<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: celebration]]></title>
    <link>http://securityratty.com/tag/celebration</link>
    <description></description>
    <pubDate>Mon, 04 Feb 2008 17:10:03 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Happy Birthday Freebies from the Belgian Security Network]]></title>
      <link>http://securityratty.com/article/1dfeb29bc5fb0feaa65ec9ba9a9e5370</link>
      <guid>http://securityratty.com/article/1dfeb29bc5fb0feaa65ec9ba9a9e5370</guid>
      <description><![CDATA[Happy birthday Belsec
It looks like the Belgian Security bloggers network is just a year old, and in celebration, its bloggers are providing links to free stuff online check out the following
60+...]]></description>
      <content:encoded><![CDATA[<p>Happy birthday Belsec!</p>
<p>It looks like the Belgian Security bloggers&#8217; network is just a year old, and in celebration, its bloggers are providing links to free stuff online &#8212; check out the following:</p>
<p><a rel="nofollow" target="_blank" href="http://belsec.skynetblogs.be/post/6430422/complete-freeware-60-links-here-windows-">60+ freeware programs</a></p>
<p><a rel="nofollow" target="_blank" href="http://belsec.skynetblogs.be/post/6430369/scribd-600-more-ebooks-to-download-">Hundreds of eBooks</a></p>
<p><a rel="nofollow" target="_blank" href="http://belsec.skynetblogs.be/tag/1/belsecbirthday">Fun videos and other stuff</a></p>]]></content:encoded>
      <pubDate>Thu, 13 Nov 2008 09:45:24 +0000</pubDate>
      <category domain="http://securityratty.com/tag/happy birthday belsec">happy birthday belsec</category>
      <category domain="http://securityratty.com/tag/fun videos">fun videos</category>
      <category domain="http://securityratty.com/tag/freeware programs">freeware programs</category>
      <category domain="http://securityratty.com/tag/hundreds">hundreds</category>
      <category domain="http://securityratty.com/tag/celebration">celebration</category>
      <category domain="http://securityratty.com/tag/stuff">stuff</category>
      <category domain="http://securityratty.com/tag/bloggers">bloggers</category>
      <category domain="http://securityratty.com/tag/ebooks">ebooks</category>
      <category domain="http://securityratty.com/tag/links">links</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/452194583/">Happy Birthday Freebies from the Belgian Security Network</source>
    </item>
    <item>
      <title><![CDATA[ScienceLogics 5-Year Anniversary]]></title>
      <link>http://securityratty.com/article/1287b8dac0ea60512bed5f303d15fe55</link>
      <guid>http://securityratty.com/article/1287b8dac0ea60512bed5f303d15fe55</guid>
      <description><![CDATA[August 2003. The largest blackout in U.S. history darkens the Northeast and Midwest, the Blaster worm has been unleashed and Madonna and Britney create a stir at the 2003 MTV Music Video Awards . In...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" height="164" alt="B-day Cake" src="http://blog.sciencelogic.com/wp-content/uploads/2008/08/b-day-cake1.jpg" width="244" align="left" border="0"> August 2003. The largest <a href="http://blogs.wsj.com/biztech/2008/08/13/celebrating-the-anniversary-of-the-big-blackout/?mod=djemTECH" target="_blank">blackout</a> in U.S. history darkens the Northeast and Midwest, the <a href="http://news.cnet.com/2010-1001-5117862.html" target="_blank">Blaster worm</a> has been unleashed and Madonna and Britney create a stir at the <a href="http://en.wikipedia.org/wiki/2003_MTV_Video_Music_Awards" target="_blank">2003 MTV Music Video Awards</a>. In the midst of this <a href="http://www.grid.unep.ch/product/publication/download/ew_heat_wave.en.pdf" target="_blank">hot summer</a> madness, ScienceLogic was founded.
<p>To kick off our celebration of our first five years, we asked <a href="http://www.sciencelogic.com/leadership.htm" target="_blank">ScienceLogic founders</a> Dave Link, Richard Chart and Chris Cordray for their thoughts and memories on events leading to today’s milestone. How and why did they set out on this venture? What happened along the way – expected and unexpected? Why were they successful in times when other new (and established) businesses have come and <a href="http://en.wikipedia.org/wiki/Category:2003_disestablishments" target="_blank">gone</a>?
