<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: charles]]></title>
    <link>http://securityratty.com/tag/charles</link>
    <description></description>
    <pubDate>Thu, 13 Mar 2008 10:06:23 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Links List 9.5.08]]></title>
      <link>http://securityratty.com/article/a76e7e02c1b33be171e4bf894b4cceda</link>
      <guid>http://securityratty.com/article/a76e7e02c1b33be171e4bf894b4cceda</guid>
      <description><![CDATA[Sanjay Kumar is singing like a canary from federal prison. Just when you thought it was over, the CA accounting scandal is back and even more juicy. Ex-CEO Kumar is about a year into his 12-year...]]></description>
      <content:encoded><![CDATA[<p>Sanjay Kumar is <a href="http://online.wsj.com/article/SB122049724868198047.html?mod=djemTECH" target="_blank">singing like a canary</a> from federal prison. Just when you thought it was over, the CA accounting scandal is back and even more juicy. Ex-CEO Kumar is about a year into his <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2006/11/sanjay_kumar_ge.html" target="_blank">12-year prison term</a> but still busy pointing the finger at everyone else who he says knew about the company’s fraudulent accounting practices that lead to $2.2 billion in misstated revenue. From a former Salomon Brothers vice chairman to a former US senator to company founder <a href="http://blogs.computerworld.com/sanjay_kumar_hero_or_villain" target="_blank">Charles Wang</a>, it looks like open season on CA board directors.
<p>Ten days before <a href="http://www.vmworld.com/conferences/2008" target="_blank">VMworld</a> and VMware still can’t get good press. First their CEO, Diane Greene, gets ousted, then a high-profile <a href="http://toutvirtual.com/blogs/2008/09/02/vmware-really-hurting-or-just-really-bad-timing-for-a-simple-mistake/" target="_blank">licensing bug</a> is found and now the Director of R&amp;D, <a href="http://blogs.eweek.com/first_read/content/virtualization/vmware_rd_chief_resignation_is_bad_timing.html" target="_blank">Richard Sarwal</a>, leaves his $1.25 million salary after just 7 months. (Note to self: get into R&amp;D) It will be interesting to take the pulse of the VMware community at the show and in person. And in the meantime, Microsoft Hyper-V comes out of the gate with customers already <a href="http://www.nwwsubscribe.com/news/2008/082608-how-hyper-v-helped-my-it.html" target="_blank">touting its benefits</a>.
<p><a href="http://blog.sciencelogic.com/wp-content/uploads/2008/09/borg-jean-luc.jpg"><img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="243" alt="borg_jean-luc" src="http://blog.sciencelogic.com/wp-content/uploads/2008/09/borg-jean-luc-thumb.jpg" width="244" border="0"></a> </p>
<p>The hypervisor is the “new” operating system. If you didn’t think that before, take a look at Red Hat’s purchase of Qumranet for $107 million. With Qumranet, Red Hat gets KVM, described by <a href="http://www.infoworld.com/article/08/09/04/Red_Hat_buys_Qumranet_to_extend_virtualization_reach_1.html?source=NLC-DAILY&amp;cgd=2008-09-04" target="_blank">CTO Brian Stevens</a> as an extension to the Linux kernel that allows it to be used as a bare-metal hypervisor, running directly on the underlying hardware and hosting guest operating systems. But according to <a href="http://www.brianmadden.com/blog/BrianMadden/Red-Hat-buys-Qumranet-for-107M-What-does-this-mean-for-KVM-and-SolidICE" target="_blank">Brian Madden,</a> the “press” around the purchase is all focusing on the not-so-interesting part. Along with KVM, the SolidICE product includes Spice, a remote display protocol for VDI. </p>
<blockquote><p>I wonder if this will be like Symantec buying Altiris or Microsoft buying Softricity, where the portion that we care about sort of loses focus as The Borg concentrates on the parts of the acquired technology that are more relevant to them?</p>
</blockquote>
<p>(I’m a sucker for quotes that reference The Borg)
<p>Network World publishes “<a href="http://www.networkworld.com/news/2008/090208-open-to-watch.html?page=1">10 open source companies to watch</a>”. On the list, Qumranet!
<p>Also on the list: Kickfire, Marketcetera, Vyatta, Sonatype, Untangle, XAware, SnapLogic, Acquia and Openmoko. What’s best about the list: <a href="http://news.cnet.com/8301-13505_3-10030356-16.html?part=rss&amp;subj=news&amp;tag=2547-1_3-0-20" target="_blank">Matt Asay</a> gives it a thumbs up. </p>
]]></content:encoded>
      <pubDate>Fri, 05 Sep 2008 14:52:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/list">list</category>
      <category domain="http://securityratty.com/tag/brian">brian</category>
      <category domain="http://securityratty.com/tag/cto brian stevens">cto brian stevens</category>
      <category domain="http://securityratty.com/tag/purchase">purchase</category>
      <category domain="http://securityratty.com/tag/red hats purchase">red hats purchase</category>
      <category domain="http://securityratty.com/tag/hypervisor">hypervisor</category>
      <category domain="http://securityratty.com/tag/million">million</category>
      <category domain="http://securityratty.com/tag/million salary">million salary</category>
      <category domain="http://securityratty.com/tag/bare-metal hypervisor">bare-metal hypervisor</category>
      <source url="http://blog.sciencelogic.com/links-list-9508/09/2008">Links List 9.5.08</source>
    </item>
    <item>
      <title><![CDATA[Should BRIC be BIIC?]]></title>
      <link>http://securityratty.com/article/aa3f442ce62735204c29d3d8180fc691</link>
      <guid>http://securityratty.com/article/aa3f442ce62735204c29d3d8180fc691</guid>
      <description><![CDATA[People who follow emerging economies know BRIC (Brazil, Russia, India, China). There are some serious doubts on Russia's margin of safety for investors,(see previous post ), noted China bull Jim...]]></description>
      <content:encoded><![CDATA[<p>People who follow emerging economies know BRIC (Brazil, Russia, India, China). There are some serious doubts on Russia&#39;s margin of safety for investors,(see previous <a href="http://1raindrop.typepad.com/1_raindrop/2008/08/corporate-identity-theft.html">post</a>), noted China bull <a href="http://www.moneymorning.com/2008/04/15/jim-rogers-chinas-economic-advance-is-all-but-unstoppable/">Jim Rogers</a></p><br /><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">&quot;Q: Where do you see Russia fitting into this as it comes onto the scene?</span></p><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">Rogers: I don’t. Russia will continue to disintegrate. The Soviet Union has already broken up into 15 countries. Putin controls Petersburg, Moscow, a few airports, et cetera, but Russia never has been a homogeneous [nation] - I mean, in the Soviet Union there were 124 - the &quot;official&quot; number was 124 - ethnic, linguistic, religious, historic and national groups.&#160;</span></p><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">It’s broken up into 15 states. It’ll be 50 … it’ll be 100 [states] before it’s over. Ukraine may break up next. Who knows who’ll break up [after that]? Maybe even parts of Russia.&#160;</span></p><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">To the bulls who say I’m wrong, my rejoinder is this: Let me ask you about Chechnya. The Russians have been trying to deal with Chechnya for 15 years with no success.&#160;</span></p><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">Chechnya’s the size of Connecticut. Chechnya has a million-and-a-half people. If they can’t handle Chechnya, how is the Soviet Union, or Russia, going to handle these other places that are pulling away?&#160;</span></p><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">There’s capitalism there, but it’s outlaw capitalism. If you’re good with dealing with the Mafia, you can probably make a fortune, if you’re on the ground [there]. For the most part, they have a lot of natural resources, which has been great.&#160;</span></p><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">They have huge foreign reserves, but they’re stripping the assets.&#160;</span></p><p><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal; ">They’re not reinvesting for the most part in productive capacity. They’re stripping the assets. You know, oil production has peaked in Russia, even though there could conceivably be gigantic amounts of oil there somewhere. Nearly everything has peaked, because they have been stripping the assets, rather than reinvesting. &quot;</span></p></blockquote><div><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal;"><br /></span></div><div><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal;">To quote Charles Barkley &quot;that&#39;s why I don&#39;t eat shrimp.&quot; The future for all the BRIC countries is probably bright in the long run, but in the short run where is the margin of safety for an investor in Russia?</span></div><div><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal;"><br /></span></div><div><span style="font-family: &#39;Times New Roman&#39;; font-size: 16px; line-height: normal;">Maybe instead of BRIC it should BIIC - Brazil, India, Indonesia and China. Indonesia just reported its seventh consecutive quarter of GDP growth in excess of 6%. Its the fourth largest country in the world with 240 million people and 17,000 islands. Its one to watch.</span></div>]]></content:encoded>
      <pubDate>Sat, 16 Aug 2008 06:14:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/russia">russia</category>
      <category domain="http://securityratty.com/tag/bric">bric</category>
      <category domain="http://securityratty.com/tag/handle">handle</category>
      <category domain="http://securityratty.com/tag/soviet union">soviet union</category>
      <category domain="http://securityratty.com/tag/handle chechnya">handle chechnya</category>
      <category domain="http://securityratty.com/tag/chechnya">chechnya</category>
      <category domain="http://securityratty.com/tag/countries">countries</category>
      <category domain="http://securityratty.com/tag/bric countries">bric countries</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/08/should-bric-be-biic.html">Should BRIC be BIIC?</source>
    </item>
    <item>
      <title><![CDATA[Black Hat Talks Pulled After Industry Pressure]]></title>
      <link>http://securityratty.com/article/c3044e32c6768e8b02d36302280ca590</link>
      <guid>http://securityratty.com/article/c3044e32c6768e8b02d36302280ca590</guid>
      <description><![CDATA[A few Apple-related talks scheduled for next weeks Black Hat conference have been cut from the line-up, presumably because they would reveal too much insider information about vulnerabilities
Brian...]]></description>
      <content:encoded><![CDATA[<p>A few Apple-related talks scheduled for next week&#8217;s Black Hat conference have been cut from the line-up, presumably because they would reveal too much insider information about vulnerabilities.</p>
<p>Brian Krebs has the details&#8211;</p>
<blockquote><p>
Charles Edge, a researcher from Georgia, had been slated to discuss his research on a weakness that could be used to defeat FileVault encryption on the Mac. But sometime last week, Black Hat organizers pulled his name and presentation listing from its schedule of talks.</p>
<p>Contacted via cell phone, Edge said he signed confidentiality agreements with Apple, which prevents him from speaking on the topic and from discussing the matter further.</p>
<p>Almost every year, much of the drama leading up to and during Black Hat seems to revolve around talks that are canceled or censored at the last minute for various legal reasons. </p></blockquote>
<p>Read the full article <a rel="nofollow" target="_blank" href="http://voices.washingtonpost.com/securityfix/2008/07/black_hat_talk_on_apple_encryp_1.html">here.</a></p>]]></content:encoded>
      <pubDate>Wed, 06 Aug 2008 08:39:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/black hat">black hat</category>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/black hat organizers">black hat organizers</category>
      <category domain="http://securityratty.com/tag/charles edge">charles edge</category>
      <category domain="http://securityratty.com/tag/defeat filevault encryption">defeat filevault encryption</category>
      <category domain="http://securityratty.com/tag/edge">edge</category>
      <category domain="http://securityratty.com/tag/insider information">insider information</category>
      <category domain="http://securityratty.com/tag/cell phone">cell phone</category>
      <category domain="http://securityratty.com/tag/confidentiality agreements">confidentiality agreements</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/357716132/">Black Hat Talks Pulled After Industry Pressure</source>
    </item>
    <item>
      <title><![CDATA[Long Island Proposal Snags Again, on Poles]]></title>
      <link>http://securityratty.com/article/479733758aebc5a0eefa89ed8a473de2</link>
      <guid>http://securityratty.com/article/479733758aebc5a0eefa89ed8a473de2</guid>
      <description><![CDATA[Long Island proposal still mired: The plan to put Wi-Fi up across two Long Island counties has seemed doomed to me from the start. The company that won the bid was untested, and its other...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.newsday.com/news/local/ny-liwifi0728,0,7393890.story?track=rss"><strong>Long Island proposal still mired:</strong></a> The plan to put Wi-Fi up across two Long Island counties has seemed doomed to me from the start. The company that won the bid was untested, and its other in-deployment or in-proposal networks are off the table. Expertise aside, it needs tens of millions to build such a network, and financing for company-funded metro-scale projects is not available. The counties involved have pledged no purchases of services. And, perhaps the final stroke, the local utility says that E-Path doesn't meet the test of being a telecom and paying less than $10 per year for pole placement, but instead must pay the all-comer rate of $50 per year.</p>

