<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: defunct]]></title>
    <link>http://securityratty.com/tag/defunct</link>
    <description></description>
    <pubDate>Sun, 30 Dec 2007 17:17:11 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Air Canada Goes GoGo]]></title>
      <link>http://securityratty.com/article/aa24c2fafb1d51338b76c32e2a0e716b</link>
      <guid>http://securityratty.com/article/aa24c2fafb1d51338b76c32e2a0e716b</guid>
      <description><![CDATA[Aircell has snagged our neighbor (neighbour?) to the north, adding Air Canada to its signed-up airlines for in-flight broadband: Aircell will bring Gogo Internet to Air Canada starting in spring 2009...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://aircell.mediaroom.com/index.php?s=43&item=88"><strong>Aircell has snagged our neighbor (neighbour?) to the north, adding Air Canada to its signed-up airlines for in-flight broadband:</strong></a> Aircell will bring Gogo Internet to Air Canada starting in spring 2009 for trans-border flights using its existing U.S. air-to-ground network. Aircell told me some time ago that they ultimately expected approval from Canada, Mexico, and Caribbean authorities to use the same frequencies as they purchased in the U.S. for air-to-ground broadband; the same had been true for AirFone and other defunct in-flight call providers. The first planes covered will be Airbus A319s.</p>]]></content:encoded>
      <pubDate>Tue, 09 Sep 2008 06:45:14 +0000</pubDate>
      <category domain="http://securityratty.com/tag/canada">canada</category>
      <category domain="http://securityratty.com/tag/air canada">air canada</category>
      <category domain="http://securityratty.com/tag/aircell">aircell</category>
      <category domain="http://securityratty.com/tag/air-to-ground network">air-to-ground network</category>
      <category domain="http://securityratty.com/tag/airbus a319s">airbus a319s</category>
      <category domain="http://securityratty.com/tag/time ago">time ago</category>
      <category domain="http://securityratty.com/tag/gogo internet">gogo internet</category>
      <category domain="http://securityratty.com/tag/trans-border flights">trans-border flights</category>
      <category domain="http://securityratty.com/tag/signed-up airlines">signed-up airlines</category>
      <source url="http://wifinetnews.com/archives/008433.html">Air Canada Goes GoGo</source>
    </item>
    <item>
      <title><![CDATA[Washington DC Metro Farecard Hack]]></title>
      <link>http://securityratty.com/article/704794b4bc6787ea48960fc4329ad020</link>
      <guid>http://securityratty.com/article/704794b4bc6787ea48960fc4329ad020</guid>
      <description><![CDATA[Clever : Thieves took a legitimate paper Farecard with $40 in value, sliced the card's magnetic strip into four lengthwise pieces, and then reattached one piece each to four separate defunct paper...]]></description>
      <content:encoded><![CDATA[<a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/07/18/AR2008071801912_pf.html">Clever</a>:

<blockquote>Thieves took a legitimate paper Farecard with $40 in value, sliced the card's magnetic strip into four lengthwise pieces, and then reattached one piece each to four separate defunct paper Farecards. The thieves then took the doctored Farecards to a Farecard machine and added fare, typically a nickel. By doing so, the doctored Farecard would go into the machine and a legitimate Farecard with the new value, $40.05, would come out.</blockquote>

My guess is that the thieves were caught not through some fancy technology, but because they had to monetize their attack.  They sold farecards on the street for half face value.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=KskryJ"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=KskryJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=RNbwjJ"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=RNbwjJ" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 22 Jul 2008 08:29:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/farecard">farecard</category>
      <category domain="http://securityratty.com/tag/farecard machine">farecard machine</category>
      <category domain="http://securityratty.com/tag/machine">machine</category>
      <category domain="http://securityratty.com/tag/defunct paper farecards">defunct paper farecards</category>
      <category domain="http://securityratty.com/tag/farecards">farecards</category>
      <category domain="http://securityratty.com/tag/paper farecard">paper farecard</category>
      <category domain="http://securityratty.com/tag/thieves">thieves</category>
      <category domain="http://securityratty.com/tag/fancy technology">fancy technology</category>
      <category domain="http://securityratty.com/tag/magnetic strip">magnetic strip</category>
      <source url="http://www.schneier.com/blog/archives/2008/07/washington_dc_m.html">Washington DC Metro Farecard Hack</source>
    </item>
    <item>
      <title><![CDATA[Dems were for Web 2.0 before they were against it]]></title>
      <link>http://securityratty.com/article/3c7208b75cc88c431e97fe0b20cdcd01</link>
      <guid>http://securityratty.com/article/3c7208b75cc88c431e97fe0b20cdcd01</guid>
      <description><![CDATA[zenpundit aka Mark Safranski on the congressional Democrats war on Web 2.0



