securityratty.com/article/83dcaba58d53659a2c31a965a79f2d77</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
4/5/08

Organization
Royal Perth Hospital

Contractor/Consultant/Branch
None

Victims
Patients

Number Affected
Unknown

Types of Data
Personal...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/royalperth.jpg" align="right" height="114" width="202"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>4/5/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.rph.wa.gov.au/">Royal Perth Hospital</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Patients<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>"Personal information, including patient names and addresses, dates of birth, medical conditions and patient numbers"<br><br><span style="font-weight: bold;">Breach Description:</span><br>"WA POLICE are investigating claims by The Sunday Times that the newspaper was able to access private details of hospital patients from old computers found dumped outside a hospital."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.news.com.au/perthnow/story/0,21598,23493775-948,00.html">The Sunday Times</a>&nbsp; <br><a href="http://www.news.com.au/couriermail/story/0,23739,23493619-953,00.html">The Courier Mail</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Paul Lampathakis, The Sunday Times<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>CONFIDENTIAL patient details are being left on old computers dumped in an open skip bin in a busy laneway at Royal Perth Hospital<br><br>Personal information, including patient names and addresses, dates of birth, medical conditions and patient numbers, was accessed with ease by The Sunday Times this week.<br><br>Sources say up to 500 computers have been dumped in the bin, pending collection, since November.<br><span style="font-style: italic;">[Evan] It would be nice to have a picture of how these computers were just left in the open.&nbsp; Obviously (maybe not so) discarding computers with sensitive information still on them is a very poor information security practice.</span><br><br>Sources also claimed computers had been sent to auction yards in the past without their hard drives wiped clean.<br><br>The hospital yesterday denied this, saying the computer hard drives were cleaned and the computers were collected every day by contractors to be crushed. <br><span style="font-style: italic;">[Evan] If the "computer hard drives were cleaned", then how was The Sunday Times able to get the sensitive information and if the computers are "collected every day" then how was it reported that they had been there since November?&nbsp; Who is right?</span><br><br>Health Minister Jim McGinty last night accused The Sunday Times of stealing the computers and hacking into their contents.<br><br>The Sunday Times editor Sam Weir rejected the allegations. He said The Sunday Times observed the computers in the bin for several days, easily available for anyone to pick them up. <br><br>WA Health Minister Jim McGinty said he had referred the matter to police and wanted an investigation into how the information was obtained.<br><br>"We guard very closely medical records and they were not in any sense exposed other than to a criminal <span style="font-style: italic;">act,'' Mr McGinty told ABC Radio.</span><br style="font-style: italic;"><span style="font-style: italic;">[Evan] According to Mr. McGinty, we are to believe that The Sunday Times hired a thief to steal computers so that they could write a story? </span><br><br>"What is staggering is that Mr McGinty appears to have far less concern for the patients whose private records have been dumped in this way and far more interest in shooting the messenger who has exposed this disturbing practice," Mr Weir said. <br><br>Sources said it was frightening that computers with such information were sitting in a well-used area where anyone could pick them up. It was a big concern that they might have been on-sold with the information still on them. <br><br>Workers at a second-hand computer business said they had received computers from RPH in the past. They said it was the previous user's responsibility to clean information off hard drives.<br><br>It is unclear how many of the computers contained confidential records. <br><br>A hospital spokeswoman said RPH had a contract with a scrapmetal company that crushed all hospital computers to ensure all data was destroyed. <br><br>"The only way to get a computer containing patient details is illegally,'' she said.<br><span style="font-style: italic;">[Evan] I am very interested to hear the outcome of the police investigation.&nbsp; How does the hospital claim that the computers and information were obtained illegally? </span><br><br>Government sources tipped off The Sunday Times about the slack security because they were furious that patients' personal information was left out in the open.<br><span style="font-style: italic;">[Evan] "Government sources"?&nbsp; Why wouldn't the government just begin their own investigation? </span><br><br>About six weeks ago a man was seen stuffing computer parts into a bag before taking off on a motor cycle.<br><br>"There's got to be a policy against that happening. But, as usual in these times, they (the Health Department) will just be looking for the source of the information rather than trying to solve the problem.''<br><br>One of the hundreds of letters on computer files seen by The Sunday Times gives the name, address, date of birth, patient number and treatment details of Forrestfield pensioner Robert Hunt. <br><br><span style="font-weight: bold;">Victim Reaction:</span><br>When contacted, Mr Hunt said: "This is pretty bad. That sort of information, the wrong people can do all sorts of things with it. <br><br>"It shouldn't be just lying around like that. It should be brought to the attention of the Government"<br><span style="font-style: italic;">[Evan] According to the news report, much of this story originated from government sources.</span><br><br><span style="font-weight: bold;">Commentary:</span><br>This is a very interesting "he said, she said" story.&nbsp; I don't recall ever reading a breach like this one.&nbsp; I am left with many questions and I'm not really sure what to believe.&nbsp; I am leaning towards believing The Sunday Times. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/04/07/royalperth.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Mon, 07 Apr 2008 20:21:25 +0000</pubDate>
      <category domain="http://securityratty.com/tag/hospital claim">hospital claim</category>
      <category domain="http://securityratty.com/tag/hospital">hospital</category>
      <category domain="http://securityratty.com/tag/computers">computers</category>
      <category domain="http://securityratty.com/tag/hospital computers">hospital computers</category>
      <category domain="http://securityratty.com/tag/sunday times hired">sunday times hired</category>
      <category domain="http://securityratty.com/tag/sunday times">sunday times</category>
      <category domain="http://securityratty.com/tag/patient details">patient details</category>
      <category domain="http://securityratty.com/tag/confidential patient details">confidential patient details</category>
      <category domain="http://securityratty.com/tag/times">times</category>
      <source url="http://breachblog.com/2008/04/07/royalperth.aspx">Controversy surrounds Royal Perth computers and patients</source>
    </item>
    <item>
      <title><![CDATA[700 MHz Winners Talk: Google, AT&T, Verizon]]></title>
      <link>http://securityratty.com/article/907f9b636cd0921cab6b54124c4dfdbd</link>
      <guid>http://securityratty.com/article/907f9b636cd0921cab6b54124c4dfdbd</guid>
      <description><![CDATA[Even the losers win in this auction: The gag order from the FCC over the bidding and results of the 700 MHz spectrum auction were lifted yesterday, and everyone is jabbering. Verizon and AT&amp;T have...]]></description>
      <content:encoded><![CDATA[<p><strong>Even the losers win in this auction:</strong> The gag order from the FCC over the bidding and results of the 700 MHz spectrum auction were lifted yesterday, and everyone is jabbering. Verizon and AT&T have announced they'll build LTE (Long Term Evolution) cell data networks, a GSM standard, in the 700 MHz band. AT&T says their network will come online starting in 2012; Verizon, 2010.</p>