<p>This is a critical distinction. Telecoms are covered under the Telecom Act of 1996 that requires non-discriminatory access to utility poles to avoid incumbent local exchange carriers (ILECs) and utilities from being gatekeepers that prevent competitive service from emerging. There are a series of tests in the law and local qualifications, too, that allow a firm to be a registered telecom. An FCC decision last year ruled that companies that mix telecom and unregulated information services on the same wires aren't disqualified from getting the Telecom Act deal, however. </p>

<p>But E-Path seems to meet none of the criteria except their desire to pay $10 instead of $50 per year per pole. Utility poles have held up many other municipal networks. We're not hearing more about them these days because such networks are now being built on a smaller scale for different purposes, where the number of nodes and their placement is rather different than networks built with the intent of providing indoor coverage.</p>

<p>Cablevision, by the way, qualifies as a telecom, this article states, which helps them in placing nodes for their planned $300m network across their coverage territory. They can also mount nodes in-line with their cable lines, using power from their cable plant on the lines already.</p>

<p>E-Path appears to have a variety of communication problems as well. The article notes, "Tortoretti said his Washington, D.C., attorneys disagree with LIPA's interpretation. But the attorney Tortoretti said represents E-Path, Charles Rohe, said he couldn't speak about the company or the dispute."</p>

<p>Later, E-Path's "chief executive said he hopes the county will help with his LIPA dispute." But an aide to the Suffolk County executive said, "That's not really our issue. That's out of our control."</p>