Nor was one of the leading Web 2.0 experts, Clay Shirky, reassured either, writing at
Open House Project : They can...]]></description>
      <content:encoded><![CDATA[<p><a href="http://zenpundit.com/?p=2785">zenpundit</a> aka Mark Safranski on the congressional Democrats <a href="http://pajamasmedia.com/blog/congress-debates-muzzling-congressmen-online/">war on Web 2.0</a></p><br><div><span style="font-family: Verdana; line-height: normal; "><p style="margin-top: 0px; margin-right: 10px; margin-bottom: 10px; margin-left: 10px; color: #000000; padding-left: 0px; padding-right: 0px; font-size: 13px; line-height: 16px; "></p><blockquote><p>Nor was one of the leading Web 2.0 experts, Clay Shirky, reassured either, writing at</p><blockquote style="display: inline !important; "><p><a href="http://groups.google.com/group/openhouseproject/browse_thread/thread/1e8d9aa1c7a903d8" style="color: #02446a; text-decoration: underline; ">Open House Project</a>: “They can enforce it the way we enforce parking rules, which is to miss most violations, and then bring in draconian enforcement of enough violations to have a chilling effect. This will also allow the Rules Committee to wield enforcement selectively as a stick.” Representative Capuano, who has described the internet as “a necessary evil,” would be one of the enforcers and he is part of a larger Democratic House leadership whose speaker, Nancy Pelosi, also supports a revival of the long-defunct “Fairness Doctrine” that made it unprofitable for broadcast networks to permit robust political expression on air.</p></blockquote></blockquote><p></p><p style="margin-top: 0px; margin-right: 10px; margin-bottom: 10px; margin-left: 10px; color: #000000; padding-left: 0px; padding-right: 0px; font-size: 13px; line-height: 16px; "></p><blockquote><p>...</p></blockquote><p></p><p style="margin-top: 0px; margin-right: 10px; margin-bottom: 10px; margin-left: 10px; color: #000000; padding-left: 0px; padding-right: 0px; font-size: 13px; line-height: 16px; "></p><blockquote><p>More ominous still would be the precedent of the U.S. government designating “official” external websites — imagine having the power to select “official” newspapers — that would have to hew to House regulations and be as free as possible from political or commercial advertising. Given the ubiquity of blogads, most blogs, bulletin boards, and discussion forums would be shut out of the conversation with our nation’s elected officials. Essentially, Capuano is demanding that the internet adapt itself to the House of Representatives instead of the House adapting to the reality of the internet.</p></blockquote>Looks like a good diversion from normal critical DC wealth destroying activities, and baseball steroid and NFL team filming practices investigations,<p></p></span></div>]]></content:encoded>
      <pubDate>Tue, 15 Jul 2008 16:57:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/house">house</category>
      <category domain="http://securityratty.com/tag/house regulations">house regulations</category>
      <category domain="http://securityratty.com/tag/house project">house project</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/internet adapt">internet adapt</category>
      <category domain="http://securityratty.com/tag/select official newspapers">select official newspapers</category>
      <category domain="http://securityratty.com/tag/long-defunct fairness doctrine">long-defunct fairness doctrine</category>
      <category domain="http://securityratty.com/tag/representative capuano">representative capuano</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/07/dems-were-for-web-20-before-they-were-against-it.html">Dems were for Web 2.0 before they were against it</source>
    </item>
    <item>
      <title><![CDATA[Capital Market CEP Fantasy Land]]></title>
      <link>http://securityratty.com/article/34d9a8128d15d52ecec3bfe7b769f285</link>
      <guid>http://securityratty.com/article/34d9a8128d15d52ecec3bfe7b769f285</guid>
      <description><![CDATA[In Tech Spending Hit by Subprime Mess , Jeffery Schwartz says
According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly,...]]></description>
      <content:encoded><![CDATA[<div class='snap_preview'><br /><p>In <a href="http://reddevnews.com/news/article.aspx?editorialsid=9988" target="_blank">Tech Spending Hit by Subprime Mess</a>, Jeffery Schwartz says,</p>
<blockquote><p>&#8220;According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly, do a better job at risk management. As such, investments in capabilities such as algorithmic trading and complex event processing (CEP) are likely to be pivotal in some firms&#8217; efforts to become more competitive and improve their efforts at mitigating risks.&#8221;</p></blockquote>
<blockquote><p>&#8220;But for some banks that have deployed such technologies &#8212; the now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch &#8212; the question is: How did these companies fail to mitigate the risks that have slammed their businesses if their development teams were developing and deploying sophisticated systems?</p>
<p>&#8220;There is definitely an awareness that perhaps the systems that existed in place to assess the value of portfolios or judge risk [are being scrutinized],&#8221; said Stevan Vidich, an industry architect in Microsoft&#8217;s financial services group. &#8220;</p></blockquote>
<blockquote><p>He added that there is strong interest in CEP and other risk management methodologies. A growing number of shops have started deploying such solutions based on the .NET Framework, Vidich said, and he believes such investments will continue.</p></blockquote>
<blockquote><p>&#8220;Clearly, there&#8217;s a lot of need to deal with the immense influx of data and being able to analyze data in a timely manner,&#8221; Vidich said. &#8220;It also drives need for systems like business intelligence, or BI, applied to a near-real-time scenario, which is a very attractive proposition.&#8221;</p></blockquote>
<p>What are these guys on Wall Street smoking? </p>
<p>This is the precise &#8220;over hyping&#8221; problem I have warned about repeatedly.   Folks selling rule engines that perform basic calculations over a time window of streaming data have been marketing their wares as &#8220;superbrains&#8221; that can solve very complicated problems and, at the same time, save Wall Street and The Planet.</p>
<p>Let me be perfectly clear here Wall Street.  Listen very carefully.</p>
