<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: family]]></title>
    <link>http://securityratty.com/tag/family</link>
    <description></description>
    <pubDate>Fri, 01 Aug 2008 09:59:01 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Tomoko in Bangkok with Emerson Lake & Palmer]]></title>
      <link>http://securityratty.com/article/b74e32f4452f74ee922157fa286d06d3</link>
      <guid>http://securityratty.com/article/b74e32f4452f74ee922157fa286d06d3</guid>
      <description><![CDATA[A few friends and colleagues have written privately, or blogged , and kindly mentioned how much they will miss not seeing Tomoko at the Event Processing Summit and Symposium this month. She is...]]></description>
      <content:encoded><![CDATA[<p>A few friends and colleagues have written privately, or <a href="http://magmasystems.blogspot.com/2008/08/4th-annual-event-processing-symposium.html" target="_blank">blogged</a>, and kindly mentioned how much they will miss not seeing Tomoko at the Event Processing Summit and Symposium this month.  She is currently in Japan visiting friends and family.    Here is a video I made  with Tomoko on the Chao Phraya River in Bangkok, set to the music of ELP.  Enjoy!</p>
<p><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="425" height="344" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="align" value="center" /><param name="allowFullScreen" value="true" /><param name="src" value="http://www.youtube.com/v/jxCQUok-tgk&amp;hl=en&amp;fs=1" /><embed type="application/x-shockwave-flash" width="425" height="344" src="http://www.youtube.com/v/jxCQUok-tgk&amp;hl=en&amp;fs=1" allowfullscreen="true" align="center"></embed></object></p>
]]></content:encoded>
      <pubDate>Tue, 02 Sep 2008 03:48:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tomoko">tomoko</category>
      <category domain="http://securityratty.com/tag/chao phraya river">chao phraya river</category>
      <category domain="http://securityratty.com/tag/friends">friends</category>
      <category domain="http://securityratty.com/tag/bangkok">bangkok</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/symposium">symposium</category>
      <category domain="http://securityratty.com/tag/privately">privately</category>
      <category domain="http://securityratty.com/tag/summit">summit</category>
      <category domain="http://securityratty.com/tag/music">music</category>
      <source url="http://www.thecepblog.com/2008/09/02/tomoko-in-bangkok-with-emerson-lake-palmer/">Tomoko in Bangkok with Emerson Lake &amp; Palmer</source>
    </item>
    <item>
      <title><![CDATA[Database statements that can make you tear out your hair]]></title>
      <link>http://securityratty.com/article/3502ac92b5ef4532375884b4e6f8a943</link>
      <guid>http://securityratty.com/article/3502ac92b5ef4532375884b4e6f8a943</guid>
      <description><![CDATA[Its been a long time since Ive written anything here. Ive been extremely busy with my family move to the bay area. I still cant believe the amount of paperwork required. Ive filled virtually hundreds...]]></description>
      <content:encoded><![CDATA[Its been a long time since I&#8217;ve written anything here. I&#8217;ve been extremely busy with my family move to the bay area. I still can&#8217;t believe the amount of paperwork required. I&#8217;ve filled virtually hundreds of forms and it&#8217;s not over yet. But, after a month here, I can say that we&#8217;ve finally settled down. [...]<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/slaviks-blog/WxxD?a=l7NFUK"><img src="http://feeds.feedburner.com/~f/slaviks-blog/WxxD?i=l7NFUK" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/slaviks-blog/WxxD/~4/378232436" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 28 Aug 2008 19:52:11 +0000</pubDate>
      <category domain="http://securityratty.com/tag/family move">family move</category>
      <category domain="http://securityratty.com/tag/extremely busy">extremely busy</category>
      <category domain="http://securityratty.com/tag/bay">bay</category>
      <category domain="http://securityratty.com/tag/paperwork">paperwork</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/forms">forms</category>
      <category domain="http://securityratty.com/tag/amount">amount</category>
      <category domain="http://securityratty.com/tag/hundreds">hundreds</category>
      <source url="http://feeds.feedburner.com/~r/slaviks-blog/WxxD/~3/378232436/">Database statements that can make you tear out your hair</source>
    </item>
    <item>
      <title><![CDATA[[OT rant] Are there any home WiFi routers that DON'T SUCK?]]></title>
      <link>http://securityratty.com/article/2110e94e736fbe5f32088eee09481bee</link>
      <guid>http://securityratty.com/article/2110e94e736fbe5f32088eee09481bee</guid>
      <description><![CDATA[Warning: rant ahead, and names named
When I'm not traveling, I like to work from home some days rather than endure the trek from Seattle to Redmond (although it's much better now that our own employee...]]></description>
      <content:encoded><![CDATA[<p><em>Warning: rant ahead, and names named.</em></p>  <p>When I'm not traveling, I like to work from home some days rather than endure the trek from Seattle to Redmond (although it's much better now that our own <a href="http://seattlepi.nwsource.com/business/332970_msftbus25.html" target="_blank">employee transit service</a> has expanded into my neighborhood -- the existence of which is sad commentary on the availability and reliability of Seattle's public transit companies).</p>  <p>This means, of course, that I need fast and stable network connections. Comcast with their PowerBoost is working very well for me. But I just can't find a decent wireless router at all. My Lenovo T61p (with Intel 4965abgn adapter) just won't stay connected to my D-Link DIR-628 and IT'S DRIVING ME CRAZY! (Yes, I've tried various driver versions, from both Lenovo and Intel.)</p>  <p>My house is in an area with a lot of wireless activity -- sometimes I can see nine or ten SSIDs. I'm running draft N on 2.4GHz (which occupies two non-adjacent channels, currently 1 and 4), and I suspect the problem is collision interference. I could shift the router to 5.2GHz, which I probably would help, but then the rest of the computers in my house won't connect. Why, you ask? Well get this: the DIR-628 is part of <a href="http://www.dlink.com/products/category.asp?cid=1&amp;sec=1#cid_103" target="_blank">D-Link's RangeBooster N family</a>. So I stayed in the family and got two DWA-542 adapters for the desktop computers. Yet they only do 2.4GHz! Silly me, I assumed that being in the same family means full support of the router's capabilities.</p>  <p>I'm very tempted to replace my router again -- and I'm thinking that the best option is to get one with dual radios. That way I can move my T61p to 5.2GHz and replace the desktop adapters, while still having single-channel 802.11b/g on 2.4GHz for the Wii and my PlayStation Portable.</p>  <p>Now my request: tell me about your experience with home routers. What do you really like, and why? What should I buy?</p><img src="http://blogs.technet.com/aggbug.aspx?PostID=3110595" width="1" height="1">]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 20:12:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/decent wireless router">decent wireless router</category>
      <category domain="http://securityratty.com/tag/home">home</category>
      <category domain="http://securityratty.com/tag/router">router</category>
      <category domain="http://securityratty.com/tag/lenovo">lenovo</category>
      <category domain="http://securityratty.com/tag/d-link dir-628">d-link dir-628</category>
      <category domain="http://securityratty.com/tag/lenovo t61p">lenovo t61p</category>
      <category domain="http://securityratty.com/tag/intel">intel</category>
      <category domain="http://securityratty.com/tag/dir-628">dir-628</category>
      <category domain="http://securityratty.com/tag/intel 4965abgn adapter">intel 4965abgn adapter</category>
      <source url="http://blogs.technet.com/steriley/archive/2008/08/22/ot-rant-are-there-any-home-wifi-routers-that-don-t-suck.aspx">[OT rant] Are there any home WiFi routers that DON'T SUCK?</source>
    </item>
    <item>
      <title><![CDATA[Parents, guardians, and teachers can best protect kids online]]></title>
      <link>http://securityratty.com/article/6fec81d72e372924132c54b380b6bce7</link>
      <guid>http://securityratty.com/article/6fec81d72e372924132c54b380b6bce7</guid>
      <description><![CDATA[Another great article from the TrendMicro staff. Get the family together and go over the dangers online


