<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: credit-card]]></title>
    <link>http://securityratty.com/tag/credit-card</link>
    <description></description>
    <pubDate>Thu, 31 Jul 2008 12:46:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Links List 8.22.08]]></title>
      <link>http://securityratty.com/article/e37289e3f28c0134060472b8a33b4f97</link>
      <guid>http://securityratty.com/article/e37289e3f28c0134060472b8a33b4f97</guid>
      <description><![CDATA[Ah, the opening ceremonies of the Olympics. How spectacular. Is that Li Ning running in the sky with the torch? Oooh, aah. And wait, whats that image on the wall behind him? Looks kinda familiaroops,...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" height="170" alt="bsod_nest_main2" src="http://blog.sciencelogic.com/wp-content/uploads/2008/08/bsod-nest-main2.jpg" width="244" align="left" border="0"> Ah, the opening ceremonies of the Olympics. How spectacular. Is that Li Ning “running” in the sky with the torch? Oooh, aah. And wait, what’s that image on the wall behind him? Looks kinda familiar…oops, it’s an <a href="http://weblog.infoworld.com/robertxcringely/archives/2008/08/geek_week_tk_tk_1.html?source=NLC-NOTES&amp;cgd=2008-08-18" target="_blank">XP blue screen of death</a>….I wonder how much Microsoft paid for advertising during the Olympics?
<p><em>(</em><a href="http://cache.gizmodo.com/assets/images/gizmodo/2008/08/bsod_nest_main2.jpg" target="_blank"><em>Photo Credit: Gizmodo</em></a><em>)</em>
<p>You lose some. You win some: Of course as NBC’s online partner, Microsoft gets a least a cut of the <a href="http://www.paidcontent.org/entry/419-online-ad-spend-tied-to-olympics-expected-to-reach-100-million/" target="_blank">$100 million dollars in online advertising</a> spent around the Olympics. And the millions of <a href="http://www.businessweek.com/technology/content/aug2008/tc20080820_627259.htm?campaign_id=rss_daily" target="_blank">downloads of Silverlight</a> aren’t too shabby either.
<p>The Internet is Falling! Arbor Networks, a security and network management company, partnered with ninety network services and content providers from around the world to publish an extensive <a href="http://www.circleid.com/posts/88181_largest_study_of_ipv6_traffic/" target="_blank">study of IPv6 traffic</a> on the Internet. Craig Labovitiz, Arbor Networks chief scientist, stated that <a href="http://asert.arbornetworks.com/2008/8/the-end-is-near-but-is-ipv6/" target="_blank">only 900 days were left until the end of the Internet</a>, or at least the exhaustion of IPv4 registry allocations. For the past year, the study shows very little IPv6 traffic – something like 1/100<sup>th</sup> of 1% of Internet traffic. Craig credits this to money issues. “The department of commerce estimates it will cost $25 billion for ISPs to upgrade to native IPv6.”
<p>Blogger <a href="http://blog.jamesurquhart.com/2008/08/cloud-computing-bill-of-rights.html" target="_blank">James Urquhart created a bill of rights for cloud computing</a>. The purpose of the bill is to “help guide would-be cloud customers to those clouds best able to guarantee their freedom.” The blogosphere is a great place to get some open debate going, and I applaud James for trying to make something yet so “cloudy” a bit more clear and concrete. But what’s up with the creating a PAC for this?? (Check out the comments.)
<p>Trying to get by on limited resources? Need more money, staff and the freedom to focus on long-term projects? Sound familiar? Then you just might be in <a href="http://blogs.wsj.com/biztech/2008/08/21/life-is-tough-for-midsize-tech-departments/?mod=djemTECH" target="_blank">IT at a midsize company</a>. (or in marketing at a young but rapidly growing IT company <img src='http://blog.sciencelogic.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> ) Arrow Enterprise Computing Solutions conducted a survey of 200 tech leaders at midsize companies (500 to 3000 employees). The upside: 61% of those surveyed think they’ll be spending more on IT next year – is this bullish thinking about the economy or how much their own business (rev) will be growing?