<p>There is nothing in any of the so called CEP products in the market place that is going to stop losses related to the subprime meltdown effecting the &#8220;<em>now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch</em>,&#8221; as Jeffery Schwartz implies.</p>
<p>To imply that the risk management (and corporate governance) required to mitigate the current crisis on Wall Street can be foreseen, solved, or even mitigated, by a rules engine (or any software) is complete and absolute fantasy.   </p>
<p>I think the fever created by the subprime flu is putting folks on Wall Street, or at least the vendors and the analysts pandering to them, in a Capital Market CEP Fantasy Land.</p>
<p> </p>
<img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/eventprocessing.wordpress.com/255/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/eventprocessing.wordpress.com/255/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/eventprocessing.wordpress.com/255/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=thecepblog.com&blog=1100533&post=255&subd=eventprocessing&ref=&feed=1" /></div>]]></content:encoded>
      <pubDate>Mon, 23 Jun 2008 09:38:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/risk management methodologies">risk management methodologies</category>
      <category domain="http://securityratty.com/tag/risk management">risk management</category>
      <category domain="http://securityratty.com/tag/wall street">wall street</category>
      <category domain="http://securityratty.com/tag/now-defunct bear stearns">now-defunct bear stearns</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz implies">jeffery schwartz implies</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz">jeffery schwartz</category>
      <category domain="http://securityratty.com/tag/subprime">subprime</category>
      <source url="http://thecepblog.com/2008/06/23/capital-market-cep-fantasy-land/">Capital Market CEP Fantasy Land</source>
    </item>
    <item>
      <title><![CDATA[Capital Market CEP Fantasy Land]]></title>
      <link>http://securityratty.com/article/2b86dd3c2e87f7b28f8b7b7da7d5e9d5</link>
      <guid>http://securityratty.com/article/2b86dd3c2e87f7b28f8b7b7da7d5e9d5</guid>
      <description><![CDATA[In Tech Spending Hit by Subprime Mess , Jeffery Schwartz says
According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly,...]]></description>
      <content:encoded><![CDATA[<p>In <a href="http://reddevnews.com/news/article.aspx?editorialsid=9988" target="_blank">Tech Spending Hit by Subprime Mess</a>, Jeffery Schwartz says,</p>
<blockquote><p>&#8220;According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly, do a better job at risk management. As such, investments in capabilities such as algorithmic trading and complex event processing (CEP) are likely to be pivotal in some firms&#8217; efforts to become more competitive and improve their efforts at mitigating risks.&#8221;</p></blockquote>
<blockquote><p>&#8220;But for some banks that have deployed such technologies &#8212; the now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch &#8212; the question is: How did these companies fail to mitigate the risks that have slammed their businesses if their development teams were developing and deploying sophisticated systems?</p>
<p>&#8220;There is definitely an awareness that perhaps the systems that existed in place to assess the value of portfolios or judge risk [are being scrutinized],&#8221; said Stevan Vidich, an industry architect in Microsoft&#8217;s financial services group. &#8220;</p></blockquote>
<blockquote><p>He added that there is strong interest in CEP and other risk management methodologies. A growing number of shops have started deploying such solutions based on the .NET Framework, Vidich said, and he believes such investments will continue.</p></blockquote>
<blockquote><p>&#8220;Clearly, there&#8217;s a lot of need to deal with the immense influx of data and being able to analyze data in a timely manner,&#8221; Vidich said. &#8220;It also drives need for systems like business intelligence, or BI, applied to a near-real-time scenario, which is a very attractive proposition.&#8221;</p></blockquote>
<p>What are these guys on Wall Street smoking? </p>
<p>This is the precise &#8220;over hyping&#8221; problem I have warned about repeatedly.   Folks selling rule engines that perform basic calculations over a time window of streaming data have been marketing their wares as &#8220;superbrains&#8221; that can solve very complicated problems and, at the same time, save Wall Street and The Planet.</p>
<p>Let me be perfectly clear here Wall Street.  Listen very carefully.</p>
<p>There is nothing in any of the so called CEP products in the market place that is going to stop losses related to the subprime meltdown effecting the &#8220;<em>now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch</em>,&#8221; as Jeffery Schwartz implies.</p>
<p>To imply that the risk management (and corporate governance) required to mitigate the current crisis on Wall Street can be foreseen, solved, or even mitigated, by a rules engine (or any software) is complete and absolute fantasy.   </p>
<p>I think the fever created by the subprime flu is putting folks on Wall Street, or at least the vendors and the analysts pandering to them, in a Capital Market CEP Fantasy Land.</p>
<p> </p>
]]></content:encoded>
      <pubDate>Mon, 23 Jun 2008 09:38:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/risk management methodologies">risk management methodologies</category>
      <category domain="http://securityratty.com/tag/risk management">risk management</category>
      <category domain="http://securityratty.com/tag/wall street">wall street</category>
      <category domain="http://securityratty.com/tag/now-defunct bear stearns">now-defunct bear stearns</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz implies">jeffery schwartz implies</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz">jeffery schwartz</category>
      <category domain="http://securityratty.com/tag/subprime">subprime</category>
      <source url="http://www.thecepblog.com/2008/06/23/capital-market-cep-fantasy-land/">Capital Market CEP Fantasy Land</source>
    </item>
    <item>
      <title><![CDATA[Happy Birthday Spam! Wish you many unhappy returns!]]></title>
      <link>http://securityratty.com/article/c3810931d5de1770341b1fc34bf7664f</link>
      <guid>http://securityratty.com/article/c3810931d5de1770341b1fc34bf7664f</guid>
      <description><![CDATA[Yup, many unhappy returns