clipped from newsletters.trendmicro.com


Social Networking and Young People: Know the Risks
...]]></description>
      <content:encoded><![CDATA[<div > Another great article from the TrendMicro staff.<br/>Get the family together and go over the dangers online. </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/887A77E4-8E89-418F-A082-4ED9BD6C19AC/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/f2be2ebd-a6d6-423a-87d7-48818f266620/887A77E4-8E89-418F-A082-4ED9BD6C19AC/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://newsletters.trendmicro.com/servlet/website/ResponseForm?mgLEVTTB_TBVV_.40ev.2e_0okLHm_eHgKlJHiL" href="http://newsletters.trendmicro.com/servlet/website/ResponseForm?mgLEVTTB_TBVV_.40ev.2e_0okLHm_eHgKlJHiL" style="font-size: 11px;">newsletters.trendmicro.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://newsletters.trendmicro.com/servlet/website/ResponseForm?mgLEVTTB_TBVV_.40ev.2e_0okLHm_eHgKlJHiL --><br />
<table background="undefined" bgcolor="">
<tr><TD valign="top" colspan="2">Social Networking and Young People:  Know the Risks</TD></tr>
</table>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://newsletters.trendmicro.com/servlet/website/ResponseForm?mgLEVTTB_TBVV_.40ev.2e_0okLHm_eHgKlJHiL --><DIV>As kids return to school in August and September, many of them also return to their home computers, which they increasingly use for school assignments. But, in addition to their scholarly pursuits, teens and tweens will likely use their computers for social networking and other online entertainment. Many kids are fascinated with the freedom, anonymity, and social interaction afforded by social networking sites, chat rooms, blogs, message boards, and virtual worlds. But they may not be aware of all the risks.</DIV></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/887A77E4-8E89-418F-A082-4ED9BD6C19AC/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 14:23:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/kids">kids</category>
      <category domain="http://securityratty.com/tag/social">social</category>
      <category domain="http://securityratty.com/tag/social interaction">social interaction</category>
      <category domain="http://securityratty.com/tag/return">return</category>
      <category domain="http://securityratty.com/tag/kids return">kids return</category>
      <category domain="http://securityratty.com/tag/school assignments">school assignments</category>
      <category domain="http://securityratty.com/tag/computers">computers</category>
      <category domain="http://securityratty.com/tag/trendmicro">trendmicro</category>
      <category domain="http://securityratty.com/tag/school">school</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=568">Parents, guardians, and teachers can best protect kids online</source>
    </item>
    <item>
      <title><![CDATA[MI5 on Terrorist Profiling]]></title>
      <link>http://securityratty.com/article/bb80acbf5bcef69e830e8c656c41335c</link>
      <guid>http://securityratty.com/article/bb80acbf5bcef69e830e8c656c41335c</guid>
      <description><![CDATA[There's no profile : MI5 has concluded that there is no easy way to identify those who become involved in terrorism in Britain, according to a classified internal research document on radicalisation...]]></description>
      <content:encoded><![CDATA[<p>There's <a href="http://www.guardian.co.uk/uk/2008/aug/20/uksecurity.terrorism1">no profile</a>:</p>

