<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: gas]]></title>
    <link>http://securityratty.com/tag/gas</link>
    <description></description>
    <pubDate>Fri, 13 Jun 2008 15:45:37 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[NAC vendors loading up fuel in the tank]]></title>
      <link>http://securityratty.com/article/4b38b013dc6b0d45330cbf5eb19a0c44</link>
      <guid>http://securityratty.com/article/4b38b013dc6b0d45330cbf5eb19a0c44</guid>
      <description><![CDATA[First it was Bradford Networks announcing they had raised another 8 million dollars in venture funding to help them break out beyond the edu market. Now comes word that Forescout has raised a like...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>First it was Bradford Networks <a href="http://www.networkworld.com/newsletters/vpn/2008/062308nac2.html">announcing</a> they had raised another 8 million dollars in venture funding to help them break out beyond the edu market. Now <a href="http://www.pehub.com/article/articledetail.php?articlepostid=13059">comes word</a> that Forescout has raised a like amount&nbsp; amount of additional capital. This was based upon a 80% growth rate for Forescout.&nbsp; This is well below the numbers I have seen Ray, Ken and Gordon throw about in interviews and at presentations.&nbsp; &nbsp;I guess you can spin all you want about how many customers you have or have won, but when it comes to raising cash, you can't play as <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/the-used-car-sa.html">fast and loose</a> as you do in your marketing.</p>

<p>Also this is a series E round for Forescout and brings their total raise to 44 million dollars.&nbsp; That makes for a tough number to make work.&nbsp; They need to roll some hard ways to make that bet pay off.&nbsp; I was led to understand they just raised 6 million last September.&nbsp; That makes 14 million in a little under a year.&nbsp; Can you spell big B-U-R-N.&nbsp; </p>

<p>The thing about both of these raises is that in the present market, just like the gas you put in your own tank, the gas these NAC vendors are putting in their tank is I am sure quite expensive!</p>

