<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: fixed]]></title>
    <link>http://securityratty.com/tag/fixed</link>
    <description></description>
    <pubDate>Sat, 06 Sep 2008 07:25:02 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Apple releases another mega-patch for Mac OS X]]></title>
      <link>http://securityratty.com/article/625207645382ee2af80c5cc578e14db0</link>
      <guid>http://securityratty.com/article/625207645382ee2af80c5cc578e14db0</guid>
      <description><![CDATA[Apple on Thursday patched 40 vulnerabilities in Mac OS X -- more than half of them labeled with the company's equivalent of &quot;critical&quot; -- meaning it has fixed more than 250 flaws so far this...]]></description>
      <content:encoded><![CDATA[Apple on Thursday patched 40 vulnerabilities in Mac OS X -- more than half of them labeled with the company's equivalent of "critical" -- meaning it has  fixed more than 250 flaws so far this year.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:a58fdaade6b7dc3f5ecb0ca22aa6cd30:4ZL7OxkvS8mllNwkWQrKmVOnQ7D0U9ONJfkVHEUdJDDqZjGWaoCSFez6C4QHST3wt72nojmu91zW'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:480d0138e5979eac5e2b898d031d6449:kaHEUIdYb98k6CCeioELC5Apo%2BhvwDe0dyQDPr62wBUMpaUiRWS4QgCJ9RACh2ZFz5rqOhxDxHeswQ%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:fdd39dba3bd289b62c20b12d9ee748eb:%2FeBo1yR9uoQjpNFuJL4gOPq5J37vKK%2BiQYGJjv7UCAJ8o2rW7CZp7SLAYf9m0uOWi9aPbFB%2BYWVRZw%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:9420fa395b6931214fc9537eb80091af:9wK9CZx1tkFbp%2BmQ%2B8a2QtknW6kufxELbbUpvpzbWCl1Xx03iR%2BAf3TDczcHdmo6QCp5ayQjmXf%2F5A%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=f2d144becfb4f77439619753506b02d9" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=f2d144becfb4f77439619753506b02d9" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Fri, 10 Oct 2008 00:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/apple">apple</category>
      <category domain="http://securityratty.com/tag/mac">mac</category>
      <category domain="http://securityratty.com/tag/half">half</category>
      <category domain="http://securityratty.com/tag/fixed">fixed</category>
      <category domain="http://securityratty.com/tag/flaws">flaws</category>
      <category domain="http://securityratty.com/tag/equivalent">equivalent</category>
      <category domain="http://securityratty.com/tag/critical">critical</category>
      <category domain="http://securityratty.com/tag/vulnerabilities">vulnerabilities</category>
      <category domain="http://securityratty.com/tag/thursday">thursday</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=f2d144becfb4f77439619753506b02d9">Apple releases another mega-patch for Mac OS X</source>
    </item>
    <item>
      <title><![CDATA[40 Security Flaws Fixed In Mac OS X Security Update 2008-007]]></title>
      <link>http://securityratty.com/article/9e4b9e799dfaeee65d3d9efef1162688</link>
      <guid>http://securityratty.com/article/9e4b9e799dfaeee65d3d9efef1162688</guid>
      <description><![CDATA[Apple has released another pack of patches that cover a total of 40 documented vulnerabilities affecting the Mac OS X. The Security Update 2008-007, available for Tiger and Leopard, covers a range of...]]></description>
      <content:encoded><![CDATA[Apple has released another pack of patches that cover a total of 40 documented vulnerabilities affecting the Mac OS X. The Security Update 2008-007, available for Tiger and Leopard, covers a range of third-party components and Mac OS X flaws that could users at risk of remote code executions attacks.