<blockquote>MI5 has concluded that there is no easy way to identify those who become involved in terrorism in Britain, according to a classified internal research document on radicalisation seen by the Guardian.

<p><br />
[...]</p>

<p>The main findings include: </p>

<p>• The majority are British nationals and the remainder, with a few exceptions, are here legally. Around half were born in the UK, with others migrating here later in life. Some of these fled traumatic experiences and oppressive regimes and claimed UK asylum, but more came to Britain to study or for family or economic reasons and became radicalised many years after arriving.</p>

<p>• Far from being religious zealots, a large number of those involved in terrorism do not practise their faith regularly. Many lack religious literacy and could actually be regarded as religious novices. Very few have been brought up in strongly religious households, and there is a higher than average proportion of converts. Some are involved in drug-taking, drinking alcohol and visiting prostitutes. MI5 says there is evidence that a well-established religious identity actually protects against violent radicalisation. </p>

<p>• The "mad and bad" theory to explain why people turn to terrorism does not stand up, with no more evidence of mental illness or pathological personality traits found among British terrorists than is found in the general population.</p>

<p>• British-based terrorists are as ethnically diverse as the UK Muslim population, with individuals from Pakistani, Middle Eastern and Caucasian backgrounds. MI5 says assumptions cannot be made about suspects based on skin colour, ethnic heritage or nationality. </p>

<p>• Most UK terrorists are male, but women also play an important role. Sometimes they are aware of their husbands', brothers' or sons' activities, but do not object or try to stop them.</p>

<p>• While the majority are in their early to mid-20s when they become radicalised, a small but not insignificant minority first become involved in violent extremism at over the age of 30.</p>

<p>• Far from being lone individuals with no ties, the majority of those over 30 have steady relationships, and most have children. MI5 says this challenges the idea that terrorists are young men driven by sexual frustration and lured to "martyrdom" by the promise of beautiful virgins waiting for them in paradise. It is wrong to assume that someone with a wife and children is less likely to commit acts of terrorism.</p>

<p>• Those involved in British terrorism are not unintelligent or gullible, and nor are they more likely to be well-educated; their educational achievement ranges from total lack of qualifications to degree-level education. However, they are almost all employed in low-grade jobs.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=GwMQnK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=GwMQnK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=nvC4JK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=nvC4JK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 02:18:30 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mi5">mi5</category>
      <category domain="http://securityratty.com/tag/terrorism">terrorism</category>
      <category domain="http://securityratty.com/tag/british terrorism">british terrorism</category>
      <category domain="http://securityratty.com/tag/british terrorists">british terrorists</category>
      <category domain="http://securityratty.com/tag/terrorists">terrorists</category>
      <category domain="http://securityratty.com/tag/violent radicalisation">violent radicalisation</category>
      <category domain="http://securityratty.com/tag/majority">majority</category>
      <category domain="http://securityratty.com/tag/individuals">individuals</category>
      <category domain="http://securityratty.com/tag/internal research document">internal research document</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/mi5_on_terroris.html">MI5 on Terrorist Profiling</source>
    </item>
    <item>
      <title><![CDATA[TSA Follies]]></title>
      <link>http://securityratty.com/article/f014b8f845713a3e6bc73c172d773b7c</link>
      <guid>http://securityratty.com/article/f014b8f845713a3e6bc73c172d773b7c</guid>
      <description><![CDATA[They break planes : Citing sources within the aviation industry, ABC News reports an overzealous TSA employee attempted to gain access to the parked aircraft by climbing up the fuselage... reportedly...]]></description>
      <content:encoded><![CDATA[<p>They <a href="http://www.aero-news.net/index.cfm?ContentBlockID=340a79d6-839a-470d-b662-944325cea23d">break planes</a>:</p>

<blockquote>Citing sources within the aviation industry, ABC News reports an overzealous TSA employee attempted to gain access to the parked aircraft by climbing up the fuselage... reportedly using the Total Air Temperature (TAT) probes mounted to the planes' noses as handholds.

