<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: half-million]]></title>
    <link>http://securityratty.com/tag/half-million</link>
    <description></description>
    <pubDate>Wed, 23 Jul 2008 03:41:47 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[MI5 on Terrorist Profiling]]></title>
      <link>http://securityratty.com/article/bb80acbf5bcef69e830e8c656c41335c</link>
      <guid>http://securityratty.com/article/bb80acbf5bcef69e830e8c656c41335c</guid>
      <description><![CDATA[There's no profile : MI5 has concluded that there is no easy way to identify those who become involved in terrorism in Britain, according to a classified internal research document on radicalisation...]]></description>
      <content:encoded><![CDATA[<p>There's <a href="http://www.guardian.co.uk/uk/2008/aug/20/uksecurity.terrorism1">no profile</a>:</p>

<blockquote>MI5 has concluded that there is no easy way to identify those who become involved in terrorism in Britain, according to a classified internal research document on radicalisation seen by the Guardian.

<p><br />
[...]</p>

<p>The main findings include: </p>

<p>• The majority are British nationals and the remainder, with a few exceptions, are here legally. Around half were born in the UK, with others migrating here later in life. Some of these fled traumatic experiences and oppressive regimes and claimed UK asylum, but more came to Britain to study or for family or economic reasons and became radicalised many years after arriving.</p>

<p>• Far from being religious zealots, a large number of those involved in terrorism do not practise their faith regularly. Many lack religious literacy and could actually be regarded as religious novices. Very few have been brought up in strongly religious households, and there is a higher than average proportion of converts. Some are involved in drug-taking, drinking alcohol and visiting prostitutes. MI5 says there is evidence that a well-established religious identity actually protects against violent radicalisation. </p>

<p>• The "mad and bad" theory to explain why people turn to terrorism does not stand up, with no more evidence of mental illness or pathological personality traits found among British terrorists than is found in the general population.</p>

<p>• British-based terrorists are as ethnically diverse as the UK Muslim population, with individuals from Pakistani, Middle Eastern and Caucasian backgrounds. MI5 says assumptions cannot be made about suspects based on skin colour, ethnic heritage or nationality. </p>

<p>• Most UK terrorists are male, but women also play an important role. Sometimes they are aware of their husbands', brothers' or sons' activities, but do not object or try to stop them.</p>

<p>• While the majority are in their early to mid-20s when they become radicalised, a small but not insignificant minority first become involved in violent extremism at over the age of 30.</p>

<p>• Far from being lone individuals with no ties, the majority of those over 30 have steady relationships, and most have children. MI5 says this challenges the idea that terrorists are young men driven by sexual frustration and lured to "martyrdom" by the promise of beautiful virgins waiting for them in paradise. It is wrong to assume that someone with a wife and children is less likely to commit acts of terrorism.</p>

<p>• Those involved in British terrorism are not unintelligent or gullible, and nor are they more likely to be well-educated; their educational achievement ranges from total lack of qualifications to degree-level education. However, they are almost all employed in low-grade jobs.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=GwMQnK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=GwMQnK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=nvC4JK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=nvC4JK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 02:18:30 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mi5">mi5</category>
      <category domain="http://securityratty.com/tag/terrorism">terrorism</category>
      <category domain="http://securityratty.com/tag/british terrorism">british terrorism</category>
      <category domain="http://securityratty.com/tag/british terrorists">british terrorists</category>
      <category domain="http://securityratty.com/tag/terrorists">terrorists</category>
      <category domain="http://securityratty.com/tag/violent radicalisation">violent radicalisation</category>
      <category domain="http://securityratty.com/tag/majority">majority</category>
      <category domain="http://securityratty.com/tag/individuals">individuals</category>
      <category domain="http://securityratty.com/tag/internal research document">internal research document</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/mi5_on_terroris.html">MI5 on Terrorist Profiling</source>
    </item>
    <item>
      <title><![CDATA[Mental Illness and Murder]]></title>
      <link>http://securityratty.com/article/4f62b3b52324708a482cbc269844a4db</link>
      <guid>http://securityratty.com/article/4f62b3b52324708a482cbc269844a4db</guid>
      <description><![CDATA[Contrary to popular belief, homocide due to mental illness is declining , at least in England and Wales: The rate of total homicide and the rate of homicide due to mental disorder rose steadily until...]]></description>
      <content:encoded><![CDATA[<p>Contrary to popular belief, homocide due to mental illness is <a href="http://bjp.rcpsych.org/cgi/content/abstract/193/2/130">declining</a>, at least in England and Wales:</p>

<blockquote>The rate of total homicide and the rate of homicide due to mental disorder rose steadily until the mid-1970s. From then there was a reversal in the rate of homicides attributed to mental disorder, which declined to historically low levels, while other homicides continued to rise.</blockquote>

<p><a href="http://www.scribd.com/doc/4805076/Homicide-due-to-mental-disorder-in-England-and-Wales-over-50-years">Paper</a> and <a href="http://www.rcpsych.ac.uk/pressparliament/pressreleases2008/bank2008/prhomicide.aspx">press release</a>.</p>

<p><a href="http://www.badscience.net/2008/08/the-news-you-didnt-read/">Remember this</a> the next time you read a newspaper article about how scared everyone is because some  patients escaped from a mental institution:</p>