<p><b>How did you three put together this team?</b>
<p>We all worked together at a large Managed Service Provider for a couple of years before leaving to start ScienceLogic, so we all knew each other and knew our collective strengths. More importantly, each of us had worked with network management tools on some level (sales and marketing, engineering and product development), and knew first-hand all of the customer pain points, from every perspective. So we left and began rapidly figuring out how to build a better network management solution based upon our real world operational experience..
<p><strong>Dave:</strong> One interesting aspect is that our areas of expertise don’t overlap, which has contributed to our success. Chris is excellent with developing the product front-end and interface, Richard handled the backend architecture and engineering and I focused on the technical business side of sales and marketing. Our roles have been to build a product that works well and that provides real value to operations teams that experience the same day to day frustrations that we felt.<b></b>
<p><b>Whose idea was it to start the company?</b>
<p><strong>Dave:</strong> It was really a collective effort. We were all passionate about “getting it right” and not just starting a company. We knew the industry need and between us, we had the knowledge and skill sets to address all of the right aspects of developing a product and a building a business around it.
<p><b>What process did you go through to get started?</b>
<p><strong>Richard:</strong> From the beginning we knew the type of solution the market needed and we knew that we wanted to build it as an appliance. From different vantage points, we had each experienced the effects of long, difficult and expensive installations that still exist with traditional network tools. Every install has unique variations: there are always different server types, varying hardware and software versions, different patches installed, and on and on. Every installation was time consuming and unpredictable. We knew that an appliance model would address all of these variables and save a lot of time on how quickly customers could achieve immediate value.
<p>The harder decisions were around actually starting the business, assessing the market and of course determining the product pricing.
<p><b>EM7 completely flips the traditional model of complex, lengthy and expensive deployments. How did you convince others that the EM7 Meta-Appliance product was valid?</b>
<p><strong>Dave:</strong> Yes, EM7 totally disrupts the traditional model for network management. While others take a narrow approach, we intentionally designed EM7 to focus on the broad problem – managing the data center. How do you cover a variety of technologies and make sure they work seamlessly together? The vision was to make it easier, not harder, for customers.
<p><strong>Chris:</strong> I have to give it to Dave – very early on, he realized the power of a demo. If Dave could get in front of someone, he’d make them a believer. He’d use the Peter Falk/Columbo technique of “let me show you one more thing.” It was very effective. It’s getting easier, but even today people sometimes have to see EM7 in action before they become believers.
<p><b>Can you describe the early days of running a new business?</b>
<p><strong>Dave:</strong> ScienceLogic is a classic case of entrepreneurship. For the first year we worked out of our basements. We kept the costs low in every conceivable way and spent the first year developing the product before we even made a sale.
<p><strong>Chris:</strong> We stayed at lots of odd places when we were on the road, took cheap flights with multiple layovers and purchased lots of our first test equipment on eBay. This was during the dot-com bust so there was lots of equipment for sale on eBay, really cheap!
<p><strong>Richard:</strong> The amount of equipment I had in my house was absolutely crazy. Back then, servers were huge – I had a Cisco 6509 Catalyst, a Compaq Proliant DL380, Brocade switch, IBM Netfinity 4500R, and tons of other machines.
<p><strong>Chris:</strong> I had to install a new circuit box at home because I was blowing breakers. I remember when that 6509 crashed, we revived it and it died again. The second death was final.
<p><b>So you started in your houses – what was your first office space?</b>
<p><strong>Dave:</strong> My friend, the CEO at Ernst &amp; Young Technology had a few extra cubes and a data center in their office that they graciously allowed us to use. Their help was an important step in helping us really formalize the business. We started doing well and adding people, but ironically, their company was downsizing. Before long, many of their original YET people were gone and the ScienceLogic team kept growing in to the open cubes.