clipped from news.yahoo.com





For 30 years now, youve been getting spam



WASHINGTON (AFP
This week, the world will mark an anniversary that has changed the face and...]]></description>
      <content:encoded><![CDATA[<div > Yup, many unhappy returns. </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/86B7644A-C114-4FA3-83EA-98AD74702A49/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/11c65157-f774-432a-a2f9-e81bf543f518/86B7644A-C114-4FA3-83EA-98AD74702A49/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://news.yahoo.com/s/afp/20080502/tc_afp/technologyinternetspamhistory30years" href="http://news.yahoo.com/s/afp/20080502/tc_afp/technologyinternetspamhistory30years" style="font-size: 11px;">news.yahoo.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://news.yahoo.com/s/afp/20080502/tc_afp/technologyinternetspamhistory30years -->
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">
					<DIV class="source"><br />
                                                						<A href="http://us.rd.yahoo.com/dailynews/afp/brand/SIG=ofqlv2;_ylt=AqE9kROEtnalBegiR8_lWj.OOrgF/*http://www.afp.com"><IMG width="51" height="27" border="0" alt="AFP" src="http://l.yimg.com/us.yimg.com/i/us/nws/p/afp_logo_51.png" /></A><br />
                                                					</DIV><br />
                                        For 30 years now, you&#8217;ve been getting spam                </div>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://news.yahoo.com/s/afp/20080502/tc_afp/technologyinternetspamhistory30years --><P><br />
                        WASHINGTON (AFP) -<br />
This week, the world will mark an anniversary that has changed the face &#8212; and other anatomical regions &#8212; of email inboxes everywhere: the first known spam email was sent 30 years ago on Saturday.<br />
                        </P></td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://news.yahoo.com/s/afp/20080502/tc_afp/technologyinternetspamhistory30years --><P><br />
But the message sent on May 3, 1978 by a marketer for the now defunct DEC computer company to around 400 people on the west coast of the United States wasn&#8217;t called spam, and the sender dispatched it without ill intent.</P></td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://news.yahoo.com/s/afp/20080502/tc_afp/technologyinternetspamhistory30years --><P><br />
How things have changed.</P></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/86B7644A-C114-4FA3-83EA-98AD74702A49/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
]]></content:encoded>
      <pubDate>Sat, 03 May 2008 11:41:18 +0000</pubDate>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/unhappy returns">unhappy returns</category>
      <category domain="http://securityratty.com/tag/spam email">spam email</category>
      <category domain="http://securityratty.com/tag/west coast">west coast</category>
      <category domain="http://securityratty.com/tag/email inboxes">email inboxes</category>
      <category domain="http://securityratty.com/tag/anatomical regions">anatomical regions</category>
      <category domain="http://securityratty.com/tag/intent">intent</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/marketer">marketer</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=441">Happy Birthday Spam! Wish you many unhappy returns!</source>
    </item>
    <item>
      <title><![CDATA[New York Times Taunts Long Island Effort, E-Path]]></title>
      <link>http://securityratty.com/article/b894ec44057ecd97567d0adde3f22093</link>
      <guid>http://securityratty.com/article/b894ec44057ecd97567d0adde3f22093</guid>
      <description><![CDATA[The New York Times editorial board says nyah-nyah to Long Island's Wi-Fi network: The editorial posted on the Times masthead blog, The Board, notes that a &quot;no-name&quot; company wiht &quot;no track record&quot; was...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://theboard.blogs.nytimes.com/2008/04/15/wi-fi-for-li/"><strong>The New York Times editorial board says nyah-nyah to Long Island's Wi-Fi network:</strong></a> The editorial posted on the Times masthead blog, The Board, notes that a "no-name" company wiht "no track record" was awarded a contract, and that citizens shouldn't worry because "the government wouldn't be spending anything." (The Suffolk County executive Steve Levy was <a href="http://www.nytimes.com/2007/08/16/nyregion/16wifi.html"><strong>quoted by the Times in August 2007</strong></a> saying precisely that: "No taxpayer dollars will be spent.")</p>

<p>The money grafs in this article: "No tax dollars, no risk, no problem. Now it looks like no wi-fi, either."</p>

<p>As I, Craig Settles, Esme Vos, Craig Plunkett (a local wireless provider), your crazy uncle, and John McCain could probably have all told you (and many of us did), a $150m network from a firm that hasn't built such a network, with no municipal commitment for the purchase of services means no network will be built. I'm not saying that Wi-Fi is <em>the</em> answer or <em>any</em> answer, but it's become clear that if a city can't move some of its dollars from one vendor to a Wi-Fi provider in order to secure service, there's no way a network gets built. (See: everywhere.) </p>

<div style="font-size: 10px; text-align: left; width: 350px; padding-left: 10px; float: right; clear: left;"><img src="http://wifinetnews.com/images/epath-ie-comparison.jpg" alt="E-Path logo compared to IE logo" border="0" height="100" widht="200" hspace="5" vspace="5" /><img src="http://wifinetnews.com/images/2008/epath_revised_logo_sm.jpg" alt="E-Path revised logo" border="0" width="103" height="100" /><br>From left to right: Internet Explorer logo, E-Path's logo as of a few weeks ago, E-Path's new logo</div><br clear="left">Taxpayer dollars are already being spent on incumbent services for voice and data. Moving expenses from one firm to another is only a risk if there's a cost involved that can't recouped, and if the city is on the hook for services if a network goes defunct. That can happen, and has happened. But it's a different issue than spending "taxpayer dollars." In fact, through better controls and more efficiency, spending on wireless broadband of all kinds (Wi-Fi, public safety 4.9 GHz, WiMax, and cell data), <em>fewer</em> taxpayer dollars could be spent or more services obtained. Think about police officers being in the field 10 percent more per day if they can file reports from the field, electronically. It's been shown to help in cities that have tried this even with older wireless systems.