<div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/466535e7-abd7-4096-8a5e-110f9bc56504/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=466535e7-abd7-4096-8a5e-110f9bc56504" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=7GG8Zf"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=7GG8Zf" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=83dswJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=83dswJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=eKzpjJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=eKzpjJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=JstsVJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=JstsVJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=1uC5UJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=1uC5UJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=vXgF6j"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=vXgF6j" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=r2MOoj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=r2MOoj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/325042102" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 02 Jul 2008 08:09:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/million">million</category>
      <category domain="http://securityratty.com/tag/million dollars">million dollars</category>
      <category domain="http://securityratty.com/tag/nac vendors">nac vendors</category>
      <category domain="http://securityratty.com/tag/tank">tank</category>
      <category domain="http://securityratty.com/tag/forescout">forescout</category>
      <category domain="http://securityratty.com/tag/market">market</category>
      <category domain="http://securityratty.com/tag/additional capital">additional capital</category>
      <category domain="http://securityratty.com/tag/gas">gas</category>
      <category domain="http://securityratty.com/tag/total raise">total raise</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/325042102/nac-vendors-loa.html">NAC vendors loading up fuel in the tank</source>
    </item>
    <item>
      <title><![CDATA[Data breaches and gas prices..]]></title>
      <link>http://securityratty.com/article/f4007a9f9c0266aa582601c225f05b0e</link>
      <guid>http://securityratty.com/article/f4007a9f9c0266aa582601c225f05b0e</guid>
      <description><![CDATA[Seems like the growth rate is the same - IRTC (Identity Theft Resource Center ) just released some interesting stats . Apparently number of breaches in the first half of 2008 have risen 69% over the...]]></description>
      <content:encoded><![CDATA[Seems like the growth rate is the same - <a href="http://idtheftcenter.org/">IRTC (Identity Theft Resource Center</a>) just released some<a href="http://newsblaze.com/story/2008063005530600002.pnw/topstory.html"> interesting stats</a>. Apparently number of breaches in the first half of 2008 have risen 69% over the same period in 2007. Maybe gas prices have increased a bit more, but not by much...<br /><br />Also other interesting nuggets -<br /><ul><li>Almost 40% have not disclosed the number of records breached.</li><li>Theft, either internal or external, have been the primary reason for the breach. </li></ul>Wonder why we are not hearing this on the presidential campaign? A unified and national policy approach to this epidemic would be welcome (as would lower gas prices!)<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/BitArmor1?a=quoGWI"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=quoGWI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=F9GSLi"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=F9GSLi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=cCqt0I"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=cCqt0I" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/BitArmor1/~4/323392425" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 30 Jun 2008 13:05:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/gas prices">gas prices</category>
      <category domain="http://securityratty.com/tag/lower gas prices">lower gas prices</category>
      <category domain="http://securityratty.com/tag/national policy approach">national policy approach</category>
      <category domain="http://securityratty.com/tag/breaches">breaches</category>
      <category domain="http://securityratty.com/tag/primary reason">primary reason</category>
      <category domain="http://securityratty.com/tag/presidential campaign">presidential campaign</category>
      <category domain="http://securityratty.com/tag/nuggets">nuggets</category>
      <category domain="http://securityratty.com/tag/half">half</category>
      <category domain="http://securityratty.com/tag/bit">bit</category>
      <source url="http://feeds.feedburner.com/~r/BitArmor1/~3/323392425/data-breaches-and-gas-prices.html">Data breaches and gas prices..</source>
    </item>
    <item>
      <title><![CDATA[The hidden gas tax]]></title>
      <link>http://securityratty.com/article/0d034717b438f6abce0ff6f2baa00e21</link>
      <guid>http://securityratty.com/article/0d034717b438f6abce0ff6f2baa00e21</guid>
      <description><![CDATA[We all hate paying $75 dollars or more every time we fill up our gas tanks. When we see gas and oil prices hitting new highs (it seems to happen every day) we grimace and think about how much this is...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><h5>&nbsp;<img height="1" alt="" src="outbind://196-00000000e913467db5ac3a4c90069bcd089346f307005c9e8cceeb81ed498ac0c3b0054704f300000014f0bd00005c9e8cceeb81ed498ac0c3b0054704f3000004cdf3700000/ReviewShipmentDetails_files/1.gif" width="1"></h5> <table cellspacing="0" cellpadding="2" border="0"> <tbody> <tr> <td valign="top"><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/ups%20receipt.gif"><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; border-right-width: 0px" height="112" alt="ups receipt" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/ups%20receipt_thumb.gif" width="240" border="0"></a><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/ups%202.gif"><img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="240" alt="ups 2" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/ups%202_thumb.gif" width="240" align="left" border="0"></a>  </td> <td valign="top">We all hate paying $75 dollars or more every time we fill up our gas tanks. When we see gas and oil prices hitting new highs (it seems to happen every day) we grimace and think about how much this is going to cost us as part of our weekly gas bills.&nbsp; We get even more upset when the utility bills come and we see our summer time electric bills going through the roof because of fuel surcharges. <br><br>What about the price of food and other goods?&nbsp; Have you noticed how much they are going up?&nbsp; Bananas were 49 cents a pound and are now 69 cents a pound.&nbsp; That is a huge increase.&nbsp; Our government says core inflation is not going up outside of energy costs and I am not sure I believe that. We are seeing huge increases in rice, wheat and other staples.&nbsp; But gas prices are a hidden tax on our economy across the board.<br><br>Have a look at the UPS receipt for a package that was shipped out to me.&nbsp; From a base price of about $22.00, fuel surcharges add another 10 dollars to the bill. That is almost a 50% tax for fuel!&nbsp; Add 50% to the cost of everything you buy and it is easy to see how this energy crisis is pushing us all to the breaking point.<br><br>We need a "send a man to the moon" effort to break free of oil and move to clean renewable, cheap energy now!</td></tr></tbody></table></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=FkQa5X"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=FkQa5X" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=I6t2aI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=I6t2aI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=DzYzII"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=DzYzII" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=QJ8MlI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=QJ8MlI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=1lRFxI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=1lRFxI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=HaunGi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=HaunGi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=2EZeLi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=2EZeLi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/321456792" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 27 Jun 2008 08:02:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/gas">gas</category>
      <category domain="http://securityratty.com/tag/weekly gas bills">weekly gas bills</category>
      <category domain="http://securityratty.com/tag/fuel">fuel</category>
      <category domain="http://securityratty.com/tag/gas tanks">gas tanks</category>
      <category domain="http://securityratty.com/tag/fuel surcharges">fuel surcharges</category>
      <category domain="http://securityratty.com/tag/tax">tax</category>
      <category domain="http://securityratty.com/tag/gas prices">gas prices</category>
      <category domain="http://securityratty.com/tag/price">price</category>
      <category domain="http://securityratty.com/tag/base price">base price</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/321456792/the-hidden-gas.html">The hidden gas tax</source>
    </item>
    <item>
      <title><![CDATA[PCI compliance kit for NAC - do you believe it?]]></title>
      <link>http://securityratty.com/article/eea08d4a2ddfe35a1d81e5128594469b</link>
      <guid>http://securityratty.com/article/eea08d4a2ddfe35a1d81e5128594469b</guid>
      <description><![CDATA[Tim Greene makes the point again in his column that NAC is a great tool to help with PCI compliance. He is right on. Here at StillSecure we have several customers who are using NAC to help with PCI....]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Tim Greene makes the <a href="http://www.networkworld.com/newsletters/vpn/2008/062308nac1.html">point again in his column</a> that NAC is a great tool to help with PCI compliance. He is right on. Here at StillSecure we have several customers who are using NAC to help with PCI.&nbsp; My issue is Tim highlights some recent spin fed to him from the &quot;<a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/the-used-car-sa.html">used car salesman of NAC</a>&quot;. They claim to have a &quot;PCI kit&quot; that will help with 8 out of 12 PCI requirments.&nbsp; A kit sounds like something you put on your car to help with gas mileage or something and for all I know is just more snake oil.&nbsp; They claim to have an &quot;unnamed customer&quot; who is already using it.&nbsp; Who could that be, LVHH again?&nbsp; Or maybe they found a Cisco or Juniper customer that they say uses them for NAC now too.&nbsp; The <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/the-used-car-sa.html">BNBB</a> advises to take anything they say or write with a grain of salt.&nbsp; Remember Caveat Emptor!</p></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=PiIKlz"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=PiIKlz" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=bIsVsI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=bIsVsI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=KXbTBI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=KXbTBI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=MCFmFI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=MCFmFI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=7oJYKI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=7oJYKI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=KVv8ni"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=KVv8ni" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=v3cjWi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=v3cjWi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/318838718" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 03:03:55 +0000</pubDate>
      <category domain="http://securityratty.com/tag/pci">pci</category>
      <category domain="http://securityratty.com/tag/nac">nac</category>
      <category domain="http://securityratty.com/tag/pci kit">pci kit</category>
      <category domain="http://securityratty.com/tag/pci compliance">pci compliance</category>
      <category domain="http://securityratty.com/tag/pci requirments">pci requirments</category>
      <category domain="http://securityratty.com/tag/recent spin fed">recent spin fed</category>
      <category domain="http://securityratty.com/tag/remember caveat emptor">remember caveat emptor</category>
      <category domain="http://securityratty.com/tag/juniper customer">juniper customer</category>
      <category domain="http://securityratty.com/tag/car">car</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/318838718/pci-compliance.html">PCI compliance kit for NAC - do you believe it?</source>
    </item>
    <item>
      <title><![CDATA[In-Flight Wi-Fi on American as Soon as This Week]]></title>
      <link>http://securityratty.com/article/ba3a1c279334bddcf160ad8e924fb079</link>
      <guid>http://securityratty.com/article/ba3a1c279334bddcf160ad8e924fb079</guid>
      <description><![CDATA[Xeni Jardin at BoingBoing gets the scoop on when American Airlines launches its in-flight network using Aircell GoGo service: She writes that it might be as early as this week on JFK, LAX, SFO, and...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://www.boingboing.net/2008/06/23/american-and-virgin.html"><strong>Xeni Jardin at BoingBoing gets the scoop on when American Airlines launches its in-flight network using Aircell GoGo service:</strong></a> She writes that it might be as early as this week on JFK, LAX, SFO, and MIA flights (that last one is Miami; took me a moment). Virgin is probably still a few months away, although they told Jardin that they're more <em>prepared</em>, but they have more integration to do.</p>