<p>Bill Snyder calls Dell “<a href="http://weblog.infoworld.com/tech-bottom-line/archives/2008/08/michael_dell_is.html?source=NLC-DAILY&amp;cgd=2008-08-21" target="_blank">Bozo of the Month</a>” for trying to trademark “cloud computing”. Yikes. Maybe not a “bozo” move but certainly inadvisable given how ubiquitous the term is. Here’s <a href="http://blog.sciencelogic.com/no-trademark-for-cloud-computing/08/2008" target="_blank">our take</a> on it.</p>
]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 16:15:48 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network management company">network management company</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <category domain="http://securityratty.com/tag/internet traffic">internet traffic</category>
      <category domain="http://securityratty.com/tag/company">company</category>
      <category domain="http://securityratty.com/tag/nbcs online partner">nbcs online partner</category>
      <category domain="http://securityratty.com/tag/ipv6 traffic">ipv6 traffic</category>
      <category domain="http://securityratty.com/tag/online">online</category>
      <category domain="http://securityratty.com/tag/blogger james urquhart">blogger james urquhart</category>
      <category domain="http://securityratty.com/tag/ninety network services">ninety network services</category>
      <source url="http://blog.sciencelogic.com/links-list-82208/08/2008">Links List 8.22.08</source>
    </item>
    <item>
      <title><![CDATA[Q&A with the Splunk Ninja]]></title>
      <link>http://securityratty.com/article/c426effdd5c49b6f6dfe7d7c9d45e414</link>
      <guid>http://securityratty.com/article/c426effdd5c49b6f6dfe7d7c9d45e414</guid>
      <description><![CDATA[I recently had the chance to sit down with the Splunk Ninja (aka Michael Wilde) to chat about Interop, Splunk and men over 40 wearing Heelys

Photo Credit: www.heelys.com
Since the Ninja has such a...]]></description>
      <content:encoded><![CDATA[<p>I recently had the chance to sit down with the Splunk Ninja (aka Michael Wilde) to chat about Interop, Splunk and men over 40 wearing Heelys.</p>
<p><a href="http://blog.sciencelogic.com/wp-content/uploads/2008/08/proseries_9201_bottom_web.jpg"><img class="alignnone size-medium wp-image-179" title="Pro Series Heely" src="http://blog.sciencelogic.com/wp-content/uploads/2008/08/proseries_9201_bottom_web.jpg" alt="Image Credit: heelys.com" width="260" height="168" /></a></p>
<p>Photo Credit: www.heelys.com</p>
<p>Since the Ninja has such a hypnotizing voice, we decided to leave this one as a podcast:<a href="http://media.libsyn.com/media/sciencelogic/Q__A_ScienceLogic_and_Splunk.mp3"> ScienceLogic Q&amp;A with the Splunk Ninja</a></p>
]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 12:10:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/splunk ninja">splunk ninja</category>
      <category domain="http://securityratty.com/tag/splunk">splunk</category>
      <category domain="http://securityratty.com/tag/ninja">ninja</category>
      <category domain="http://securityratty.com/tag/aka michael wilde">aka michael wilde</category>
      <category domain="http://securityratty.com/tag/photo credit">photo credit</category>
      <category domain="http://securityratty.com/tag/heelys">heelys</category>
      <category domain="http://securityratty.com/tag/recently">recently</category>
      <category domain="http://securityratty.com/tag/chat">chat</category>
      <category domain="http://securityratty.com/tag/sciencelogic">sciencelogic</category>
      <source url="http://blog.sciencelogic.com/qa-with-the-splunk-ninjap/08/2008">Q&amp;A with the Splunk Ninja</source>
    </item>
    <item>
      <title><![CDATA[CEP and Analytics]]></title>
      <link>http://securityratty.com/article/7167551d00ca26f4a0df8a91ba7a3054</link>
      <guid>http://securityratty.com/article/7167551d00ca26f4a0df8a91ba7a3054</guid>
      <description><![CDATA[Peter Lin comments in A Complex Event = Sum (Events) + Situational Knowledge ,continuingthe discussion by asking What is the definition of analytics? Is it purely a calculation, or something else
A...]]></description>
      <content:encoded><![CDATA[<p>Peter Lin <a href="http://www.thecepblog.com/2008/08/16/a-complex-event-sum-events-knowledge/#comment-1079" target="_blank">comments</a> in <a title="A Complex Event = Sum (Events) + Situational Knowledge" rel="bookmark" href="http://www.thecepblog.com/2008/08/16/a-complex-event-sum-events-knowledge/"><span style="color: #105cb6;">A Complex Event = Sum (Events) + Situational Knowledge</span></a>, continuing the discussion by asking &#8221;<em>What is the definition of analytics? Is it purely a calculation, or something else?&#8221;</em></p>
