<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: index]]></title>
    <link>http://securityratty.com/tag/index</link>
    <description></description>
    <pubDate>Thu, 07 Aug 2008 14:01:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Is Google Using Chrome to Index Password Protected Web?]]></title>
      <link>http://securityratty.com/article/8a63a597e63a81e80a36c5703b5f3e7a</link>
      <guid>http://securityratty.com/article/8a63a597e63a81e80a36c5703b5f3e7a</guid>
      <description><![CDATA[An interesting theory we heard recently is that Google will use Chrome to index the password protected Web. Right now the Chrome Terms of Service prevents Google from indexing private data. But when...]]></description>
      <content:encoded><![CDATA[An interesting theory we heard recently is that Google will use Chrome to index the password protected Web. Right now the Chrome Terms of Service prevents Google from indexing private data. But when you consider that Chrome was initially presented as a browser for applications, instead of just web pages, this theory begins to make more sense.]]></content:encoded>
      <pubDate>Mon, 06 Oct 2008 07:20:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/chrome">chrome</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/service prevents google">service prevents google</category>
      <category domain="http://securityratty.com/tag/chrome terms">chrome terms</category>
      <category domain="http://securityratty.com/tag/theory">theory</category>
      <category domain="http://securityratty.com/tag/theory begins">theory begins</category>
      <category domain="http://securityratty.com/tag/web pages">web pages</category>
      <category domain="http://securityratty.com/tag/index">index</category>
      <source url="http://digg.com/security/Is_Google_Using_Chrome_to_Index_Password_Protected_Web">Is Google Using Chrome to Index Password Protected Web?</source>
    </item>
    <item>
      <title><![CDATA[robots.txt is NOT a security control]]></title>
      <link>http://securityratty.com/article/477ed8ab4bbe47ff6024618cf9387f59</link>
      <guid>http://securityratty.com/article/477ed8ab4bbe47ff6024618cf9387f59</guid>
      <description><![CDATA[Sitting in a meeting the other day, my mind hoisted a little red flag when I heard someone say the robot.txt file was a good security control. Not only is it not a security control, it also doesnt add...]]></description>
      <content:encoded><![CDATA[Sitting in a meeting the other day, my mind hoisted a little red flag when I heard someone say the robot.txt file was a good security control.  Not only is it not a security control, it also doesnt add much value beyond helping control  which search engines get to index your Web sites and what they get to index.  In other words, they have no value when attempting to stop an attacker from retrieving information during target reconnaissance activities.]]></content:encoded>
      <pubDate>Tue, 30 Sep 2008 03:24:56 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security control">security control</category>
      <category domain="http://securityratty.com/tag/control">control</category>
      <category domain="http://securityratty.com/tag/target reconnaissance activities">target reconnaissance activities</category>
      <category domain="http://securityratty.com/tag/web sites">web sites</category>
      <category domain="http://securityratty.com/tag/index">index</category>
      <category domain="http://securityratty.com/tag/txt file">txt file</category>
      <category domain="http://securityratty.com/tag/red flag">red flag</category>
      <category domain="http://securityratty.com/tag/engines">engines</category>
      <category domain="http://securityratty.com/tag/stop">stop</category>
      <source url="http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/adventuresinsecurity/robotstxt-is-not-a-security-control-27422">robots.txt is NOT a security control</source>
    </item>
    <item>
      <title><![CDATA[The opt-out from hell]]></title>
      <link>http://securityratty.com/article/e2ac86231138c2d34a97b7acfc4cd2ec</link>
      <guid>http://securityratty.com/article/e2ac86231138c2d34a97b7acfc4cd2ec</guid>
      <description><![CDATA[One problem with making your email address available (which I will continue to do, don't worry) is that folks with something to sell assume you're interested in their stuff. To wit, let's consider an...]]></description>