<p>Jardin notes that Virgin is thinking about what gets cached on planes. I would note that the idea of onboard media and caching servers is a great one, because it means that passengers could ostensibly stream or purchase downloadable digital content; and that whenever an airplane lands, its servers could automatically suck in at 802.11n speeds from a gate-mounted access point all the latest data to cache, including video.</p>

<p>On the cost of fuel to carry the Wi-Fi gear--probably a total of 200 pounds of dead weight and drag, based on information that Aircell and others have been giving out--I may have been close tot the mark when I suggested it was $50 for a cross country flight a few days ago.</p>

<p>The excellent Scott McCartney, author of The Middle Seat column in The Wall Street Journal, <a href="http://www.emailthis.clickability.com/et/emailThis?clickMap=viewThis&etMailToID=1313039295&pt=Y"><strong>ran down the numbers</strong></a> on 10-June, and he says LAX-JFK costs about $500 per passenger when all the costs are figured out. But that includes all fuel divided by average passenger count: that is, the weight of the plane, everything in it, and its drag are all contributors. </p>

<p>That means that an added couple of passengers due to the availability of Wi-Fi; their willingness or the overall willingness to pay slightly more for the flight (which would be even fuller if more people want on); and the airlines' cut of a dozen or sessions per flight could clearly outweigh the gas cost.<br />
</p>]]></content:encoded>
      <pubDate>Mon, 23 Jun 2008 09:26:20 +0000</pubDate>
      <category domain="http://securityratty.com/tag/flight">flight</category>
      <category domain="http://securityratty.com/tag/cross country flight">cross country flight</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/jardin">jardin</category>
      <category domain="http://securityratty.com/tag/lax-jfk costs">lax-jfk costs</category>
      <category domain="http://securityratty.com/tag/xeni jardin">xeni jardin</category>
      <category domain="http://securityratty.com/tag/jfk">jfk</category>
      <category domain="http://securityratty.com/tag/american airlines launches">american airlines launches</category>
      <category domain="http://securityratty.com/tag/aircell">aircell</category>
      <source url="http://wifinetnews.com/archives/008373.html">In-Flight Wi-Fi on American as Soon as This Week</source>
    </item>
    <item>
      <title><![CDATA[The used car salesmen of NAC and the BNBB]]></title>
      <link>http://securityratty.com/article/cd36c880e9816f61480c0090b87f3fc4</link>
      <guid>http://securityratty.com/article/cd36c880e9816f61480c0090b87f3fc4</guid>
      <description><![CDATA[Few occupations have such a low reputation as used car salespeople. Well OK maybe lawyers ;-). For the most part though used car sales people are not really as bad as they are made out to be or...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/slimy_salesguy.jpg"><img height="240" alt="slimy_salesguy" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/slimy_salesguy_thumb.jpg" width="170" align="left" border="0" style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; MARGIN: 0px 10px 5px 0px; BORDER-RIGHT-WIDTH: 0px" /></a>Few occupations have such a low reputation as used car salespeople.&nbsp; Well OK maybe lawyers ;-).&nbsp; For the most part though used car sales people are not really as bad as they are made out to be or perhaps as bad as they used to be. Yes, there is the &quot;what do I have to do to put you in this car today&quot; attitude, but by and large - lemon laws, consumer protection rules and truth in advertising regs have taken some of the snake oil out of the fast and loose way of doing business which earned them their reputation.&nbsp; Who doesn't hear or read an ad today for cars without the &quot;fine print&quot; being mentioned.</p>