<p>"The brilliant employees used an instrument located just below the cockpit window that is critical to the operation of the onboard computers," one pilot wrote on an American Eagle internet forum. "They decided this instrument, the TAT probe, would be adequate to use as a ladder."</blockquote></p>

<p>They <a href="http://www.cnn.com/2008/US/08/19/tsa.watch.list/index.html?iref=mpstoryview">harass innocents</a>:</p>

<blockquote>James Robinson is a retired Air National Guard brigadier general and a commercial pilot for a major airline who flies passenger planes around the country.

<p>He has even been certified by the Transportation Security Administration to carry a weapon into the cockpit as part of the government's defense program should a terrorist try to commandeer a plane.</p>

<p>But there's one problem: James Robinson, the pilot, has difficulty even getting to his plane because his name is on the government's terrorist "watch list."</blockquote></p>

<p>It's easy to <a href="http://edition.cnn.com/2008/US/08/19/tsa.watch.list/index.html">sneak by them</a>:</p>

<blockquote>The third-grader has been on the watch list since he was 5 years old. Asked whether he is a terrorist, he said, "I don't know."

<p>Though he doesn't even know what a terrorist is, he is embarrassed that trips to the airport cause a ruckus, said his mother, Denise Robinson.</p>

<p>[...]</p>

<p>Denise Robinson says she tells the skycaps her son is on the list, tips heavily and is given boarding passes. And booking her son as "J. Pierce Robinson" also has let the family bypass the watch list hassle.</blockquote></p>