<p>Google <a href="http://googleblog.blogspot.com/2008/04/cone-of-silence-finally-lifts-on.html"><strong>posted on their own blog</strong></a> and <a href="http://www.nytimes.com/2008/04/04/technology/04auction.html"><strong>told the New York Times</strong></a> that they were happy enough losing, even though they bid to win...sort of. They raised their own bids a few times to keep interest from other players, but were relieved when another bidder topped them. That turned out to be Verizon Wireless. Google managed to get a few types of openness encoded into the band, and they think (rightly so) that it made a difference. An economist notes in the Times article that Google now only has to spend "$1 million a year on a law firm to ensure Verizon lives up to the openness requirements."</p>

<p>AT&T didn't bid on the C Block that Google was discussing, a set of licenses that provide national coverage in a few easy pieces. Rather, they focused on acquiring 700 MHz spectrum before the auction from Aloha Partners (from the previous 700 MHz auction), and spending billions on smaller licenses all over the country that they can pin together. Those licenses are unencumbered by open device, application, and service provisions, so AT&T thinks they got the better deal. A good summary is at <a href="http://www.phonemag.com/att-verizon-google-discuss-fcc-700mhz-auction-042235.php"><strong>Phone Mag</strong></a>.</p>

<p>Verizon for its part <a href="http://money.cnn.com/news/newsfeeds/articles/djf500/200804041006DOWJONESDJONLINE000724_FORTUNE5.htm"><strong>said it was pleased with its national-scope licenses</strong></a>. Despite AT&T acquiring lots of spectrum, it's going to be far easier for Verizon to use these nationally defined bands, with consistent performance across all their networks.<br />
</p>]]></content:encoded>
      <pubDate>Fri, 04 Apr 2008 07:45:52 +0000</pubDate>
      <category domain="http://securityratty.com/tag/verizon">verizon</category>
      <category domain="http://securityratty.com/tag/mhz spectrum auction">mhz spectrum auction</category>
      <category domain="http://securityratty.com/tag/mhz spectrum">mhz spectrum</category>
      <category domain="http://securityratty.com/tag/verizon wireless">verizon wireless</category>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/auction">auction</category>
      <category domain="http://securityratty.com/tag/ensure verizon lives">ensure verizon lives</category>
      <category domain="http://securityratty.com/tag/spectrum">spectrum</category>
      <category domain="http://securityratty.com/tag/att">att</category>
      <source url="http://wifinetnews.com/archives/008257.html">700 MHz Winners Talk: Google, AT&amp;T, Verizon</source>
    </item>
  </channel>
</rss>