<blockquote>We are convinced by the media that people with serious mental illnesses make a significant contribution to murders, and we formulate our approach as a society to tens of thousands of people on the basis of the actions of about 20. Once again, the decisions we make, the attitudes we have, and the prejudices we express are all entirely rational, when analysed in terms of the flawed information we are fed, only half chewed, from the mouths of morons.</blockquote><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=rabo5K"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=rabo5K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=6B4baK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=6B4baK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 11:23:20 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mental disorder">mental disorder</category>
      <category domain="http://securityratty.com/tag/mental illness">mental illness</category>
      <category domain="http://securityratty.com/tag/homicide due">homicide due</category>
      <category domain="http://securityratty.com/tag/homocide due">homocide due</category>
      <category domain="http://securityratty.com/tag/popular belief">popular belief</category>
      <category domain="http://securityratty.com/tag/mental institution">mental institution</category>
      <category domain="http://securityratty.com/tag/newspaper article">newspaper article</category>
      <category domain="http://securityratty.com/tag/press release">press release</category>
      <category domain="http://securityratty.com/tag/low levels">low levels</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/mental_illness.html">Mental Illness and Murder</source>
    </item>
    <item>
      <title><![CDATA[This Generations ApathyThe Age of Specialization and ADD]]></title>
      <link>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</link>
      <guid>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</guid>
      <description><![CDATA[Robert Scoble has some interesting commentary this morning about the number of photojournalists with expensive gear covering the Olympics
Hes a bit indignant that so much energy goes to sporting...]]></description>
      <content:encoded><![CDATA[<p>Robert Scoble has some interesting <a rel="nofollow" target="_blank" href="http://scobleizer.com/">commentary</a> this morning about the number of photojournalists with expensive gear covering the Olympics.</p>
<p>He&#8217;s a bit indignant that so much energy goes to sporting events like the Olympics rather than more important news that isn&#8217;t getting reported around the world.</p>
<blockquote><p>This is in a year when tons of journalists are getting laid off.</p>
<p>This is in a year when there are tons of stories around the world that aren’t getting reported on.</p>
<p>Could we take half of those photographers and send them to Russia, for instance</p></blockquote>
<p>Reminds me of a feeling I had back in college as an undergrad student studying social sciences and humanities, about the way my friends who were physicists interacted with the world. They were so awed by the stars, Mars, astrophysics, and it seemed to me interesting but altogether unimportant. They argued they may find something outside our planet that could help solve Earth-bound problems like disease, or find the origins of earth and humanity &#8212; but really they were doing it because they loved it. One of my friends had a good argument, though &#8212; there are enough people right now that we can specialize in what we care about, and there will still be others covering other topics. He could be a physicist and look into the universe&#8217;s origin, while I studied social interaction and writing, and our other friends looked into solving cancer or eradicating invasive plants in the native wetlands. We have to specialize, and there are enough of us to do it too.</p>
<p>I think it&#8217;s the same way in journalism &#8212; whether it&#8217;s sports, celebrity journalism, or coverage of politics and war, there are a lot of opportunities right now for journalists. Of course the business model is changing, and some old-schoolers won&#8217;t know how to roll with that, but generations change slowly; we&#8217;re learning.</p>
<p>Also, the Olympics is seen as more than a sporting event, it&#8217;s also a symbol of world competition and cooperation too &#8212; a way for countries to come together and share entertainment globally. I think that&#8217;s worth covering.</p>
<p>In the second post, Robert Scoble says there are plenty of great journalists but the public doesn&#8217;t care. In some ways I have to agree with that, but I don&#8217;t think it&#8217;s negative, necessarily. I had a conversation with someone the other day about world news reportage. He says, &#8220;I was just reading this story, but what does it matter to me if there&#8217;s a flood in some city in another country I&#8217;ll never visit and some farmer lost his sheep?&#8221; World news is only important when it&#8217;s relevant, so it&#8217;s no wonder that many people don&#8217;t care &#8212; if they don&#8217;t know much about the area, and it doesn&#8217;t affect them, they have no incentive to give it full attention. You can call that apathy, but I think it&#8217;s an important selectivity skill that humans have. We have to choose what to give priority to, so if nothing stands out as being particularly important, we just ignore it or gloss over it. Human nature&#8230;</p>
<p>Also I think the common person today just gets desensitized and doesn&#8217;t know where to turn their energy, when surrounded by so many crises. Either you focus on one specialty and do your best to work toward one cause in your life &#8212; and maybe that&#8217;s just in the course of your daily work &#8212; or you become a complete Attention-Deficit-Disorder case and bounce from one problem to the next, without knowing how to solve anything. That just causes a sense of bewilderment, despair, and either that bogs you down or eventually you get desensitized.</p>
<p>There&#8217;s a commenter on Scoble&#8217;s blog, Spencer, who talks about this generation&#8217;s apathy. There are so many people who want to blame today&#8217;s generation or the young generation for this &#8220;apathy&#8221; that they sense. But I see it as a survival mechanism that arises from the way information flows these days. We&#8217;re surrounded by crises, everyone wants us to know about them &#8212; the water shortage, global warming, death in Iraq, the national deficit. Okay, crisis, I get it. But no one gives a real clear idea on what any individual is really supposed to do to solve the problem. You can&#8217;t get involved with one global cause, without ignoring all the others, and if you do get involved it&#8217;s likely to become your life&#8217;s purpose. Most people are concerned with other things &#8212; their families, their work, personal development, their homes and futures, and really that&#8217;s enough to take up all their time.</p>