<p>The Times editorial board isn't content to ridicule the potential deployment, however. They note that directory services lacks a listing for E-Path, that no phone number is on the company's site, and that email to the four principals isn't responded to--except a bounce message from the COO who apparently left the firm on 14 April 2008.</p>

<p>I'd also note that the company must have seen my post on the similarities of their logo to the Internet Explorer icon. The <a href="http://epathcommunications.com/joomla/index.php?option=com_frontpage&Itemid=1"><strong>new logo</strong></a> is entirely different, and new in the last few weeks. (See inset figure.)<br />
</p>]]></content:encoded>
      <pubDate>Tue, 15 Apr 2008 06:53:58 +0000</pubDate>
      <category domain="http://securityratty.com/tag/logo taxpayer dollars">logo taxpayer dollars</category>
      <category domain="http://securityratty.com/tag/taxpayer dollars">taxpayer dollars</category>
      <category domain="http://securityratty.com/tag/times">times</category>
      <category domain="http://securityratty.com/tag/fewer taxpayer dollars">fewer taxpayer dollars</category>
      <category domain="http://securityratty.com/tag/logo">logo</category>
      <category domain="http://securityratty.com/tag/dollars">dollars</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/times editorial board">times editorial board</category>
      <source url="http://wifinetnews.com/archives/008278.html">New York Times Taunts Long Island Effort, E-Path</source>
    </item>
    <item>
      <title><![CDATA[First Magnus Financial customer data found in dumpster]]></title>
      <link>http://securityratty.com/article/ccc96b82673139919d57577f8ada9e89</link>
      <guid>http://securityratty.com/article/ccc96b82673139919d57577f8ada9e89</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
2/15/08