The more serious vulnerabilities include:
Apache: CVE-2007-6420, [...]]]></content:encoded>
      <pubDate>Thu, 09 Oct 2008 20:56:07 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mac">mac</category>
      <category domain="http://securityratty.com/tag/vulnerabilities include">vulnerabilities include</category>
      <category domain="http://securityratty.com/tag/vulnerabilities">vulnerabilities</category>
      <category domain="http://securityratty.com/tag/flaws">flaws</category>
      <category domain="http://securityratty.com/tag/third-party components">third-party components</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/range">range</category>
      <category domain="http://securityratty.com/tag/users">users</category>
      <category domain="http://securityratty.com/tag/tiger">tiger</category>
      <source url="http://cyberinsecure.com/40-security-flaws-fixed-in-mac-os-x-security-update-2008-007/">40 Security Flaws Fixed In Mac OS X Security Update 2008-007</source>
    </item>
    <item>
      <title><![CDATA[Gdiplus.dll Vulnerability In WinZip Fixed In Version 11.2 SR-1]]></title>
      <link>http://securityratty.com/article/477003b4659b0c74efab977459241ed4</link>
      <guid>http://securityratty.com/article/477003b4659b0c74efab977459241ed4</guid>
      <description><![CDATA[WinZip Computing released WinZip 11.2 SR-1 on September 25 with a critical update to all installations of WinZip 11. The release addresses a security vulnerability that exists in one of the modules...]]></description>
      <content:encoded><![CDATA[WinZip Computing released WinZip 11.2 SR-1 on September 25 with a critical update to all installations of WinZip 11. The release addresses a security vulnerability that exists in one of the modules shipped with WinZip 11. This component is not a WinZip module but rather a Microsoft module that WinZip Computing shipped for the convenience [...]]]></content:encoded>
      <pubDate>Tue, 30 Sep 2008 19:09:57 +0000</pubDate>
      <category domain="http://securityratty.com/tag/winzip">winzip</category>
      <category domain="http://securityratty.com/tag/winzip module">winzip module</category>
      <category domain="http://securityratty.com/tag/security vulnerability">security vulnerability</category>
      <category domain="http://securityratty.com/tag/release addresses">release addresses</category>
      <category domain="http://securityratty.com/tag/microsoft module">microsoft module</category>
      <category domain="http://securityratty.com/tag/sr-1">sr-1</category>
      <category domain="http://securityratty.com/tag/critical">critical</category>
      <category domain="http://securityratty.com/tag/modules">modules</category>
      <category domain="http://securityratty.com/tag/component">component</category>
      <source url="http://cyberinsecure.com/gdiplus-vulnerability-in-winzip-fixed-in-version-11-2-sr-1/">Gdiplus.dll Vulnerability In WinZip Fixed In Version 11.2 SR-1</source>
    </item>
    <item>
      <title><![CDATA[Password Bug Fixed Sooner Than Expected in Firefox 3.0.3]]></title>
      <link>http://securityratty.com/article/d8d2bc9803ee0ddb63d47ade56146edc</link>
      <guid>http://securityratty.com/article/d8d2bc9803ee0ddb63d47ade56146edc</guid>
      <description><![CDATA[Mozilla released Firefox 3.0.3 with fix for a problem where users were unable to retrieve saved passwords or save new passwords. For some users, ever since upgrading, the new Firefox did not remember...]]></description>
      <content:encoded><![CDATA[Mozilla released Firefox 3.0.3 with fix for a problem where users were unable to retrieve saved passwords or save new passwords. For some users, ever since upgrading, the new Firefox did not remember passwords or asked if passwords should be saved, even with preferences set to &#8220;Remember passwords for sites&#8221; and without exceptions in the [...]]]></content:encoded>
      <pubDate>Sat, 27 Sep 2008 08:51:07 +0000</pubDate>
      <category domain="http://securityratty.com/tag/passwords">passwords</category>
      <category domain="http://securityratty.com/tag/remember passwords">remember passwords</category>
      <category domain="http://securityratty.com/tag/retrieve saved passwords">retrieve saved passwords</category>
      <category domain="http://securityratty.com/tag/saved">saved</category>
      <category domain="http://securityratty.com/tag/firefox">firefox</category>