<p>In the world of NAC though we have no such protections built in it seems. It is very much &quot;caveat emptor&quot; - buyer beware.&nbsp; NAC companies can pretty much say what they want, claim what they will.&nbsp; How is a prospective customer supposed to know the truth?&nbsp; Some say you can check references, but even then much like someone applying for a job, do they ever give a reference who is not going say something nice about them? The easy answer of course is try it for yourself. There is no substitute for actually kicking the tires. </p>

<p>Here is another idea I was thinking about, I call it the Better NAC Business Bureau (BNBB).&nbsp; Its mission is to shine a spotlight on some of the dark alleys and rat holes that some NAC vendors do business in.&nbsp; The same way the used car salesmen of the world have been rehabilitated, lets do the same with NAC marketing!&nbsp; </p>

<p><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/bnbb.gif"><img height="141" alt="bnbb" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/bnbb_thumb.gif" width="232" align="right" border="0" style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" /></a> With that in mind, the first investigation of the BNBB is in regard to some recent press releases from two NAC vendors.&nbsp; The first <a href="http://www.marketwire.com/mw/release.do?id=869105" target="_blank">press release is from StillSecure</a> and is in regard to Lehigh Valley Hospital and Health Center.&nbsp; It claims that LVHHC is and has been a NAC customer of StillSecure for the past two years and continues to be a customer.&nbsp; The press release has quotes from the CIO of LVHHC.&nbsp; The second <a href="http://www.forescout.com/press_releases/08-009.html" target="_blank">press release</a> and case study is from <a href="http://www.forescout.com/downloads/case_studies/FS-CS-Lehigh.pdf" target="_blank">NAC vendor X</a> .&nbsp; It also claims that LVHHC uses this companies product product for NAC throughout the entire organization.&nbsp; They also have a quote from someone at the organization (OK, not the CIO, but someone).&nbsp; Who to believe?&nbsp; Does LVHHC have two NAC solutions?&nbsp; I doubt it.&nbsp; What to do?&nbsp; </p>

<p>Well we can look at a little history.&nbsp; For instance which of these two NAC companies claimed they did not use Nessus in their NAC product and <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2007/07/if-you-have-to-.html" target="_blank">than it turned out they did</a>.&nbsp; What company took the infamous TCP reset and tried to peddle it as a &quot;virtual firewall&quot;.&nbsp; Of course there was the time they took out <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2007/09/security-lumina.html" target="_blank">Google ad words on my name</a>. Yes my friends, it seems that playing fast and loose with marketing claims has earned this company a bit of a used car salesman reputation. But like gas mileage, past performance is not controlling and your performance may vary. </p>

<p>So lets give this company the benefit of the doubt. Maybe in their burning desire to show reference customers they were a little to quick to pull the trigger here.&nbsp; Lets give them a chance to go back and check with their sources and see if they have the facts the straight.&nbsp; If they find out that perhaps they were mistaken about this customer using their product for NAC for over 20,000 users at LVHHC, lets give them a chance to retract or correct the press release and case study.&nbsp; At that the BNBB would close this file without any prejudice.&nbsp; Case closed, the BNBB does its job again. What do you think would be a reasonable time to do this?&nbsp; Two weeks? Three weeks? I'll tell you what, the BNBB is founded on fairness.&nbsp; Lets give them a month.&nbsp; </p>

<p>If after a month though they have not updated the case study and press release we will have a podcast here and we will delve into this further.&nbsp; We are going to find out what the NAC solution there is.&nbsp; Of course Forescout is invited to participate in the podcast and can even bring their own guests if they like.&nbsp; But at the end of the day, there is only one solution being used for NAC at LVHHC and we all are going to find out what that is.&nbsp; That hospital ain't big enough for the both of us! </p>