<p>Our first leased space was converted warehouse space in Chantilly, VA that once housed an internet radio station. It was cool – it had a large salt water fish tank, a loft, a spiral staircase and a Star Trek door that retracted into the walls with the customary lights and “whooshing” sound.
<p>We outgrew the Chantilly space, leading to our current office in Reston, VA.
<p><b>Who was the first ScienceLogic customer?</b>
<p>Our first paying customer was <a href="http://martinspoint.com/" target="_blank">Martins Point Health Care</a>. We deployed there in July 2004 and are pleased to say they continue to be a ScienceLogic customer. Other early (and still) EM7 <a href="http://www.sciencelogic.com/customers.htm" target="_blank">customers</a> include Navy Knowledge Online and the Department of Transportation. Nearly all of our customers are still actively using EM7 and renewing their maintenance.
<p><b>Where do you see the company in the next 5, 10 or 15 years?</b>
<p>Well, our revenue has doubled year-over-year in each of the last three years, so of course we’d like to continue to grow like that or even faster. In five years we’ve gone from three founders to the point where Dave does not know everyone’s fondest childhood memory. We’ll continue to scale our growth to cover the demands of our growing customer base.
<p><b>Where do you see the industry going over the coming years?</b>
<p><strong>Chris:</strong> IT is always moving and gaining in complexity, so network management is also becoming more complicated. There’s increasing diversity, new standards, virtualization and cloud computing. All of these are today’s technologies. Customers have a mix of the old and the new, so EM7 has to accommodate and support both.
<p><strong>Richard:</strong> Each generation of products has a new set of ways to monitor, but the “old” doesn’t go away. Even when a new, hot technology comes along, the old technologies still need to be supported. We work to ensure EM7 keeps up with both.
<p><strong>Dave:</strong> After five years we’re just hitting our stride and we’re just now reaching the tipping point in awareness of ScienceLogic and EM7. We’re all still passionate about the product and as Chris and Rich said, there’s still a lot do. We’ll continue disrupting the market with EM7. Our vision hasn’t changed, and with the increasing levels of automation that customers demand, the market needs are greater than ever. Our future is as bright, or brighter, than ever and we’ll continue to be looking for smart ways to automate traditionally manual IT Operations processes.
<p><b>What’s your advice for someone interested in starting their own business?</b>
<p><strong>Chris:</strong> Be passionate. That’s what has gotten me through the tough times. I didn’t really appreciate this thought when I heard others say it before. But it’s very true.
<p><strong>Richard:</strong> I agree. We met and talked with lots of people who told us, “That’s been done before.” But we kept going because we truly believed in what we were doing and we knew that while our approach was different, that it would be successful.
<p><strong>Richard:</strong> Be fearless. You can’t be too nervous and you need to be able to expect and handle the stress because it will be there. You have to learn to accept the stressful times as a necessary part of the process of starting out on your own.
<p><strong>Dave:</strong> Know your niche from the beginning and give potential customers a compelling reason to trust you and really benefit from your solution. You have to know the problem, see the gap and have a clear and consistent vision of how to solve the problem. Then you have to execute. If you don’t build your team with “doers” you won’t make it.