<p>Correspondent Craig Plunkett, quoted near the end, points out that if the counties were to change their minds and want to buy services on the network, the proposal would have to be rebid (appears as the sound-alike "rebuild" by accident in the online article at this moment).</p>]]></content:encoded>
      <pubDate>Mon, 28 Jul 2008 07:07:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/telecom act">telecom act</category>
      <category domain="http://securityratty.com/tag/telecom act deal">telecom act deal</category>
      <category domain="http://securityratty.com/tag/telecom">telecom</category>
      <category domain="http://securityratty.com/tag/proposal">proposal</category>
      <category domain="http://securityratty.com/tag/island proposal">island proposal</category>
      <category domain="http://securityratty.com/tag/e-path">e-path</category>
      <category domain="http://securityratty.com/tag/networks">networks</category>
      <category domain="http://securityratty.com/tag/represents e-path">represents e-path</category>
      <category domain="http://securityratty.com/tag/municipal networks">municipal networks</category>
      <source url="http://wifinetnews.com/archives/008403.html">Long Island Proposal Snags Again, on Poles</source>
    </item>
    <item>
      <title><![CDATA[Fake Porn Sites Serving Malware - Part Two]]></title>
      <link>http://securityratty.com/article/86e13cf5a3ac03ff0da9f40355440a24</link>
      <guid>http://securityratty.com/article/86e13cf5a3ac03ff0da9f40355440a24</guid>
      <description><![CDATA[What we've go here is the same malware gang using the very same malicious ISP among the ones you rarely see in any report , continuing to crunch out domain redirectors using the same templates for...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div>
<div class="separator" style="text-align: center; clear: both;"></div>
<a href="http://bp3.blogger.com/_wICHhTiQmrA/SHHrzCPIfDI/AAAAAAAAB4E/7qxOVh8ZjQQ/s1600-h/fake_porn_malware_domains_farm.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp3.blogger.com/_wICHhTiQmrA/SHHrzCPIfDI/AAAAAAAAB4E/JTiTcBU_mq4/s200-R/fake_porn_malware_domains_farm.JPG" style="border: 0pt none ;" /></a>What we've go here is the same malware gang using the very same <a href="http://ddanchev.blogspot.com/2008/06/malicious-isps-you-rarely-see-in-any.html">malicious ISP among the ones you rarely see in any report</a>, continuing to crunch out domain redirectors using the same templates for fake porn sites. And since some of the fake sites are actual redirectors, periodically revisting them leads to more fake codecs and even more actionable intelligence into the nature of their practices, and which are the ISPs proving them with hosting services for several consecutive years.<br />
<br />
The main redirector in this campaign <b>popular-adult.com</b> is also responding to :<br />
<br />
<div style="text-align: left;"><b>basic-adult .com<br />
business-adult .com<br />
center-adult .com<br />
comp-adult .com<br />
compadult .com<br />
controladult .com<br />
cruiseporn .com<br />
drive-adult .com<br />
ebony-adult-video .com</b></div>
<div style="text-align: left;"><b>ebony-pornmovie .com</b></div>
<a href="http://bp3.blogger.com/_wICHhTiQmrA/SHICb9Bw1GI/AAAAAAAAB4U/vHROBrIH6vM/s1600-h/popular_adult_CERNEL_ATRIVO.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp3.blogger.com/_wICHhTiQmrA/SHICb9Bw1GI/AAAAAAAAB4U/jIZzb-nymvc/s200-R/popular_adult_CERNEL_ATRIVO.JPG" style="border: 0pt none ;" /></a><b>ebony-video-xxx .com<br />
engine-adult .com<br />
fat-</b>a<b>dult-video .com<br />
fat-pornmovie .com<br />
fat-video-xxx .com<br />
global-adult .com<br />
inc-adult .com<br />
name-adult .com<br />
nameadult .com<br />
other-adult .com<br />
partadult .com<br />
pleasureadult .com<br />
porn-abc .com<br />
porn-contact .com<br />
porn-global .net<br />
porn-go .net<br />
porn-group .net<br />
porn-party .net<br />
porn-play .net<br />
porn-plus .net<br />
porn-power .net<br />
porn-room .net<br />
pornabout .com<br />
porndrive .net<br />
pornhelp .net<br />
pornname .net<br />
pornstar-adult-video .com<br />
pornstar-pornmovie .com<br />
pornstar-video-xxx .com<br />
room-adult .com<br />
scan-adult .com<br />
seek-adult .com<br />
u-adult .com</b><br />
<br />
The secondary redirectors going out of popular-adult.com :<br />
<br />
<div style="text-align: left;"></div>
<div class="separator" style="text-align: center; clear: both;"></div>
<a href="http://bp1.blogger.com/_wICHhTiQmrA/SHIFY0buIsI/AAAAAAAAB4k/NE0nt-J_MWg/s1600-h/fake_porn_redirectors.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp1.blogger.com/_wICHhTiQmrA/SHIFY0buIsI/AAAAAAAAB4k/55mFJcgdujQ/s200-R/fake_porn_redirectors.JPG" style="border: 0pt none ;" /></a><b>pornname .net/ted/382634557/1/<br />
porn-abc .com/ike/1666520193/1/<br />
pornhelp .net/dense/876421348/1/<br />
porn-play .net/cristina/1970565499/1/<br />
porn-global .net/percival/330780624/1/<br />
porn-contact .com/cisse/854714304/1/<br />
porn-play .net/honora/888715608/1/<br />
pornname .net/deidre/1964468519/1/<br />
pornhelp .net/pip/1977382266/1/<br />
porndrive .net/shelton/767217618/1/<br />
pornhelp .net/mat/354381578/1/<br />
pornabout .com/tobe/1436617289/1/<br />
porn-go .net/samson/7633197/1/<br />
porn-contact .com/teresa/409084583/1/<br />
porn-party .net/basil/1305549820/1/<br />
porn-contact .com/ed/1067772053/1/<br />
porn-contact .com/frish/1287341391/1/<br />
pornname .net/mariah/53967973/1/<br />
pornname .net/jacobus/291129748/1/<br />
porn-plus .net/beverly/2122167311/1/<br />
porn-party .net/lulu/917088357/1/<br />
pornabout .com/boetius/1991451664/1/<br />
cruiseporn .com/padde/1296397392/1/<br />
porn-power .net/arch/334137732/1/<br />
cruiseporn .com/meta/377489795/1/<br />
porn-room .net/lynette/1518855371/1/<br />
porn-play .net/link/1975737157/1/<br />
hporn-global .net/vin/1241430020/1/<br />
porndrive .net/dunk/1245242641/1/<br />
porn-go .net/louisa/1685718172/1/<br />
pornhelp .net/dunk/1859215260/1/<br />
porn-contact .com/celia/1805798677/1/<br />
porn-play .net/anabelle/987641695/1/<br />
porn-room .net/rille/815076192/1/<br />
pornabout.com/hodge/1040019816/1/<br />
porn-abc .com/claes/1130748100/1/<br />
pornabout .com/frederick/1987458246/1/<br />
porn-go .net/fredde/1153431432/1/<br />
porn-party .net/felicity/705720374/1/<br />
porndrive .net/ginne/1183690031/1/<br />
porn-group .net/kimberle/706468800/1/<br />
porn-room .net/helen/565953612/1/<br />
porn-party .net/arche/1387111363/1/<br />
porn-contact .com/kingston/232354071/1/<br />
pornhelp .net/mima/1024064014/1/<br />
porn-power .net/gretchen/152347961/1/<br />
porn-contact .com/ophelia/840853119/1/<br />
porn-play .net/eleanor/88926029/1/<br />
porn-power .net/bella/1712681771/1/<br />
porn-global .net/melchizedek/1823498218/1/<br />
pornabout .com/gabbe/1478560492/1/<br />
porn-party .net/obedience/1540587230/1/<br />
porndrive .net/rod/1177331120/1/<br />
porn-play .net/gee/1314369182/1/<br />
pornname .net/phineas/975226015/1/<br />
porn-global .net/reynold/131075998/1/<br />
porndrive .net/bat/1542809624/1/<br />
porn-global .net/hans/400396810/1/<br />
porn-contact .com/mock/1738069316/1/<br />
porn-plus .net/tryphosia/354085313/1/<br />
porn-room .net/bazaleel/1417267786/1/<br />
porn-contact .com/joyce/353938308/1/<br />
porn-power .net/laine/780004499/1/<br />
pornhelp .net/mille/988856007/1/<br />
cruiseporn .com/dare/258399427/1/<br />
porn-global .net/nat/2039108680/1/<br />
pornname .net/eudora/2132399934/1/<br />
porn-go .net/ana/277211595/1/<br />
pornhelp .net/auge/1990287956/1/<br />
porn-contact .com/danial/1195423348/1/<br />
porn-abc .com/teresa/1787982397/1/<br />
porn-go .net/lawrence/1575543567/1/<br />
porn-go .net/sherre/1066718744/1/<br />
porn-contact .com/jack/657185819/1/<br />
porn-abc .com/manda/216390544/1/<br />
porn-party .net/chuck/1533427157/1/<br />
porndrive .net/lucille/215841052/1/<br />
cruiseporn .com/rodney/1024994863/1/<br />
pornname .net/sheldon/669324635/1/<br />
porn-global .net/janet/1677642355/1/<br />
porn-global .net/basil/635902337/1/<br />
porn-party .net/adela/980553444/1/<br />
cruiseporn .com/charles/2038221862/1/<br />
pornabout .com/sid/644600064/1/<br />
porn-abc .com/eloise/1882289515/1/<br />
porndrive .net/bryant/724023427/1/<br />
porn-party .net/bonne/305120344/1/<br />
porn-play .net/susan/826151266/1/<br />
porn-room .net/sheila/439221958/1/<br />
porn-go .net/valere/1498454342/1/<br />
porn-contact .com/asenath/1036530205/1/<br />
porn-plus .net/marcus/51947065/1/<br />
porn-party .net/bridgit/518065759/1/<br />
porn-plus.net/shawn/1427002427/1/<br />
cruiseporn.com/alicia/1252994155/1/<br />
porn-abc.com/arminda/975985679/1/<br />
porn-party.net/lionel/929052416/1/<br />
porn-contact .com/ande/1755833202/1/<br />
porn-power .net/cyrus/732691977/1/<br />
aboutadultsex .com/heloise/1008109638/1/<br />
adultzoneworld .com/barne/506956701/1/<br />
superporncity .com/roberta/1239682918/1/<br />
pornhelp .net/eurydice/1944564451/1/<br />
theadultpost .com/volodia/543769984/1/<br />
porn-play .net/bird/760635633/1/<br />
coolbestporn .com/bradford/578099145/1/<br />
porn-plus .net/delilah/465854735/1/<br />
porn-power .net/pheney/698426424/1/<br />
porn-party .net/cristina/940229631/1/<br />
porn-party .net/justin/1913395886/1/<br />
porn-contact .com/lotte/1794233444/1/<br />
porn-party .net/nowell/850070721/1/<br />
worldbestadult .com/parthenia/1858633626/1/<br />
funpornsite .com/patience/188018581/1/<br />
adultsexpro .com/isse/1981168802/1/<br />
adultsexpro .com/isabelle/683364151/1/<br />
porndrive .net/erne/906935790/1/<br />
porn-power .net/delpha/178727494/1/<br />
porn-plus .net/chesley/1261676752/1/<br />
porn-plus .net/selina/11889629/1/<br />
porntimeguide .com/arnold/1555784224/1/<br />
aboutadultsex .com/doug/1975246767/1/<br />
porn-global .net/clum/1615653087/1/<br />
funxxxporn .com/kym/739810260/1/<br />
porn-plus .net/roxane/2022633909/1/<br />
worldbestadult .com/vicke/955775101/1/<br />
porn-play .net/jane/1396714471/1/<br />
pornname .net/nicole/1695768032/1/<br />
adultvideodot .com/bela/96070992/1/<br />
porn-room .net/carre/1310194786/1/<br />
adultsexpro .com/azubah/141802741/1/<br />
theadulteye .com/pheney/1077328499/1/<br />
porn-party .net/chick/1522449297/1/<br />
aboutadultsex .com/elbert/1300176621/1/<br />
findadultsex .com/lorre/2057361400/1/<br />
teenporntop .com/aristotle/901956477/1/<br />
coolbestporn .com/bartel/94175118/1/<br />
porn-plus .net/deanne/70540201/1/<br />
coolbestporn .com/appe/1679745028/1/<br />
findadultsex .com/asaph/1439353641/1/<br />
pornxxxfilm .com/tone/904077420/1/<br />
funxxxporn .com/india/476477713/1/<br />
adultvideodot .com/ed/879863981/1/<br />
bestpriceporn .com/babbe/1457040435/1/<br />
superliveporn .com/russell/56570486/1/</b><br />
<br />
More fake porn video sites using similar site templates, and using the same redirection infrastructure :<br />
<br />
<a href="http://bp1.blogger.com/_wICHhTiQmrA/SHIFIM-11XI/AAAAAAAAB4c/TWE3MI4BkNk/s1600-h/best-codec_crawled.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp1.blogger.com/_wICHhTiQmrA/SHIFIM-11XI/AAAAAAAAB4c/tmD1w9q0Ct0/s200-R/best-codec_crawled.JPG" style="border: 0pt none ;" /></a><b>porntubev20 .com<br />
clearpornurlssite .com<br />
mypornmovies .net<br />
getyourfreemovie .com<br />
tubescollection .com<br />
free-best-porn .com/videos/<br />
pornmovieshare .com<br />
clipslab .com<br />
mybestvideosite .com<br />
avwav .com</b><b> </b><br />
<br />
The fake codecs download locations in this campaign :<b>&nbsp;</b><br />
<br />
<b>aviutility .com<br />
18x-adult2008 .com<br />
2008x-adult-2008 .com<br />
best-codec .com<br />
hq-codec .net<br />
mpegsystem .com<br />
bestsoft-ware08 .com</b><br />
<br />
<b>The registrant and hosting provider :</b><br />
<br />
Cernel Inc, Legal Department&nbsp; (support@cernel.net)<br />
23404 W. Lyons Ave #223, Santa Clarita, Ca,91321<br />
US, Tel. +1.6613470577<br />
<br />
Historically, the same gang has been using the same hosting provider for many other fake codecs, which remain parked on the same netblock in a standby mode :<br />
<br />
<b>Fire-ticket .com</b> - 64.28.184.162<br />
<b>Fire-codec .com</b> - 64.28.184.163<br />
<b>Light-ticket .com</b> - 64.28.184.163<br />
<b>Braketicket .com</b> -&nbsp; 64.28.184.164<br />
<b>Mooncodec .net </b>- 64.28.184.164<br />
<b>Light-codec .com</b> - 64.28.184.165<br />
<b>Turbo-ticket .com</b> - 64.28.184.165<br />
<b>Space-codec .com</b> - 64.28.184.166<br />
<b>Ultra-ticket .com</b> - 64.28.184.166<br />
<b>Brakecodec .com</b> - 64.28.184.167<br />
<b>Demo-ticket .com</b> - 64.28.184.167<br />
<b>Demoticket .net</b> - 64.28.184.168<br />
<b>Hq-ticket .com</b> - 64.28.184.168<br />
<b>Turbo-codec .com</b> - 64.28.184.168<br />
<b>Hqticket .com</b> - 64.28.184.169<br />
<b>End-ticket .com</b> - 64.28.184.169<br />
<b>Nitro-codec .com</b> - 64.28.184.169<br />
<b>Hqticket .net</b> - 64.28.184.170<br />
<b>Clean-ticket .com</b> - 64.28.184.170<br />
<b>Red-codec .com</b> - 64.28.184.170<br />
<b>Black-codec .com</b> - 64.28.184.171<br />
<b>Viva-ticket .com</b> - 64.28.184.171<br />
<b>Niceticket .net</b> - 64.28.184.171<br />
<b>Endticket .com</b> - 64.28.184.172<br />
<b>Ultra-codec .com</b> - 64.28.184.172<br />
<b>Wot-ticket .com</b> - 64.28.184.172<br />
<b>Mega-codec .net</b> - 64.28.184.173<br />
<b>Storm-ticket .com</b> - 64.28.184.173<br />
<b>Megaz-ticket .com</b> - 64.28.184.174<br />
<b>Vipcodec .net</b> - 64.28.184.174<br />
<b>Democodec .net</b> - 64.28.184.175<br />
<b>Giga-ticket .com</b> - 64.28.184.175<br />
<b>Demo-codec .net</b> - 64.28.184.176<br />
<b>Uin-ticket .com</b> - 64.28.184.176<br />
<b>Hopeticket .com</b> - 64.28.184.177<br />
<b>Hq-codec .net</b> - 64.28.184.177<br />
<b>Best-codec .com</b> - 64.28.184.178<br />
<b>Hope-ticket .com</b> - 64.28.184.178<br />
<b>Endcodec .net</b> - 64.28.184.179<br />
<b>Zero-ticket .com</b> - 64.28.184.179<br />
<b>End-codec .net</b> - 64.28.184.180<br />
<b>Pop-ticket .com</b> - 64.28.184.180<br />
<b>Cleancodec .net</b> - 64.28.184.181<br />
<b>Yupticket .com</b> - 64.28.184.181<br />
<br />
The deeper you go the more interesting it gets, malware command and controls located on the same network, fake banks, money mule recruitment sites, pharmaceutical scams and spam hosting - they or their customers if they are to forward the responsibility are definitely multitasking.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/06/fake-porn-sites-serving-malware.html">Fake Porn Sites Serving Malware</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/underground-multitasking-in-action.html">Underground Multitasking in Action</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/fake-celebrity-video-sites-serving.html">Fake Celebrity Video Sites Serving Malware</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/blackhat-seo-redirects-to-malware-and.html">Blackhat SEO Redirects to Malware and Rogue Software</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/malicious-doorways-redirecting-to.html">Malicious Doorways Redirecting to Malware</a><br />
<a href="http://ddanchev.blogspot.com/2008/03/portfolio-of-fake-video-codecs.html">A Portfolio of Fake Video Codecs</a> <br />
<div style="text-align: left;"></div>
<div class="separator" style="text-align: center; clear: both;"></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=TrZhTJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=TrZhTJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=WEgFzJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=WEgFzJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=feuAKj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=feuAKj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sTFsEj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sTFsEj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=yitXlJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=yitXlJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Zk1jsJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Zk1jsJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=qQDKaj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=qQDKaj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/329627841" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 07 Jul 2008 23:24:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/net">net</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/porn-party">porn-party</category>
      <category domain="http://securityratty.com/tag/porn-contact">porn-contact</category>
      <category domain="http://securityratty.com/tag/fake porn sites">fake porn sites</category>
      <category domain="http://securityratty.com/tag/porn-play">porn-play</category>
      <category domain="http://securityratty.com/tag/porn-plus">porn-plus</category>
      <category domain="http://securityratty.com/tag/porndrive">porndrive</category>
      <category domain="http://securityratty.com/tag/pornhelp">pornhelp</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/329627841/fake-porn-sites-serving-malware-part.html">Fake Porn Sites Serving Malware - Part Two</source>
    </item>
    <item>
      <title><![CDATA[U.S. Arms Dealer Tests Legal Bounds in Middle East Arms Bazaar]]></title>
      <link>http://securityratty.com/article/a494b708fadf3d4f453c6495d8064dc2</link>
      <guid>http://securityratty.com/article/a494b708fadf3d4f453c6495d8064dc2</guid>
      <description><![CDATA[Former congressman Curt Weldon is helping broker deals between Russian and Ukranian weapons suppliers and the Iraqi and Libyan governments as part of his new job with a private American defense...]]></description>
      <content:encoded><![CDATA[<p>
Former congressman Curt Weldon is helping broker deals between Russian and Ukranian weapons suppliers and the Iraqi and Libyan governments as part of his new job with a private American defense consulting firm, Wired.com has learned. 
</p>