<p>If you would like to be involved in this podcast or the BNBB drop me a line at <a href="mailto:podcast@stillsecure.com">podcast@stillsecure.com</a></p></div>
]]></content:encoded>
      <pubDate>Mon, 16 Jun 2008 17:03:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/nac">nac</category>
      <category domain="http://securityratty.com/tag/nac solution">nac solution</category>
      <category domain="http://securityratty.com/tag/nac solutions">nac solutions</category>
      <category domain="http://securityratty.com/tag/nac vendor">nac vendor</category>
      <category domain="http://securityratty.com/tag/nac companies">nac companies</category>
      <category domain="http://securityratty.com/tag/car">car</category>
      <category domain="http://securityratty.com/tag/prospective customer">prospective customer</category>
      <category domain="http://securityratty.com/tag/customer">customer</category>
      <category domain="http://securityratty.com/tag/companies product product">companies product product</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/the-used-car-sa.html">The used car salesmen of NAC and the BNBB</source>
    </item>
    <item>
      <title><![CDATA[The used car salesmen of NAC and the BNBB]]></title>
      <link>http://securityratty.com/article/936d718e5f37edc62b63f2e074ad307e</link>
      <guid>http://securityratty.com/article/936d718e5f37edc62b63f2e074ad307e</guid>
      <description><![CDATA[Few occupations have such a low reputation as used car salespeople. Well OK maybe lawyers ;-). For the most part though used car sales people are not really as bad as they are made out to be or...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/slimy_salesguy.jpg"><img height="240" alt="slimy_salesguy" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/slimy_salesguy_thumb.jpg" width="170" align="left" border="0" style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; MARGIN: 0px 10px 5px 0px; BORDER-RIGHT-WIDTH: 0px" /></a>Few occupations have such a low reputation as used car salespeople.&nbsp; Well OK maybe lawyers ;-).&nbsp; For the most part though used car sales people are not really as bad as they are made out to be or perhaps as bad as they used to be. Yes, there is the &quot;what do I have to do to put you in this car today&quot; attitude, but by and large - lemon laws, consumer protection rules and truth in advertising regs have taken some of the snake oil out of the fast and loose way of doing business which earned them their reputation.&nbsp; Who doesn't hear or read an ad today for cars without the &quot;fine print&quot; being mentioned.</p>

<p>In the world of NAC though we have no such protections built in it seems. It is very much &quot;caveat emptor&quot; - buyer beware.&nbsp; NAC companies can pretty much say what they want, claim what they will.&nbsp; How is a prospective customer supposed to know the truth?&nbsp; Some say you can check references, but even then much like someone applying for a job, do they ever give a reference who is not going say something nice about them? The easy answer of course is try it for yourself. There is no substitute for actually kicking the tires. </p>

<p>Here is another idea I was thinking about, I call it the Better NAC Business Bureau (BNBB).&nbsp; Its mission is to shine a spotlight on some of the dark alleys and rat holes that some NAC vendors do business in.&nbsp; The same way the used car salesmen of the world have been rehabilitated, lets do the same with NAC marketing!&nbsp; </p>

<p><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/bnbb.gif"><img height="141" alt="bnbb" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/bnbb_thumb.gif" width="232" align="right" border="0" style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" /></a> With that in mind, the first investigation of the BNBB is in regard to some recent press releases from two NAC vendors.&nbsp; The first <a href="http://www.marketwire.com/mw/release.do?id=869105" target="_blank">press release is from StillSecure</a> and is in regard to Lehigh Valley Hospital and Health Center.&nbsp; It claims that LVHHC is and has been a NAC customer of StillSecure for the past two years and continues to be a customer.&nbsp; The press release has quotes from the CIO of LVHHC.&nbsp; The second <a href="http://www.forescout.com/press_releases/08-009.html" target="_blank">press release</a> and case study is from <a href="http://www.forescout.com/downloads/case_studies/FS-CS-Lehigh.pdf" target="_blank">NAC vendor X</a> .&nbsp; It also claims that LVHHC uses this companies product product for NAC throughout the entire organization.&nbsp; They also have a quote from someone at the organization (OK, not the CIO, but someone).&nbsp; Who to believe?&nbsp; Does LVHHC have two NAC solutions?&nbsp; I doubt it.&nbsp; What to do?&nbsp; </p>

<p>Well we can look at a little history.&nbsp; For instance which of these two NAC companies claimed they did not use Nessus in their NAC product and <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2007/07/if-you-have-to-.html" target="_blank">than it turned out they did</a>.&nbsp; What company took the infamous TCP reset and tried to peddle it as a &quot;virtual firewall&quot;.&nbsp; Of course there was the time they took out <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2007/09/security-lumina.html" target="_blank">Google ad words on my name</a>. Yes my friends, it seems that playing fast and loose with marketing claims has earned this company a bit of a used car salesman reputation. But like gas mileage, past performance is not controlling and your performance may vary. </p>

