<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: batch]]></title>
    <link>http://securityratty.com/tag/batch</link>
    <description></description>
    <pubDate>Sun, 15 Jun 2008 09:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[VMware releases batch of updates]]></title>
      <link>http://securityratty.com/article/4378c97580462304969454b0e3b39083</link>
      <guid>http://securityratty.com/article/4378c97580462304969454b0e3b39083</guid>
      <description><![CDATA[VMware is out with a batch of fixes for its systems that includes a new ActiveX control update designed to quell security issues related to Internet Explorer and updates for a range of other issues....]]></description>
      <content:encoded><![CDATA[VMware is out with a batch of fixes for its systems that includes a new ActiveX control update designed to quell security issues related to Internet Explorer and updates for a range of other issues. Pidgin users should take heed and download the latest version of the open source IM client after the latest warning from The Zero Day Initiative about a flaw in the MSN chat protocol. And iPhone users will have to wait at least a few more days for a fix from Apple for the little flaw that allows locked iPhones to be opened with a few easy button pushes.]]></content:encoded>
      <pubDate>Sun, 31 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/issues">issues</category>
      <category domain="http://securityratty.com/tag/quell security issues">quell security issues</category>
      <category domain="http://securityratty.com/tag/easy button pushes">easy button pushes</category>
      <category domain="http://securityratty.com/tag/msn chat protocol">msn chat protocol</category>
      <category domain="http://securityratty.com/tag/pidgin users">pidgin users</category>
      <category domain="http://securityratty.com/tag/internet explorer">internet explorer</category>
      <category domain="http://securityratty.com/tag/flaw">flaw</category>
      <category domain="http://securityratty.com/tag/vmware">vmware</category>
      <category domain="http://securityratty.com/tag/day initiative">day initiative</category>
      <source url="http://www.networkworld.com/newsletters/bug/2008/090108bug1.html?fsrc=rss-security">VMware releases batch of updates</source>
    </item>
    <item>
      <title><![CDATA[Microsoft Puts Out 11 Fixes, Pulls Another]]></title>
      <link>http://securityratty.com/article/44120fe698f9ecd13fed0f070d170698</link>
      <guid>http://securityratty.com/article/44120fe698f9ecd13fed0f070d170698</guid>
      <description><![CDATA[Microsoft released its largest batch of security fixes since February 2007: 11 software updates designed to plug 26 holes in Windows, Office and other...]]></description>
      <content:encoded><![CDATA[Microsoft released its largest batch of security fixes since February 2007: 11 software updates designed to plug 26 holes in Windows, Office and other products.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=3mkNQz"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=3mkNQz" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/367767251" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 03:30:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/security fixes">security fixes</category>
      <category domain="http://securityratty.com/tag/windows">windows</category>
      <category domain="http://securityratty.com/tag/holes">holes</category>
      <category domain="http://securityratty.com/tag/office">office</category>
      <category domain="http://securityratty.com/tag/plug">plug</category>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/batch">batch</category>
      <category domain="http://securityratty.com/tag/february">february</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/367767251/article.do">Microsoft Puts Out 11 Fixes, Pulls Another</source>
    </item>
    <item>
      <title><![CDATA[Anti-Georgia spammers building new botnet]]></title>
      <link>http://securityratty.com/article/fb40e81f04b22ace544dd6979a548459</link>
      <guid>http://securityratty.com/article/fb40e81f04b22ace544dd6979a548459</guid>
      <description><![CDATA[Hackers targeting Georgia in the midst of its conflict with Russia have started sending out a new batch of malicious spam messages, apparently with the aim of building a new botnet network of...]]></description>
      <content:encoded><![CDATA[Hackers targeting Georgia in the midst of its conflict with Russia have started sending out a new batch of malicious spam messages, apparently with the aim of building a new botnet network of remote-controlled computers.]]></content:encoded>
      <pubDate>Thu, 14 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/malicious spam messages">malicious spam messages</category>
      <category domain="http://securityratty.com/tag/botnet network">botnet network</category>
      <category domain="http://securityratty.com/tag/georgia">georgia</category>
      <category domain="http://securityratty.com/tag/apparently">apparently</category>
      <category domain="http://securityratty.com/tag/russia">russia</category>
      <category domain="http://securityratty.com/tag/conflict">conflict</category>
      <category domain="http://securityratty.com/tag/aim">aim</category>
      <category domain="http://securityratty.com/tag/computers">computers</category>
      <category domain="http://securityratty.com/tag/midst">midst</category>
      <source url="http://www.networkworld.com/news/2008/081508-anti-georgia-spammers-building-new.html?fsrc=rss-security">Anti-Georgia spammers building new botnet</source>