<p>And <a href="http://www.i-hacked.com/content/view/267/48/">here's</a> how to sneak lockpicks past them.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=8fHJ7K"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=8fHJ7K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=LcgXdK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=LcgXdK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 21 Aug 2008 05:12:22 +0000</pubDate>
      <category domain="http://securityratty.com/tag/flies passenger planes">flies passenger planes</category>
      <category domain="http://securityratty.com/tag/list">list</category>
      <category domain="http://securityratty.com/tag/planes">planes</category>
      <category domain="http://securityratty.com/tag/list hassle">list hassle</category>
      <category domain="http://securityratty.com/tag/sneak lockpicks past">sneak lockpicks past</category>
      <category domain="http://securityratty.com/tag/james robinson">james robinson</category>
      <category domain="http://securityratty.com/tag/denise robinson">denise robinson</category>
      <category domain="http://securityratty.com/tag/terrorist">terrorist</category>
      <category domain="http://securityratty.com/tag/pilot">pilot</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/tsa_follies.html">TSA Follies</source>
    </item>
    <item>
      <title><![CDATA[This Generations ApathyThe Age of Specialization and ADD]]></title>
      <link>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</link>
      <guid>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</guid>
      <description><![CDATA[Robert Scoble has some interesting commentary this morning about the number of photojournalists with expensive gear covering the Olympics
Hes a bit indignant that so much energy goes to sporting...]]></description>
      <content:encoded><![CDATA[<p>Robert Scoble has some interesting <a rel="nofollow" target="_blank" href="http://scobleizer.com/">commentary</a> this morning about the number of photojournalists with expensive gear covering the Olympics.</p>
<p>He&#8217;s a bit indignant that so much energy goes to sporting events like the Olympics rather than more important news that isn&#8217;t getting reported around the world.</p>
<blockquote><p>This is in a year when tons of journalists are getting laid off.</p>
<p>This is in a year when there are tons of stories around the world that aren’t getting reported on.</p>
<p>Could we take half of those photographers and send them to Russia, for instance</p></blockquote>
<p>Reminds me of a feeling I had back in college as an undergrad student studying social sciences and humanities, about the way my friends who were physicists interacted with the world. They were so awed by the stars, Mars, astrophysics, and it seemed to me interesting but altogether unimportant. They argued they may find something outside our planet that could help solve Earth-bound problems like disease, or find the origins of earth and humanity &#8212; but really they were doing it because they loved it. One of my friends had a good argument, though &#8212; there are enough people right now that we can specialize in what we care about, and there will still be others covering other topics. He could be a physicist and look into the universe&#8217;s origin, while I studied social interaction and writing, and our other friends looked into solving cancer or eradicating invasive plants in the native wetlands. We have to specialize, and there are enough of us to do it too.</p>
<p>I think it&#8217;s the same way in journalism &#8212; whether it&#8217;s sports, celebrity journalism, or coverage of politics and war, there are a lot of opportunities right now for journalists. Of course the business model is changing, and some old-schoolers won&#8217;t know how to roll with that, but generations change slowly; we&#8217;re learning.</p>
<p>Also, the Olympics is seen as more than a sporting event, it&#8217;s also a symbol of world competition and cooperation too &#8212; a way for countries to come together and share entertainment globally. I think that&#8217;s worth covering.</p>
<p>In the second post, Robert Scoble says there are plenty of great journalists but the public doesn&#8217;t care. In some ways I have to agree with that, but I don&#8217;t think it&#8217;s negative, necessarily. I had a conversation with someone the other day about world news reportage. He says, &#8220;I was just reading this story, but what does it matter to me if there&#8217;s a flood in some city in another country I&#8217;ll never visit and some farmer lost his sheep?&#8221; World news is only important when it&#8217;s relevant, so it&#8217;s no wonder that many people don&#8217;t care &#8212; if they don&#8217;t know much about the area, and it doesn&#8217;t affect them, they have no incentive to give it full attention. You can call that apathy, but I think it&#8217;s an important selectivity skill that humans have. We have to choose what to give priority to, so if nothing stands out as being particularly important, we just ignore it or gloss over it. Human nature&#8230;</p>
<p>Also I think the common person today just gets desensitized and doesn&#8217;t know where to turn their energy, when surrounded by so many crises. Either you focus on one specialty and do your best to work toward one cause in your life &#8212; and maybe that&#8217;s just in the course of your daily work &#8212; or you become a complete Attention-Deficit-Disorder case and bounce from one problem to the next, without knowing how to solve anything. That just causes a sense of bewilderment, despair, and either that bogs you down or eventually you get desensitized.</p>
<p>There&#8217;s a commenter on Scoble&#8217;s blog, Spencer, who talks about this generation&#8217;s apathy. There are so many people who want to blame today&#8217;s generation or the young generation for this &#8220;apathy&#8221; that they sense. But I see it as a survival mechanism that arises from the way information flows these days. We&#8217;re surrounded by crises, everyone wants us to know about them &#8212; the water shortage, global warming, death in Iraq, the national deficit. Okay, crisis, I get it. But no one gives a real clear idea on what any individual is really supposed to do to solve the problem. You can&#8217;t get involved with one global cause, without ignoring all the others, and if you do get involved it&#8217;s likely to become your life&#8217;s purpose. Most people are concerned with other things &#8212; their families, their work, personal development, their homes and futures, and really that&#8217;s enough to take up all their time.</p>
<p>I&#8217;m always amazed when I read about the early unionists. Emma Goldman for example, the activist who pushed for the 8-hr workday, and campaigned for free love in the early 1900s when women were still wearing corsets, used to work 16 hour factory days as a seamstress, then lead meetings late into the night. Today we lead cushy lives comparatively&#8211;8 hour days, plus commute and lunch, family time, dinner time, gym maybe, sleep&#8230; but it still doesn&#8217;t seem like we ever have enough energy and time.</p>
<p>What Emma had that most people today don&#8217;t, is a community living in the same conditions as herself, with clear goals about what they were campaigning for, and a cause that affected their own daily lives. Today, unionism and local activism is in much shorter supply, in part due to the many people who work fairly comfy desk jobs, and the problem that everyone has his own specialization, works in a cubicle, does his or her own thing. The problems we&#8217;re facing today in terms of global warming, global water shortage, aren&#8217;t the same kinds of problems that activists have fought for in the past, and there&#8217;s no clear road map for how to solve them. Our leaders sure aren&#8217;t leading the way.</p>
<p>What we do have, at least, is the Olympics, which is an age old symbol of international cooperation, play and competition&#8230;so, uh, go sports! As for full disclosure, I don&#8217;t actually have a TV and haven&#8217;t watched the Olympics in many years, but I do try taking short showers&#8211;does that help?</p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 09:46:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/world news reportage">world news reportage</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/world competition">world competition</category>
      <category domain="http://securityratty.com/tag/world news">world news</category>
      <category domain="http://securityratty.com/tag/global water shortage">global water shortage</category>
      <category domain="http://securityratty.com/tag/global">global</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/news">news</category>
      <category domain="http://securityratty.com/tag/solve earth-bound">solve earth-bound</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/369359733/">This Generations ApathyThe Age of Specialization and ADD</source>
    </item>
    <item>
      <title><![CDATA[People said China was safe, but danger still lurks in the so-called "safe" places.]]></title>
      <link>http://securityratty.com/article/057d444dfccdb29a4fd8ffc5c4dd2f51</link>
      <guid>http://securityratty.com/article/057d444dfccdb29a4fd8ffc5c4dd2f51</guid>
      <description><![CDATA[The unfortunate stabbing death of an american who travelled with the Olympians showed that we should not take safety for granted