<p>A good place to being to look for clues to an answer is <a href="http://en.wikipedia.org/wiki/Analytics" target="_blank">Wikipedia</a>, where the opinion of the author there is,</p>
<blockquote><p><em> &#8221;A simple and practical definition, however, would be how an entity (i.e., business) arrives at an optimal or realistic decision based on existing data.&#8221;</em></p></blockquote>
<p>Quoting the Wikipedia author(s) further,</p>
<blockquote><p><em>&#8220;Common applications of Analytics include the study of business data using statistical analysis in order to discover and understand historical patterns with an eye to predicting and improving business performance in the future. Also, some people use the term to denote the use of mathematics in business. Others hold that field of analytics include the use of Operations Research, Statistics and Probability. However, it would be erroneous to limit the field of analytics to only statistics and mathematics.&#8221;</em></p></blockquote>
<p>The Wikipedia author(s) continue their discussion of analytics, as follows;</p>
<blockquote><p><em>&#8220;Analytics closely resembles </em><a class="mw-redirect" title="Statistical analysis" href="http://www.thecepblog.com/wiki/Statistical_analysis"><em>statistical analysis</em></a><em> and </em><a title="Data mining" href="http://www.thecepblog.com/wiki/Data_mining"><em>data mining</em></a><em>, but tends to be based on modeling involving extensive computation. Some fields within the area of analytics are </em><a class="new" title="Enterprise decision management (page does not exist)" href="http://www.thecepblog.com/w/index.php?title=Enterprise_decision_management&amp;action=edit&amp;redlink=1"><em>enterprise decision management</em></a><em>, marketing analytics, predictive science, strategy science, credit risk analysis and fraud analytics.&#8221;</em></p></blockquote>
<p>All of these topics above are CEP-related areas involving complex events and situations based on the need for optimal and reliable real-time capabilities to make meaningful (business) decisions. </p>
<p>Simple pattern matching, event mediation and routing, and basic mathematical calculations do not really fall into the realm of complex event processing.  Instead, CEP is real-time decision support based on modeling and &#8220;extensive&#8221; computation.  In a nutshell, complex events and situations require analytical models that are non-trivial and that is why without analytics, there is no true &#8220;complex event processing.&#8221;</p>
<p>See also:</p>
<p><a href="http://en.wikipedia.org/wiki/Predictive_analytics" target="_self">WIkipedia on Predictive Analytics</a></p>
<p><a href="http://en.wikipedia.org/wiki/Predictive_analytics"></a></p>
]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 10:09:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/analytics">analytics</category>
      <category domain="http://securityratty.com/tag/wikipedia author">wikipedia author</category>
      <category domain="http://securityratty.com/tag/quotingthe wikipedia author">quotingthe wikipedia author</category>
      <category domain="http://securityratty.com/tag/fraud analytics">fraud analytics</category>
      <category domain="http://securityratty.com/tag/author">author</category>
      <category domain="http://securityratty.com/tag/predictive analytics">predictive analytics</category>
      <category domain="http://securityratty.com/tag/analytics include">analytics include</category>
      <category domain="http://securityratty.com/tag/business data">business data</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <source url="http://www.thecepblog.com/2008/08/19/cep-and-analytics/">CEP and Analytics</source>
    </item>
    <item>
      <title><![CDATA[Information risk management, and lessons-learned in the financial industry]]></title>
      <link>http://securityratty.com/article/b9c42d81e576cf16cdd8e7f1696edbc9</link>
      <guid>http://securityratty.com/article/b9c42d81e576cf16cdd8e7f1696edbc9</guid>
      <description><![CDATA[Information risk management, and lessons-learned in the financial industry Last week's Economist had a good article entitled &quot;Confessions of a Risk Manager&quot;, in which a risk manager from a global bank...]]></description>
      <content:encoded><![CDATA[Information risk management, and lessons-learned in the financial industry

Last week's <a href="http://www.economist.com/finance/displaystory.cfm?story_id=11897037">Economist</a> had a good article entitled "Confessions of a Risk Manager", in which a risk manager from a global bank uses 20-20 hindsight to look at "what went wrong" in the lead-up to the credit crunch and the ensuing fallout.