      <category domain="http://securityratty.com/tag/users">users</category>
      <category domain="http://securityratty.com/tag/preferences set">preferences set</category>
      <category domain="http://securityratty.com/tag/exceptions">exceptions</category>
      <category domain="http://securityratty.com/tag/sites">sites</category>
      <source url="http://cyberinsecure.com/password-bug-fixed-sooner-than-expected-in-firefox-303/">Password Bug Fixed Sooner Than Expected in Firefox 3.0.3</source>
    </item>
    <item>
      <title><![CDATA[Apple patches months-old Java bugs]]></title>
      <link>http://securityratty.com/article/ae604b79c6ffa6012219af72f96dec1c</link>
      <guid>http://securityratty.com/article/ae604b79c6ffa6012219af72f96dec1c</guid>
      <description><![CDATA[Apple patched nearly 30 Java vulnerabilities in Mac OS X Wednesday, months after Sun, Java's developer, fixed most of the same flaws for other operating...]]></description>
      <content:encoded><![CDATA[Apple patched nearly 30 Java vulnerabilities in Mac OS X Wednesday, months after Sun, Java's developer, fixed most of the same flaws for other operating systems.]]></content:encoded>
      <pubDate>Fri, 26 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/java">java</category>
      <category domain="http://securityratty.com/tag/java vulnerabilities">java vulnerabilities</category>
      <category domain="http://securityratty.com/tag/apple">apple</category>
      <category domain="http://securityratty.com/tag/months">months</category>
      <category domain="http://securityratty.com/tag/fixed">fixed</category>
      <category domain="http://securityratty.com/tag/flaws">flaws</category>
      <category domain="http://securityratty.com/tag/systems">systems</category>
      <category domain="http://securityratty.com/tag/sun">sun</category>
      <category domain="http://securityratty.com/tag/wednesday">wednesday</category>
      <source url="http://www.networkworld.com/news/2008/092608-apple-patches-months-old-java.html?fsrc=rss-security">Apple patches months-old Java bugs</source>
    </item>
    <item>
      <title><![CDATA[XSF & XSS: Double your pleasure, double your fun]]></title>
      <link>http://securityratty.com/article/1fae85d8335f0c9fbe56b8858c8692c2</link>
      <guid>http://securityratty.com/article/1fae85d8335f0c9fbe56b8858c8692c2</guid>
      <description><![CDATA[If you've read this blog, or those of my peers, you're likely quite familiar with cross-site scripting, and the problems associated with open redirect vulnerabilities. A vulnerability you may be less...]]></description>
      <content:encoded><![CDATA[If you've read this blog, or those of my peers, you're likely quite familiar with cross-site scripting, and the problems associated with open redirect vulnerabilities. A vulnerability you may be less familiar with is <a href="http://www.xssed.com/news/26/Cross-site_framed/" target="_blank">cross-site framing</a>, which largely couples the best of both above-mentioned vulnerabilities. <br />What then, if there's a cross-site framing vulnerability coupled with cross-site scripting in the content offered by the frame? All sorts of problems come to mind: phishing, malware, credential theft; all arguably twice removed from the attacker's source, tucked away in the context of two victim sites.<br />First, I'll discuss the original XSS issue that led to this finding.<br />Recently, I was investigating a flawed parameter in <a href="http://www.openhire.com/" target="_blank">Openhire</a>, a career posting vendor used by major companies like <a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?company_id=15635&version=1" target="_blank">Crate&Barrel</a>, Eileen Fisher, Enterprise, Benjamin Moore, Scottrade, and Getty Images.<br />Most of these sites simply link to the Openhire offering that hosts job postings on their behalf which, in turn, has been crafted to look like the referring site.<br />As an example, here's Scottrade's employment page hosted by Openhire.<br /><br /><span style="font-style:italic;"><a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?version=1&company_id=15624" target="_blank">http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?version=1&company_id=15624</a></span><br /><br />Standard stuff, looks nicely like the Scottrade site, so everything's cool, right?<br />Wrong? What if someone hosting a service on your behalf suffers a security gap?