<p>
Weldon, who is currently being investigated by the FBI over alleged corruption during his time in office, visited Libya in March to discuss a possible military deal, according to a letter describing the trip from Weldon to <a href="http://www.ds-pa.com/">Defense Solutions</a> CEO Timothy Ringgold. In May, Weldon, together with Ringgold and another company representative, traveled to Moscow to discuss working with Russia's weapons-export agency on arms sales to the Middle East.
</p>

<p>
Both trips were part of the company's effort to tap into the growing -- and often legally murky -- market for selling weapons from former Eastern Bloc countries to the Middle East and Afghanistan.
</p>



<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 250px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/weldon_350px.jpg" width="250px" alt="Curt Weldon">

<div id="caption">

Ex-Rep. Curt Weldon, R-Penn., is helping broker deals between Russian weapons suppliers and the Iraqi and Libyan governments through his company, Defense Solutions.<br />
<em>Photo: H. Rumph Jr/AP</em>

</div> 

</div>

<p>
The Russians want to sell weapons to Iraq directly, but "must go slow on Iraq because of political reasons" and want to work with an "intermediary" like Defense Solutions, CEO Ringgold subsequently wrote to colleagues. "They have not spoken with any American company that can offer the quid pro quo that we can or that has the connections in Russia that we have," he boasted.
</p>



<p>
A few years ago, an American company proposing to sell weapons to Libya might have triggered a congressional hearing. So, too, would have a proposal to conduct arms deals with Russia, which the United States has accused of selling high-tech weapons to Syria and Iran. 
</p>

<p>However, U.S. government efforts to rapidly equip countries like Afghanistan and Iraq -- which have largely Soviet-origin weapons -- have created legal ambiguities and loopholes in export controls that didn't exist in years past and given rise to a new class of arms trade middlemen. So, even though both Libya and the Russian arms export agency are on official U.S. blacklists, government officials and analysts involved in weapons sales say the rules have become unclear as the push to equip allies in the global war on terror has blazed new but uncertain legal ground. 
</p>




<p>
Eagerly stepping into that virgin territory is <a href="http://www.ds-pa.com/">Defense Solutions</a>, a Pennsylvania-based company that is carving out a small but lucrative niche in a new international arms bazaar. The firm boasts as its advisors a number of influential Washington insiders, such as retired General Barry McCaffrey, the former White House drug czar.
</p>

<p>
Helping the firm make key connections is Curt Weldon, a former Republican congressman from Pennsylvania at the center of an FBI investigation into alleged conflicts of interest during his time in office.  Weldon, now a key executive at Defense Solutions, is working with the company to set up these weapons deals.
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/btr_60_350px.jpg" alt="">

<div id="caption">

Defense Solutions has also proposed refurbishing Libya's BTR-60 armored personnel carriers, according to a sales proposal seen by Wired.com. Defense Solutions denies drafting a sales proposal to Libya.