<p>So lets give this company the benefit of the doubt. Maybe in their burning desire to show reference customers they were a little to quick to pull the trigger here.&nbsp; Lets give them a chance to go back and check with their sources and see if they have the facts the straight.&nbsp; If they find out that perhaps they were mistaken about this customer using their product for NAC for over 20,000 users at LVHHC, lets give them a chance to retract or correct the press release and case study.&nbsp; At that the BNBB would close this file without any prejudice.&nbsp; Case closed, the BNBB does its job again. What do you think would be a reasonable time to do this?&nbsp; Two weeks? Three weeks? I'll tell you what, the BNBB is founded on fairness.&nbsp; Lets give them a month.&nbsp; </p>

<p>If after a month though they have not updated the case study and press release we will have a podcast here and we will delve into this further.&nbsp; We are going to find out what the NAC solution there is.&nbsp; Of course Forescout is invited to participate in the podcast and can even bring their own guests if they like.&nbsp; But at the end of the day, there is only one solution being used for NAC at LVHHC and we all are going to find out what that is.&nbsp; That hospital ain't big enough for the both of us! </p>

<p>If you would like to be involved in this podcast or the BNBB drop me a line at <a href="mailto:podcast@stillsecure.com">podcast@stillsecure.com</a></p></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=gEsoZj"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=gEsoZj" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=f2D1QI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=f2D1QI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=yI7JxI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=yI7JxI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=QBdPJI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=QBdPJI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=snv2pI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=snv2pI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=wDCPki"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=wDCPki" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=LsHyKi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=LsHyKi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/313427070" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 16 Jun 2008 16:20:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/nac">nac</category>
      <category domain="http://securityratty.com/tag/nac solution">nac solution</category>
      <category domain="http://securityratty.com/tag/nac solutions">nac solutions</category>
      <category domain="http://securityratty.com/tag/nac vendor">nac vendor</category>
      <category domain="http://securityratty.com/tag/nac companies">nac companies</category>
      <category domain="http://securityratty.com/tag/car">car</category>
      <category domain="http://securityratty.com/tag/prospective customer">prospective customer</category>
      <category domain="http://securityratty.com/tag/customer">customer</category>
      <category domain="http://securityratty.com/tag/companies product product">companies product product</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/313427070/the-used-car-sa.html">The used car salesmen of NAC and the BNBB</source>
    </item>
    <item>
      <title><![CDATA[Google has your back against your ISP]]></title>
      <link>http://securityratty.com/article/9a8229e70a7834812614f5a434de3959</link>
      <guid>http://securityratty.com/article/9a8229e70a7834812614f5a434de3959</guid>
      <description><![CDATA[Its been a while now since word got out that Comcast for sure and possibly other large ISPs were filtering and throttling traffic to their customers. Now Steve Musil over on C/Net is reporting on a...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Its been a while now <a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/n/a/2007/10/19/financial/f061526D54.DTL&amp;feed=rss.business">since word got out</a> that <a class="zem_slink" title="Comcast" href="http://www.comcast.com/" rel="homepage">Comcast</a> for sure and possibly other large ISPs were filtering and throttling traffic to their customers. Now <a href="http://news.cnet.com/8301-10784_3-9968972-7.html?part=rss&amp;tag=feed&amp;subj=NewsBlog">Steve Musil over on C/Net is reporting</a> on a report <a href="http://www.theregister.co.uk/2008/06/13/google_network_management_tools/">in the Register</a> that <a class="zem_slink" title="Google" href="http://www.google.com/about.html" rel="homepage">Google</a> will be releasing tools that they have developed which will allow users to monitor and identify this type of filtering by your broadband carrier. I am far from a Google fan boy, but I have to give Google a pat on the back for this one.&nbsp; </p>

<p>The ISPs have tried to stop the government from stepping in here and preventing them from limiting and filtering traffic like this. It is part of the whole net neutrality thing.&nbsp; The ISPs response is the government doesn't have to step in, the market will take care of itself. Yeah, just like the oil companies say about the price of gas.&nbsp; </p>

<p>Ultimately I think the ISPs know they are going to lose this fight. Their next play is to start charging you based upon how much bandwidth you use.&nbsp; We have already seen the noise around that one. It reminds me of my web hosting days.&nbsp; Some hosts charged you by the bandwidth you used per month. Others gave you unlimited bandwidth but put you on a crowded machine where you had to fight for CPU time and hooked that up to a small pipe that was saturated.&nbsp; So you did not pay for extra bandwidth, but you couldn't use any either.&nbsp; Bottom line after a long period of access being cheap and plentiful, the ISP game is back.&nbsp; You can pay them now or pay them later, but you will pay them.</p>