<p><strong>Chris:</strong> It helps to have friends. ScienceLogic was built on friendships and relationships, starting with the three of us. If you look at our team, most of our hires are referrals – people who developed and maintained great connections with other great people throughout their careers. Maintain your connections and keep in touch with your network of friends.</p>
]]></content:encoded>
      <pubDate>Wed, 20 Aug 2008 18:39:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/em7 completely flips">em7 completely flips</category>
      <category domain="http://securityratty.com/tag/em7">em7</category>
      <category domain="http://securityratty.com/tag/network management">network management</category>
      <category domain="http://securityratty.com/tag/network management tools">network management tools</category>
      <category domain="http://securityratty.com/tag/em7 meta-appliance product">em7 meta-appliance product</category>
      <category domain="http://securityratty.com/tag/sciencelogic team">sciencelogic team</category>
      <category domain="http://securityratty.com/tag/team">team</category>
      <category domain="http://securityratty.com/tag/front">front</category>
      <category domain="http://securityratty.com/tag/product front-end">product front-end</category>
      <source url="http://blog.sciencelogic.com/sciencelogics-5-year-anniversary/08/2008">ScienceLogics 5-Year Anniversary</source>
    </item>
    <item>
      <title><![CDATA[Visualized Storm fireworks for your 4th of July]]></title>
      <link>http://securityratty.com/article/cd69cdbb404159575b86657784e007bb</link>
      <guid>http://securityratty.com/article/cd69cdbb404159575b86657784e007bb</guid>
      <description><![CDATA[As expected, the Storm botnet maestros have queued up some pwnage for your 4th of July
See the SANS diary for all the details
Upon receipt of my first fireworks.exe sample this evening, I went through...]]></description>
      <content:encoded><![CDATA[As expected, the Storm botnet maestros have queued up some pwnage for your 4th of July. <br />See the SANS <a href="http://isc.sans.org/diary.html?storyid=4669" target="_blank">diary</a> for all the details.<br />Upon receipt of my first fireworks.exe sample this evening, I went through the standard routine and ran it through the analysis mill. Like the ISC said, not much new here, but if you'd like the nitty-gritty, I've put the analysis report <a href="http://holisticinfosec.org/analysis/storm/fireworks/fireworks_storm.txt" target="_blank">here</a>, the peers config list <a href="http://holisticinfosec.org/analysis/storm/fireworks/peers.txt" target="_blank">here</a>, and the pcap <a href="http://holisticinfosec.org/analysis/storm/fireworks/fireworks.pcap" target="_blank">here</a>.<br />However, what I was really inspired to do this evening was visualize the pcap with Raffael Marty's AfterGlow. His new <a href="http://www.amazon.com/Applied-Security-Visualization-Raffael-Marty/dp/0321510100" target="_blank">book</a>, Applied Security Visualization, is coming out next month, so we can turn old Storm news into a celebration of the 4th and the pending release of Applied Security Visualization. By the way, Raffael's visualization workshop slides from the 20th Annual <a href="http://www.first.org/" target="_blank">FIRST</a> Conference in Vancouver, B.C. last week are <a href="http://www.secviz.org/content/applied-security-visualization-first-2008-talk" target="_blank">here</a>, and mine regarding Malcode Analysis for Incident Handlers are <a href="http://holisticinfosec.org/publications/McRee_MATFIH_FIRST_final.pdf" target="_blank">here</a>.<br />So, a little AfterGlow magic,<br /><span style="font-style:italic;">tcpdump -vttttnnelr /home/rmcree/pcap/fireworks.pcap | ./tcpdump2csv.pl "sip dip ttl" | perl ../graph/afterglow.pl -c /home/rmcree/afterglow/src/perl/graph/color.properties -p 2 | neato -Tgif -o fireworks.gif</span>, and the results look just like the fireworks we hoped they would. <br />Happy 4th of July everyone! <br />Except you Storm a$$hat$. ;-)<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://holisticinfosec.org/analysis/storm/fireworks/fireworks.gif" target="_blan"><img style="display:block; margin:0px auto 10px; text-align:center;cursor:pointer; cursor:hand;width: 320px;" src="http://holisticinfosec.org/analysis/storm/fireworks/fireworks.gif" border="0" alt="" /></a><br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/07/visualized-storm-fireworks-for-your-4th.html&title=Visualized%20Storm%20fireworks%20for%20your%204th%20of%20July " title="Visualized Storm fireworks for your 4th of July ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/07/visualized-storm-fireworks-for-your-4th.html" title="Visualized Storm fireworks for your 4th of July ">digg</a>]]></content:encoded>