    </item>
    <item>
      <title><![CDATA[ShoutPro Vulnerability Currently Causing Issues For Websites]]></title>
      <link>http://securityratty.com/article/77978134a7222749f8b7a165f0a09e27</link>
      <guid>http://securityratty.com/article/77978134a7222749f8b7a165f0a09e27</guid>
      <description><![CDATA[I've seen a few sites mention that they had to remove a Shoutbox recently due to people exploiting it in some way, shape or fashion. Curiously, while wading through the recent batch of 419 scams I...]]></description>
      <content:encoded><![CDATA[
        I've seen a few sites mention that they had to <a href="http://blog.spywareguide.com/images/doa11.html">remove a Shoutbox</a> recently due to people exploiting it in some way, shape or fashion. Curiously, while wading through the recent batch of 419 scams I happened to come across an IRS Phish which seemed strangely out of place.<br /><br />Here's what the Phish mail looked like (promising a tax refund of $600+, naturally):<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/irsphish.html" onclick="window.open('http://blog.spywareguide.com/images/irsphish.html','popup','width=461,height=435,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/irsphish-thumb-361x340.jpg" alt="irsphish.jpg" class="mt-image-none" style="" height="340" width="361" /></a></span></div><br /> <div><br /><div align="center">Click to Enlarge<br /></div><br />Clicking the link doesn't take you to a fake IRS page - instead, you see this:<br /><br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="irsphish2.jpg" src="http://blog.spywareguide.com/images/irsphish2.jpg" class="mt-image-none" style="" height="229" width="301" /></span></div><br /></div><div><br />I decided to contact the site owner and see if he had any further information on what happened. A portion of his response said:<br /><br /><i>I was using ShoutPro 1.5.2. It looks like the attacker was able to exploit the shoutbox in some way because he created (or uploaded?) a number of files to the server. The most dangerous of these was a script called nsTView, which gave the attacker full access to all my files as well as the ability to run unix commands on my server. I got lucky.. since he was running the script from a subdomain, he was only able to actually access files within [URL REMOVED], though he was able to view file lists of files from any directory on my site, and maybe view them using shell commands.</i><br /><br />...ouch. You can see an example of NSTView at work <a href="http://www.mnin.org/write/2006_uploadscripts.html">here</a>, complete with screenshots (scroll down). As for the type of Shoutbox used, the version number given is significant.<br /><br />The reason? Well, ShoutPro 1.5.2 has a <a href="http://www.milw0rm.com/exploits/3758">known issue</a> that was discovered back in 2007 which could allow potential attackers to inject and execute arbitrary code:<br /><br /><i><b>Description:</b><br /><br />ShoutPro 1.5.2 fails to fully sanitize user input ($shout) that it writes<br />to the shouts.php file when adding a new message, this can result in the<br />injection and execution of arbitrary php code.<br /><br /><b>Scope:</b><br /><br />The vulnerability will in most cases allow an attacker to execute commands<br />on the system, the issue may be further perpetuated if the user has followed<br />the official documentation and chmoded the base folder to '777'</i><br /><br />The question is, are the attackers responsible for the current crop of Shoutbox attacks using the above exploit, or something new? It seems odd that a whole bunch of people would suddenly decide to start using a year old vulnerability, but more information is thin on the ground at the moment.<br /><br />A further complication is that <a href="http://www.shoutpro.com/">ShoutPro</a> is no longer maintained - all you can do is download the files and install as needed. Worse, if you go to the Download page, the current version available is.....you guessed it....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="shoutno.jpg" src="http://blog.spywareguide.com/images/shoutno.jpg" class="mt-image-none" style="" height="83" width="376" /></span></div><br /></div><div><br />........whoops. If everyone is still downloading this version and there's potentially fresh exploits in circulation (with nobody to fix the issue in the ShoutPro code that's causing these hijacks), it's clear why so many people are currently being hit by this.<br /><br />As the individual I contacted said:<br /><br /><i>Since the shoutbox caused the security hole, the only way to prevent further damages was to completely delete it.<br /><br /></i>To me, given the fact that there's no support for this product anymore, I think I'd have to heartily endorse that advice. If you're running a Shoutbox, make sure you know what kind of Shoutbox you're running, what version and if you consider the risk of what's happening above taking place on your website or server to be acceptable or not...<i><br /></i></div>
        
    ]]></content:encoded>
      <pubDate>Thu, 26 Jun 2008 06:22:27 +0000</pubDate>
      <category domain="http://securityratty.com/tag/shoutpro">shoutpro</category>
      <category domain="http://securityratty.com/tag/shoutbox">shoutbox</category>
      <category domain="http://securityratty.com/tag/shoutbox recently due">shoutbox recently due</category>
      <category domain="http://securityratty.com/tag/shoutbox attacks">shoutbox attacks</category>