Without being there, it is difficult to know, but one wonders if the...]]></description>
      <content:encoded><![CDATA[The unfortunate stabbing death of an american who travelled with the Olympians showed that we should not take safety for granted. <br /><span id="fullpost"><br />Without being there, it is difficult to know, but one wonders if the press got it right when they reported that the killer did not know that the people he attacked were from America. It is highly probable that most American tourists would stand out on the streets of Beijing.  If they followed the advice of security consultants who advise about trying to "blend in", there is a chance that they would be less obvious, but due to the fact that many were there to support the atheletes,I think it is very likley that the killer was able to identify them as being American.<br /><br />The attacker did commit suicide after the attack, so there is a good chance that he was mentally disturbed.  When we travel abroad, or even within our own countries for that matter, we should not only be looking for potential terrorists. There are a lot of other categories that can cause harm; burglars, robbers, purse snatchers, street con artists, kidnappers, people under the influence of alcohol/drugs and so on.        <br /><br />For many people, it is difficult to switch from relaxed tourist one minute to a defensive positon the next.  Remember that it is alright to be cautous and suspicious.  You don't have to make friends with everyone you meet on the street. It is much more important to be able to come home safe and sound to your family at the end of your trip.     <br /></span><div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 12:06:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/street">street</category>
      <category domain="http://securityratty.com/tag/street con artists">street con artists</category>
      <category domain="http://securityratty.com/tag/american tourists">american tourists</category>
      <category domain="http://securityratty.com/tag/american">american</category>
      <category domain="http://securityratty.com/tag/commit suicide">commit suicide</category>
      <category domain="http://securityratty.com/tag/travel abroad">travel abroad</category>
      <category domain="http://securityratty.com/tag/killer">killer</category>
      <category domain="http://securityratty.com/tag/security consultants">security consultants</category>
      <source url="http://www.thebulletproofblog.com/2008/08/people-said-china-was-safe-but-danger.html">People said China was safe, but danger still lurks in the so-called "safe" places.</source>
    </item>
    <item>
      <title><![CDATA[Card Wars: The Phantom Menace]]></title>
      <link>http://securityratty.com/article/9d5b71fcb64161e1a88ba8844117af51</link>
      <guid>http://securityratty.com/article/9d5b71fcb64161e1a88ba8844117af51</guid>
      <description><![CDATA[Just like George Lucas cant help but return to his old projects , I have been returning to mine. After three years of stagnation, I am pleased to announce the re-launch of phantomwithdrawals.com ,...]]></description>
      <content:encoded><![CDATA[<p>Just like George Lucas can&#8217;t help but <a href="http://www.cinematical.com/2005/05/25/lucas-idea-for-new-star-wars-prequel/">return to his old projects</a>, I have been returning to mine. After three years of stagnation, I am pleased to announce the re-launch of <a href="http://www.phantomwithdrawals.com">phantomwithdrawals.com</a>, freshly re-vamped, updated and turned into a Wiki editable by the general public.</p>
<p>In fact, it&#8217;s not just great artists like Mr. Lucas and I starting up old projects, our honourable colleagues wearing the black hats have got the same idea. We have new victims reporting in, <a href="http://www.newsvine.com/_news/2008/07/01/1629600-citibank-atm-breach-reveals-pin-security-problems">rumours</a>&nbsp;<a href="http://blog.wired.com/27bstroke6/2008/06/citibank-issues.html">abound</a> of an auth system compromise at Citi, the Ombudsman is backlogged with months of disputed withdrawal cases, and some like <a href="http://www.guardian.co.uk/technology/2008/jan/03/hitechcrime.news">Alain Job</a> are even going to court.</p>
<p>One original contributor to the phantom case histories has just been hit by a second phantom withdrawal five years on and is chalking up another case in the files. While her new phantom is a bread-and-butter skim incident (a magstripe clone used in the far east), amongst this mass, true phantoms &#8212; the real mystery cases &#8212; are on the rise too. Two new victims with whom I have been corresponding very kindly offered to fund the hosting for the revamped site.</p>
<p>Let&#8217;s consider one of these mysteries. The McGaughey case has been reported in the media in Northern Ireland: dozens of withdrawals taking place over four weeks, totaling almost five thousand pounds, all within a ten mile radius of the McGaughey&#8217;s home. Summarised that way it looks like a classic first party fraud (couple short on cash withdraw money, then deny it later). But no-one in the family is short on cash, the McGaugheys look after their card details carefully, and have solid <a href="http://www.bridgewebs.com/derryvolgie/">alibis</a> at the time of many of the withdrawals, and the interlocking pattern of real and disputed withdrawals is such that any third party would have a hard time taking and returning the card (whether covertly or in collusion with the McGaugheys). No-one appears to have either the means or the motive.</p>