I won't pretend to understand all the ins and outs of financial derivatives, <B>but there were some points raised that anyone in the IT security space can identify with...</b>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/information risk management">information risk management</category>
      <category domain="http://securityratty.com/tag/financial industry">financial industry</category>
      <category domain="http://securityratty.com/tag/risk manager">risk manager</category>
      <category domain="http://securityratty.com/tag/financial derivatives">financial derivatives</category>
      <category domain="http://securityratty.com/tag/credit crunch">credit crunch</category>
      <category domain="http://securityratty.com/tag/security space">security space</category>
      <category domain="http://securityratty.com/tag/global bank">global bank</category>
      <category domain="http://securityratty.com/tag/pretend">pretend</category>
      <category domain="http://securityratty.com/tag/lead-up">lead-up</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1331">Information risk management, and lessons-learned in the financial industry</source>
    </item>
    <item>
      <title><![CDATA[Gallery: Images From the 16th Annual DefCon]]></title>
      <link>http://securityratty.com/article/fb7d8c7afe69bef6c3f3ee2131da03a6</link>
      <guid>http://securityratty.com/article/fb7d8c7afe69bef6c3f3ee2131da03a6</guid>
      <description><![CDATA[Photo: Dave Bullock/Wired.com
LAS VEGAS -- Last weekend, more than 9,000 hackers, freaks, feds and geeks gathered for the 16th annual DefCon, the world's largest computer security convention
Wired.com...]]></description>
      <content:encoded><![CDATA[<img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_2_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>LAS VEGAS -- Last weekend, more than 9,000 hackers, freaks, feds and geeks gathered for the 16th annual DefCon, the world's largest computer security convention. </p>

<p>Wired.com brought you <a href="http://blog.wired.com/27bstroke6/defcon/index.html">live coverage</a> of the most newsworthy events at DefCon 16. Here are some photos from the lighter side of the conference.</p>

<p><strong>Left:</strong> South Korean hackers compete in the Capture the Flag competition. The goal is to hack into and keep control of targeted servers.</p>
<img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_3_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>Mr. Sinister and Dragon Cracker battle it out in a round of <cite>Guitar Hero</cite> -- one of DefCon's newest competitions.</p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_1_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>Bringing-your-own-booze supply ensures optimal buzz at DefCon. Shortly after this picture was taken, hotel security escorted this backpack-hacker to his room.</p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_4_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>Computer geeks from the National Institute of Standards and Technology set up a network secured with quantum encryption in a conference room at DefCon. The quantum-entangled photons are being used to encrypt a video stream across a line-of-site network.</p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_5_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>A compact optical bench and an atomic clock (left) are used to secure a network with quantum encryption.   </p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_6_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>In the Lock Pick Pavilion, DefCon attendees Dustin, Jennalynn and Kunfoozball practice their lock-picking skills. </p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_7_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>DefCon founder and organizer Jeff Moss, aka Dark Tangent, at the conference's closing ceremony Sunday.</p>

<img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_9_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>A collection of black badges awaits the winners of the various competitions. These badges give their holders lifetime entry to DefCon.</p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_11_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>One of DefCon's logos, the smiley-faced skull and crossbones, is welded inside a yellow sphere. The sphere is the primary stage of one of the most difficult competitions at DefCon: <a href="http://blog.wired.com/27bstroke6/2008/08/the-defcon-16-m.html">The Mystery Challenge</a>. </p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_15_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>Unbeknownst to attendees, this laptop is sniffing RFID tags and taking photos of their owners when they pass in front of the detectors. RFID tags are used in everything from building access to some credit cards.</p><img src='http://www.wired.com/images/slideshow/2008/08/gallery_defcon16/defcon_gallery_12_t.jpg'></img>: Photo: Dave Bullock/Wired.com<p>At the closing ceremony, DefCon organizers turn off the lights while the attendees wave their <a href="http://blog.wired.com/27bstroke6/2008/08/exclusive-defco.html">high-tech badges</a> back and forth.</p><br style="clear: both;"/>