      <pubDate>Thu, 03 Jul 2008 16:54:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/4th">4th</category>
      <category domain="http://securityratty.com/tag/fireworks">fireworks</category>
      <category domain="http://securityratty.com/tag/july">july</category>
      <category domain="http://securityratty.com/tag/security visualization">security visualization</category>
      <category domain="http://securityratty.com/tag/happy 4th">happy 4th</category>
      <category domain="http://securityratty.com/tag/peers config list">peers config list</category>
      <category domain="http://securityratty.com/tag/afterglow">afterglow</category>
      <category domain="http://securityratty.com/tag/visualization workshop slides">visualization workshop slides</category>
      <category domain="http://securityratty.com/tag/raffael marty">raffael marty</category>
      <source url="http://holisticinfosec.blogspot.com/2008/07/visualized-storm-fireworks-for-your-4th.html">Visualized Storm fireworks for your 4th of July</source>
    </item>
    <item>
      <title><![CDATA[XSS Comedy at McAfee Secure's Expense]]></title>
      <link>http://securityratty.com/article/415bc504c211b5ee78ee15ea0a533277</link>
      <guid>http://securityratty.com/article/415bc504c211b5ee78ee15ea0a533277</guid>
      <description><![CDATA[In celebration of the deadline for PCI Requirement 6.6 compliance as of June 30, 2008, I thought I'd share a little web app sec comedy at McAfee Secure's expense
As well you should know by know, the...]]></description>
      <content:encoded><![CDATA[In celebration of the deadline for PCI Requirement 6.6 compliance as of June 30, 2008, I thought I'd share a little web app sec comedy at McAfee Secure's expense.<br />As well you should know by know, the existence of XSS vulnerabilities in a site that is required to meet PCI DSS standards means that the site IS NOT PCI COMPLIANT. Very simple, right?<br />Let's consider the McAfee Secure/Hacker Safe-branded site for <a href="http://www.organizeit.com/index.asp" target="_blank">Organize-It</a>.  <br />A seemingly handy site, perfect for your HGTV types, likely with healthy credit card limits. Uh-oh, here it comes. Oh yes, Organize-It handles credit cards and is thus beholden to PCI DSS.<br />Organize-It is also proudly displaying a <span style="font-weight:bold;">current</span> McAfee Secure <a href="https://www.mcafeesecure.com/RatingVerify?ref=www.organizes-it.com" target="_blank">badge</a>, indicating that it's tested <span style="font-weight:bold;">daily</span>.<br />Given the focus of many a recent discussion it shouldn't shock you that Organize-It is vulnerable to XSS. <br />What's funny is what Organize-It does with regard to "handling" malformed requests.<br />Where a typical test string for XSS might be <span style="font-style:italic;">" script payload /script</span> (characters removed or Blogger will let me XSS myself), you won't get much use from such a string via either direct form submittal or URL encoding. But when the site barfed up <span style="font-style:italic;">'; // LEAVE THIS VALUE var sli_cId = 90;</span>, while under investigation, my ruh-roh meter went off. <br />I decided to play with my trusty <span style="font-style:italic;">marquee</span> test and found interesting results. The actual search form field is limited to 41 characters (er?). So my complete string of   <span style="font-style:italic;">" marquee message /marquee</span> didn't fit for direct submittal BUT THE MARQUEE RENDERED ANYWAY! Basically, half the test string worked: <span style="font-style:italic;">" marquee h1 This_site_is_NOT_McAfee_S</span><br />Forget the marquee tag on the blacklist, did we?<br />But here's the real icing on the cake. The uber-intuitive search index reinterpreted my message with what I can only imagine are index keywords. Thus <span style="font-style:italic;">"This site is NOT McAfee Secure"</span> scrolls across the Organize-It site as <span style="font-style:italic;">"this <span style="font-weight:bold;">sit</span> is not <span style="font-weight:bold;">coffee</span> secure"</span>. <br />OMG! My daily quad shot Americano has been pwn3d to the core!