<p>I&#8217;m always amazed when I read about the early unionists. Emma Goldman for example, the activist who pushed for the 8-hr workday, and campaigned for free love in the early 1900s when women were still wearing corsets, used to work 16 hour factory days as a seamstress, then lead meetings late into the night. Today we lead cushy lives comparatively&#8211;8 hour days, plus commute and lunch, family time, dinner time, gym maybe, sleep&#8230; but it still doesn&#8217;t seem like we ever have enough energy and time.</p>
<p>What Emma had that most people today don&#8217;t, is a community living in the same conditions as herself, with clear goals about what they were campaigning for, and a cause that affected their own daily lives. Today, unionism and local activism is in much shorter supply, in part due to the many people who work fairly comfy desk jobs, and the problem that everyone has his own specialization, works in a cubicle, does his or her own thing. The problems we&#8217;re facing today in terms of global warming, global water shortage, aren&#8217;t the same kinds of problems that activists have fought for in the past, and there&#8217;s no clear road map for how to solve them. Our leaders sure aren&#8217;t leading the way.</p>
<p>What we do have, at least, is the Olympics, which is an age old symbol of international cooperation, play and competition&#8230;so, uh, go sports! As for full disclosure, I don&#8217;t actually have a TV and haven&#8217;t watched the Olympics in many years, but I do try taking short showers&#8211;does that help?</p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 09:46:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/world news reportage">world news reportage</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/world competition">world competition</category>
      <category domain="http://securityratty.com/tag/world news">world news</category>
      <category domain="http://securityratty.com/tag/global water shortage">global water shortage</category>
      <category domain="http://securityratty.com/tag/global">global</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/news">news</category>
      <category domain="http://securityratty.com/tag/solve earth-bound">solve earth-bound</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/369359733/">This Generations ApathyThe Age of Specialization and ADD</source>
    </item>
    <item>
      <title><![CDATA[Compromised Cpanel Accounts For Sale]]></title>
      <link>http://securityratty.com/article/6228ebb081126296ff70b5f6268fd2a3</link>
      <guid>http://securityratty.com/article/6228ebb081126296ff70b5f6268fd2a3</guid>
      <description><![CDATA[Is the once popular in the second quarter of 2007, embedded malware tactic on the verge of irrelevance, and if so, what has contributed to its decline? Have SQL injections executed through botnets...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SKlq1uSeDFI/AAAAAAAACDM/l4bxcru-BQk/s1600-h/cpanel_multiple_domains1.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SKlq1uSeDFI/AAAAAAAACDM/ho301JgoMUs/s200-R/cpanel_multiple_domains1.png" /></a> Is the once popular in the second quarter of 2007, embedded malware tactic on the verge of irrelevance, and if so, what has contributed to its decline? Have SQL injections executed through botnets turned into the most efficient way to infect hundreds of thousands of legitimate web sites? Depends on who you're dealing with.<br />
<br />
A cyber criminal's position in the "underground food chain" can be easily tracked down on the basis of tools and tactics that he's taking advantage of, in fact, some would on purposely misinform on what their actual capabilities are in order not to attract too much attention to their real ones, consisting of high-profile compromises at hundreds of high-profile web sites.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SKmDVdDGnPI/AAAAAAAACDU/qNbLBUKlHp0/s1600-h/cpanel_multiple_domains3.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SKmDVdDGnPI/AAAAAAAACDU/ZsmcK9HMeUs/s200-R/cpanel_multiple_domains3.jpg" /></a>Embedded malware may not be as hot as it used to be in the last quarter of 2007, but thanks to the oversupply of stolen accounting data, certain individuals within the underground ecosystem seem to be abusing entire portfolios of domains on the basis of purchasing access to the compromised accounts. In fact, the oversupply of compromised Cpanel accounts is logically resulting in their decreasing price, with the sellers differentiating their propositions, and charging premium prices based on the site's page ranks and traffic, measured through publicly available services, or through the internal statistics.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SKmMyr4CWEI/AAAAAAAACDc/UafOTCKAb-0/s1600-h/cpanel_multiple_domains22.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SKmMyr4CWEI/AAAAAAAACDc/7IRBMNndy-w/s200-R/cpanel_multiple_domains22.JPG" /></a><br />
SQL injections may be the tactic of choice for the time being, but as long as stolen accounting data consisting of Cpanel logins, and web shells access to misconfigured web servers remain desired underground goods, goold old fashioned embedded malware will continue taking place.<br />
<br />
Interestingly, from an economic perspective, the way the seller markets his goods, can greatly influence the way they get abused given he continues offering after-sale services and support. It's blackhat search engine optimization I have in mind, sometimes the tactic of choice especially given its high liquidity in respect to monetizing the compromised access.<br />
<br />
The bottom line - for the time being, there's a higher probability that your web properties will get SQL injected, than IFRAME-ed, as it used to be half a year ago, and that's because what used to be a situation where malicious parties would aim at launching a targeted attack at high profile site and abuse the huge traffic it receives, is today's pragmatic reality where a couple of hundred low profile web sites can in fact return more traffic to the cyber criminals, and greatly extend the lifecycle of their campaign taking advantage of the fact the the low profile site owners would remain infected and vulnerable for months to come.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/03/embedding-malicious-iframes-through.html">Embedding Malicious IFRAMEs Through Stolen FTP Accounts</a><br />
<a href="http://ddanchev.blogspot.com/2008/03/injecting-iframes-by-abusing-input.html">Injecting IFRAMEs by Abusing Input Validation</a><br />