<p>Unusually the bank has been very cooperative, providing logs from their authorisation system (<A href="http://www.aciworldwide.com/products/detail.aspx?product_id=236">BASE24</a>), including all of the cryptograms, input data and transaction parameters covering the affected transactions. Everything turns on the Application Transaction Counter (ATC), an on-card counter which increments with every transaction initiated. If an EMV chip can be fully cloned (secret keys and all), then it will have to submit an ATC value when transacting, and if used in parallel with the real card, it won&#8217;t be long before the same number pops up twice in the auth system, or large gaps in the sequence appear. The McGaughey&#8217;s ATC sequence appears to interlock perfectly: clearly the original card was used?</p>
<p>Of course logs can be misinterpreted (<a href="http://news.bbc.co.uk/1/hi/programmes/newsnight/7265437.stm">Badger</a>) or even faked, auth systems may not work as expected, and customers may lie and cheat following all sorts of agendas; just around the corner the missing piece of the jigsaw may lie, which reveals the truth behind the case. And there is the totally separate matter of who should suffer the loss in the interim, whilst the truth remains unclear. <a href="http://www.lightbluetouchpaper.org/2008/04/09/new-banking-code-shifts-more-liability-to-customers/">Liability for disputed withdrawals</a> is the most hotly contested issue of all.</p>
<p><a href="http://www.phantomwithdrawals.com">phantomwithdrawals.com</a> can&#8217;t do much more for the McGaugheys, but it can bear witness. Documenting the incidence of phantoms and the experiences of customers disputing them adds much needed transparency to the process, and helps researchers and experts seek out the really interesting cases.</p>
<p>Maybe we can lift the lid and discover the truth behind the &#8220;phantom menace&#8221; &#8212; everyone is united in that goal at least &#8212; but let&#8217;s also hope that Episode 2: <a href="http://www.epaynews.com/index.cgi?survey=&#038;ref=browse&#038;f=view&#038;id=11497625028614136145&#038;block=">Attack of the Clones</a> has not yet started shooting!</p>
<p>Mike.</p>
]]></content:encoded>
      <pubDate>Tue, 05 Aug 2008 11:06:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/card">card</category>
      <category domain="http://securityratty.com/tag/phantom">phantom</category>
      <category domain="http://securityratty.com/tag/real">real</category>
      <category domain="http://securityratty.com/tag/real card">real card</category>
      <category domain="http://securityratty.com/tag/card details">card details</category>
      <category domain="http://securityratty.com/tag/phantom menace">phantom menace</category>
      <category domain="http://securityratty.com/tag/phantom withdrawal">phantom withdrawal</category>
      <category domain="http://securityratty.com/tag/transaction">transaction</category>
      <category domain="http://securityratty.com/tag/application transaction counter">application transaction counter</category>
      <source url="http://www.lightbluetouchpaper.org/2008/08/05/card-wars-the-phantom-menace/">Card Wars: The Phantom Menace</source>
    </item>
    <item>
      <title><![CDATA[Simulating Email in .NET]]></title>
      <link>http://securityratty.com/article/0c454dbe28b5b63d07ee0089e019de77</link>
      <guid>http://securityratty.com/article/0c454dbe28b5b63d07ee0089e019de77</guid>
      <description><![CDATA[I use email as a notification mechanism a lot, and often in class I'll demo sending email via a technique that I use frequently when developing code. It allows you to simulate sending an email...]]></description>
      <content:encoded><![CDATA[<p>I use email as a notification mechanism a lot, and often in class I&#39;ll demo sending email via a technique that I use frequently when developing code. It allows you to simulate sending an email message.</p> <p>The trick to doing this is not to hardcode things like host, port, etc. for your SMTP server when you use System.Net.Mail to send mail. Instead, use the default ctor for <a href="http://msdn.microsoft.com/en-us/library/system.net.mail.smtpclient.aspx" target="_blank">SmtpClient</a> as I&#39;ve done in the code below.</p> <blockquote><pre class="csharpcode"><span class="kwrd">static</span> <span class="kwrd">void</span> Main(<span class="kwrd">string</span>[] args)
{
    <span class="rem">// note the use of the MailAddress class</span>
    <span class="rem">// this allows me to specify display names as well as email addresses</span>
    MailAddress from = <span class="kwrd">new</span> MailAddress(<span class="str">&quot;admin@fabrikam.com&quot;</span>, <span class="str">&quot;Fabrikam Website&quot;</span>);
    MailAddress to = <span class="kwrd">new</span> MailAddress(<span class="str">&quot;mari@fabrikam.com&quot;</span>, <span class="str">&quot;Mari Joyce&quot;</span>);