</div> 

</div>

<p>
It's an unusual, if not an entirely unexpected chapter for Weldon, whose time in office included frequent trips to Russia. As an influential member of the House Armed Services Committee, Weldon pushed for multibillion-dollar defense programs, like ballistic missile defense, and earned a reputation as a foreign policy gadfly, boasting of his contacts with officials in nations labeled by the administration as "rogue states" such as Libya and North Korea. Weldon's wild claims about a 9/11 cover-up and his sensationalist book warning of an Iranian terror plot, sometimes earned him official scorn and public ridicule, but it was accusations that he steered contracts to Eastern European businesses linked to his daughter's lobbying firm that drew the government's attention.
</p>


<!--pagebreak-->
<p>
Weldon was voted out of office in 2006 just weeks after the FBI raided his daughter's home, and that of one of her associates.
</p>

<p>
Weldon did not respond to e-mails and phone requests to be interviewed or comment for this article. But in a 2006 interview, before the FBI probe was public, Weldon spoke enthusiastically about setting up a "front company" to work with the Russian arms agency, Rosoboronexport. Weldon hoped this company could sell weapons to the Middle East, and other regions, particularly to countries where the U.S. has strained relations. He claimed the director of Rosoboronexport approached him to work with "an American company that would act as a front for weapons these nations want to buy."
</p>

<p>
Weldon called the proposal an "unbelievable offer."
</p>

<p>
The administration, he acknowledged at the time, did not welcome the idea of an American company selling Russian weapons to potentially unfriendly countries. But two years later, Weldon, now a private citizen and chief strategic officer for Defense Solutions, appears to be working on precisely that sort of deal. And whether illegal or not, Defense Solutions' business represents a new phenomenon in the international arms trade business.
</p>

<p>
In years past arms brokers -- firms or individuals who serve as middlemen to facilitate weapons sales between countries -- were largely the stuff of spy thrillers. Unlike traditional American defense companies, like Lockheed Martin or Boeing, which typically sell weapons directly to NATO countries or other governments regarded as friendly to the United States, brokers are often small outfits run by people with sometimes questionable experience and reputations they will sell to anyone. One of the most infamous arms brokers, a Russian named <a href="http://en.wikipedia.org/wiki/Victor_Bout">Viktor Bout</a>, is charged by the United States, United Nations, Interpol and others of funneling arms to terrorists and rebels around the world. He was recently arrested in Thailand. The United States is requesting his extradition on charges of supplying arms to a terrorist organization.
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/bmp_1_350px.jpg" alt="" />

<div id="caption">

Two Marines lower the trim vane on the front of an Iraqi BMP-1 mechanized infantry combat vehicle that was captured during Operation Desert Storm. The American defense consulting firm Defense Solutions has proposed refurbishing Libya's aging fleet of BMP-1s. Defense Solutions denies drafting a sales proposal to Libya.

</div> 

</div>

<p>
But ironically, Iraq has fueled a new market for these professional middlemen; the United States is funneling billions of dollars into modernizing Iraq's army so that the country's government can fend for itself after coalition troops withdraw. And Iraq's largely Soviet-equipped military is a natural market for Eastern European countries brimming with old or out-of-date equipment they would like to unload. The middlemen, in these cases, serve a key role by allowing the U.S. government to do business with an American company, which in turn buys equipment from Eastern Bloc countries in deals worth hundreds of millions of dollars, much of it financed with U.S. taxpayer dollars.
</p>

<p>
One of Defense Solutions' sales -- a deal to sell Hungarian-owed T-72 tanks to Iraq in 2005 -- was typical of these new foreign military sales. But on the more questionable side is the company's plans to work with Rosoboronexport, which is barred from doing business with the U.S. government, and Libya, which is still on the State Department's arms embargo list. 
</p>

<p>
The Eastern European-Middle East arms-brokering business, while in some cases sanctioned by the U.S. government, has run into problems, including outright corruption and quality. Defense contractor Dale Stoffel, the president of Wye Oak Technology, and another American were gunned down in Iraq in December 2004 after Stoffel alleged that the Iraqi Ministry of Defense was involved in a kickback scheme. Like Defense Solutions, the company Stoffel worked for was refurbishing the Iraq's army Eastern Bloc equipment.
</p>

<p>
Another problem is quality. Weapons from the former Soviet Bloc, which the U.S. military euphemistically calls "nonstandard equipment," have been flagged as substandard, acknowledges Brigadier General Charles Luckey, who is in charge of security assistance at <a href="http://www.mnstci.iraq.centcom.mil/">Multi-National Security Transition Command-Iraq</a>. In an interview from Iraq, Brigadier General Luckey said: "One of the frustrating things about buying nonstandard [weapons], is that I'm the guy who has to deal with the fact that some broker I've never heard of allowed weapons to get to Iraq before they were inspected."
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/tank_350px.jpg" alt="" />

<div id="caption">

Defense Solutions is carving a new niche in the arms trade, selling Soviet-made weapons to Middle Eastern countries like Afghanistan and Iraq. Defense Solutions sold Hungarian-owed T-72 tanks to Iraq in 2005.

</div> 

</div>


<p>
In one high-profile case, Iraqi officials alleged that a corrupt firm sold them $400 million in shoddy helicopters from Poland. More recently, a company led by a 21-year-old and a former masseur was offered a U.S. government contract worth nearly $300 million to sell ammunition to Afghanistan. The ammunition turned out to be outdated and of dubious origin and several people connected with the company have been indicted. A congressional investigation concluded that the company, which was on a State Department watch list, was able to take advantage of regulatory loopholes by using middlemen.
</p>

<p>
For those concerned about illicit arms trade, this new wave of weapons deals is rife with the potential for corruption and abuse, but for companies eager to pursue markets once regarded as dubious, it represents a lucrative business opportunity.  The problem in these cases, according to those familiar with arms sales, is that it's no longer clear what's legal and what's not.
</p>
<!--pagebreak-->
<p>
Rachel Stohl, an expert on international arms trade and a senior analyst at Center for Defense Information, says that in many ways, the rush to equip Iraq has led the United States to throw caution to the wind. She points to a report by the Government Accountability Office last year that found that some 190,000 weapons sold to Iraq have gone missing. "I think the reality is we won't know, until way after the fact, about all of these irregularities with the Iraq weapons provision program," she said. "We were providing them all these assault rifles that have gone missing. Why? They were not following the standard procedures that were in place."
</p>

<p>
But Iraq and Afghanistan aren't the only markets available to arms brokers like Defense Solutions. The gradual normalization of relations with Libya opens another door into a quasi-legal area of sales. 
</p>

<p>
Like Iraq, Libya has a substantial arsenal of Soviet-origin military weapons, offering a potential market for brokers working with Russia and other former Soviet states. But even when there's not an outright ban, sales to the Middle East are often fraught with controversy, particularly to countries like Libya, which was under international sanction for more than a decade. Even as sanctions against it have been lifted, European companies proposing to sell arms to Libya have faced steep criticism, particularly since the country is still ruled by dictator Muammar Gaddafi, who took power in a military coup in 1969. 
</p>

<p>
While the United States lifted Libya's "state sponsor of terrorism" designation in 2006, other restrictions, such as on the sale of arms, remain in place. A State Department spokesperson confirmed that exports of "lethal munitions" to Libya, such as tanks or related equipment, are still banned, although sales of nonlethal equipment are now allowed on a case-by-case basis.
</p>

<p>
In late March, Weldon traveled to Libya for a weeklong trip at the invitation of the <a href="http://gdf.org.ly/index.php?lang=ar&Page=101&lang=en">Gaddafi Foundation</a>, a group run by the son of Libya's leader, and the chairman of Libya's foreign affairs committee, according to <a href="http://blog.wired.com/defense/files/libya_trip_report.doc">the report he sent to Defense Solutions</a> (.pdf), a copy of which was obtained by Wired.com. The trip reports states: "Agreement reached for Weldon to quickly return to Libya for meetings with son [of Libyan leader Gaddafi] Morti regarding defense and security cooperation."
</p>

<p>
A document dated April 16, just two weeks after Weldon's trip, outlines Defense Solutions' proposal to Libya to refurbish the country's fleet of armored vehicles, including its T-72 tanks, BMP-1 infantry fighting vehicles, and BTR-60 armored personnel carriers. A copy of the sales proposal, also provided to Wired.com, is on Defense Solutions' letterhead, appears to bear the signature of company CEO Timothy Ringgold, and is addressed to Libya's defense procurement council. "Defense Solutions is committed to delivering a full end-to-end solution to its clients," the proposal states. "Besides refurbishing these vehicles, we are capable of providing a full logistics support package, including a two year supply of spare parts, maintenance and repair services, and operator, maintenance, and repair training."
</p>

<p>
In an interview with Wired.com, Ringgold admitted that he's interested in doing business in Libya and confirms receiving Weldon's trip report from Libya, but denies drafting or signing an arms-sale proposal. "I've never made such a document to Libya," Ringgold insisted, after being read the proposal, and told that his signature is on it.
</p>

<p>
In addition to the Libyan arms-deal document, Wired.com has also reviewed copies of e-mails from Ringgold discussing the Libyan deal.
</p>

<p>
While Ringgold denies proposing an arms sale to Libya, he is open about speaking with Rosoboronexport, which has been on a U.S. government sanctions list since 2006, after the Russian state agency allegedly violated the Iran and Syria Nonproliferation Act. An April e-mail provided to Wired.com describes Ringgold, Weldon and Stephan Minikes, a senior advisor to Defense Solutions and a former ambassador, meeting with Rosoboronexport. The conversations included a number of potential deals, including supplying Mi-17 helicopters to Afghanistan and spare parts for Iraq's infantry fighting vehicles. Ringgold wrote to colleagues following the visit, describing the meetings as a "spectacular success," saying the Russian agency "has the ability to undercut all cost proposals from brokers."
</p>