<br /><span style="font-weight:bold;">You're only as strong as your weakest link!</span><br />Here's the posting for an Application Security Engineer (funny, eh?) at Scottrade as hosted on their behalf by Openhire:<br /><br /><span style="font-style:italic;"><a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=976367&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters%3B%3B%3BInformation%20Technology%3B%3B%3BSecurity&startflag=3&CFID=66851845&CFTOKEN=29a95-d12594d4-47d9-49e8-9067-1091bdf68e80" target="_blank">http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=976367&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters%3B%3B%3BInformation%20Technology%3B%3B%3BSecurity&startflag=3&CFID=66851845&CFTOKEN=29a95-d12594d4-47d9-49e8-9067-1091bdf68e80</a></span><br /><br />Now here the same job posting spewing massive cookie data:<br /><br /><span style="font-style:italic;"><a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=%22%3E%3CSCRIPT%3Ealert(document.cookie)%3C/SCRIPT%3E&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters;;;Information%20Technology;;;Security&startflag=3" target="_blank">http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=%22%3E%3CSCRIPT%3Ealert(document.cookie)%3C/SCRIPT%3E&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters;;;Information%20Technology;;;Security&startflag=3</a></span><br /><br />Screen shot offered below, as the code above will likely be repaired very soon by Openhire. I notified them this past Thursday.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNcebDIT4JI/AAAAAAAAADA/2umzh0wbmmw/s1600-h/Scottrade_Openhire.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNcebDIT4JI/AAAAAAAAADA/2umzh0wbmmw/s320/Scottrade_Openhire.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248697340769067154" /></a><br /><br />It's bad enough when there's an application security hole in code someone else is hosting on your behalf, but what if your method of displaying said code is also at risk? Enter the Getty Images Jobs page.<br /><br /><span style="font-style:italic;"><a href="http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=careeropps&startflag=0&company_id=15531&version=2&CFID=12265212&CFTOKEN=60213778" target="_blank">http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=careeropps&startflag=0&company_id=15531&version=2&CFID=12265212&CFTOKEN=60213778</a></span><br /><br />Watch what happens when you pull the Openhire code. Can you say self-replicating frame loop from hell (in Firefox)? Trust me your browser will crash if you leave this running too long. This will likely be fixed soon, so if the URL doesn't work, the screen shot exemplifies the issue.<br /><br /><a href="http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html" target="_blank">http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html</a><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://4.bp.blogspot.com/_kVOWaY1TAF0/SNcqO933d4I/AAAAAAAAADY/SSzLv3ZpiN0/s1600-h/GettyonGetty.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://4.bp.blogspot.com/_kVOWaY1TAF0/SNcqO933d4I/AAAAAAAAADY/SSzLv3ZpiN0/s320/GettyonGetty.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248710327339022210" /></a><br /><br />What if, instead of Openhire's Getty Images page, or nothing at all (which obviously creates its own issue), we drop in an arbitrary URL?<br />Yep, you guessed it.<br /><span style="font-style:italic;"><br />http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://www.xssed.com/news/26/Cross-site_framed/</span><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://2.bp.blogspot.com/_kVOWaY1TAF0/SNcmqF3wQyI/AAAAAAAAADI/EhR6rYOmwlI/s1600-h/Getty_XSF.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://2.bp.blogspot.com/_kVOWaY1TAF0/SNcmqF3wQyI/AAAAAAAAADI/EhR6rYOmwlI/s320/Getty_XSF.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248706395295990562" /></a><br /><br />Now, bringing it all home for double the pleasure, double the fun, what if we coupled the original Openhire cross-site scripting vuln with Getty Images cross-site frame vuln?<br /><br />It hurts twice as much, in my book.<br /><br /><span style="font-style:italic;">http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=%22%3E%3CSCRIPT%3Ealert(document.cookie)%3C/SCRIPT%3E&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters;;;Information%20Technology;;;Security&startflag=3</span><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNco1c6ensI/AAAAAAAAADQ/QaKByEFozTU/s1600-h/Getty%2BScottrade.