      <a href="http://www.pheedo.com/click.phdo?s=68dd26e52adb5b467e7c3e6137cda635"><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/img.phdo?s=68dd26e52adb5b467e7c3e6137cda635"/></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=68dd26e52adb5b467e7c3e6137cda635" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=5LS6EK"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=5LS6EK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=K4FTfk"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=K4FTfk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=IRLAWk"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=IRLAWk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=NFFkrK"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=NFFkrK" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=oS38eK"><img src="http://feeds.wired.com/~f/wired/politics/security?i=oS38eK" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=qIurlk"><img src="http://feeds.wired.com/~f/wired/politics/security?i=qIurlk" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=TG21wk"><img src="http://feeds.wired.com/~f/wired/politics/security?i=TG21wk" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=n3oFWK"><img src="http://feeds.wired.com/~f/wired/politics/security?i=n3oFWK" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/362249101" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/362249108" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 14:30:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/defcon">defcon</category>
      <category domain="http://securityratty.com/tag/16th annual defcon">16th annual defcon</category>
      <category domain="http://securityratty.com/tag/defcon founder">defcon founder</category>
      <category domain="http://securityratty.com/tag/attendees wave">attendees wave</category>
      <category domain="http://securityratty.com/tag/attendees">attendees</category>
      <category domain="http://securityratty.com/tag/defcon organizers">defcon organizers</category>
      <category domain="http://securityratty.com/tag/defcon attendees dustin">defcon attendees dustin</category>
      <category domain="http://securityratty.com/tag/photo">photo</category>
      <category domain="http://securityratty.com/tag/dave">dave</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/362249108/gallery_defcon16">Gallery: Images From the 16th Annual DefCon</source>
    </item>
    <item>
      <title><![CDATA[DOJ Fingers Global Ring in Alleged Data Thefts]]></title>
      <link>http://securityratty.com/article/85c09d69376504f2493fab1c36bcbfc0</link>
      <guid>http://securityratty.com/article/85c09d69376504f2493fab1c36bcbfc0</guid>
      <description><![CDATA[The cybercrooks who allegedly stole millions of credit and debit numbers from retailers belonged to a multinational group that used programming skills and wardriving techniques to break into corporate...]]></description>
      <content:encoded><![CDATA[The cybercrooks who allegedly stole millions of credit and debit numbers from retailers belonged to a multinational group that used programming skills and wardriving techniques to break into corporate networks.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=Dz3WTk"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=Dz3WTk" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/361595984" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 03:30:39 +0000</pubDate>
      <category domain="http://securityratty.com/tag/retailers">retailers</category>
      <category domain="http://securityratty.com/tag/cybercrooks">cybercrooks</category>
      <category domain="http://securityratty.com/tag/skills">skills</category>
      <category domain="http://securityratty.com/tag/credit">credit</category>
      <category domain="http://securityratty.com/tag/networks">networks</category>
      <category domain="http://securityratty.com/tag/techniques">techniques</category>
      <category domain="http://securityratty.com/tag/millions">millions</category>
      <category domain="http://securityratty.com/tag/debit">debit</category>
      <category domain="http://securityratty.com/tag/multinational">multinational</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/361595984/article.do">DOJ Fingers Global Ring in Alleged Data Thefts</source>
    </item>
    <item>
      <title><![CDATA[Unauthorized Well Fargo Transactions Endanger Private Details Of 7000 Clinets]]></title>
      <link>http://securityratty.com/article/a4622ceab74e4c671e2738aedde2d038</link>
      <guid>http://securityratty.com/article/a4622ceab74e4c671e2738aedde2d038</guid>
      <description><![CDATA[According to New Hampshire State Attorney General breach notification, a significant number of unauthorized transactions had been made using Well Fargos access codes. Wells Fargo Bank, N.A. has been...]]></description>
      <content:encoded><![CDATA[According to New Hampshire State Attorney General breach notification, a significant number of unauthorized transactions had been made using Well Fargo&#8217;s access codes.
