<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: carts]]></title>
    <link>http://securityratty.com/tag/carts</link>
    <description></description>
    <pubDate>Mon, 16 Oct 2006 04:34:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Hype Alert: Internet Shopping Carts Are Secure]]></title>
      <link>http://securityratty.com/article/6f0706e64d78d354492017803497a079</link>
      <guid>http://securityratty.com/article/6f0706e64d78d354492017803497a079</guid>
      <description><![CDATA[My blog reader fed me a nugget today that set off my hype monitor, specifically a post entitled Internet Shopping Carts are Secure
OMG...really
To be fair, I realize the author is speaking from the...]]></description>
      <content:encoded><![CDATA[My blog reader fed me a nugget today that set off my hype monitor, specifically a post entitled <a href="http://hubpages.com/hub/Internet-Shopping-Carts-Are-Secure" taget="_blank">Internet Shopping Carts are Secure</a>. <br />OMG...really?<br />To be fair, I realize the author is speaking from the eCommerce perspective, rather than that of an information security practitioner, but here's where the trouble begins:<br /><span style="font-style:italic;">"Shopping cart service providers have developed secure ecommerce shopping cart solutions for any business owner looking to enhance their current online store, or create a new one. Some ecommerce shopping cart solution providers are even receiving PABP (Payment Application Best Practice) certification which supports PCI compliance requirements for all businesses accepting credit card payments online."</span><br />This may be true in part, but it is by no means an all-inclusive claim. Shopping carts continue to be sieve-like, even when apparently reviewed per <a href="https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml" target="_blank">PCI</a> standards.<br />Allow me to elaborate.<br />We'll kick off our hype eliminating effort with a simple Google dork: <a href="http://www.google.com/search?hl=en&q=inurl%3A%22cart.cfm%22&btnG=Search" target="_blank"{>inurl:"cart.cfm"</a> (picking on ColdFusion again, but man, they make it easy)<br /><a href="http://www.gmpartsdirect.com/cart.cfm" target="_blank">GM Parts Direct: Your Shopping Cart</a> jumped right out at me for a number of reasons.<br />First, I sensed XSS vulns lurking like a Geiger counter senses radiation. Sound <a href="http://www.ringelkater.de/Sounds/2geraeusche_gegenst/geigerzaehler.wav" target="_blank">effect</a> for edification. :-)<br />Second, the page contained one of the growing number of aforementioned conversion-driving website <a href="http://sealserver.trustwave.com/cert.php?customerId=w6ordzctHpqOVGcB1cmBsViTpDGC2k&size=105x54&style=normal&language=en" target="_blank">security</a> seals. <br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_kVOWaY1TAF0/SN1tYvapkkI/AAAAAAAAADg/6k1ncKqufL4/s1600-h/GMparts.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://3.bp.blogspot.com/_kVOWaY1TAF0/SN1tYvapkkI/AAAAAAAAADg/6k1ncKqufL4/s320/GMparts.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5250473012396397122" /></a><br /><br />Tick, tick, click...the Gieger counter is getting louder. <br />Trustwave claims that the site operator "is enrolled in Trustwave's Trusted Commerce™ program to validate compliance with the Payment Card Industry Data Security Standard (PCI DSS) mandated by all the major credit card associations including: American Express, Diners Club, Discover, JCB, MasterCard Worldwide, Visa, Inc. and Visa Europe."<br />Methinks that <a href="https://www.trustwave.com/" target="_blank">Trustwave's</a> Trusted Commerce program is missing a few fundamental security checks. Remember, XSS in PCI regulated sites, according to the <a href="https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml" target="_blank">PCI DSS</a>, indicates that a site is not compliant (see section 6.5.4) if vulnerable to XSS.<br />Uh-oh.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://2.bp.blogspot.com/_kVOWaY1TAF0/SN1wVI4q8FI/AAAAAAAAADo/ZzFA7u8xNCA/s1600-h/GMparts_xss_trustwave.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://2.bp.blogspot.com/_kVOWaY1TAF0/SN1wVI4q8FI/AAAAAAAAADo/ZzFA7u8xNCA/s320/GMparts_xss_trustwave.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5250476249048608850" /></a><br />All it takes is a fake login page, as opposed to our friends at <a href="http://xssed.com/" target="_blank">XSSED.com</a>, and...well, you get the point.<br />Simply, this is one of an endless number of shopping cart not secure, and not PCI compliant. For shame. You need only browse the <a href="http://holisticinfosec.org/content/category/6/23/45/" target="_blank">Holisticinfosec.org Advisories</a> page to find multiple ecommerce platforms and shopping carts that are missing the mark. Trust me, these are a fraction of the <a href="http://secunia.com/advisories/search/?search=shopping+cart" target="_blank">problem</a>.<br />ecommerce<>security<br />ecommerce<><a href="http://msdn.microsoft.com/en-us/library/ms995349.aspx" target="_blank">SDL</a><br />ecommerce<>PCI<br />website security seal<>security<br />Sigh.]]></content:encoded>