<p>
Ringgold confirmed those discussions and said that his company has sought to do business with Rosoboronexport. Asked whether Ringgold considers his dealings with Russia to be legal, he argued that U.S. companies could work with Rosoboronexport on a "case-by-case" basis. "The particular purpose of the meeting we had -- and I want to be crystal clear -- was in response to a U.S. government requirement," he said.
</p>

<p>
A number of officials at the State Department and in the Pentagon, when contacted for this article, could not say whether working with Rosoboronexport is legal or not. A Pentagon spokeswoman said she was familiar with the issue, but deferred the question to the State Department. When asked about Rosoboronexport's status on the blacklist, John Herzberg, a State Department spokesman replied: "What's on there is on there."
</p>

<p>
Asked whether, given the ban, there was any way a company could legally work with Rosoboronexport, as Ringgold suggested, Herzberg provided an equivocal answer. "At the stage of the process we're at, I'm unable to give you an answer," he said. "You can try elsewhere in government, and maybe they'll be braver than me."
</p>

<p>
In an interview from Iraq, General Luckey conceded it was a murky area, but said, "My understanding is they are currently on our no-go list." 
</p>

<p>
The confusion over debarred parties has even led the U.S. government into its own legal tangles, according to Jim McAleese, a Washington attorney who specializes in government contracting and foreign military sales. Because the Russian government violated U.S. nonproliferation laws, even NASA had to go to Congress to ensure it could work with Russia on Soyuz flights to the international space station. "What I'm warning you about is, don't be surprised by the confusion," McAleese said. "There are a whole bunch of different statutes that were adopted piecemeal and were never intended to be reconciled."
</p>

<p>
But it's the very ambiguity of the law that troubles those who monitor export control. "It's highly unusual to do anything with the Russians, particularly Rosoboronexport," said Scott Jones, director of Export Control Programs at the <a href="http://www.uga.edu/cits/">Center for International Trade and Security</a> at the University of Georgia. 
</p>

<p>
Legal or not, reputable American companies simply don't want to work with banned entities, Jones said, for fear of risking their reputations and business. "Even if it's not an outright prohibition, most companies don't want to put themselves in a liability situation that has really bad PR … and they stay away from it," Jones said. "But if that's your business, pimping out arms from the U.S. or Russia, that's the way it works, and you push as much as possible."
</p>

<p>
Finding any U.S. defense company working with the Russian government at this point would be "remarkable," Jones added.
</p>

<p>
In the meantime, the future for Weldon is unclear. The FBI investigation continues and Weldon's former chief of staff recently pleaded guilty to a conspiracy charge and is cooperating with the government, notes Melanie Sloan, the executive director of <a href="http://www.citizensforethics.org/">Citizens for Responsibility and Ethics in Washington</a>, which filed a complaint against Weldon in 2004. Sloan speculated that Weldon may be charged with "honest service fraud" for misusing his office for personal gain. "It's an easier standard than bribery," she said. "I wouldn't be surprised [if he's charged] with bribery, but I think it will be honest services fraud."
</p>

<p>
Ringgold insists that he and Weldon are on the right side of the law. "Everything we do is in strict compliance with international and U.S. law and we operate only in the best interests of the U.S. government," he said. "I didn't serve 30 years in the United States Army to throw that away on a whim."
</p>

<p>
Asked if Weldon is still working for the company, Ringgold replied: "Absolutely, proudly so." 
</p><br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=3c1b81ed8ecb441b359b5fd6e6dec750" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=3c1b81ed8ecb441b359b5fd6e6dec750" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=f5EjSJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=f5EjSJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=zYmkhj"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=zYmkhj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=S9Ojfj"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=S9Ojfj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=xPEQRJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=xPEQRJ" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=OTsesJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=OTsesJ" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=wFj1Jj"><img src="http://feeds.wired.com/~f/wired/politics/security?i=wFj1Jj" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=OExjrj"><img src="http://feeds.wired.com/~f/wired/politics/security?i=OExjrj" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=DKk6TJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=DKk6TJ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/326164069" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/326164070" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 03 Jul 2008 18:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/arms brokers">arms brokers</category>
      <category domain="http://securityratty.com/tag/brokers">brokers</category>
      <category domain="http://securityratty.com/tag/infamous arms brokers">infamous arms brokers</category>
      <category domain="http://securityratty.com/tag/defense">defense</category>
      <category domain="http://securityratty.com/tag/firm defense solutions">firm defense solutions</category>
      <category domain="http://securityratty.com/tag/arms">arms</category>
      <category domain="http://securityratty.com/tag/arms trade">arms trade</category>
      <category domain="http://securityratty.com/tag/international arms trade">international arms trade</category>
      <category domain="http://securityratty.com/tag/russian weapons suppliers">russian weapons suppliers</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/326164070/defense_solutions">U.S. Arms Dealer Tests Legal Bounds in Middle East Arms Bazaar</source>
    </item>
    <item>
      <title><![CDATA[Personal information found in Boca Raton dumpsters]]></title>
      <link>http://securityratty.com/article/71b6542daf7a2738ad171ba74ac33144</link>
      <guid>http://securityratty.com/article/71b6542daf7a2738ad171ba74ac33144</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
6/4/08

Organization
Wheeler's Moving Company

Contractor/Consultant/Branch
None

Victims
Employees, job applicants and customers

Number Affected...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/nodiving.jpg" align="right" height="175" width="107"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>6/4/08<br><br><span style="font-weight: bold;">Organization: </span><br>Wheeler's Moving Company<br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Employees, job applicants and customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>"files containing driver's licenses, social security numbers, telephone numbers, addresses and birth dates"<br><br><span style="font-weight: bold;">Breach Description:</span><br>"BOCA RATON, FL (Fox29) - Piles and piles of personal files with tax information, social security numbers and license numbers, were found in a Boca Raton dumpster. These dumpsters are located between a set of warehouses here on Northwest First Avenue."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.wflxfox29.com/Global/story.asp?S=8416813">WFLX Fox 29 News</a> <br><a href="http://www.cbs12.com/news/says_4707977___article.html/building_owner.html">WPEC Channel 12 News</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Chuck Weber, WFLX Fox 29 News<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>BOCA RATON, FL (Fox29) - Piles and piles of personal files with tax information, social security numbers and license numbers, were found in a Boca Raton dumpster.<br><br>Dumpsters on Northwest 1st Avenue Boca Raton were found full of files and paperwork with personal information - names, addresses, drivers licenses and some social security numbers - all out in the open for the taking.<br><span style="font-style: italic;">[Evan] I think we would be surprised at how common it is for organizations to throw confidential information in the garbage (instead of shredding).&nbsp; Unauthorized disclosure of confidential information including personal information, trade secrets, intellectual property, draft press releases, etc. can be very damaging.</span><br><br>The dumped personal records inside, apparently belonged to Wheeler's Moving Company. <br><br>containing information on employees or job applicants, and some customers<br><br>Some files even dated back as far as 20 years or more.<br><br>After contacting the Wheeler's Moving Company, they claimed to have moved out of Boca Raton and into Jupiter about a year ago and they had no idea this had happened. <br><br>Building owner Charles Wheeler, former owner of the moving company, says, "In my heart I don't think it's going to be a problem. And I didn't realize until I heard from you guys that there was something sensitive in there. And it should have never been thrown out."<br><br>Wheeler says he didn't think any sensitive documents were still inside.<br><span style="font-style: italic;">[Evan] A complete lack of awareness.&nbsp; Business owners and leaders (everyone really) need to be more aware of the security implications involving the information they create, collect, use, store, and discard.&nbsp; Thieves are.</span><br><br>Police received a call Monday, and were able to clean up a majority of this dumpster.<br><br>There are currently some remnants of the files out there, but officials are doing their best to protect the people on these files so their identities are not stolen and get these files and papers shredded properly.<br><br>all the documents have since been shredded.<br><br>Wheeler says from now on, he will shred all unneeded documents.<br><br><span style="font-weight: bold;">Victim Reaction:</span><br>"I'm taken aback; I really almost shaking. The fact that records could be around for all these years,"<br><br>"It shouldn't have been available to anybody, but nobody has done anything."<br><br>"It's very frightening to think of that it was available, and that it could have happened,"<br><br><span style="font-weight: bold;">Commentary:</span><br>I feel bad for small business owners that aren't aware of or properly trained in risk management and information security.&nbsp; It's easy to be angry with them, but too many of them just don't know any better.&nbsp; <br><br>Obviously, I feel bad for the victims too.<br><br></font><font size="2"><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/06/10/wheelers.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Tue, 10 Jun 2008 06:24:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/boca raton">boca raton</category>
      <category domain="http://securityratty.com/tag/dumpster">dumpster</category>
      <category domain="http://securityratty.com/tag/boca raton dumpster">boca raton dumpster</category>
      <category domain="http://securityratty.com/tag/confidential information">confidential information</category>
      <category domain="http://securityratty.com/tag/files">files</category>
      <category domain="http://securityratty.com/tag/personal files">personal files</category>
      <category domain="http://securityratty.com/tag/owner charles wheeler">owner charles wheeler</category>
      <source url="http://breachblog.com/2008/06/10/wheelers.aspx">Personal information found in Boca Raton dumpsters</source>
    </item>
    <item>
      <title><![CDATA[HSBC loses a server in branch renovation]]></title>
      <link>http://securityratty.com/article/dea4cb8188870bfad6891526dcfee0f2</link>
      <guid>http://securityratty.com/article/dea4cb8188870bfad6891526dcfee0f2</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
5/7/08