<a href="http://ddanchev.blogspot.com/2008/07/money-mule-recruiters-use-asproxs-fast.html">Money Mule Recruiters use ASProx's Fast-flux Services</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/malware-domains-used-in-sql-injection.html">Malware Domains Used in the SQL Injection Attacks</a><br />
<a href="http://ddanchev.blogspot.com/2008/07/obfuscating-fast-fluxed-sql-injected.html">Obfuscating Fast-fluxed SQL Injected Domains</a><br />
<a href="http://ddanchev.blogspot.com/2008/07/sql-injecting-malicious-doorways-to.html">SQL Injecting Malicious Doorways to Serve Malware </a><br />
<a href="http://ddanchev.blogspot.com/2008/05/yet-another-massive-sql-injection.html">Yet Another Massive SQL Injection Spotted in the Wild</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/malware-domains-used-in-sql-injection.html">Malware Domains Used in the SQL Injection Attacks</a><br />
<a href="http://ddanchev.blogspot.com/2007/07/sql-injection-through-search-engines.html">SQL Injection Through Search Engines Reconnaissance</a><br />
<a href="http://ddanchev.blogspot.com/2007/05/google-hacking-for-vulnerabilities.html">Google Hacking for Vulnerabilities</a><br />
<a href="http://blogs.zdnet.com/security/?p=1122">Fast-Fluxing SQL injection attacks executed from the Asprox botnet</a><br />
<a href="http://blogs.zdnet.com/security/?p=1394">Sony PlayStation's site SQL injected, redirecting to rogue security software</a><br />
<a href="http://blogs.zdnet.com/security/?p=1118">Redmond Magazine Successfully SQL Injected by Chinese Hacktivists</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ExzKaK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ExzKaK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=AgwoKK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=AgwoKK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=5JjO7k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=5JjO7k" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=5Z85mk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=5Z85mk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=s4xhGK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=s4xhGK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ReebmK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ReebmK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=T0yjTk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=T0yjTk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/368194376" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 06:42:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/sql">sql</category>
      <category domain="http://securityratty.com/tag/sql injections">sql injections</category>
      <category domain="http://securityratty.com/tag/sql injection attacks">sql injection attacks</category>
      <category domain="http://securityratty.com/tag/massive sql injection">massive sql injection</category>
      <category domain="http://securityratty.com/tag/profile site">profile site</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/site sql">site sql</category>
      <category domain="http://securityratty.com/tag/sql injection">sql injection</category>
      <category domain="http://securityratty.com/tag/tactic">tactic</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/368194376/compromised-cpanel-accounts-for-sale.html">Compromised Cpanel Accounts For Sale</source>
    </item>
    <item>
      <title><![CDATA[CISA and CISSP Preparation]]></title>
      <link>http://securityratty.com/article/4990229406d5e949151cc28d8d8799b9</link>
      <guid>http://securityratty.com/article/4990229406d5e949151cc28d8d8799b9</guid>
      <description><![CDATA[Recently I have received a number of questions seeking preparation tips and insights for the CISA and CISSP certifications. I hold both of these certifications, and passed them both on the first...]]></description>
      <content:encoded><![CDATA[<p>Recently I have received a number of questions seeking preparation tips and insights for the CISA and CISSP certifications. I hold both of these certifications, and passed them both on the first attempt using very different preparation approaches. I took the CISA first, and based on a few lessons learned, I radically changed my preparation plan for the CISSP.<br />
<br />
FYI, the official preparation information, qualification requirements, exam requirements, etc. can be found at:</p>
<ul>
<li>Certified Information Systems Auditor (CISA) : <a href="http://www.isaca.org/cisa/" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.isaca.org/cisa/');" target="_blank">http://www.isaca.org/cisa/</a></li>
<li>Certified Information Systems Security Professional : <a href="https://www.isc2.org/cissp" onclick="javascript:pageTracker._trackPageview('/outbound/article/https://www.isc2.org/cissp');">https://www.isc2.org/cissp</a></li>
</ul>
<p><strong>Are You Ready ?</strong><br />
A few basic questions to ask yourself to gauge how ready you are:</p>
<ul>
<li>Do I meet the spirit, and not just the letter, of the experience requirements ?</li>
<li>Has there been sufficient diversity in my experience ?</li>
</ul>
<p></p>
<div>Both of these exams cover a very broad spectrum of subjects. It is my personal belief that the experience requirements exist as an aid to whittle test takers down to candidates who have the professional experiences required to be successful, and to discourage people from taking the exams before they are ready. If you truly meet the background requirements, then you should have had some contact with many of the core topic areas for the exam.</div>
<p></p>
<div>If you are looking at the core content of the examination, and do not believe that you really have the breadth of exposure to be able to describe and discuss each domain at a high level, then you may be better served by delaying the exam in favor of working with your management to gain broader professional experience.</div>
<p><strong>Five Step Approach to CISA or CISSP Exam Preparation</strong></p>
<ol>
<li>Perform an initial benchmark and assessment of your readiness</li>
<li>Read a &#8220;survey&#8221; level preparation guide cover to cover</li>
<li>Perform a secondary benchmark, and compare your readiness</li>
<li>Review official, or &#8220;deep dive&#8221;, preparation materials on areas identified as your weaknesses</li>
<li>Re-benchmark, and repeat targeted reviews until ready</li>
</ol>
<p></p>
<div>For the first certification that I prepared for, I did not perform the first three steps outlined above. I went directly to the official source materials and began trying to review them cover to cover. I passed the exam, but I also spent a lot of time &amp; energy reviewing things that I already knew &#8220;well enough&#8221;, and was burned out when reviewing the areas which could have been richer learning opportunities. No matter what your professional background, no one knows-it-all or does-it-all, so there is always  an opportunity to learn new things while you are preparing for the certification exam. The goal of this five step approach is to focus your time where you have the greatest learning opportunities. Hopefully this focuses your time and energy in the most rewarding way.</div>