Wells Fargo Bank, N.A. has been advised by a reseller of consumer data, including consumer credit bureau data, of suspicious transactions made using Wells Fargo access codes. The investigation confirmed that a significant [...]]]></content:encoded>
      <pubDate>Fri, 08 Aug 2008 17:35:58 +0000</pubDate>
      <category domain="http://securityratty.com/tag/transactions">transactions</category>
      <category domain="http://securityratty.com/tag/fargo access codes">fargo access codes</category>
      <category domain="http://securityratty.com/tag/suspicious transactions">suspicious transactions</category>
      <category domain="http://securityratty.com/tag/fargos access codes">fargos access codes</category>
      <category domain="http://securityratty.com/tag/breach notification">breach notification</category>
      <category domain="http://securityratty.com/tag/consumer data">consumer data</category>
      <category domain="http://securityratty.com/tag/fargo bank">fargo bank</category>
      <category domain="http://securityratty.com/tag/significant">significant</category>
      <category domain="http://securityratty.com/tag/attorney">attorney</category>
      <source url="http://cyberinsecure.com/unauthorized-well-fargo-transactions-endangers-private-details-of-7000-clinets/">Unauthorized Well Fargo Transactions Endanger Private Details Of 7000 Clinets</source>
    </item>
    <item>
      <title><![CDATA[Reporters Tossed Out of BlackHat for Hacking Other Press Reps]]></title>
      <link>http://securityratty.com/article/9247e7106cfa1fd62a6d8c951ca64e5c</link>
      <guid>http://securityratty.com/article/9247e7106cfa1fd62a6d8c951ca64e5c</guid>
      <description><![CDATA[Security folks seem to enjoy their jobs making a game of penetration tests, hacking, and in good natured fun, reminding each other when theyre vulnerable online. So at the Black Hat conference this...]]></description>
      <content:encoded><![CDATA[<p>Security folks seem to enjoy their jobs &#8212; making a game of penetration tests, hacking, and in good natured fun, reminding each other when they&#8217;re vulnerable online. So at the Black Hat conference this week, wireless network users were warned that if they didn&#8217;t use an encrypted connection, their data, credentials and passwords would be projected on a wall for all to see.</p>
<p>The baaad folks who were listed up on this &#8220;Wall of Sheep&#8221; consisted largely of security professionals who should know better, though many of them were using iPhones or other types of mobile devices instead of traditional laptops. Apparently, users were warned ahead of time that this could happen, and this type of passive hacking was done good naturedly, as a lesson and a point of humor.</p>
<p>But the event turned a bit sour when some reporters set out to actively hack credentials and passwords from other well known press representatives (like eWeek and CNET), in order to post them on the Wall of Sheep, too. It&#8217;s a credit to the Black Hat organizers that they showed their commitment to security and confidentiality, and threw the reporter-hackers out of the conference for their &#8220;active&#8221; hack:</p>
<blockquote><p>With thousands of hackers milling around the Black Hat convention here, and widespread snooping on the public WiFi network, one place was supposed to be off limits: the press room.</p>
<p>But in a case of reporters spying on other reporters, three journalists working for the French publication Global Security Magazine were booted Thursday from the hackers&#8217; conference after they were allegedly caught hacking into the private computer network set up for the media.</p></blockquote>
<p>Read the <a rel="nofollow" target="_blank" href="http://www.washingtonpost.com/wp-dyn/content/article/2008/08/08/AR2008080800003.html">full article</a> here.</p>]]></content:encoded>
      <pubDate>Fri, 08 Aug 2008 09:02:31 +0000</pubDate>
      <category domain="http://securityratty.com/tag/reporters">reporters</category>
      <category domain="http://securityratty.com/tag/press">press</category>
      <category domain="http://securityratty.com/tag/conference">conference</category>
      <category domain="http://securityratty.com/tag/black hat conference">black hat conference</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security professionals">security professionals</category>
      <category domain="http://securityratty.com/tag/credentials">credentials</category>
      <category domain="http://securityratty.com/tag/actively hack credentials">actively hack credentials</category>
      <category domain="http://securityratty.com/tag/reporters set">reporters set</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/359746131/">Reporters Tossed Out of BlackHat for Hacking Other Press Reps</source>
    </item>
    <item>
      <title><![CDATA[Take advantage of this settlement at TransUnion]]></title>
      <link>http://securityratty.com/article/06301614285539371821183e606aa740</link>
      <guid>http://securityratty.com/article/06301614285539371821183e606aa740</guid>
      <description><![CDATA[Hey, it could save you against a theft of your personal data