      <pubDate>Fri, 26 Sep 2008 11:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ecommerce">ecommerce</category>
      <category domain="http://securityratty.com/tag/multiple ecommerce platforms">multiple ecommerce platforms</category>
      <category domain="http://securityratty.com/tag/ecommerce sdl">ecommerce sdl</category>
      <category domain="http://securityratty.com/tag/ecommerce perspective">ecommerce perspective</category>
      <category domain="http://securityratty.com/tag/pci">pci</category>
      <category domain="http://securityratty.com/tag/pci dss">pci dss</category>
      <category domain="http://securityratty.com/tag/cart solutions">cart solutions</category>
      <category domain="http://securityratty.com/tag/cart">cart</category>
      <category domain="http://securityratty.com/tag/ecommerce security">ecommerce security</category>
      <source url="http://holisticinfosec.blogspot.com/2008/09/hype-alert-internet-shopping-carts-are.html">Hype Alert: Internet Shopping Carts Are Secure</source>
    </item>
    <item>
      <title><![CDATA[Hotel's Dirty Drinks]]></title>
      <link>http://securityratty.com/article/5871abb9f79a5a8e8fab62637f96b2c5</link>
      <guid>http://securityratty.com/article/5871abb9f79a5a8e8fab62637f96b2c5</guid>
      <description><![CDATA[and I dont mean Martinis
Im frequently in hotels. And Im frequently drinking water. Its usually room-temperature tap water, so when I started noticing funny tastes and smells in hotel room glasses, it...]]></description>
      <content:encoded><![CDATA[<p><em><strong>.. and I don&#8217;t mean Martinis.</strong></em> </p><p>I&#8217;m frequently in hotels. And I&#8217;m frequently drinking water.&nbsp;It&#8217;s usually room-temperature&nbsp;tap water,&nbsp;so when I started noticing funny tastes and smells in hotel room glasses, it got me wondering exactly how they clean and replace those in-room glasses. </p><p>Over the past several weeks I took a mental survey of housekeeping carts. (I frequently sneak an extra shampoo or conditioner at some point, so I&#8217;ve usually spent a bit of time exploring the carts, and what&#8217;s on them.) I thought about it and realized I&#8217;ve never seen glasses (clean <em>or</em> dirty) on any housekeeping carts&#8230;. hmm&#8230;. they&#8217;re not changing them out&#8230; so how are they cleaning the glasses? </p><p>I was getting ready to post a blog asking just that question when I did a search online and confirmed&nbsp;my worst suspicions. Looks like there&#8217;s a nation-wide coup over just this very topic, after numerous TV news &#8216;stings&#8217; with hidden cameras. On the first search page, I found such video from LA, Maryland and Atlanta, and saw links to several other postings. </p><p>If you&#8217;re curious&#8230; check out some of the findings&#8230; I&#8217;ll warn you though, in more than one video, there&#8217;s a glove, toilet swishing and then glass-cleaning&#8230; same glove. (uggggh)</p><ul><li><div>Good Morning America Report&nbsp;- <a class="offsite-link-inline" href="http://abcnews.go.com/GMA/BusinessTravel/story?id=4277067&page=1" target="_blank">link</a></div></li><li><div>News in Atlanta - <a class="offsite-link-inline" href="http://www.break.com/index/never-use-the-glasses-in-your-hotel-room.html" target="_blank">link </a></div></li><li><div>ABC 2 in Maryland - <a class="offsite-link-inline" href="http://www.abc2news.com/content/investigators/story.aspx?content_id=07b7f82c-a96f-4dc7-a601-0e2956175e39" target="_blank">link</a></div></li><li><div>ABC 7 in LA - <a class="offsite-link-inline" href="http://abclocal.go.com/kgo/story?section=news/7_on_your_side&id=5972967" target="_blank">link </a></div></li></ul><p>I&nbsp;think I&#8217;ll have to start packing my own bottles&#8230; the only dirty drink I want comes with gin and olives. ;)</p><p># # #</p>
]]></content:encoded>
      <pubDate>Sat, 22 Mar 2008 19:41:25 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dirty">dirty</category>
      <category domain="http://securityratty.com/tag/glasses">glasses</category>
      <category domain="http://securityratty.com/tag/in-room glasses">in-room glasses</category>
      <category domain="http://securityratty.com/tag/frequently sneak">frequently sneak</category>
      <category domain="http://securityratty.com/tag/frequently">frequently</category>
      <category domain="http://securityratty.com/tag/link">link</category>
      <category domain="http://securityratty.com/tag/carts">carts</category>
      <category domain="http://securityratty.com/tag/dirty drink">dirty drink</category>
      <category domain="http://securityratty.com/tag/water">water</category>
      <source url="http://www.securityuncorked.com/security-uncorked/2008/3/22/hotels-dirty-drinks.html">Hotel's Dirty Drinks</source>
    </item>
    <item>