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNco1c6ensI/AAAAAAAAADQ/QaKByEFozTU/s320/Getty%2BScottrade.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248708789483249346" /></a><br /><br />The lessons learned:<br />1) Ensure your partners are writing secure code on you behalf.<br />2) Ensure that the code you utilize to incorporate said partner's code is also well written. ;-)<br /><br />Double the headache, double the dumb.<br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/09/xsf-xss-double-your-pleasure-double.html&title=XSF%20&%20XSS:%20Double%20your%20pleasure,%20double%20your%20fun " title="XSF & XSS: Double your pleasure, double your fun ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/09/xsf-xss-double-your-pleasure-double.html" title="XSF & XSS: Double your pleasure, double your fun ">digg</a>]]></content:encoded>
      <pubDate>Sun, 21 Sep 2008 17:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/openhire code">openhire code</category>
      <category domain="http://securityratty.com/tag/openhire">openhire</category>
      <category domain="http://securityratty.com/tag/original openhire cross-site">original openhire cross-site</category>
      <category domain="http://securityratty.com/tag/scottrade site">scottrade site</category>
      <category domain="http://securityratty.com/tag/scottrade">scottrade</category>
      <category domain="http://securityratty.com/tag/cross-site">cross-site</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/secure code">secure code</category>
      <category domain="http://securityratty.com/tag/code">code</category>
      <source url="http://holisticinfosec.blogspot.com/2008/09/xsf-xss-double-your-pleasure-double.html">XSF &amp; XSS: Double your pleasure, double your fun</source>
    </item>
    <item>
      <title><![CDATA[AT&T Extends Free Wi-Fi to Cheapest DSL Plans]]></title>
      <link>http://securityratty.com/article/856e4c3817e07dfbb28fe42f32fd57e9</link>
      <guid>http://securityratty.com/article/856e4c3817e07dfbb28fe42f32fd57e9</guid>
      <description><![CDATA[AT&amp;T seems to have added free Wi-Fi for its lowest-priced DSL customers: The Atlanta Journal-Constitution is the only one with this story, and they've garbled a few of the details, but checking AT&amp;T's...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.ajc.com/business/content/business/stories/2008/09/16/att_internet_service.html"><strong>AT&T seems to have added free Wi-Fi for its lowest-priced DSL customers:</strong></a> The Atlanta Journal-Constitution is the only one with this story, and they've garbled a few of the details, but checking AT&T's public sites seems to confirm it. Previously, AT&T customers had to either have a fiber-optic U-Verse subscription, or a DSL line running at 1.5 Mbps downstream or faster to get free Wi-Fi Basic. The Basic pool covers most of the 17,000 U.S. hotspots, excluding some hotels and premium locations.</p>

<p>AT&T <a href="http://www.att.com/gen/general?pid=5949"><strong>now says</strong></a> that any "FastConnect" subscription, even its DSL Lite offering of 768 Kbps down/128 Kbps up, qualifies for Wi-Fi Basic. The new statement reads: "AT&T Wi-Fi Basic service is FREE and already included if you subscribe to AT&T High Speed Internet, AT&T U-verseSM High Speed Internet, or AT&T FastAccess&reg; DSL&mdash;all speed plans included.</p>

<p>There's still a $10 per month fee to upgrade to Wi-Fi Premier, which includes over 70,000 locations worldwide, along with the missing U.S. hotspots, but their Web site says that you have to have a 1.5 Mbps or faster connection to get the $10 per month upgrade. That may be out of date. That ordering page also says you need 1.5 Mbps or faster for free Wi-Fi, so that tends to confirm it hasn't been fixed. (It's even hosted at sbc.com, so perhaps that's part of the vestige of an older system, harder to update.)</p>

<p>Please note that iPhone subscribers still don't get free Wi-Fi on AT&T's Basic network.</p>]]></content:encoded>
      <pubDate>Tue, 16 Sep 2008 09:30:32 +0000</pubDate>
      <category domain="http://securityratty.com/tag/free">free</category>
      <category domain="http://securityratty.com/tag/free wi-fi">free wi-fi</category>
      <category domain="http://securityratty.com/tag/free wi-fi basic">free wi-fi basic</category>