<p></p>
<div><strong>Performing the Benchmarks</strong></div>
<div>For the Benchmarks, I like to complete a timed half-length or full-length examination.</div>
<p></p>
<div>It is my feeling that a half-length exam is long enough that fatigue, maintaining focus, and pace are all stressed, as they will be on examination day. This of course requires access to a large set of test questions or sample tests, preferably with explanations of incorrect answers. In addition to commercial third-party test preparation tools, there are good (and free) test preparation quizzes available from <a href="http://www.cccure.org/" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.cccure.org/');">www.cccure.org</a>.</div>
<p></p>
<div><strong>Survey Materials</strong></div>
<div>I find the &#8220;Exam Cram&#8221; series to be very useful survey literature. I purchase books from this series when I want a high-level and quick handling of an entire subject matter area. As a result, I own survey books from the series in topic areas which I have no intention of pursuing certification for. Obviously the books I recommend for these certifications are:</div>
<p><a href="http://www.amazon.com/gp/product/078973446X?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=078973446X" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/078973446X?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=078973446X');"><img src="http://artofinfosec.com/wp-content/uploads/cissp_exam_cram.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=078973446X" border="0" alt="" width="1" height="1" /> <a href="http://www.amazon.com/gp/product/0789732726?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0789732726" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/0789732726?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0789732726');"><img src="http://artofinfosec.com/wp-content/uploads/cisa_exam_cram.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=0789732726" border="0" alt="" width="1" height="1" /></p>
<div><strong>Deep Dive Materials</strong></div>
<div>There are exam preparation materials available from a variety of sources that fit the bill in this area. What we are looking for are books that contain solid coverage of the areas where benchmarking has shown the most significant need for improvement. In addition to the materials from (ISC)2 and ISACA that I list below, consult your local library - often they will have books that fit the bill. (And, of course, consider arranging a donation of good materials if they do not.)</div>
<p><a href="http://www.amazon.com/gp/product/0849382319?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0849382319" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/0849382319?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0849382319');"><img src="http://artofinfosec.com/wp-content/uploads/official_cissp.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=0849382319" border="0" alt="" width="1" height="1" /> <a href="http://www.amazon.com/gp/product/1933284935?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=1933284935" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/1933284935?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=1933284935');"><img src="http://artofinfosec.com/wp-content/uploads/cisa_review_2008.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=1933284935" border="0" alt="" width="1" height="1" /></p>
<div><strong>Final Thoughts</strong></div>
<div>Good luck on your journey toward Information Security or Audit certification. One word of caution: Make sure that you have realistic expectations about what actually being certified will mean. Although I do think being certified helps a person establish credibility more quickly, and is helpful when searching for new employment, often people are underwhelmed by the &#8220;Congratulations, that&#8217;s nice&#8221; from their current employer. If your expectation is that a big raise, bonus, promotion, etc. is hinging on your being certified, then I would strongly encourage you to reality-check that with peers in your organization.</div>
<p></p>
<div>Cheers, Erik</div>
<p></p>
<p><a href="http://artofinfosec.com/60/cisa-and-cissp-preparation/" >CISA and CISSP Preparation</a></p>
<img src="http://feeds.feedburner.com/~r/artofinfosec/~4/351541992" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 31 Jul 2008 09:14:07 +0000</pubDate>
      <category domain="http://securityratty.com/tag/exam">exam</category>
      <category domain="http://securityratty.com/tag/exam requirements">exam requirements</category>
      <category domain="http://securityratty.com/tag/cissp exam preparation">cissp exam preparation</category>
      <category domain="http://securityratty.com/tag/half-length exam">half-length exam</category>
      <category domain="http://securityratty.com/tag/exam cram series">exam cram series</category>
      <category domain="http://securityratty.com/tag/certification exam">certification exam</category>
      <category domain="http://securityratty.com/tag/exam preparation materials">exam preparation materials</category>
      <category domain="http://securityratty.com/tag/preparation materials">preparation materials</category>
      <category domain="http://securityratty.com/tag/cissp">cissp</category>
      <source url="http://feeds.feedburner.com/~r/artofinfosec/~3/351541992/">CISA and CISSP Preparation</source>
    </item>
    <item>
      <title><![CDATA[Why You Should Never Talk to the Police]]></title>
      <link>http://securityratty.com/article/d7aa0987eaba803b24613534d5612264</link>
      <guid>http://securityratty.com/article/d7aa0987eaba803b24613534d5612264</guid>
      <description><![CDATA[This is an engaging and fascinating video presentation by Professor James Duane of the Regent University School of Law, explaining why -- in a criminal matter -- you should never, ever, ever talk to...]]></description>
      <content:encoded><![CDATA[<p><a href="http://video.google.com/videoplay?docid=-4097602514885833865">This</a> is an engaging and fascinating video presentation by Professor James Duane of the Regent University School of Law, explaining why -- in a criminal matter -- you should never, ever, ever talk to the police or any other government agent.  It doesn't matter if you're guilty or innocent, if you have an alibi or not -- it isn't possible for anything you to say to help you, and it's very possible that innocuous things you say will hurt you.</p>