      <title><![CDATA[Maryland Department of Assessments & Taxation web exposure]]></title>
      <link>http://securityratty.com/article/9559cb5894838514ec333efe928d6996</link>
      <guid>http://securityratty.com/article/9559cb5894838514ec333efe928d6996</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
1/4/08

Organization
State of Maryland

Contractor/Consultant/Branch
Department of Assessments and Taxation
Towson University's Regional Economic Studies...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/mdat.jpg" align="right" height="91" width="150"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>1/4/08<br><br><span style="font-weight: bold;">Organization:</span> <br><a href="http://www.maryland.gov" target="_blank"> State of Maryland</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.dat.state.md.us" target="_blank"> Department of Assessments and Taxation</a> <br><a href="http://www.towson.edu/outreach/resi/" target="_blank"> Towson University's Regional Economic Studies Institute</a> <br><br><span style="font-weight: bold;">Victims:</span><br>Maryland residents applying for a homestead tax credit<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown*<br><br><font size="1">*roughly 900 people used the system on the day in question.</font><br><br><span style="font-weight: bold;">Types of Data:</span><br>Names, addresses and Social Security numbers<br><br><span style="font-weight: bold;">Breach Description:</span><br>A web application used to collect information from residents over the internet was not adequately secured with encryption leaving some sensitive personal information un-protected while transferred from clients to the Web server.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.washingtontimes.com/apps/pbcs.dll/article?AID=/20080104/METRO/73800052/1004" target="_blank"> Washington Times News Story</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Gary Emerling, The Washington Times<br><br><span style="font-weight: bold;">Response:</span><br>From the online source cited above:<br><br>Officials said residents applying Monday for the homestead-tax credit at the Maryland Department of Assessments and Taxation Web site (www.dat.state.md.us) may have exposed their Social Security numbers online because the application system did not have a necessary security certificate to encrypt the information before it was sent out over the Internet.<br><br>Robert Young, the department's associate director of assessments and taxation, said the gap briefly left the numbers exposed, but the information was transferred to a secure server after an application was submitted.<br><span style="font-style: italic;">[Evan] Let's hope that the "secure server" is actually secure.&nbsp; This breach would not have occurred if proper security testing were carried out prior to production.&nbsp; If the site itself had not been properly tested, should we assume that the secure server had/has been.</span><br><br>"For that minute or so there ... that wasn't encrypted," Mr. Young said. "If they submitted an application, it went to a different section that was encrypted."<br><span style="font-style: italic;">[Evan] My interpretation is that the "secure server" encrypts the information and it is stored encrypted.&nbsp; If so, then good work!&nbsp; Although, I could be wrong.</span><br><br>The application system on the site went online Dec. 28 but was not accessed until Monday, after residents had received their assessment notices in the mail. Roughly 900 people used the system that day.<br><br>Mr. Young said it would have been nearly impossible for anyone to access the numbers because of the brief amount of time they were exposed and because hackers would have had to tap into Internet transmission lines from a specific location.<br><span style="font-style: italic;">[Evan] Not nearly impossible.</span><br><br>"Somebody would have had to been focused in on that site," Mr. Young said. "The chances of that are virtually nil."<br><span style="font-style: italic;">[Evan] I do agree that the risk is relatively low, I do not agree that an attacker would have to have "been focused in on that site" in order to capture the information.</span><br><br>Tim Brooks, the institute's associate director in charge of software development, said a hacker would have had to be located right outside the home of a resident accessing the site or outside of the institute's data center at Towson to steal the numbers once they were sent out over the Internet.<br><span style="font-style: italic;">[Evan] This is not true.&nbsp; A successful compromise of the data transmission could take place at any point between the resident's computer and the server itself.&nbsp; This would include anywhere between a resident's computer and the resident's internet access point (usually a router), the resident's access point and all traversed points within the resident's internet service provider's (ISP) network, between the resident's ISP and any other traversed points within any other internet network provider on the way to the State of Maryland's ISP, all traversed points within the State of Maryland's ISP, and all traversed points within the Maryland network until it reached the web application server.