      <category domain="http://securityratty.com/tag/att">att</category>
      <category domain="http://securityratty.com/tag/att customers">att customers</category>
      <category domain="http://securityratty.com/tag/att u-versesm">att u-versesm</category>
      <category domain="http://securityratty.com/tag/wi-fi basic">wi-fi basic</category>
      <category domain="http://securityratty.com/tag/speed internet">speed internet</category>
      <category domain="http://securityratty.com/tag/faster">faster</category>
      <source url="http://wifinetnews.com/archives/008445.html">AT&amp;T Extends Free Wi-Fi to Cheapest DSL Plans</source>
    </item>
    <item>
      <title><![CDATA[Zune Owners Get Free Wi-Fi at McDonald's]]></title>
      <link>http://securityratty.com/article/2afb17aca42cecdef0eb17c5e5e72ced</link>
      <guid>http://securityratty.com/article/2afb17aca42cecdef0eb17c5e5e72ced</guid>
      <description><![CDATA[Microsoft signs three-year deal with Wayport for old and new Zune owners alike: This is a nice win for Zune users, Wayport, and McDonald's, each in their own way, and it's something Microsoft can...]]></description>
      <content:encoded><![CDATA[<p><strong>Microsoft signs three-year deal with Wayport for old and new Zune owners alike:</strong> This is a nice win for Zune users, Wayport, and McDonald's, each in their own way, and it's something Microsoft can simply write off as useful marketing--and a way to get people to try the latest models of their music player, which are being released on 16-September.</p>

<p>The Zune doesn't include a Web browser or any Internet focused features; it's not an iPod touch. But you can use Wi-Fi to browse the Zune Marketplace for music and games, and download new songs in programmed channels, music selections created by a variety of artists and stations. Zune offers both music purchases and a subscription for unlimited music listening. The new models range from $149 for an 8 GB flash model to $249 for a 120 GB hard drive-based player.</p>

<p>The feature I'm most interested in is Buy from FM, which leverages the built-in FM tuner and very low-bandwidth data that's already pushed over analog AM/FM. (See <strong><a href="http://wifinetnews.com/archives/008432.html">my write-up of this feature</a></strong> from last week.) With Buy from FM, when you're listening to radio stations that participate, you'll be able to click a button and buy the song you're listening to if you're connected to a Wi-Fi network. Zune Pass subscribers can download the song at no additional charge. If there's no Wi-Fi network, the song download or purchase is queued.</p>

<p><img src="http://wifinetnews.com//images/2008/new_zune.jpg" alt="new_zune.jpg" border="0" width="137" height="256" align="right" />Wayport's marketing head Dan Lowden said, "Obviously, it's cool because folks who already own a Zune device and just need to do an upgrade will be able to use this just as with any of the new Zune devices that they start selling as soon as possible." (Microsoft may have a little accounting work to do: Sarbanes-Oxley doesn't let you enhance a product in the market without a fee if you realize the revenue all at once.)</p>

<p>The benefit for Wayport is to have yet another hefty but undisclosed fixed sum underlying its fixed infrastructure costs. In the past, Wayport has done deals with Nintendo, ZipIt, and Eye-Fi to allow all devices in a category unlimited access at McDonald's locations. McDonald's obviously gets more customers, or existing customers who spend more time or visit more frequently.</p>

<p>A partnership with a hotspot operator means that Microsoft doesn't have to provide tools and their users endure frustration in joining a network. "We're experts enabling one click to get this network connected," Lowden said. He noted that Wayport has opened test labs to work with manufacturers in Japan, San Francisco, San Diego, and Seattle. "We're working with these guys from day 1 to make sure it's one click to get connected," he said. I'd also note that San Diego happens to be where Qualcomm's headquarters are located, not that Lowden gave me any tip-off there. </p>

<p>And I have to just say: burn, burn, burn on Apple. Despite Apple partnership with AT&T, which relies on Wayport to operate the AT&T-branded hotspot network and resells access to Wayport's own network, iPhone and iPod touch users have no inclusive Wi-Fi service. AT&T slipped a few times and ostensibly opened up their network or released details that iPhone users would gain free hotspot access--like all AT&T's fiber and all its standard and premium DSL customers. </p>