<br />Here's the <a href="http://storage.organizeit.com/search?p=Q&ts=custom&w=%22%3E%3Cmarquee%3E%3Ch1%3EThis_site_is_NOT_McAfee_Secure&restricted=mt_restricted_organizesit" target="_blank">URL</a> if you don't believe me, or the <a href="http://holisticinfosec.org/video/organizeit/organizeit.html" target="_blank">video</a> if you prefer.<br />Forget PCI compliance, bring on the Gong Show hook, Chuck!<br />Cheers.<br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/06/xss-comedy-at-mcafee-secures-expense.html&title=XSS%20Comedy%20at%20McAfee%20Secure's%20Expense " title="XSS Comedy at McAfee Secure's Expense ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/06/xss-comedy-at-mcafee-secures-expense.html" title="XSS Comedy at McAfee Secure's Expense ">digg</a>]]></content:encoded>
      <pubDate>Mon, 30 Jun 2008 17:10:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/seemingly handy site">seemingly handy site</category>
      <category domain="http://securityratty.com/tag/mcafee secure">mcafee secure</category>
      <category domain="http://securityratty.com/tag/mcafee">mcafee</category>
      <category domain="http://securityratty.com/tag/test">test</category>
      <category domain="http://securityratty.com/tag/trusty marquee test">trusty marquee test</category>
      <category domain="http://securityratty.com/tag/organize-it site">organize-it site</category>
      <category domain="http://securityratty.com/tag/marquee">marquee</category>
      <category domain="http://securityratty.com/tag/xss">xss</category>
      <source url="http://holisticinfosec.blogspot.com/2008/06/xss-comedy-at-mcafee-secures-expense.html">XSS Comedy at McAfee Secure's Expense</source>
    </item>
    <item>
      <title><![CDATA[Blu-ray Celebration Will be Short Lived]]></title>
      <link>http://securityratty.com/article/ae0ce56fffbfe94ef6ad29e89f505771</link>
      <guid>http://securityratty.com/article/ae0ce56fffbfe94ef6ad29e89f505771</guid>
      <description><![CDATA[I had no vested interested in the battle between HD-DVD and Blu-ray but watched out of interest to study how the techonomy operated. More importantly I was interested in how the techonomy is changing....]]></description>
      <content:encoded><![CDATA[I had no vested interested in the battle between HD-DVD and Blu-ray but watched out of interest to study how the &#8220;techonomy&#8221; operated. More importantly I was interested in how the &#8220;techonomy&#8221; is changing. Now Blu-ray has won the battle of the physical media formats, we can look to the period (in a few short [...]]]></content:encoded>
      <pubDate>Sun, 24 Feb 2008 06:21:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/blu-ray">blu-ray</category>
      <category domain="http://securityratty.com/tag/physical media formats">physical media formats</category>
      <category domain="http://securityratty.com/tag/battle">battle</category>
      <category domain="http://securityratty.com/tag/techonomy">techonomy</category>
      <category domain="http://securityratty.com/tag/short">short</category>
      <category domain="http://securityratty.com/tag/period">period</category>
      <category domain="http://securityratty.com/tag/hd-dvd">hd-dvd</category>
      <category domain="http://securityratty.com/tag/study">study</category>
      <category domain="http://securityratty.com/tag/importantly">importantly</category>
      <source url="http://securitybuddha.com/2008/02/24/blu-ray-celebration-will-be-short-lived/">Blu-ray Celebration Will be Short Lived</source>
    </item>
    <item>
      <title><![CDATA[This Cupid I don't need]]></title>
      <link>http://securityratty.com/article/2d93e511671f1c814b3c3583624f523e</link>
      <guid>http://securityratty.com/article/2d93e511671f1c814b3c3583624f523e</guid>
      <description><![CDATA[With this weeks festive Valentine's Day celebration upon us, the social engineers are back at work. These folks come up with new and innovative ways to get you to open email and then own your machine....]]></description>