Organization
Hong Kong and Shanghai Banking Corporation (&quot;HSBC

Contractor/Consultant/Branch
Kwun Tong branch

Victims
Customers

Number...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/hsbc.jpg" align="right" height="47" width="154"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>5/7/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.hsbc.com.hk/1/2/home">Hong Kong and Shanghai Banking Corporation ("HSBC")</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br></font><font size="2"><a href="http://www.banking.hsbc.com.hk/script/regional/launched/locator/locator.asp">Kwun Tong branch</a>&nbsp; </font><br><font size="2"><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>159,000<br><br><span style="font-weight: bold;">Types of Data:</span><br>"name, account number and transactions of customers"<br><br><span style="font-weight: bold;">Breach Description:</span><br>"HONG KONG, May 8 (Xinhua) -- The Hong Kong branch of banking giant Hongkong and Shanghai Banking Corporation Limited (HSBC) has lost a computer server with client data involving about 159,000 accounts, the bank confirmed on Wednesday."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://news.idg.no/pcw/art.cfm?id=CDE0B1D6-17A4-0F78-318AEBF2087563C2">IDG Magazines Norge</a> <br><a href="http://news.xinhuanet.com/english/2008-05/08/content_8126223.htm">Xinhua News Agency</a> <br><a href="http://www.thestandard.com.hk/news_detail.asp?pp_cat=12&amp;art_id=65593&amp;sid=18831850&amp;con_type=3">The Standard</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>The Breach Blog was notified by an anonymous tip at 11:15AM on May 7th.&nbsp; It just took me a while to get it posted.&nbsp; Sorry for the delay!<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>HSBC has admitted losing a server containing data on 159,000 customers.<br><span style="font-style: italic;">[Evan] How do you lose a server?</span><br><br>The server went missing on 26 April from its Kwun Tong district branch in Hong Kong during renovation work<br><br>The server held customer names, account numbers, transaction amounts and transaction types<br><br>HSBC said the server is protected by "multiple layers of security" and the risk of data breaches and fraud is "deemed to be low".<br><span style="font-style: italic;">[Evan] What kind of "multiple layers of security"?&nbsp; This is one of those statements that is misused and overused.&nbsp; Without details, who knows what they are talking about.</span><br><br>the server contained no PIN codes or online banking login credentials.<br><br>The bank said it has reported the incident to the police, the Hong Kong Monetary Authority, and the Hong Kong privacy commissioner.<br><br>The case has been classified as theft.<br><span style="font-style: italic;">[Evan] Ah, so HSBC didn't really "lose" the server?&nbsp; It was stolen.</span><br><br>The Monetary Authority has demanded that the bank contact all the affected customers and explain what measures could be taken to avoid potential losses thereof.<br><br>The bank is contacting customers, who will not be liable for any financial loss arising from any fraudulent activity as a result of the lost data.<br><br>Clients data are kept in a confidential manner. If any complaint arises, we will deal with it case by case, HSBC chairman Vincent Cheng Hoi-chuen said.<br><br>Internet Society chairman Charles Mok Nai-kwong said even though the server has been encrypted, there may still be ways to access the data. <br><span style="font-style: italic;">[Evan] Charles Mok Nai-kwong states that the server was encrypted.&nbsp; This is a good thing.</span><br><br>"I do not know how advanced the system is or the skill of those who want to access the data. But if the server goes to the police, they will have ways to get the data," Mok said.<br>[Evan] This reminds me of a few stories I have read where authorities were unable to break commercially available encryption implementations.&nbsp; The one case that comes to mind was the case of the FBI <a href="http://www.pcworld.com/article/id,110841-page,1/article.html">unable to crack PGP</a> encrypted PDAs captured from terrorists.&nbsp; If the encryption was implemented correctly and key management is sound, it would be very difficult for the police to access meaningful information.<br><br><span style="font-weight: bold;">Commentary:</span><br>What type of physical controls were present at the time of the server theft?&nbsp; Stuart King on his ComputerWeekly <a href="http://www.computerweekly.com/blogs/stuart_king/2008/05/hsbc-lose-a-server.html">Risk management blog</a> sums this up very well when he says "Spend all you want on boxes of tricks to stop the hackers getting in, but forget to lock the door to the servers and it's game over."<br><br>The last HSBC breach that we reported on The Breach Blog was also physical security related, see below.<br><br><span style="font-weight: bold;">Past Breaches:</span><br>February, 2008 - <a href="http://breachblog.com/2008/02/06/hsbc.aspx">Five-year-old wanders into bank branch after-hours</a></font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/05/14/hsbc.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Wed, 14 May 2008 12:16:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/server">server</category>
      <category domain="http://securityratty.com/tag/hsbc">hsbc</category>
      <category domain="http://securityratty.com/tag/server theft">server theft</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/lost data">lost data</category>
      <category domain="http://securityratty.com/tag/computer server">computer server</category>
      <category domain="http://securityratty.com/tag/data breaches">data breaches</category>
      <category domain="http://securityratty.com/tag/clients data">clients data</category>
      <category domain="http://securityratty.com/tag/hong kong">hong kong</category>
      <source url="http://breachblog.com/2008/05/14/hsbc.aspx">HSBC loses a server in branch renovation</source>
    </item>
    <item>
      <title><![CDATA[700,000 records on stolen CCB server]]></title>
      <link>http://securityratty.com/article/31a0c887e162bd0eecb24965eb90aaeb</link>
      <guid>http://securityratty.com/article/31a0c887e162bd0eecb24965eb90aaeb</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
4/18/08