      <category domain="http://securityratty.com/tag/access">access</category>
      <category domain="http://securityratty.com/tag/access files">access files</category>
      <category domain="http://securityratty.com/tag/files">files</category>
      <category domain="http://securityratty.com/tag/shoutpro code">shoutpro code</category>
      <category domain="http://securityratty.com/tag/version">version</category>
      <source url="http://blog.spywareguide.com/2008/06/shoutphish.html">ShoutPro Vulnerability Currently Causing Issues For Websites</source>
    </item>
    <item>
      <title><![CDATA[Software Update Snafus Block Microsoft Patches]]></title>
      <link>http://securityratty.com/article/bb1d5751dcc9a8ebc728c4c909d065bb</link>
      <guid>http://securityratty.com/article/bb1d5751dcc9a8ebc728c4c909d065bb</guid>
      <description><![CDATA[Microsoft scrambled to fix a flaw in a patch-distribution tool that blocked some systems administrators from installing its latest batch of security fixes on...]]></description>
      <content:encoded><![CDATA[Microsoft scrambled to fix a flaw in a patch-distribution tool that blocked some systems administrators from installing its latest batch of security fixes on PCs.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=B0H9ds"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=B0H9ds" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/317817871" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 23 Jun 2008 02:23:18 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security fixes">security fixes</category>
      <category domain="http://securityratty.com/tag/systems administrators">systems administrators</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/batch">batch</category>
      <category domain="http://securityratty.com/tag/tool">tool</category>
      <category domain="http://securityratty.com/tag/fix">fix</category>
      <category domain="http://securityratty.com/tag/pcs">pcs</category>
      <category domain="http://securityratty.com/tag/flaw">flaw</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/317817871/article.do">Software Update Snafus Block Microsoft Patches</source>
    </item>
    <item>
      <title><![CDATA[Patch-blocking bug also stymies Microsoft's WSUS]]></title>
      <link>http://securityratty.com/article/5f7f0bfe69756975b0cc53227dde9972</link>
      <guid>http://securityratty.com/article/5f7f0bfe69756975b0cc53227dde9972</guid>
      <description><![CDATA[According to MIcrosoft, some systems that rely on Windows Server Update Services have been unable to retrieve the most recent batch of monthly patches released by the...]]></description>
      <content:encoded><![CDATA[According to MIcrosoft, some systems that rely on Windows Server Update Services have been unable to retrieve the most recent batch of monthly patches released by the company.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=DuuQXf"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=DuuQXf" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/315924335" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 19 Jun 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/windows server">windows server</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/monthly patches">monthly patches</category>
      <category domain="http://securityratty.com/tag/recent batch">recent batch</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/unable">unable</category>
      <category domain="http://securityratty.com/tag/retrieve">retrieve</category>
      <category domain="http://securityratty.com/tag/systems">systems</category>
      <category domain="http://securityratty.com/tag/rely">rely</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/315924335/article.do">Patch-blocking bug also stymies Microsoft's WSUS</source>
    </item>
    <item>
      <title><![CDATA[Is security marketing worth the paper it is written on? Who can you believe?]]></title>
      <link>http://securityratty.com/article/2bbc442a2207d852c0ce3c8e936043a6</link>
      <guid>http://securityratty.com/article/2bbc442a2207d852c0ce3c8e936043a6</guid>
      <description><![CDATA[So it looks my hot topic this week is how full of beans most vendors are and how it is making life difficult for security admins looking to choose the right product. I already wrote about how some...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>So it looks my hot topic this week is how full of beans most vendors are and how it is making life difficult for security admins looking to choose the right product.&nbsp; I already <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/the-used-car-sa.html">wrote about how some vendors</a> claim customers use their products for functions that they do not. I wrote about how customers are hounded by sales people calling and writing, blowing smoke about products and solutions they don't want.&nbsp; BTW, on a comment to that one, Greg Ness writes a very insightful piece that I want to paste in here:</p><blockquote dir="ltr"><p>I think we're seeing the tale end of the era of &quot;entrapment marketing&quot; whereby someone downloads a white paper or watches a webcast and then gets swamped with calls from salespeople. As a marketing VP I get about 5-6 calls a day. They're so disruptive that I've turned my ring off and batch process the calls once a week. <br /><br />I think the quantity and quality of the traditional downloads has declined since the early 2000s, so that real people get even more calls than they used to. I've become a big believer in social media (no registration required) and inbound registration/interest. <br /><br />I have a netsec blog at: <a href="http://www.archimedius.net/">www.archimedius.net </a>where I talk about issues. I launched it last year after seeing our google analytics scores register large social media inbound traffic to our website. Three top blogs were generating equivalent visitor eyeball minutes on our website to leading pubs. <br /><br />Social media is less disruptive, usually is part of a broader, real-time technology conversation and helps you to establish better relationships with prospects, all in exchange for sharing your view of the world.