      <content:encoded><![CDATA[<p>One problem with making your email address available (which I will continue to do, don't worry) is that folks with something to sell assume you're interested in their stuff. To wit, let's consider an email I received today (copied, headers and all, after my griping).</p>  <p>Note that if I want to opt out of further communications, I have to do <em>two separate things</em> -- which actually becomes three things.</p>  <ul>   <li>First I have to click the last link to opt out of future TechTarget spam. (Yes, I deleted the actual links. But certainly none of <em>my</em> trustworthy readers would attempt to re-subscribe me, right...? &lt;g&gt; </li>    <li>But that isn't enough -- I <em>also</em> have to separately opt out of future Avaya spam! (Why does the no-more-from-Avaya link live on a techtargetmail.com server? Whatever.) Clicking on that link eventually does land me on an avaya.com page, where I have to confirm my email address and indicate they don't have my permission to send me spam. Hmm, too difficult to embed my email in that link, when the other techtargetmail.com link <em>did</em> embed my email? </li>    <li>Then after submitting it, another page pops up telling me that I'll soon receive an email with <em>additional</em> instructions! In this email there's a link -- to avaya.com with my email address embedded -- that I must click, I guess to double plus confirm that yes, I really really really do wish never to hear from you again. Clicking that link takes me to a page that promises my &quot;permissions have successfully been set. Thank you.&quot; </li> </ul>  <p>A pox on both your houses, TechTarget and Avaya. I never asked for your stuff. Go away.</p>  <p>Spam, my friends, is only going to <a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/09/12/AR2008091201211.html?hpid=topnews" target="_blank">get</a> <a href="http://voices.washingtonpost.com/securityfix/2008/09/virginia_anti-spam_law_overtur.html?hpid=news-col-blogs" target="_blank">worse</a>. It was so easy to <a href="http://en.wikipedia.org/wiki/Junk_fax" target="_blank">ban junk faxes</a> in 1991. But even those regulations were <a href="http://en.wikipedia.org/wiki/Junk_Fax_Prevention_Act_of_2005" target="_blank">weakened in 2005</a>. So do you really think we'll see anything even remotely logical for outlawing spam? I doubt it, unless we the citizens foment a revolt. Let's get cracking! </p>  <p>&#160;</p>  <hr />  <p><font face="Courier New" size="2">Received: from SVC-EXGWY-E801.partners.extranet.microsoft.com (10.251.24.242)      <br />by tk5-exhub-c102.redmond.corp.microsoft.com (157.54.18.53) with Microsoft       <br />SMTP Server (TLS) id 8.1.291.1; Tue, 16 Sep 2008 11:27:56 -0700       <br />Received: from mail139-wa4-R.bigfish.com (216.32.181.113) by       <br />mail04.microsoft.com (10.253.160.184) with Microsoft SMTP Server (TLS) id       <br />8.1.291.1; Tue, 16 Sep 2008 11:27:55 -0700       <br />Received: from mail139-wa4 (localhost.localdomain [127.0.0.1])&#160;&#160;&#160; by       <br />mail139-wa4-R.bigfish.com (Postfix) with ESMTP id 018C11184C2&#160;&#160;&#160; for       <br />&lt;steriley@microsoft.com&gt;; Tue, 16 Sep 2008 18:27:50 +0000 (UTC)       <br />X-BigFish: ps16(zz18c1K1936K2b7wcak69jzzzz2af1jz2fh6bh5eh65h)       <br />X-Spam-TCS-SCL: 4:0       <br />Received: by mail139-wa4 (MessageSwitch) id 1221589667478982_28100; Tue, 16       <br />Sep 2008 18:27:47 +0000 (UCT)       <br />Received: from pp.techtargetmail.com (pp.techtargetmail.com [65.211.80.227])       <br />&#160;&#160;&#160; by mail139-wa4.bigfish.com (Postfix) with SMTP id 46566978071&#160;&#160;&#160; for       <br />&lt;steriley@microsoft.com&gt;; Tue, 16 Sep 2008 18:27:47 +0000 (UTC)       <br />DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=pp.techtargetmail.com; b=iOmibOrM91/1Ugy2gj3QbWo74T2m3GuhmwxZCXJQpFT+nwRES8QKg+4vjt48SNp7WWJExG61Ge+DtnKD3KVI3KwqTKzkPRVrEBF0DCHhYot6VAG/EyEr5vb5RhBz+91yvNhbIqITzGnuQ+uBDJzyc6gU0FHfBl0Fa3S/phcPELM=;       <br />Message-ID: &lt;a818b044.724694.236c8ee748f7dd97.1.n.4.2971370188@pp.techtargetmail.com&gt;       <br />Date: Tue, 16 Sep 2008 14:27:47 -0400       <br />thread-index: a818b044.724694.236c8ee748f7dd97.1.n.4       <br />Reply-To: Avaya &lt;a818b044.724694.236c8ee748f7dd97.1.n.4@pp.techtargetmail.com&gt;       <br />From: Avaya &lt;Avaya@pp.techtargetmail.com&gt;       <br />To: Steve Riley &lt;steriley@microsoft.com&gt;       <br />Subject: 7 Tips to Ensure Readiness for UC Deployment       <br />MIME-Version: 1.0       <br />Content-Type: text/plain       <br />Content-Transfer-Encoding: 7bit       <br />Content-Class: urn:content-classes:message       <br />Importance: normal       <br />Priority: normal       <br />X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4133       <br />Return-Path: a818b044.724694.236c8ee748f7dd97.1.n.4@pp.techtargetmail.com       <br />X-MS-Exchange-Organization-PRD: pp.techtargetmail.com       <br />Received-SPF: Pass (SVC-EXGWY-E801.partners.extranet.microsoft.com: domain       <br />of Avaya@pp.techtargetmail.com designates 65.211.80.227 as permitted sender)       <br />receiver=SVC-EXGWY-E801.partners.extranet.microsoft.com;       <br />client-ip=65.211.80.227; helo=mail139-wa4-R.bigfish.com;       <br />X-MS-Exchange-Organization-PCL: 2       <br />X-MS-Exchange-Organization-Antispam-Report: DV:3.3.6916.600;SV:3.3.6916.813;SID:SenderIDStatus Pass;OrigIP:65.211.80.227       <br />X-MS-Exchange-Organization-SCL: 2       <br />X-MS-Exchange-Organization-SenderIdResult: PASS</font></p>  <p><font face="Courier New" size="2">The following message was sent to you as a subscriber to third party offers from a TechTarget property, including our network of Search sites, Bitpipe.com, CIO Decisions Magazine, Information Security Magazine, Storage Magazine, KnowledgeStorm, TheServerSide.com and/or TheServerSide.NET. To unsubscribe, see below.      <br />____________________________________________________________ </font></p>  <p><font face="Courier New" size="2">How should you evaluate the move to unified communications (UC)? Who within which parts of an organization will benefit? Will UC reduce the time to market? Read this E-Guide for answers to these questions and a better look at how the value of UC will, at first, be less of a financial issue and more of a productivity improvement issue that translates into financial benefits. Download this white paper now: </font><a href="http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1"><font face="Courier New" size="2">http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1</font></a></p>  <p><font face="Courier New" size="2">When implementing unified communications, there are a number of important issues to think about and questions to ask. This E-Guide analyzes seven phases to ensure you reap the full benefits of UC in each. If you're ready to take the plunge but you're not sure your business or your infrastructure is - download this E-Guide now. </font></p>  <p><font face="Courier New" size="2">Click here to learn more: </font><a href="http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1"><font face="Courier New" size="2">http://pp.techtargetmail.com/c.asp?724694&amp;236c8ee748f7dd97&amp;1</font></a></p>  <p><font face="Courier New" size="2">&quot;If you do not wish to receive future promotions directly from Avaya please forward this e-mail to <u>{link removed}</u> ; please note that there is a separate opt-out procedure below to be removed from the list from which this email originated.&quot;       <br />____________________________________________________________ </font></p>  <p><font face="Courier New" size="2">Please do not reply to this email.&#160; To unsubscribe from all future third party offers from all TechTarget properties, simply click here: <u>{link removed}</u></font></a></p>  <p><font face="Courier New" size="2">TechTarget | 117 Kendrick Street, Suite 800 | Needham, MA 02494</font> </p>  <hr /><img src="http://blogs.technet.com/aggbug.aspx?PostID=3124873" width="1" height="1">]]></content:encoded>
      <pubDate>Tue, 16 Sep 2008 15:22:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/smtp server">smtp server</category>
      <category domain="http://securityratty.com/tag/server">server</category>
      <category domain="http://securityratty.com/tag/smtp">smtp</category>
      <category domain="http://securityratty.com/tag/x-spam-tcs-scl">x-spam-tcs-scl</category>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/future avaya spam">future avaya spam</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/microsoft smtp server">microsoft smtp server</category>
      <category domain="http://securityratty.com/tag/avaya">avaya</category>
      <source url="http://blogs.technet.com/steriley/archive/2008/09/16/the-opt-out-from-hell.aspx">The opt-out from hell</source>
    </item>
    <item>
      <title><![CDATA[Can Chrome be read by a Keylogger?]]></title>
      <link>http://securityratty.com/article/ffd6c737d3494d5d3d0a9f12e2f3d320</link>
      <guid>http://securityratty.com/article/ffd6c737d3494d5d3d0a9f12e2f3d320</guid>
      <description><![CDATA[I dont know yet, but Im checking. This is a article that bears reading


clipped from www.tgdaily.com


Chrome is a security nightmare, indexes your bank accounts


So is this all a big deal?? Well...]]></description>
      <content:encoded><![CDATA[<div > I dont know yet, but Im checking. This is a article that bears reading.<br/> </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/F94FFD04-78C2-4FF1-B714-FCA0F390D44C/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/e1bca7ce-88f4-4574-a7c0-b319e0a3e344/F94FFD04-78C2-4FF1-B714-FCA0F390D44C/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://www.tgdaily.com/content/view/39176/108/" href="http://www.tgdaily.com/content/view/39176/108/" style="font-size: 11px;">www.tgdaily.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.tgdaily.com/content/view/39176/108/ --><br />
<table background="undefined" bgcolor="">
<tr><TD width="100%" class="contentheading">Chrome is a security nightmare, indexes your bank accounts									</TD></tr>