Organization
First Magnus Financial Corporation

Contractor/Consultant/Branch
None

Victims
Customers

Number Affected
Unknown

Types of Data...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/firstmagnus.jpg" align="right" height="67" width="200"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>2/15/08<br><br><span style="font-weight: bold;">Organization: </span><br><a target="_blank" href="http://www.firstmagnus.com/">First Magnus Financial Corporation</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>Loan and financial documents containing names, addresses, phone numbers, Social Security numbers, credit card numbers, financial account information, etc.<br><br><span style="font-weight: bold;">Breach Description:</span><br>Stacked boxes containing thousands of sensitive loan and financial documents were discovered in an dumpster outside a Ft. Lauderdale, Florida branch of the now bankrupt First Magnus Financial Corporation.&nbsp; The documents contain sensitive personal information belonging to customers.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a target="_blank" href="http://cbs4.com/local/Ft.Lauderdale.Trash.2.655638.html">CBS Channel 4 News online story</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Carey Codd, CBS Channel 4<br><br><span style="font-weight: bold;">Response:</span><br>From the online source cited above:<br><br>Outside a University of Phoenix Building in Ft. Lauderdale, files and paperwork belonging to the defunct First Magnus Financial at 550 West Cypress Creek Road were just lying inside stacked boxes inside an industrial garbage container, available for anyone to peek at.<br><br>The paperwork contains some of the most sensitive information a consumer could posses: Social Security numbers, credit card information, addresses, properties, etc.<br><br>Shortly after CBS4 News cameras arrived on Friday, employees of the building removed the boxes and took them indoors, all while police officers from Ft. Lauderdale arrived and roped off access to the dumpster and started an investigation.<br><span style="font-style: italic;">[Evan] The Ft. Lauderdale Police Department treats the location of this breach as a crime scene, which it obviously is.&nbsp; Common sense, right?&nbsp; Not so much in some police departments.&nbsp; I have read credible reports of police refusing to even come to the scene and taking reports over the telephone.&nbsp; Kudos to the Ft. Lauderdale Police Department.</span><br><br>"We were told that we just could get rid of this stuff no matter how, that this was going to end up in the landfill, it's going to be drenched down here inside the container, and no one's going to have access to it," said Mike Shank.<br><span style="font-style: italic;">[Evan] This is lazy, reckless, and overall bad business (assuming that this statement is accurate).</span><br><br>The building management is supposedly waiting for officials with First Magnus to come and properly dispose of the sensitive documents.<br><span style="font-style: italic;">[Evan] I wouldn't hold my breath.&nbsp; First Magnus is bankrupt and has not paid employees after the company folded on August 16, 2007.&nbsp; Who from First Magnus is left to come and get the documents?</span><br><br><span style="font-weight: bold;">Commentary:</span><br>Bankruptcy stinks.&nbsp; It stinks for creditors, customers and employees.&nbsp; This bankruptcy stinks a little more for customers because of poor common sense and judgment.&nbsp; Thankfully, someone reported the poorly discarded documents in the dumpster and reported it before (it appears) they fell into the hands of the nefarious.&nbsp; I wonder where the documents are now and who has access to them, supposing they still exist.&nbsp; <br><br>Not only did First Magnus have a business responsibility for the protection of senstive information (which ceases with the business), but they also have a moral responsibility (which does not cease). <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/02/21/firstmagnus.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Thu, 21 Feb 2008 10:56:43 +0000</pubDate>
      <category domain="http://securityratty.com/tag/magnus">magnus</category>
      <category domain="http://securityratty.com/tag/magnus financial">magnus financial</category>
      <category domain="http://securityratty.com/tag/magnus financial corporation">magnus financial corporation</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <category domain="http://securityratty.com/tag/police officers">police officers</category>
      <category domain="http://securityratty.com/tag/documents">documents</category>