&nbsp; The risk of compromised between all of these points is still relatively low, but it is unnecessary risk nonetheless.</span><br><br>"While it is technically possible there was some sort of compromise, it is logistically unfeasible," Mr. Brooks said.<br><span style="font-style: italic;">[Evan] It is logistically infeasible for a single attacker to capture all of the information sent in the clear.</span><br><br>officials shut down the site on Monday at about 4 p.m. and added the extra protection. The site reopened Wednesday at about 4:15 p.m. and is now secure.<br><br><span style="font-weight: bold;">Commentary:</span><br>Maybe you read the information about this breach differently, but to me it seems that someone forgot to configure encryption (i.e. http vs. https) for the data in transit to the State of Maryland's web site that was collecting sensitive information.&nbsp; <br><br>Althought, I agree with the officials that claim the risk of exposure to resident's personal information is low, it was such an easily avoidable risk.&nbsp; The amount of risk would have risen with the amount of time that the vulnerability existed.&nbsp; Web applications, especially e-commerce shopping carts and others that collect confidential information, must be thoroughly tested by knowledgeable information security personnel prior to production.&nbsp; More than anything else, this breach causes unneeded embarrassment for the State of Maryland and perhaps provides insight into software development practices as it related to information security.<br><br>On semi-related note, according to a <a href="http://www.courier-journal.com/apps/pbcs.dll/article?AID=/20080104/NEWS01/801040453/1008/NEWS01" target="_blank"> story</a> posted on the Louisville, Kentucky Courier Journal claims that "A 15-minute search on the Maryland Department of Assessments and Taxation Web site found Social Security numbers on statements filed by creditors who had financed purchases by four consumers in Waldorf, Cambridge, Bowie and Landover in 2003 and 2004." <br><br><span style="font-weight: bold;">Past Breaches:</span><br>August, 2007 - <a href="http://breachblog.com/2007/08/30/maryland-department-of-the-environment-stolen-laptop-unknown-number-of-victims.aspx" target="_blank"> Stolen laptop from the Maryland Department of the Environment</a></font><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/01/05/mdat.aspx" type="text/javascript" charset="utf-8"></script>
<br>
<br>
<script type="text/javascript"><!--
google_ad_client = "pub-4721162729073131";
google_ad_width = 468;
google_ad_height = 60;
google_ad_format = "468x60_as";
google_ad_type = "text_image";
google_ad_channel = "";
//-->
</script>
<script type="text/javascript">
</script>]]></content:encoded>
      <pubDate>Sat, 05 Jan 2008 11:02:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/maryland">maryland</category>
      <category domain="http://securityratty.com/tag/sensitive personal information">sensitive personal information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/secure server hadhas">secure server hadhas</category>
      <category domain="http://securityratty.com/tag/server">server</category>
      <category domain="http://securityratty.com/tag/web application server">web application server</category>
      <category domain="http://securityratty.com/tag/application">application</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/information security">information security</category>
      <source url="http://breachblog.com/2008/01/05/mdat.aspx">Maryland Department of Assessments &amp; Taxation web exposure</source>
    </item>
    <item>
      <title><![CDATA[Secrets of a Road Warrior]]></title>
      <link>http://securityratty.com/article/5550c0eb3e6532ee153f522ee767508a</link>
      <guid>http://securityratty.com/article/5550c0eb3e6532ee153f522ee767508a</guid>
      <description><![CDATA[I have been a road warrior since just after 9/11. For the past 5 years I have spent at least 6 months of the year somewhere other than where I call home. At one point after .NET was released in 2002,...]]></description>