<p>Definitely worth half an hour of your time.</p>

<p>And <a href="http://video.google.com/videoplay?docid=6014022229458915912&q=&hl=en">this</a> is a video of Virginia Beach Police Department Officer George Bruch, who basically says that Duane is right.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=apA2mJ"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=apA2mJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=8ZX1hJ"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=8ZX1hJ" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 31 Jul 2008 08:52:14 +0000</pubDate>
      <category domain="http://securityratty.com/tag/professor james duane">professor james duane</category>
      <category domain="http://securityratty.com/tag/duane">duane</category>
      <category domain="http://securityratty.com/tag/video presentation">video presentation</category>
      <category domain="http://securityratty.com/tag/criminal matter">criminal matter</category>
      <category domain="http://securityratty.com/tag/regent university school">regent university school</category>
      <category domain="http://securityratty.com/tag/matter">matter</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <category domain="http://securityratty.com/tag/government agent">government agent</category>
      <source url="http://www.schneier.com/blog/archives/2008/07/why_you_should.html">Why You Should Never Talk to the Police</source>
    </item>
    <item>
      <title><![CDATA[McAfee: Many SMBs unprepared for online security threats]]></title>
      <link>http://securityratty.com/article/48a64dcf064a3dcea5700a58d0482c0c</link>
      <guid>http://securityratty.com/article/48a64dcf064a3dcea5700a58d0482c0c</guid>
      <description><![CDATA[Security software vendor McAfee said that nearly half of the 500 small and midsize companies it surveyed recently don't view themselves as valuable targets for...]]></description>
      <content:encoded><![CDATA[Security software vendor McAfee said that nearly half of the 500 small and midsize companies it surveyed recently don't view themselves as valuable targets for cybercriminals.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=WLq0tL"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=WLq0tL" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/348759625" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 28 Jul 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/valuable targets">valuable targets</category>
      <category domain="http://securityratty.com/tag/half">half</category>
      <category domain="http://securityratty.com/tag/recently">recently</category>
      <category domain="http://securityratty.com/tag/view">view</category>
      <category domain="http://securityratty.com/tag/companies">companies</category>
      <category domain="http://securityratty.com/tag/cybercriminals">cybercriminals</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/348759625/article.do">McAfee: Many SMBs unprepared for online security threats</source>
    </item>
    <item>
      <title><![CDATA[When your flight is DOA]]></title>
      <link>http://securityratty.com/article/b20039e8962dada3959083c6efb19eb1</link>
      <guid>http://securityratty.com/article/b20039e8962dada3959083c6efb19eb1</guid>
      <description><![CDATA[Last night I wrote about my first day of this weeks road trip and my hotel which doubled as a funeral parlor. Now it is Wed night and I am live blogging from the runway of DC Regan-National airport,...]]></description>
      <content:encoded><![CDATA[<p>Last night <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/07/when-your-hotel.html">I wrote about my first day</a> of this weeks road trip and my hotel which doubled as a funeral parlor. Now it is Wed night and I am live blogging from the runway of DC Regan-National airport, on board a Delta flight which has been on this same runway and not moved for the past 2 and a half hours.  </p>  <p>I say I am live blogging this, but of course you are not live reading this.  That is because I have no way to upload this to my server.  You see the iPhone 3G for all the coolness, has no Internet sharing that I am aware of. My old windows mobile phone had Internet sharing and if I still had that you would be reading this live right now.  But no, not with the iPhone.  </p>  <p>I was scheduled to connect in Cincinnati right about now.  I am obviously missing that connection.  I was flying from there to Columbus and driving about an hour and half from Columbus.  I have a 9am meeting tomorrow.  So unless I feel like renting a car and driving 4 hours whenever it is I land, I am pretty much missing my meeting tomorrow as well.  </p>  <p>What to do?  a). Should I break out of this plane, run to the terminal and try to get on a flight home to Florida  b). Go postal or c). Grin and bear it and try to remember that I love what I do and that is what flying in the summer is all about (actually that summer thing is full of beans, it is no better in winter with weather either!).</p>  <p>So here is the update, we sat on the runway for 4 hours!  Finally took off and landed in Cincinnati at midnight. I had no connection.  Could not get a flight out in the morning, not rent a car and most hotels sold out. I am writing this from the coffee shop of the lovely (and I do mean lovely) Drawbridge Inn. I will miss my meeting in the morning and am booked on a flight home tomorrow.  Ah, the life of a road warrior!</p>
<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=ItKb09"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=ItKb09" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=g86LVJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=g86LVJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=t2RL7J"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=t2RL7J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=bFQwgJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=bFQwgJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=0r84gJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=0r84gJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=MNglIj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=MNglIj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=iuBfaj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=iuBfaj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/344254723" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 23 Jul 2008 20:04:46 +0000</pubDate>
      <category domain="http://securityratty.com/tag/flight">flight</category>
      <category domain="http://securityratty.com/tag/flight home tomorrow">flight home tomorrow</category>
      <category domain="http://securityratty.com/tag/flight home">flight home</category>
      <category domain="http://securityratty.com/tag/tomorrow">tomorrow</category>
      <category domain="http://securityratty.com/tag/half">half</category>
      <category domain="http://securityratty.com/tag/half hours">half hours</category>
      <category domain="http://securityratty.com/tag/hours">hours</category>
      <category domain="http://securityratty.com/tag/live">live</category>
      <category domain="http://securityratty.com/tag/windows mobile phone">windows mobile phone</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/344254723/when-your-fligh.html">When your flight is DOA</source>
    </item>
    <item>
      <title><![CDATA[Is there any reason to go to Black Hat still?]]></title>
      <link>http://securityratty.com/article/48dccc0384334ebae07a6e1e34cb280b</link>
      <guid>http://securityratty.com/article/48dccc0384334ebae07a6e1e34cb280b</guid>
      <description><![CDATA[I was reading the Security Bloggers Network feed this morning. I had missed a day or so and had a lot of articles to go through. I was also thinking of what could be the next topic suggested for...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><a onclick="window.open(this.href, '_blank', 'width=200,height=177,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false" href="http://www.stillsecureafteralltheseyears.com/.shared/image.html?/photos/uncategorized/2008/07/23/blackhatbloggers.gif"><img title="Blackhatbloggers" height="132" alt="Blackhatbloggers" src="http://www.stillsecureafteralltheseyears.com/ashimmy/images/2008/07/23/blackhatbloggers.gif" width="150" border="0" style="FLOAT: left; MARGIN: 0px 5px 5px 0px" /></a> I was reading the <a href="http://networks.feedburner.com/Security-Bloggers-Network">Security Bloggers Network</a> feed this morning. I had missed a day or so and had a lot of articles to go through. I was also thinking of what could be the next topic suggested for members to blog about as part of our cross-promotion with Black Hat.&nbsp; Than I realized there really was not any need.&nbsp; The topic was obvious, DNS. I didn't do an actual count of how many times it was mentioned (as <a href="http://www.bumpinthewire.com/?p=234">Mr Bump did with NAC vendors mentioned in the Information Week NAC survey</a>), but there had to be at least a dozen and half, if not more articles on the great DNS leak of 2008.&nbsp; </p>