<p>As Wi-Fi becomes an expected part of any handheld gadget, the venues in which Wi-Fi is used multiply beyond cafes and hotels. Lifestyle locations--which could be clothing stores, nightclubs, ski resorts, and the tops of mountains suddenly become places where people want the same kind of access they have at home. Ultima thule is already unwired.</p>]]></content:encoded>
      <pubDate>Mon, 15 Sep 2008 23:01:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/zune">zune</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/zune pass subscribers">zune pass subscribers</category>
      <category domain="http://securityratty.com/tag/inclusive wi-fi service">inclusive wi-fi service</category>
      <category domain="http://securityratty.com/tag/zune offers">zune offers</category>
      <category domain="http://securityratty.com/tag/devices">devices</category>
      <category domain="http://securityratty.com/tag/zune devices">zune devices</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <source url="http://wifinetnews.com/archives/008440.html">Zune Owners Get Free Wi-Fi at McDonald's</source>
    </item>
    <item>
      <title><![CDATA[Feds Set to Take Over Airline Watch-List Checking, Again]]></title>
      <link>http://securityratty.com/article/933dcb436f80512408fb3552ae504e18</link>
      <guid>http://securityratty.com/article/933dcb436f80512408fb3552ae504e18</guid>
      <description><![CDATA[The federal government is planning yet again to take over the job of comparing airline passengers to an ever-growing terrorism watch list ... six years after it was first proposed. The feds say this...]]></description>
      <content:encoded><![CDATA[The federal government is planning yet again to take over the job of comparing airline passengers to an ever-growing terrorism watch list ... six years after it was first proposed. The feds say this time they've fixed the privacy problems and can fix the name mismatches that have snagged children, nuns and senators.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=ba76fb137c9e96d038841ea4af45f3ac" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=ba76fb137c9e96d038841ea4af45f3ac" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=nHDcL"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=nHDcL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=IQrhl"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=IQrhl" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=h3yVl"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=h3yVl" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=cRufL"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=cRufL" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=PGFPL"><img src="http://feeds.wired.com/~f/wired/politics/security?i=PGFPL" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=HQZhl"><img src="http://feeds.wired.com/~f/wired/politics/security?i=HQZhl" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=xmGol"><img src="http://feeds.wired.com/~f/wired/politics/security?i=xmGol" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=4ED4L"><img src="http://feeds.wired.com/~f/wired/politics/security?i=4ED4L" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/388176051" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/388176052" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 09 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/federal government">federal government</category>
      <category domain="http://securityratty.com/tag/feds">feds</category>
      <category domain="http://securityratty.com/tag/airline passengers">airline passengers</category>
      <category domain="http://securityratty.com/tag/list">list</category>
      <category domain="http://securityratty.com/tag/fix">fix</category>
      <category domain="http://securityratty.com/tag/fixed">fixed</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/nuns">nuns</category>
      <category domain="http://securityratty.com/tag/terrorism">terrorism</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/388176052/gov-set-to-take.html">Feds Set to Take Over Airline Watch-List Checking, Again</source>
    </item>
    <item>
      <title><![CDATA[Cisco 7600 OSR Backbone Router]]></title>