    MailMessage msg = <span class="kwrd">new</span> MailMessage(from, to);
    msg.Subject  = <span class="str">&quot;Testing 123&quot;</span>;
    msg.Body = <span class="str">&quot;This is only a test!&quot;</span>;

    <span class="rem">// note use of default ctor</span>
    <span class="rem">// this looks in config to figure out how to send mail</span>
    <span class="kwrd">new</span> SmtpClient().Send(msg);
}</pre></blockquote>
.csharpcode, .csharpcode pre
{
	font-size: small;
	color: black;
	font-family: consolas, &quot;Courier New&quot;, courier, monospace;
	background-color: #ffffff;
	/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt 
{
	background-color: #f4f4f4;
	width: 100%;
	margin: 0em;
}
.csharpcode .lnum { color: #606060; }


<p>What you&#39;re telling .NET by using the default ctor for SmtpClient is, &quot;please use my config file to figure out how to send mail&quot;. Now you can use the system.net/mailSettings/smtp section in config to specify the details of your mail server, and all of the code in your app that is written to use the default SmtpClient ctor will inherit these settings. Here&#39;s an example of what the config on a production server might look like (if you put passwords in your config files, be sure to <a href="http://msdn.microsoft.com/en-us/library/ms998283.aspx" target="_blank">encrypt those sections</a>): </p><pre class="csharpcode"><span class="kwrd">&lt;</span><span class="html">configuration</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
      <span class="kwrd">&lt;</span><span class="html">smtp</span> <span class="attr">deliveryMethod</span><span class="kwrd">=&quot;Network&quot;</span><span class="kwrd">&gt;</span>
        <span class="kwrd">&lt;</span><span class="html">network</span> <span class="attr">host</span><span class="kwrd">=&quot;mail.fabrikam.com&quot;</span>
                 <span class="attr">port</span><span class="kwrd">=&quot;25&quot;</span>
                 <span class="attr">userName</span><span class="kwrd">=&quot;WebsiteMailAccount&quot;</span>
                 <span class="attr">password</span><span class="kwrd">=&quot;whatever&quot;</span><span class="kwrd">/&gt;</span>
      <span class="kwrd">&lt;/</span><span class="html">smtp</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;/</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;/</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
<span class="kwrd">&lt;/</span><span class="html">configuration</span><span class="kwrd">&gt;</span></pre><pre class="csharpcode">&nbsp;</pre>
.csharpcode, .csharpcode pre
{
	font-size: small;
	color: black;
	font-family: consolas, &quot;Courier New&quot;, courier, monospace;
	background-color: #ffffff;
	/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt 
{
	background-color: #f4f4f4;
	width: 100%;
	margin: 0em;
}
.csharpcode .lnum { color: #606060; }


<p>During development, I use different settings because I don&#39;t usually want to deal with the hassle of installing an SMTP server on my development box. Instead, I want email messages delivered as individual files in a directory on my hard drive (I always have a c:\mail directory on my development box for just this purpose):</p>
<blockquote><pre class="csharpcode"><span class="kwrd">&lt;</span><span class="html">configuration</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
      <span class="kwrd">&lt;</span><span class="html">smtp</span> <span class="attr">deliveryMethod</span><span class="kwrd">=&quot;SpecifiedPickupDirectory&quot;</span><span class="kwrd">&gt;</span>
        <span class="kwrd">&lt;</span><span class="html">specifiedPickupDirectory</span> <span class="attr">pickupDirectoryLocation</span><span class="kwrd">=&quot;c:\mail&quot;</span><span class="kwrd">/&gt;</span>
      <span class="kwrd">&lt;/</span><span class="html">smtp</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;/</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;/</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
<span class="kwrd">&lt;/</span><span class="html">configuration</span><span class="kwrd">&gt;</span></pre></blockquote>
.csharpcode, .csharpcode pre
{
	font-size: small;
	color: black;
	font-family: consolas, &quot;Courier New&quot;, courier, monospace;
	background-color: #ffffff;
	/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt 
{
	background-color: #f4f4f4;
	width: 100%;
	margin: 0em;
}
.csharpcode .lnum { color: #606060; }


<p>Now when I run the program above, I get a .EML file in my c:\mail directory:</p>
<p><a href="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_2.png"><img style="border-right:0px;border-top:0px;margin:0px 0px 0px 35px;border-left:0px;border-bottom:0px;" height="230" alt="image" src="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_thumb.png" width="404" border="0" /></a> </p>
<p>Outlook Express is normally registered as the viewer for .EML files, so double-click the file to view it:</p>
<p><a href="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_4.png"><img style="border-right:0px;border-top:0px;margin:0px 0px 0px 35px;border-left:0px;border-bottom:0px;" height="287" alt="image" src="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_thumb_5F00_1.png" width="292" border="0" /></a> </p>
<p>If you&#39;ve never seen this method of simulating email before, I hope you find it as useful as I have. Happy coding!</p><div style="clear:both;"></div><img src="http://www.pluralsight.com/community/aggbug.aspx?PostID=52305" width="1" height="1">]]></content:encoded>
      <pubDate>Fri, 01 Aug 2008 09:59:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/csharpcode pre">csharpcode pre</category>
      <category domain="http://securityratty.com/tag/pre">pre</category>
      <category domain="http://securityratty.com/tag/csharpcode">csharpcode</category>
      <category domain="http://securityratty.com/tag/color">color</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/email addresses mailaddress">email addresses mailaddress</category>
      <category domain="http://securityratty.com/tag/mailaddress">mailaddress</category>
      <category domain="http://securityratty.com/tag/mail server">mail server</category>
      <category domain="http://securityratty.com/tag/mail">mail</category>
      <source url="http://www.pluralsight.com/community/blogs/keith/archive/2008/08/01/simulating-email-in-net.aspx">Simulating Email in .NET</source>
    </item>
  </channel>
</rss>