      <category domain="http://securityratty.com/tag/sensitive documents">sensitive documents</category>
      <category domain="http://securityratty.com/tag/police departments">police departments</category>
      <category domain="http://securityratty.com/tag/financial documents">financial documents</category>
      <source url="http://breachblog.com/2008/02/21/firstmagnus.aspx">First Magnus Financial customer data found in dumpster</source>
    </item>
    <item>
      <title><![CDATA[Financial Ombudsman losing it?]]></title>
      <link>http://securityratty.com/article/74e08152850c21aa924133108ad1f3fd</link>
      <guid>http://securityratty.com/article/74e08152850c21aa924133108ad1f3fd</guid>
      <description><![CDATA[I appeared on You and Yours (Radio 4) today at 12.35 with an official from the Financial Ombudsman Service, after I coauthored a FIPR submission to a review of the service which is currently being...]]></description>
      <content:encoded><![CDATA[<p>I appeared on &#8220;You and Yours&#8221; (Radio 4) today at 12.35 with an official from the Financial Ombudsman Service, after I coauthored a <a href="http://www.fipr.org/080116huntreview.pdf">FIPR submission</a> to a review of the service which is currently being conducted by <a href="http://www.thehuntreview.org.uk/">Lord Hunt</a>.</p>
<p>Our <a href="http://www.fipr.org/080116huntreview.pdf">submission</a> looks at three cases in particular in which the ombudsman decided in favour of the banks and against bank customers over disputed ATM transactions. We found that the adjidicators employed by the ombudsman made numerous errors both of law and of technology, and concluded that their decisions were an affront to reason and to justice.</p>
<p>One of the cases has already <a href="http://www.lightbluetouchpaper.org/2007/02/08/financial-ombudsman-on-chip-pin-infallibility/">appeared here</a> on lightbluetouchpaper; the other two cardholders appeared on an investigation into card fraud on &#8220;Tonight with Trevor MacDonald&#8221;, and their case papers are included, with their permission, as <a href="http://www.fipr.org/080116huntreview.pdf">appendices to our submission</a>. These papers are damning, but the Hunt review&#8217;s staff declined to publish them on the somewhat surprising grounds that the information in them might be used to commit identity theft against the customers in question. Eventually they <a href="http://www.thehuntreview.org.uk/submissions/submissions.html">published</a> our submission minuss the two appendices of case papers. (If knowing someone&#8217;s residential address and the account number to a now-defunct bank account is enough for a criminal to steal money from you, then the regulatory failures afflicting the British banking system are even deeper than I thought.)</p>
<p>The Financial Ombudsman Service, and its predecessor the Banking Ombudsman, have for many years found against bank customers and in favour of the banks. In the early-to-mid 1990s, they upheld the banks&#8217; outrageous claim that mag-stripe ATM cards were invulnerable to cloning; this led to the court cases described <a href="http://www.cl.cam.ac.uk/~rja14/Papers/wcf.html">here</a> and <a href="http://www.cl.cam.ac.uk/~rja14/Papers/liability.pdf">here</a>. That position collapsed when ATM criminals started being sent to prison. Now we have another wave of ATM card cloning, which we&#8217;ve discussed several times: we&#8217;ve shown you a <a href="http://www.lightbluetouchpaper.org/2006/12/24/chip-pin-terminal-playing-tetris/">chip and PIN terminal playing Tetris</a> and described <a href="http://www.lightbluetouchpaper.org/2007/08/08/chip-and-pin-relay-attack-paper-wins-best-student-paper-at-usenix-security-2007/">relay attacks</a>. There&#8217;s much more to come.</p>
<p>The radio program is not yet available online; I&#8217;ll put in a link here when it appears. We clearly have them rattled; the ombudsman was patronising and abusive, and made a number of misleading statements. He also said that the &#8220;independent&#8221; Hunt review was commissioned by his board of directors. I hope it turns out to be a bit more independent than that. If it doesn&#8217;t, then consumer advocates should campaign for the FOS to be abolished and for customers to be empowered to take disputes to the courts, as we argue in section 31-32 of our <a href="http://www.fipr.org/080116huntreview.pdf">submission</a>.</p>
]]></content:encoded>
      <pubDate>Wed, 23 Jan 2008 12:14:58 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ombudsman">ombudsman</category>