      <link>http://securityratty.com/article/a447dc34e61d2770ab6d723a54abcb31</link>
      <guid>http://securityratty.com/article/a447dc34e61d2770ab6d723a54abcb31</guid>
      <description><![CDATA[For our confused CEO blogger over at StreamBase, who thinks an Internetbackbone router is the small $30 device he set up in his home office, here is a photo of a the Cisco 7600 OSR which of course...]]></description>
      <content:encoded><![CDATA[<p style="text-align: left;">For our confused CEO blogger over at StreamBase, who thinks an Internet backbone router is the small $30 device he set up in his home office, here is a photo of a the <a href="http://newsroom.cisco.com/dlls/prod_022001b.html" target="_blank">Cisco 7600 OSR</a> which of course runs <a href="http://www.cisco.com/en/US/products/sw/iosswrel/products_ios_cisco_ios_software_category_home.html" target="_blank">CISCO IOS</a>.</p>
<p style="text-align: center;"><img style="vertical-align: middle;" src="http://newsroom.cisco.com/ts_images/Cisco-7600-OSR-high.jpg" alt="Cisco 7600 OSR" height="600" /></p>
<p style="text-align: left;">The Cisco 7600 OSR consists of a 256 Gbps switching fabric and a 30 million packets per second (mpps) forwarding engine. Its breadth of IP services comes from Cisco IOS, which provides features such as security, enhanced QoS, and destination sensitive services. In addition, the Cisco 7600 OSR allows the migration of existing port adapters from Cisco 7500 series routers, via the Cisco FlexWAN module, giving service providers one the industry&#8217;s widest array of interface options in any single platform. This provides service providers great flexibility in deploying the Cisco 7600 OSR for a variety of applications, protects their investment in existing systems, and gives them a practical migration path to the New World Optical Internet.</p>
<h3>A Revolutionary Platform For Evolving Networks</h3>
<p>The Cisco 7600 OSR helps service providers break through service and bandwidth barriers today, while designing networks to scale for future growth. The Cisco 7600 OSR achieves this through &#8220;adaptive network processing,&#8221; or the ability to evolve the platform for new IP services without hardware upgrades. Unlike fixed, ASIC-based platforms, which are hardware encoded, the Cisco 7600 OSR relies on the highly flexible Parallel eXpress Forwarding (PXF) technology for scalable performance of services. PXF is a patented, Cisco-developed network processor capable of line-rate IP services delivery that can support new IP services through periodic software upgrades. Each OSM has two PXF processors capable of 12 mpps of IP services delivery per interface card.</p>
<p>&#8220;IP+Optical combines the dynamism of the Internet world with the foundation of the transport world, creating an infrastructure that can deliver the services that service providers need,&#8221; said Lele Nardin, vice president of the Internet Systems Business Unit at Cisco. &#8220;Cisco will continue to add innovative solutions on top of this solid foundation to make service providers better equipped to meet the constantly escalating and changing customer demands for new networking services.&#8221;</p>
<h3>Pricing and Availability</h3>
<p>The base Cisco 7600 OSR system is list priced at $73,000 and the entry level system, with interfaces, start at $100,000. The interfaces modules are priced between $27,000 to $180,000. The Cisco 7600 OSR is available now worldwide.</p>
]]></content:encoded>
      <pubDate>Sat, 06 Sep 2008 07:25:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cisco">cisco</category>
      <category domain="http://securityratty.com/tag/cisco flexwan module">cisco flexwan module</category>
      <category domain="http://securityratty.com/tag/osr">osr</category>
      <category domain="http://securityratty.com/tag/runs cisco ios">runs cisco ios</category>
      <category domain="http://securityratty.com/tag/base cisco">base cisco</category>
      <category domain="http://securityratty.com/tag/cisco ios">cisco ios</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/destination sensitive services">destination sensitive services</category>
      <category domain="http://securityratty.com/tag/osr system">osr system</category>
      <source url="http://www.thecepblog.com/2008/09/06/cisco-7600-osr-backbone-router/">Cisco 7600 OSR Backbone Router</source>
    </item>
  </channel>
</rss>