      <content:encoded><![CDATA[<a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp3.blogger.com/_hafMI9V8sC8/R7IIKcQGAuI/AAAAAAAAAFM/R-iSsvXh6nE/s1600-h/cupid_tattoo.jpg"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp3.blogger.com/_hafMI9V8sC8/R7IIKcQGAuI/AAAAAAAAAFM/R-iSsvXh6nE/s320/cupid_tattoo.jpg" alt="" id="BLOGGER_PHOTO_ID_5166200698022789858" border="0" /></a><br />With this weeks festive Valentine's Day celebration upon us, the social engineers are back at work. These folks come up with new and innovative ways to get you to open email and then own your machine. The payload is usually the eponymous Storm worm, so be on your guard. You can get more details about what the <a href="http://www.networkworld.com/community/node/24930">FBI thinks is in store for the rest of this week</a>.<br /><br />Don't fall for it. By using the tactics discussed in <a href="http://www.securitymike.com">Security Mike's Guide</a> you are reasonably protected, but there is nothing that substitutes for good old common sense.<br /><br />I'm sure you have plenty of secret admirers, hopefully they'll send you flowers. Email solicitations to click on links, you don't need. If it seems too good to be true, it is. If it's a love note from someone that doesn't love you, don't open it.<br /><br />The best way to protect yourself online is constant vigilance. Expect the worst from folks on the Internet, they rarely let you down.<br /><br /><span style="font-size:85%;">Cupid image originally uploaded by <a href="http://www.flickr.com/photos/shoelessjoe/2052098058/">Shoeless Joe/64.</a></span><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/SecurityMike?a=qqgJvfE"><img src="http://feeds.feedburner.com/~f/SecurityMike?i=qqgJvfE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SecurityMike?a=cWlLdRe"><img src="http://feeds.feedburner.com/~f/SecurityMike?i=cWlLdRe" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SecurityMike?a=hcPFbSe"><img src="http://feeds.feedburner.com/~f/SecurityMike?i=hcPFbSe" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/SecurityMike/~4/233957916" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 12 Feb 2008 12:45:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/email solicitations">email solicitations</category>
      <category domain="http://securityratty.com/tag/love note">love note</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/love">love</category>
      <category domain="http://securityratty.com/tag/weeks festive valentine">weeks festive valentine</category>
      <category domain="http://securityratty.com/tag/eponymous storm worm">eponymous storm worm</category>
      <category domain="http://securityratty.com/tag/day celebration">day celebration</category>
      <category domain="http://securityratty.com/tag/secret admirers">secret admirers</category>
      <category domain="http://securityratty.com/tag/shoeless joe64">shoeless joe64</category>
      <source url="http://feeds.feedburner.com/~r/SecurityMike/~3/233957916/this-cupid-i-dont-need.html">This Cupid I don't need</source>
    </item>
    <item>
      <title><![CDATA[Peruvian Anti-Riot Police Uniforms: Judge Dredd Meets Batman]]></title>
      <link>http://securityratty.com/article/2134c732067ca57d1bdf8ad0a5438d03</link>
      <guid>http://securityratty.com/article/2134c732067ca57d1bdf8ad0a5438d03</guid>
      <description><![CDATA[These happy characters are Peruvian anti-riot police, who are here seen parading in celebration of Peru's independence day yesterday. Yes, they are terrifying. This makes Peru the latest entry in a...]]></description>
      <content:encoded><![CDATA[These happy characters are Peruvian anti-riot police, who are here seen parading in celebration of Peru's independence day yesterday. Yes, they are terrifying. This makes Peru the latest entry in a long list of countries I will try to avoid rioting in. I'm still all about rioting in Canada and Sweden, however]]></content:encoded>
      <pubDate>Mon, 04 Feb 2008 17:10:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/peruvian anti-riot police">peruvian anti-riot police</category>
      <category domain="http://securityratty.com/tag/independence day yesterday">independence day yesterday</category>
      <category domain="http://securityratty.com/tag/peru">peru</category>
      <category domain="http://securityratty.com/tag/happy characters">happy characters</category>
      <category domain="http://securityratty.com/tag/entry">entry</category>
      <category domain="http://securityratty.com/tag/avoid">avoid</category>
      <category domain="http://securityratty.com/tag/celebration">celebration</category>
      <category domain="http://securityratty.com/tag/canada">canada</category>
      <category domain="http://securityratty.com/tag/countries">countries</category>
      <source url="http://digg.com/security/Peruvian_Anti_Riot_Police_Uniforms_Judge_Dredd_Meets_Batman">Peruvian Anti-Riot Police Uniforms: Judge Dredd Meets Batman</source>
    </item>
  </channel>
</rss>