Organization
Numerous

See Commentary section for list of businesses

Contractor/Consultant/Branch
Central Collection Bureau (&quot;CCB

Victims...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/cbb.jpg" align="right" height="150" width="150"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>4/18/08<br><br><span style="font-weight: bold;">Organization: </span><br>Numerous*<br><br><font size="1">*See Commentary section for list of businesses</font><br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.ccbinc.net/index.htm">Central Collection Bureau ("CCB")</a> <br><br><span style="font-weight: bold;">Victims:</span><br>Individuals who were referred to CCB for debt collection purposes by Indiana businesses, on or before March 20, 2008 <br><br><span style="font-weight: bold;">Number Affected:</span><br>~700,000<br><br><span style="font-weight: bold;">Types of Data:</span><br>"personal information, including names, contact information, Social Security numbers, dates of birth, dates of service, and medical procedure codes"<br><br><span style="font-weight: bold;">Breach Description:</span><br>"Indiana residents are hereby alerted to a security breach at Central Collection Bureau (CCB, located at 7510 South Madison Avenue, Indianapolis, Indiana.&nbsp; This breach potentially exposed the personal information, including names, contact information, Social Security numbers, dates of birth, dates of service, and medical procedure codes."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.ccbinc.net/press_release_04182008.htm">Central Collection Bureau</a> <br><a href="http://www.suntimes.com/news/nation/906211,identity042108.article">Chicago Sun-Times (Associated Press)</a> <br><a href="http://www.wthr.com/Global/story.asp?S=8195357&amp;nav=menu188_2">NBC Channel 13 Eyewitness News</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Central Collection Bureau<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>SECURITY BREACH NOTIFICATION ALERT:<br>CENTRAL COLLECTION BUREAU<br>Dated April 18, 2008<br><br>Indiana residents are hereby alerted to a security breach at Central Collection Bureau (CCB, located at 7510 South Madison Avenue, Indianapolis, Indiana. <br><br>This breach potentially exposed the personal information, including names, contact information, Social Security numbers, dates of birth, dates of service, and medical procedure codes.<br><br>These individuals were referred to CCB for debt collection purposes by Indiana businesses, on or before March 20, 2008 <br><br>Approximately 700,000 files may have been breached.<br><br>The businesses that engaged CCB for debt collection during that period of time are listed below.<br><br>Please note that only a very small percentage of the individuals who were patients or customers of the businesses below—i.e., those who ultimately were referred for debt collection—would have their personal information included in the CCB database.<br><br>Some of the information might be outdated. St. Vincent Health System said it had not given any billing business to Central Collection in more than three years, so all of the missing billing information is several years old.<br><span style="font-style: italic;">[Evan] This was a question that my colleagues and I were debating about this breach.&nbsp; 700,000 records seems like an awful lot of "active" collection accounts.&nbsp; CCB would need quite a few collection agents to service this many accounts, if in fact they were all active.&nbsp; I think we can assume that only a fraction of the 700,000 records were actually "active" and CCB did not effectively destroy information that they no longer needed to keep.</span><br><br>Other patients and customers of those companies are not affected by this breach.<br><br>The theft occurred on Friday, March 21, 2008, at CCB's location in Indianapolis.<br><br>On that date,&nbsp; thieves broke into the company's offices and stole 8 computers, as well as one of its servers (databases).<br><br>The server was password protected and protected by three locked doors.&nbsp; The 8 computers did not contain personal information.<br><br>The information was protected by two passwords but was not encrypted, Klene said.<br><br>"Our server was password protected. We have obviously spoken to some IT people who feel that a good computer hacker could get through those passwords," he said.<br><span style="font-style: italic;">[Evan] It doesn't even take a "good computer hacker" to get through the passwords.</span><br><br>CCB promptly contacted the police and is working with the Indiana Attorney General's office. <br><br>The company also promptly installed additional locks, a security system, and a motion detection system to help minimize the risk of any further unauthorized access to its information.<br><span style="font-style: italic;">[Evan] These will help with physical security.&nbsp; Full-disk encryption and a effective data retention policy wouldn't hurt for logical security, eh?&nbsp; Us information security guys would refer to multiple defensive layers as "defense in depth".&nbsp; Brilliant!</span><br><br>CCB apologizes to its clients and all Indiana residents affected by this incident.<br><br>"We're obviously heartsick about this," said Chet Klene, Central Collection Bureau president. "We've been in business since 1972, and nothing like this has ever happened before."<br><span style="font-style: italic;">[Evan] I don't doubt that CCB is "heartsick" by this incident.&nbsp; I feel bad for them and the fact that they probably did not know any better.&nbsp; Maybe this is partly a failure on the part of the information security profession as a whole.</span><br><br>While the company has no information suggesting that the breach occurred for purposes of identity theft, it nevertheless has contacted the three national credit bureaus to place a fraud alert.<br><br>Please go to the CCB website at <a href="http://www.ccbinc.net,">www.ccbinc.net,</a> call CCB at 317-887-5165 or 1-800-878-5165 or email CCB at theft@ccbinc.net for more information<br><br><span style="font-weight: bold;">Commentary:</span><br>Clients of CCB with information on the stolen server include:&nbsp; <br><br>Academy Animal Hospital, Advanced Interventional Pain, Advanced Physical Therapy, Alternative Care Experience, Anderson General Surgery, Andrew Dick MD, Anesthesia, Aqua Systems, Associated Billing, "Barbara Sturm, MD", Brad Sammons DDS, Brien Grow DO, Buchanan Counseling Services, Campion Barrow &amp; Assoc., Cardiothoracis Surgeons, Cardiovascular Diagnostic Services, Carl Foster MD, Caryn Guba DDS, Center For Orthopaedic Surgery, Central Indiana Phys Medicine &amp; Rehab, Charles Howe Professional Medical Corp, Charles Kelley III DPM, Charles Kerkhove Jr DDS, Charles Tomich DDS, Chiropractic Thereputics, Citizens Gas &amp; Coke, City of Franklin Ambulance, Clarian Radiology, Clinical Laboratory Physicians, Comdent, Comprecare, Culligan Water Conditioning, Cummins Behavioral Health System, D.E. Kelley DDS, Daniel Feeny MD, David Pennington III MD, David Shaw MD, David Szentes MD, Denture By Design, Dermatopathology Lab, Diagnostic Medicine, Dunlap Urgent Care, Edward J Diekhoff MD, Emily Cline MD, Emergency Medical Group Physicians, Forest Creek Family Dental, Friendly Village of Indy, Gary Hunt DDS, Gary Taylor DDS, Generations In Dentistry, George Small Jr MD, Gial Anesthesiology Service, Grandmas House Child Care, Greg Hardin MD, Hamilton Anesthesia Group, Hearing Center, Henderson Drugs &amp; Home Health, House of Kids, Howard Alig MD, Howard Regional Health System, Indiana Radiology Partners, Indiana Spine Group, Indiana General Surgery, Indiana Medical Network, Indpls Neurosurgical Group, Internal Medicine Plus, JCB Anesthesia &amp; Pain Mgt, Jeffrey Stevens DPM, Jennifer Siegel DDS, JMH Health Affiliates, John Jackson DC, John Norris MD, Johnson Co Anesthesia, Johnson County REMC, Johnson Memorial Hospital, Joseph Meek DDS, Julie Chao MD, Kenny Stall MD, Kerry Mays MD, Kevin Macadaeg MD, Khalil Wakim MD, Kidd Pediatrics, Knowledge Learning Corp, Koehring &amp; Sons, Kokomo Sports Center, Larry Buckel MD, Laura Steiner MD, Laura Stitle MD, Laurette Robey MD, Laverne Tubergen MD, Lawrence Falender DDS, Library Park Immediate Care, Lora Overton DO, Madison Anesthesia Group, Madison Avenue Flower Shop, Mark Ellis DDS, Mark Kahn DDS, Mark Ogle MD, Mark Yamanaka MD, Martinsville Dental Center, Memory Maker Studios, Mere Image Sportswear, Meridian Veterinary Clinic, Methodist Arthritis Physicians, Methodist Medical Group, Michael Arnold DDS, Michael Cozzi MD, Michael Harper, Midamerica Surgery Center, Milto Cleaners, Mitchell Foster MD, Muncie Cataract &amp; Laser Center, Nancy Zinni MD, Northside Surgical Specialists, Northside Anesthesia Services, Northwest Medical Pain Control, Nufinity, Orthopaedic Supplies Inc., Panchapakesan Harlan MD, Paul Batties MD, Paul Johnson DDS, Paul Johnson DDS, Paul Strange MD, Philip Borders MD, Pioneer Anesthesia Consultanta, PT Buntin MD, R.D. McQuiston MD, Rebecca De La Rosa DDS, Richard Herd Jr DDS, Rick Stephens Builder, Riley Bennett &amp; Egloff LLP, Robert Smith MD, Robert's Salon &amp; Day Spa, Ronald Wines DDS, RW Armstrong, Sandhya Nanda MD, Sarah Akard DDS, Scot Hagadorn MD, South Emerson Anesthesia Assoc., South Emerson Pain Management, South Emerson Surgery Center, Southeast Family Physicians, Southside Animal Hospital, Southside Family Medical Group, Southside Pediatrics, St. Vincent Health and related entities, Stephen Stitle MD, Stephen Szynal DO, Stonehedge Apartments, Stop 11 Animal Hospital, Sun Medical, Surgical Associates of Madison Co, Susan Wagner DDS, Thomas Eads MD, Thomas Ferrara MD, Tim Schafer DDS, University Family Physicians, University Pediatric Associates, University Surgeons, USF Inc, Valle Vista Guidance Center, Valle Vista Hospital, Walker Family Dentistry, Wells &amp; Marvel PC <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/04/22/cbb.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Tue, 22 Apr 2008 10:57:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dds">dds</category>
      <category domain="http://securityratty.com/tag/gary taylor dds">gary taylor dds</category>
      <category domain="http://securityratty.com/tag/gary hunt dds">gary hunt dds</category>
      <category domain="http://securityratty.com/tag/lawrence falender dds">lawrence falender dds</category>
      <category domain="http://securityratty.com/tag/joseph meek dds">joseph meek dds</category>
      <category domain="http://securityratty.com/tag/caryn guba dds">caryn guba dds</category>
      <category domain="http://securityratty.com/tag/mark ellis dds">mark ellis dds</category>
      <category domain="http://securityratty.com/tag/sarah akard dds">sarah akard dds</category>
      <category domain="http://securityratty.com/tag/ccb">ccb</category>
      <source url="http://breachblog.com/2008/04/22/cbb.aspx">700,000 records on stolen CCB server</source>
    </item>
    <item>
      <title><![CDATA[Stealing from Bookstores]]></title>
      <link>http://securityratty.com/article/9336445fc4ccbc087120e94c0b6004ba</link>
      <guid>http://securityratty.com/article/9336445fc4ccbc087120e94c0b6004ba</guid>
      <description><![CDATA[Fascinating : There's an underground economy of boosted books. These values are commonly understood and roundly agreed upon through word of mouth, and the values always seem to be true. Once, a...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.thestranger.com/seattle/Content?oid=520472">Fascinating</a>:</p>

<blockquote>There's an underground economy of boosted books. These values are commonly understood and roundly agreed upon through word of mouth, and the values always seem to be true. Once, a scruffy, large man approached me, holding a folded-up piece of paper. "Do you have any Buck?" He paused and looked at the piece of paper. "Any books by Buckorsick?" I suspected that he meant Bukowski, but I played dumb, and asked to see the piece of paper he was holding. It was written in crisp handwriting that clearly didn't belong to him, and it read:

<ol><li>Charles Bukowski

<p><li>Jim Thompson</p>

<p><li>Philip K. Dick</p>

<p><li>William S. Burroughs</p>

<p><li>Any Graphic Novel</ol></p>

<p>This is pretty much the authoritative top five, the New York Times best-seller list of stolen books. Its origins still mystify me. It might have belonged to an unscrupulous used bookseller who sent the homeless out, Fagin-like, to do his bidding, or it might have been another book thief helping a semi-illiterate friend identify the valuable merchandise.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=oKiKJeF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=oKiKJeF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=kwulabF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=kwulabF" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 13 Mar 2008 10:06:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/piece">piece</category>
      <category domain="http://securityratty.com/tag/folded-up piece">folded-up piece</category>
      <category domain="http://securityratty.com/tag/charles bukowski">charles bukowski</category>
      <category domain="http://securityratty.com/tag/bukowski">bukowski</category>
      <category domain="http://securityratty.com/tag/books">books</category>
      <category domain="http://securityratty.com/tag/paper">paper</category>
      <category domain="http://securityratty.com/tag/book thief">book thief</category>
      <category domain="http://securityratty.com/tag/authoritative top">authoritative top</category>
      <category domain="http://securityratty.com/tag/values">values</category>
      <source url="http://www.schneier.com/blog/archives/2008/03/stealing_from_b.html">Stealing from Bookstores</source>
    </item>
  </channel>
</rss>