<p>Dan Kaminsky's research was exemplary, but his naivete about people keeping the exploit under thier hat was not.&nbsp; While <a href="http://www.matasano.com/log/1105/regarding-the-post-on-chargen-earlier-today/#comments">Thomas Matasano apologized for his mistake</a>, frankly from the moment Havlar Flake begain speculating on it, it was just a matter of time.&nbsp; </p>

<p>Anyway, the cat is out of that bag, but something tells me that Dan K's presentation will still be a standing room only crowd in just a few weeks in Vegas.&nbsp; But beyond that there are still a bunch of good topics to be discovered at Black Hat.&nbsp; Not to mention lots of social activities brewing for both BH and DefCon.&nbsp; I amreally looking forward to it. I would hope that no one is feeling the air out of the ballon on this one!</p><br /><br /><fieldset class="zemanta-related"><legend class="zemanta-related-title">Related articles by Zemanta</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a href="http://blog.wired.com/27bstroke6/2008/07/details-of-dns.html">Details of DNS Flaw Leaked; Exploit Expected by End of Today</a></li>

<li class="zemanta-article-ul-li"><a href="http://www.infoworld.com/article/08/07/22/Details_of_major_Internet_flaw_posted_by_accident_1.html?source=rss&amp;url=http://www.infoworld.com/article/08/07/22/Details_of_major_Internet_flaw_posted_by_accident_1.html">Details of major Internet flaw posted by accident</a></li>

<li class="zemanta-article-ul-li"><a href="http://gigaom.com/2008/07/22/the-kaminsky-hack-dns-exploits-in-the-wild/">The Kaminsky Hack: DNS Exploits in the Wild</a></li>

<li class="zemanta-article-ul-li"><a href="http://news.cnet.com/8301-1009_3-9996316-83.html?hhTest=1&amp;part=rss&amp;subj=news">Is Kaminsky's DNS flaw public?</a></li>

<li class="zemanta-article-ul-li"><a href="http://www.boingboing.net/2008/07/22/kaminsky-on-the-nets.html">Kaminsky on the net-shaking DNS bug</a></li>