</p></blockquote><p dir="ltr">Now I was reading a recent analyst report on NAC and almost choked when I saw some of the data passing for information in this report. To be fair the analyst does preface their report by saying they can't vouch for any of the factual information supplied by vendors,&nbsp; But my God does anyone tell the truth anymore?&nbsp; Funny thing is it is the usual suspects up to their same old, same old fudging their numbers.&nbsp; </p>

<p dir="ltr">So not only do we have misleading press releases talking about customers who don't really use the products as announced, we have analyst reports that have glaring factual errors that are not checked and people rely on and customers who are swamped with slick sales people.&nbsp; What can we do as an industry to bring sanity to all of this?&nbsp; Am interested in what your take on all of this? Is security marketing worth the paper it is written on anymore?</p>

<div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/98b19148-a517-49f5-af81-052ce095bfa0/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=98b19148-a517-49f5-af81-052ce095bfa0" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>
]]></content:encoded>
      <pubDate>Wed, 18 Jun 2008 14:29:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/customers">customers</category>
      <category domain="http://securityratty.com/tag/vendors claim customers">vendors claim customers</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/paper">paper</category>
      <category domain="http://securityratty.com/tag/analyst">analyst</category>
      <category domain="http://securityratty.com/tag/report">report</category>
      <category domain="http://securityratty.com/tag/recent analyst report">recent analyst report</category>
      <category domain="http://securityratty.com/tag/analyst reports">analyst reports</category>
      <category domain="http://securityratty.com/tag/vendors">vendors</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/is-security-mar.html">Is security marketing worth the paper it is written on? Who can you believe?</source>
    </item>
    <item>
      <title><![CDATA[Is security marketing worth the paper it is written on? Who can you believe?]]></title>
      <link>http://securityratty.com/article/9229a9abad7f9ca555fbdc0a6683a47f</link>
      <guid>http://securityratty.com/article/9229a9abad7f9ca555fbdc0a6683a47f</guid>
      <description><![CDATA[So it looks my hot topic this week is how full of beans most vendors are and how it is making life difficult for security admins looking to choose the right product. I already wrote about how some...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>So it looks my hot topic this week is how full of beans most vendors are and how it is making life difficult for security admins looking to choose the right product.&nbsp; I already <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/the-used-car-sa.html">wrote about how some vendors</a> claim customers use their products for functions that they do not. I wrote about how customers are hounded by sales people calling and writing, blowing smoke about products and solutions they don't want.&nbsp; BTW, on a comment to that one, Greg Ness writes a very insightful piece that I want to paste in here:</p><blockquote dir="ltr"><p>I think we're seeing the tale end of the era of &quot;entrapment marketing&quot; whereby someone downloads a white paper or watches a webcast and then gets swamped with calls from salespeople. As a marketing VP I get about 5-6 calls a day. They're so disruptive that I've turned my ring off and batch process the calls once a week. <br /><br />I think the quantity and quality of the traditional downloads has declined since the early 2000s, so that real people get even more calls than they used to. I've become a big believer in social media (no registration required) and inbound registration/interest. <br /><br />I have a netsec blog at: <a href="http://www.archimedius.net/">www.archimedius.net </a>where I talk about issues. I launched it last year after seeing our google analytics scores register large social media inbound traffic to our website. Three top blogs were generating equivalent visitor eyeball minutes on our website to leading pubs. <br /><br />Social media is less disruptive, usually is part of a broader, real-time technology conversation and helps you to establish better relationships with prospects, all in exchange for sharing your view of the world.</p></blockquote><p dir="ltr">Now I was reading a recent analyst report on NAC and almost choked when I saw some of the data passing for information in this report. To be fair the analyst does preface their report by saying they can't vouch for any of the factual information supplied by vendors,&nbsp; But my God does anyone tell the truth anymore?&nbsp; Funny thing is it is the usual suspects up to their same old, same old fudging their numbers.&nbsp; </p>