      <content:encoded><![CDATA[<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">I have been a road warrior since just after 9/11.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>For the past 5 years I have spent at least 6 months of the year somewhere other than where I call home.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>At one point after .NET was released in 2002, I spent over a year and a half visiting 2 cities a week (fly out Sunday, speak at a seminar from 7:30 to 5:00 Monday and Tuesday, fly home Tuesday night, fly back out Wednesday night, speak at a seminar from 7:30 to 5:00 Thursday and Friday, fly home Friday night, wash, rinse, repeat).<SPAN style="mso-spacerun: yes">&nbsp; </SPAN><?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">Some think the secret to being a road warrior is his durability, and for a large part that&#8217;s true. <SPAN style="mso-spacerun: yes">&nbsp;</SPAN>But it&#8217;s not just a matter of surviving, but thriving through any situation that my come up comfortably.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>The real key is always being prepared.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>You never know what might happen.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">Last night I was watching the news about the earthquake in <?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com:office:smarttags" /><st1:State w:st="on"><st1:place w:st="on">Hawaii</st1:place></st1:State> and thinking of a loved one who was out there for a conference.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>I saw hospitals being evacuated, police breaking up fights over gas and food at convenience stores, bridges and roads that were un-drivable, no power, no water, no flights allowed in or out, etc. and I was worried.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>It reminded me of several situations I experienced personally.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN><o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><A href="http://en.wikipedia.org/wiki/Hurricane_Ivan"><FONT color=#800080>Hurricane Ivan</FONT></A> was by far the worst thing I&#8217;ve ever been through, and there have been many.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">In September of 2004, I was working on a project in <st1:City w:st="on"><st1:place w:st="on">Montgomery</st1:place></st1:City>, and had to be there the day before the storm arrived.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>Things seemed normal enough at work, until everyone spent the second half of the day gossiping over whether or not they would have to come into work tomorrow.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">I was in meetings all day and was oblivious to the news.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>By time I left work, both lanes of I-85 were converted for northbound traffic as a mass exodus of people from Biloxi to Mobile to Panama City were heading north to get out of the storms way.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>I had a perfectly good hotel room and opted to stay there instead of sitting on the freeway for what would have been a long, miserable drive back to <st1:City w:st="on"><st1:place w:st="on">Atlanta</st1:place></st1:City>.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>There wasn&#8217;t a bottle of water left on store shelves, so I decided I&#8217;d be okay and just head back home in the morning.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">I never expected that the storm would be strong enough to do any damage as far inland as <st1:City w:st="on"><st1:place w:st="on">Montgomery</st1:place></st1:City>&#8230;but it was.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">I awoke the next morning to no power and no water, which was the perfect motivation I needed to get on the road and head home early.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>I figured by leaving this early, the traffic on I-85 would be decent enough to make good time back to <st1:City w:st="on"><st1:place w:st="on">Atlanta</st1:place></st1:City>.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>I had a perfect view of I-85 from my room, and when I went to look, sure enough there wasn&#8217;t a single car on the freeway&#8230;there were however a number of trees, the marquee from the hotel, shopping carts, trash cans, and even a stray sock.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">I was stuck.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">I wasn&#8217;t worried at first. <SPAN style="mso-spacerun: yes">&nbsp;</SPAN>I had endured several hurricanes before, once in a tent (<A href="http://en.wikipedia.org/wiki/Tropical_Storm_Alberto_%281994%29"><FONT color=#800080>Alberto</FONT></A>, which dropped 24 inches of rain in a single night that cut off all the roads in and out of our base camp on the Flint River; I spent a week wet, living in a tent, and as a brand new lifeguard, performing live rescues for the first time). <SPAN style="mso-spacerun: yes">&nbsp;</SPAN><o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">Things started to set in when I tried to find food.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>The halls of the hotel were littered with refugees who even though they didn&#8217;t have a room, the hotel let them set up camp in the lobby, hallways, etc, each one of them with a giant cooler, luggage, and all acting as if they had done this a million times.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">With no power, the vending machines were useless.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>I got in my car to venture out, but a tree blocked off the single entrance to the hotel.