<fieldset class="zemanta-related"><legend>Related articles</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.boingboing.net/2008/06/14/google-making-a-netw.html">Google making a network neutrality detector</a> [via Zemanta]</li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://gizmodo.com/5016514/google-tools-will-tell-you-if-your-isp-is-slowing-down-your-connection">Google Tools Will Tell You If Your ISP Is Slowing Down Your Connection [Google]</a> [via Zemanta]</li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.hackaday.com/2008/06/14/detecting-isp-throttling/">Detecting ISP throttling</a> [via Zemanta]</li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://gawker.com/tag/the-internets/?i=5016513&amp;t=evil-corporations-are-going-to-take-away-your-internets">Evil Corporations Are Going to Take Away Your Internets [The Internets]</a> [via Zemanta]</li></ul></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/13d7fd66-6d35-498d-a48f-993149dab079/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=13d7fd66-6d35-498d-a48f-993149dab079" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>
]]></content:encoded>
      <pubDate>Sun, 15 Jun 2008 20:06:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/tools">tools</category>
      <category domain="http://securityratty.com/tag/google tools">google tools</category>
      <category domain="http://securityratty.com/tag/connection google">connection google</category>
      <category domain="http://securityratty.com/tag/isp">isp</category>
      <category domain="http://securityratty.com/tag/google fan boy">google fan boy</category>
      <category domain="http://securityratty.com/tag/isps response">isps response</category>
      <category domain="http://securityratty.com/tag/extra bandwidth">extra bandwidth</category>
      <category domain="http://securityratty.com/tag/isps">isps</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/google-has-your.html">Google has your back against your ISP</source>
    </item>
    <item>
      <title><![CDATA[Google has your back against your ISP]]></title>
      <link>http://securityratty.com/article/874e9445236d401af8a32e8fa48ca044</link>
      <guid>http://securityratty.com/article/874e9445236d401af8a32e8fa48ca044</guid>
      <description><![CDATA[Its been a while now since word got out that Comcast for sure and possibly other large ISPs were filtering and throttling traffic to their customers. Now Steve Musil over on C/Net is reporting on a...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Its been a while now <a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/n/a/2007/10/19/financial/f061526D54.DTL&amp;feed=rss.business">since word got out</a> that <a class="zem_slink" title="Comcast" href="http://www.comcast.com/" rel="homepage">Comcast</a> for sure and possibly other large ISPs were filtering and throttling traffic to their customers. Now <a href="http://news.cnet.com/8301-10784_3-9968972-7.html?part=rss&amp;tag=feed&amp;subj=NewsBlog">Steve Musil over on C/Net is reporting</a> on a report <a href="http://www.theregister.co.uk/2008/06/13/google_network_management_tools/">in the Register</a> that <a class="zem_slink" title="Google" href="http://www.google.com/about.html" rel="homepage">Google</a> will be releasing tools that they have developed which will allow users to monitor and identify this type of filtering by your broadband carrier. I am far from a Google fan boy, but I have to give Google a pat on the back for this one.&nbsp; </p>

<p>The ISPs have tried to stop the government from stepping in here and preventing them from limiting and filtering traffic like this. It is part of the whole net neutrality thing.&nbsp; The ISPs response is the government doesn't have to step in, the market will take care of itself. Yeah, just like the oil companies say about the price of gas.&nbsp; </p>

<p>Ultimately I think the ISPs know they are going to lose this fight. Their next play is to start charging you based upon how much bandwidth you use.&nbsp; We have already seen the noise around that one. It reminds me of my web hosting days.&nbsp; Some hosts charged you by the bandwidth you used per month. Others gave you unlimited bandwidth but put you on a crowded machine where you had to fight for CPU time and hooked that up to a small pipe that was saturated.&nbsp; So you did not pay for extra bandwidth, but you couldn't use any either.&nbsp; Bottom line after a long period of access being cheap and plentiful, the ISP game is back.&nbsp; You can pay them now or pay them later, but you will pay them.</p>