<p dir="ltr">So not only do we have misleading press releases talking about customers who don't really use the products as announced, we have analyst reports that have glaring factual errors that are not checked and people rely on and customers who are swamped with slick sales people.&nbsp; What can we do as an industry to bring sanity to all of this?&nbsp; Am interested in what your take on all of this? Is security marketing worth the paper it is written on anymore?</p>

<div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/98b19148-a517-49f5-af81-052ce095bfa0/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=98b19148-a517-49f5-af81-052ce095bfa0" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=7mPD0G"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=7mPD0G" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=rdzgkI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=rdzgkI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=aAQbpI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=aAQbpI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=hu4gOI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=hu4gOI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=xnmIEI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=xnmIEI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=1xgEMi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=1xgEMi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=wY7ZCi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=wY7ZCi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/314950213" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 18 Jun 2008 13:43:21 +0000</pubDate>
      <category domain="http://securityratty.com/tag/customers">customers</category>
      <category domain="http://securityratty.com/tag/vendors claim customers">vendors claim customers</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/paper">paper</category>
      <category domain="http://securityratty.com/tag/analyst">analyst</category>
      <category domain="http://securityratty.com/tag/report">report</category>
      <category domain="http://securityratty.com/tag/recent analyst report">recent analyst report</category>
      <category domain="http://securityratty.com/tag/analyst reports">analyst reports</category>
      <category domain="http://securityratty.com/tag/vendors">vendors</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/314950213/is-security-mar.html">Is security marketing worth the paper it is written on? Who can you believe?</source>
    </item>
    <item>
      <title><![CDATA[Microsoft fixes patch-blocking bug]]></title>
      <link>http://securityratty.com/article/0e4b261dda6a1a0fbe9b6890f5c42cb3</link>
      <guid>http://securityratty.com/article/0e4b261dda6a1a0fbe9b6890f5c42cb3</guid>
      <description><![CDATA[Microsoft has fixed a flaw in an enterprise patch distribution tool that had blocked administrators from rolling out the monthly batch of security updates pushed out last...]]></description>
      <content:encoded><![CDATA[Microsoft has fixed a flaw in an enterprise patch distribution tool that had blocked administrators from rolling out the monthly batch of security updates pushed out last week.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=2I5B96"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=2I5B96" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/314041547" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 17 Jun 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/monthly batch">monthly batch</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/administrators">administrators</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/fixed">fixed</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/flaw">flaw</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/314041547/article.do">Microsoft fixes patch-blocking bug</source>
    </item>
    <item>
      <title><![CDATA[Microsoft snafu blocks enterprise patching]]></title>
      <link>http://securityratty.com/article/632b68a8279df54e16846d76b3b878d2</link>
      <guid>http://securityratty.com/article/632b68a8279df54e16846d76b3b878d2</guid>
      <description><![CDATA[Microsoft is working on a fix for a problem that has blocked enterprise administrators from using one of its patch distribution tools to install last week's batch of monthly security...]]></description>
      <content:encoded><![CDATA[Microsoft is working on a fix for a problem that has blocked enterprise administrators from using one of its patch distribution tools to install last week's batch of monthly security updates.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=KGAH15"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=KGAH15" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/312507068" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 15 Jun 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/patch distribution tools">patch distribution tools</category>
      <category domain="http://securityratty.com/tag/enterprise administrators">enterprise administrators</category>
      <category domain="http://securityratty.com/tag/monthly security">monthly security</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/batch">batch</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/install">install</category>
      <category domain="http://securityratty.com/tag/fix">fix</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/312507068/article.do">Microsoft snafu blocks enterprise patching</source>
    </item>
  </channel>
</rss>