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>I decided to walk, but it was a ghost town.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>With no power, nothing was open.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN><o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">Then my cell phone died.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN><o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">I spent 2 and a half days in Montgomery, without a lick of food and only a single warm bottle of water I traded a man for a pillow.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">Most of <st1:City w:st="on"><st1:place w:st="on">Montgomery</st1:place></st1:City> was without power for 4 days.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>I was unlucky in that I had no supplies whatsoever, but lucky in that I was able to leave after waking up the third day to see that the roads had been cleared.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>The refugees who had to spend weeks in shelters and hotels had it far worse.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">Now I am always prepared.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>It&#8217;s helped me through several other hurricanes (read Katrina), an ice storm, and a few other minor inconveniences.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>When I&#8217;m on the road, I always make sure to adhere to a few simple rules:<o:p></o:p></SPAN></P>
<UL style="MARGIN-TOP: 0in" type=disc>
<LI class=MsoNormal style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in"><SPAN style="FONT-FAMILY: Arial">Never get below half a tank of gas, and always fill it to the top.<o:p></o:p></SPAN></LI>
<LI class=MsoNormal style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in"><SPAN style="FONT-FAMILY: Arial">Keep a case of water in the trunk of the car.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>Most gas stations sell them now and it&#8217;s easy enough to grab one when you&#8217;re getting gas.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>If I&#8217;m flying, I always keep 2 in my carry on and I make sure to stock my room immediately after I check in.<o:p></o:p></SPAN></LI>
<LI class=MsoNormal style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in"><SPAN style="FONT-FAMILY: Arial">Keep nuts and energy bars in my bag.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>If you have to go without food for a couple of days or for 4 hours while your plane sits on the runway without a pilot (thanks Delta!), you&#8217;ll be happy to have a something to eat.<o:p></o:p></SPAN></LI>
<LI class=MsoNormal style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in"><SPAN style="FONT-FAMILY: Arial">Always keep a full charge on the cell phone and pack a car charger.<o:p></o:p></SPAN></LI>
<LI class=MsoNormal style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in"><SPAN style="FONT-FAMILY: Arial">Keep an emergency calling card in your wallet.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>They are cheap enough these days and if something happens to you cell, you&#8217;ll find it terribly inconvenient not to be able to make any calls.<o:p></o:p></SPAN></LI>
<LI class=MsoNormal style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in"><SPAN style="FONT-FAMILY: Arial">Carry a <A href="http://www.newegg.com/Product/Product.asp?Item=N82E16855603808"><FONT color=#800080>MP3/FM Radio</FONT></A>.<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>You can listen to MP3&#8217;s to take your mind of off things and be able to tune into local news advisories.<o:p></o:p></SPAN></LI></UL>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial">None of this does a single bit of good while you sit at home and worry about a loved one half way around the world, but hopefully it will allow your loved ones not to have to worry about you one day.<o:p></o:p></SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></P><img src ="http://marvets.com/blog/aggbug/856.aspx" width = "1" height = "1" />]]></content:encoded>
      <pubDate>Mon, 16 Oct 2006 04:34:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/home">home</category>
      <category domain="http://securityratty.com/tag/home tuesday night">home tuesday night</category>
      <category domain="http://securityratty.com/tag/head home">head home</category>
      <category domain="http://securityratty.com/tag/call home">call home</category>
      <category domain="http://securityratty.com/tag/road warrior">road warrior</category>
      <category domain="http://securityratty.com/tag/tuesday">tuesday</category>
      <category domain="http://securityratty.com/tag/road">road</category>
      <category domain="http://securityratty.com/tag/night">night</category>
      <category domain="http://securityratty.com/tag/home friday night">home friday night</category>
      <source url="http://marvets.com/blog/archive/2006/10/16/856.aspx">Secrets of a Road Warrior</source>
    </item>
  </channel>
</rss>