<li class="zemanta-article-ul-li"><a href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&amp;articleId=9110418&amp;source=rss_topic82">Details of major Internet flaw posted by accident</a></li></ul></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/a94ce1a9-f719-4533-9603-beb582d33313/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_e.png?x-id=a94ce1a9-f719-4533-9603-beb582d33313" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=mPLh0z"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=mPLh0z" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=iDfnaJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=iDfnaJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=sAYmLJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=sAYmLJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=CaWUSJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=CaWUSJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Gh4sLJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Gh4sLJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Z6tX2j"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Z6tX2j" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=7rsO8j"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=7rsO8j" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/343474506" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 23 Jul 2008 03:58:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dns flaw">dns flaw</category>
      <category domain="http://securityratty.com/tag/dns flaw public">dns flaw public</category>
      <category domain="http://securityratty.com/tag/dns">dns</category>
      <category domain="http://securityratty.com/tag/dns bug">dns bug</category>
      <category domain="http://securityratty.com/tag/black hat">black hat</category>
      <category domain="http://securityratty.com/tag/dns leak">dns leak</category>
      <category domain="http://securityratty.com/tag/kaminsky">kaminsky</category>
      <category domain="http://securityratty.com/tag/kaminsky hack">kaminsky hack</category>
      <category domain="http://securityratty.com/tag/major internet flaw">major internet flaw</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/343474506/is-there-any-re.html">Is there any reason to go to Black Hat still?</source>
    </item>
    <item>
      <title><![CDATA[Is there any reason to go to Black Hat still?]]></title>
      <link>http://securityratty.com/article/dde51fc8529a127d8c2ff85832932ba6</link>
      <guid>http://securityratty.com/article/dde51fc8529a127d8c2ff85832932ba6</guid>
      <description><![CDATA[I was reading the Security Bloggers Network feed this morning. I had missed a day or so and had a lot of articles to go through. I was also thinking of what could be the next topic suggested for...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><a onclick="window.open(this.href, '_blank', 'width=200,height=177,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false" href="http://www.stillsecureafteralltheseyears.com/.shared/image.html?/photos/uncategorized/2008/07/23/blackhatbloggers.gif"><img title="Blackhatbloggers" height="132" alt="Blackhatbloggers" src="http://www.stillsecureafteralltheseyears.com/ashimmy/images/2008/07/23/blackhatbloggers.gif" width="150" border="0" style="FLOAT: left; MARGIN: 0px 5px 5px 0px" /></a> I was reading the <a href="http://networks.feedburner.com/Security-Bloggers-Network">Security Bloggers Network</a> feed this morning. I had missed a day or so and had a lot of articles to go through. I was also thinking of what could be the next topic suggested for members to blog about as part of our cross-promotion with Black Hat.&nbsp; Than I realized there really was not any need.&nbsp; The topic was obvious, DNS. I didn't do an actual count of how many times it was mentioned (as <a href="http://www.bumpinthewire.com/?p=234">Mr Bump did with NAC vendors mentioned in the Information Week NAC survey</a>), but there had to be at least a dozen and half, if not more articles on the great DNS leak of 2008.&nbsp; </p>

<p>Dan Kaminsky's research was exemplary, but his naivete about people keeping the exploit under thier hat was not.&nbsp; While <a href="http://www.matasano.com/log/1105/regarding-the-post-on-chargen-earlier-today/#comments">Thomas Matasano apologized for his mistake</a>, frankly from the moment Havlar Flake begain speculating on it, it was just a matter of time.&nbsp; </p>

<p>Anyway, the cat is out of that bag, but something tells me that Dan K's presentation will still be a standing room only crowd in just a few weeks in Vegas.&nbsp; But beyond that there are still a bunch of good topics to be discovered at Black Hat.&nbsp; Not to mention lots of social activities brewing for both BH and DefCon.&nbsp; I amreally looking forward to it. I would hope that no one is feeling the air out of the ballon on this one!</p><br /><br /><fieldset class="zemanta-related"><legend class="zemanta-related-title">Related articles by Zemanta</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a href="http://blog.wired.com/27bstroke6/2008/07/details-of-dns.html">Details of DNS Flaw Leaked; Exploit Expected by End of Today</a></li>

<li class="zemanta-article-ul-li"><a href="http://www.infoworld.com/article/08/07/22/Details_of_major_Internet_flaw_posted_by_accident_1.html?source=rss&amp;url=http://www.infoworld.com/article/08/07/22/Details_of_major_Internet_flaw_posted_by_accident_1.html">Details of major Internet flaw posted by accident</a></li>

<li class="zemanta-article-ul-li"><a href="http://gigaom.com/2008/07/22/the-kaminsky-hack-dns-exploits-in-the-wild/">The Kaminsky Hack: DNS Exploits in the Wild</a></li>

<li class="zemanta-article-ul-li"><a href="http://news.cnet.com/8301-1009_3-9996316-83.html?hhTest=1&amp;part=rss&amp;subj=news">Is Kaminsky's DNS flaw public?</a></li>

<li class="zemanta-article-ul-li"><a href="http://www.boingboing.net/2008/07/22/kaminsky-on-the-nets.html">Kaminsky on the net-shaking DNS bug</a></li>

<li class="zemanta-article-ul-li"><a href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&amp;articleId=9110418&amp;source=rss_topic82">Details of major Internet flaw posted by accident</a></li></ul></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/a94ce1a9-f719-4533-9603-beb582d33313/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_e.png?x-id=a94ce1a9-f719-4533-9603-beb582d33313" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>
]]></content:encoded>
      <pubDate>Wed, 23 Jul 2008 03:41:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dns flaw">dns flaw</category>
      <category domain="http://securityratty.com/tag/dns flaw public">dns flaw public</category>
      <category domain="http://securityratty.com/tag/dns">dns</category>
      <category domain="http://securityratty.com/tag/dns bug">dns bug</category>
      <category domain="http://securityratty.com/tag/black hat">black hat</category>
      <category domain="http://securityratty.com/tag/dns leak">dns leak</category>
      <category domain="http://securityratty.com/tag/kaminsky">kaminsky</category>
      <category domain="http://securityratty.com/tag/kaminsky hack">kaminsky hack</category>
      <category domain="http://securityratty.com/tag/major internet flaw">major internet flaw</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/07/is-there-any-re.html">Is there any reason to go to Black Hat still?</source>
    </item>
  </channel>
</rss>