<fieldset class="zemanta-related"><legend>Related articles</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.boingboing.net/2008/06/14/google-making-a-netw.html">Google making a network neutrality detector</a> [via Zemanta]</li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://gizmodo.com/5016514/google-tools-will-tell-you-if-your-isp-is-slowing-down-your-connection">Google Tools Will Tell You If Your ISP Is Slowing Down Your Connection [Google]</a> [via Zemanta]</li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.hackaday.com/2008/06/14/detecting-isp-throttling/">Detecting ISP throttling</a> [via Zemanta]</li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://gawker.com/tag/the-internets/?i=5016513&amp;t=evil-corporations-are-going-to-take-away-your-internets">Evil Corporations Are Going to Take Away Your Internets [The Internets]</a> [via Zemanta]</li></ul></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/13d7fd66-6d35-498d-a48f-993149dab079/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=13d7fd66-6d35-498d-a48f-993149dab079" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=kaapFc"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=kaapFc" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=BZ9HdI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=BZ9HdI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=iGc47I"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=iGc47I" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=MdIMXI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=MdIMXI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=5sMV3I"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=5sMV3I" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=YWIUAi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=YWIUAi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=hycXri"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=hycXri" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/312755385" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 15 Jun 2008 19:06:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/tools">tools</category>
      <category domain="http://securityratty.com/tag/google tools">google tools</category>
      <category domain="http://securityratty.com/tag/connection google">connection google</category>
      <category domain="http://securityratty.com/tag/isp">isp</category>
      <category domain="http://securityratty.com/tag/google fan boy">google fan boy</category>
      <category domain="http://securityratty.com/tag/isps response">isps response</category>
      <category domain="http://securityratty.com/tag/extra bandwidth">extra bandwidth</category>
      <category domain="http://securityratty.com/tag/isps">isps</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/312755385/google-has-your.html">Google has your back against your ISP</source>
    </item>
    <item>
      <title><![CDATA[Loving customers frustrate security firms too]]></title>
      <link>http://securityratty.com/article/90258e9f33623bc8f6064f70d8abd5d6</link>
      <guid>http://securityratty.com/article/90258e9f33623bc8f6064f70d8abd5d6</guid>
      <description><![CDATA[Roger Grimes has a good article up on his InfoWorld, Security Advisory blog entitled &quot; Security firms frustrate loving customers &quot;. Roger details some specific examples of how security vendors just...]]></description>
      <content:encoded><![CDATA[<p>Roger Grimes has a good article up on his InfoWorld, Security Advisory blog entitled "<a href="http://weblog.infoworld.com/securityadviser/archives/2008/06/security_firms.html">Security firms frustrate loving customers</a>". Roger details some specific examples of how security vendors just don't "show the love" to customers and prospective customers, with the result being lost business. Roger highlights three examples: <br><br><strong>1.</strong> <strong>Making renewals a manual process with those annoying phone trees</strong>. I agree, when I hear the press 1 for this and press 2 for this, my blood starts to boil. There is no reason that this just can't be built into the product to renew over the web. Security or no, any software vendor not doing it this is just plain crazy.<br><strong><br>2. Calling into a company with a sales inquiry and the sales guy never calls back</strong>. This one just kills me. When doing due diligence on potential acquisitions at a prior company I would call in or email with a sales inquiry and wait to see how long it would take for them to get back to me. It was a good indication of how well the sales organization and company functioned.<br><br><strong>3. Killing the deal with one sided, overly legal and burdensome terms</strong>. Another one that I battle all the time. The CFO has to be able to recognize revenue so needs specific T&amp;Cs. The lawyers want to protect the vendor against all eventualities and is doing his job. You want to make as few warranties and representations as possible to limit your liability. The result, the customer gets one sided, unfair document with fine print on maintenance pricing, renewals, SLAs, etc. Most customers don't even read the EULA. Take a lot at some of the ones with software you have bought. It may surprise you.<br><br>But in my best Fox News voice, lets be fair and balanced. So in that vein, let me give you 3 specific examples of how loving customers frustrate security firms:<br><br><strong>1. The guys who picked the product leave and the new guy comes in and doesn't have a clue.</strong> This happens all the time, especially in the government. One guy or team buys the product for a specific reason and has all of the expertise. The new folks come in and even if they know your product is there, they don't know why or how to use it. They may feel they inherited this product and have their own favorite product in this category. They can't wait to replace you and either don't use the product at all or blame the problems of the world on it.<br><br><strong>2. Buying the product and than "other priorities" delay implementation.</strong> A surefire recipe for shelfware. When I see this happening I tell our folks better to be a pain in the butt and force them to use the product they bought than to sit around watching the license expire on the shelf. The longer the product sits, the more it becomes a nice to have, rather than a must have, that drove the sale. Now sure, one can say that what does the vendor care, the customer paid. If he doesn't use it, less support costs. But you don't get renewals, you don't get upsells or referrals without customers using product.<br><strong><br>3. Using the product in unintended ways.</strong> Another favorite heartburn of mine. Customers figure just because the application runs Linux underneath, why can"t I run (You Name It). We recently had a customer that was chewing up support hours like the dial at a gas pump today. It turns out the problems we all due to the all of the other software that he had put on the box, not to mention editing .conf files, database tables, etc. It is hard enough supporting the software we developed. It is a whole another story supporting software that you have written.<br><br>So Roger, yes the customer is always right and security vendors have to get their act together if they want to survive, let alone compete in these tough economic times. But customers certainly don't make the job any easier with some of the shenanigans they pull.</p>
<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=zkXRhU"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=zkXRhU" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Lqo4nI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Lqo4nI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=SmwKYI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=SmwKYI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=nQ1xDI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=nQ1xDI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=23iD7I"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=23iD7I" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=ewSG9i"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=ewSG9i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=axWNoi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=axWNoi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/311509491" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 13 Jun 2008 15:45:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security firms">security firms</category>
      <category domain="http://securityratty.com/tag/customers">customers</category>
      <category domain="http://securityratty.com/tag/product">product</category>
      <category domain="http://securityratty.com/tag/product sits">product sits</category>
      <category domain="http://securityratty.com/tag/favorite product">favorite product</category>
      <category domain="http://securityratty.com/tag/prospective customers">prospective customers</category>
      <category domain="http://securityratty.com/tag/software vendor">software vendor</category>
      <category domain="http://securityratty.com/tag/vendor">vendor</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/311509491/loving-customer.html">Loving customers frustrate security firms too</source>
    </item>
  </channel>
</rss>