clipped from peterhgregory.wordpress.com
Apparent misdeeds result in free credit monitoring for?millions


A class action lawsuit against...]]></description>
      <content:encoded><![CDATA[<div > Hey, it could save you against a theft of your personal data. </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/31EE423B-BFD0-4AF7-8882-4C1BC3F6B7F0/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/432a97be-bc8a-46f3-93fd-adf2ecf0b27f/31EE423B-BFD0-4AF7-8882-4C1BC3F6B7F0/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://peterhgregory.wordpress.com/2008/07/31/listclassaction/" href="http://peterhgregory.wordpress.com/2008/07/31/listclassaction/" style="font-size: 11px;">peterhgregory.wordpress.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://peterhgregory.wordpress.com/2008/07/31/listclassaction/ -->Apparent misdeeds result in free credit monitoring for?millions</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://peterhgregory.wordpress.com/2008/07/31/listclassaction/ --><P>A class action lawsuit against credit reporting bureau TransUnion has resulted in a settlement that will result in millions of U.S. citizens getting free credit monitoring for as long as nine months.</P></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/31EE423B-BFD0-4AF7-8882-4C1BC3F6B7F0/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
]]></content:encoded>
      <pubDate>Sat, 02 Aug 2008 11:31:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/free credit">free credit</category>
      <category domain="http://securityratty.com/tag/credit">credit</category>
      <category domain="http://securityratty.com/tag/apparent misdeeds result">apparent misdeeds result</category>
      <category domain="http://securityratty.com/tag/result">result</category>
      <category domain="http://securityratty.com/tag/class action lawsuit">class action lawsuit</category>
      <category domain="http://securityratty.com/tag/bureau transunion">bureau transunion</category>
      <category domain="http://securityratty.com/tag/millions">millions</category>
      <category domain="http://securityratty.com/tag/personal data">personal data</category>
      <category domain="http://securityratty.com/tag/settlement">settlement</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=528">Take advantage of this settlement at TransUnion</source>
    </item>
    <item>
      <title><![CDATA[Random stuff on my to do list]]></title>
      <link>http://securityratty.com/article/8a6e0cf6a3383c5228b81f063f03348a</link>
      <guid>http://securityratty.com/article/8a6e0cf6a3383c5228b81f063f03348a</guid>
      <description><![CDATA[SQL injection in web apps is sooooo old. It still exists everywhere and security companies are still making good moolah by capturing 'crown jewels' by exploiting this - However, I'm not sure that SQL...]]></description>
      <content:encoded><![CDATA[SQL injection in web apps is sooooo old. It still exists everywhere and security companies are still making good moolah by capturing 'crown jewels' by exploiting this - However, I'm not sure that SQL injection testing for non web based applications/scenarios has caught on. Are they even worth trying ? For example: I'd really like to test the logic for the following (for starters) at some point in life :<br /><br />1. Cell phones - EMEA registration. Attempt to SQL inject the backend during registration and/or normal communication. Ditto with normal phone lines - would that work ? Before I even say "Only one way to find out.." I should really read up on cell phones to test the theory..<br /><br />2. Magstripes on cards - change data in the magstripe of ID cards , hotel access cards, credit cards, debit cards etc - to SQL inject the backend - Hmmm.. my name/cardnumber/PIN is now <em>' OR 1=1 -- ? </em><br />Something like  <a href="http://xkcd.com/327/">little bobby tables</a>.<br /><br />3. Checks - Change the account number on checks to SQL inject the backend. I'm almost certain this would fail because of the MICR E13b restrictions of characters.. ah well.. <br /><br />Ah well..I would need to get back into security consulting at some point if I want to test this out in a legal way..]]></content:encoded>
      <pubDate>Thu, 31 Jul 2008 12:46:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/credit cards">credit cards</category>
      <category domain="http://securityratty.com/tag/cards">cards</category>
      <category domain="http://securityratty.com/tag/hotel access cards">hotel access cards</category>
      <category domain="http://securityratty.com/tag/sql inject">sql inject</category>
      <category domain="http://securityratty.com/tag/debit cards">debit cards</category>
      <category domain="http://securityratty.com/tag/sql injection">sql injection</category>
      <category domain="http://securityratty.com/tag/cell phones">cell phones</category>
      <category domain="http://securityratty.com/tag/test">test</category>
      <category domain="http://securityratty.com/tag/backend">backend</category>
      <source url="http://securitycoin.blogspot.com/2008/07/random-stuff-on-my-to-do-list.html">Random stuff on my to do list</source>
    </item>
  </channel>
</rss>