      <category domain="http://securityratty.com/tag/financial ombudsman service">financial ombudsman service</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/submission">submission</category>
      <category domain="http://securityratty.com/tag/submission minuss">submission minuss</category>
      <category domain="http://securityratty.com/tag/customers">customers</category>
      <category domain="http://securityratty.com/tag/bank customers">bank customers</category>
      <category domain="http://securityratty.com/tag/independent hunt review">independent hunt review</category>
      <category domain="http://securityratty.com/tag/fipr submission">fipr submission</category>
      <source url="http://www.lightbluetouchpaper.org/2008/01/23/financial-ombudsman-losing-it/">Financial Ombudsman losing it?</source>
    </item>
    <item>
      <title><![CDATA[Netscape Closes Shop]]></title>
      <link>http://securityratty.com/article/1ed075fb1f5dd2c2da3fcee4362b4ca9</link>
      <guid>http://securityratty.com/article/1ed075fb1f5dd2c2da3fcee4362b4ca9</guid>
      <description><![CDATA[Yup, its true. I wish it werent, but it is. Netscape has finally decided to discontinue development . AOL has decided that as of Feb 1st 2008 they will discontinue releasing any further revisions,...]]></description>
      <content:encoded><![CDATA[<p>Yup, it&#8217;s true.  I wish it weren&#8217;t, but it is.  <A HREF="http://blog.netscape.com/2007/12/28/end-of-support-for-netscape-web-browsers/">Netscape has finally decided to discontinue development</a>.  AOL has decided that as of Feb 1st 2008 they will discontinue releasing any further revisions, including security updates for the Netscape browser.  Honestly, this doesn&#8217;t come as a huge surprise to me given how things have been going for the last 4-5 years now for them, but it&#8217;s still a bummer to lose the only other existing survivor from the original browser wars.  That leaves only Internet Explorer the current reigning king of browser dominance.</p>
<p>On Netscape&#8217;s blog they suggest you download Mozilla&#8217;s Firefox and use the Netscape theme going forward if you want current updates with a similar user interface to the original Netscape design.  I suspect there will be a number of stragglers in the user community that either don&#8217;t hear the news, or want to stick with the older browser, which will continue to have holes in it that remain unpatched after the Feb 1st date - in perpetuity.  Not that I have recently believed Netscape was a reasonable choice as a browser since their patching mechanism changed to be based on updates to the IE or Firefox rendering engine which meant it was weeks or months behind Firefox (first tested in 2005 with the <A HREF="http://www.shmoo.com/idn/homograph.txt">punycode homograph attack</a> that haunted Mozilla which took months for a patch to reach Netscape).</p>
<p>Even still, Netscape has come a long way.  I remember we found issues in it that would leak your email address back in 1996-7 that was later used by spammers.  Countless bugs, corrections, mistakes&#8230;  all the way to now, and through it all it retained a decent user base through innovation and relatively good security (myself included for a number of years).  It&#8217;s amazing it lasted as long as it has.  It&#8217;s been a decade that I&#8217;ve been hacking on the defunct browser so it&#8217;s with sadness I say, so long Netscape!</p>
<!--Sun, 30 December 2007 15:12:59 +000-->]]></content:encoded>
      <pubDate>Sun, 30 Dec 2007 17:17:11 +0000</pubDate>
      <category domain="http://securityratty.com/tag/netscape">netscape</category>
      <category domain="http://securityratty.com/tag/netscape theme">netscape theme</category>
      <category domain="http://securityratty.com/tag/netscape browser">netscape browser</category>
      <category domain="http://securityratty.com/tag/browser">browser</category>
      <category domain="http://securityratty.com/tag/defunct browser">defunct browser</category>
      <category domain="http://securityratty.com/tag/reach netscape">reach netscape</category>
      <category domain="http://securityratty.com/tag/original netscape design">original netscape design</category>
      <category domain="http://securityratty.com/tag/original browser wars">original browser wars</category>
      <category domain="http://securityratty.com/tag/download mozillas firefox">download mozillas firefox</category>
      <source url="http://ha.ckers.org/blog/20071230/netscape-closes-shop/">Netscape Closes Shop</source>
    </item>
  </channel>
</rss>