</table>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.tgdaily.com/content/view/39176/108/ --><DIV>So is this all a big deal?? Well anyone who wants to search your financial information would need local access to your machine and if a person is sitting at your <A class="iAs" classname="iAs" href="#" target="_blank" itxtdid="6579451">computer</A>, you have a lot more things to worry about than him/her using Chrome’s history search.? Conceivably a hacker could develop an app to pull the cache and index files off your computer and examine them later on another machine – these files reside in the “C:\Documents and Settings\USERNAME\Local Settings\Application Data\Google\Chrome\User Data\Default” folder.</DIV></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/F94FFD04-78C2-4FF1-B714-FCA0F390D44C/blog/" title="blog or email this clip"><img src="http://content8.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
<BR/><MAP name="bdv_RSS_Ad_050908035635"><AREA alt="Feed Ads By BidVertiser.com" shape="poly" coords="0,0,467,0,467,45,315,45,315,59,0,59" href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=050908035635&amp;click=1" target="_blank" /><AREA alt="Feed Ads By BidVertiser.com" shape="rect" coords="315,45,467,59" href="http://www.bidvertiser.com/bdv/bidvertiser/bdv_ref.dbm?Ref_PID=165886&amp;Ref_Option=main&amp;source=90614506" target="_blank" /></MAP><P><a href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=050908035635&amp;click=1" target="_blank"><IMG src="http://bdv.bidvertiser.com/BidVertiser.dbm?pid=165886&amp;bid=400950&amp;PHS=050908035635&amp;rssimage=1&amp;rSRC=2" border="0" usemap="#bdv_RSS_Ad_050908035635" /></a></P>]]></content:encoded>
      <pubDate>Fri, 05 Sep 2008 11:56:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/local access">local access</category>
      <category domain="http://securityratty.com/tag/chrome">chrome</category>
      <category domain="http://securityratty.com/tag/chromes history">chromes history</category>
      <category domain="http://securityratty.com/tag/index files">index files</category>
      <category domain="http://securityratty.com/tag/machine">machine</category>
      <category domain="http://securityratty.com/tag/security nightmare">security nightmare</category>
      <category domain="http://securityratty.com/tag/datadefault folder">datadefault folder</category>
      <category domain="http://securityratty.com/tag/financial information">financial information</category>
      <category domain="http://securityratty.com/tag/bank accounts">bank accounts</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=605">Can Chrome be read by a Keylogger?</source>
    </item>
    <item>
      <title><![CDATA[Fake Security Software Domains Serving Exploits]]></title>
      <link>http://securityratty.com/article/a2ffa8d411dc417bdb5a774ee6ab5207</link>
      <guid>http://securityratty.com/article/a2ffa8d411dc417bdb5a774ee6ab5207</guid>
      <description><![CDATA[Psychological imagination, &quot;think cybercriminals&quot; mentality or scenario building intelligence, seem to always produce the results they are supposed to. On Monday, I pointed out that

Ironically, the...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SLaDCa0a4yI/AAAAAAAACIU/V4NpXSLdBEA/s1600-h/fake_software_client_side_exploits.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SLaDCa0a4yI/AAAAAAAACIU/6N2G2L2h2-0/s200-R/fake_software_client_side_exploits.png" /></a>Psychological imagination, "think cybercriminals" mentality or scenario building intelligence, seem to always produce the results they are supposed to. On Monday, <a href="http://ddanchev.blogspot.com/2008/08/diverse-portfolio-of-fake-security_25.html">I pointed out that</a> :<br />
<br />
"<i>Ironically, the participant in the affiliate program whose original objective was to drive traffic to the fake security software's site, may in fact start receiving so much traffic due to the combination of traffic acquisition tactics, that <a href="http://ddanchev.blogspot.com/2008/02/serving-malware-through-advertising.html">introducing client-side exploits courtesy of a third-party affiliate network</a>, may in fact prove more profitable then the revenue sharing partnership with the rogue security software's vendor at the first place.</i>"<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SLaJ9G1B_YI/AAAAAAAACIk/WVx1enYkT0E/s1600-h/fake_security_client_side.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SLaJ9G1B_YI/AAAAAAAACIk/XSe4BHhrt2w/s200-R/fake_security_client_side.JPG" /></a>The next day, <a href="http://sunbeltblog.blogspot.com/2008/08/xp-antivirus-2008-now-with-sploits.html">client-side exploits start getting introduced</a> "in between" the fake security software sites :<br />
<br />
"<i>I've blogged before about the problem of Google Adwords pushing Antivirus XP Antivirus 2008. The situation is still ongoing.&nbsp; However, it's taken a turn for the worse, as these XP Antivirus pages are pushing exploits to install malware on the users system. This will also affect the many syndicators of Google Adwords.</i>"<br />
<br />
The domain in question <b>bestantivirus2009.com</b> - (68.180.151.21) is hosting the binary at <b>bestantivirus2009 .com</b>/setup_1096_MTYwM3wzNXww_.exe and has an IFRAME pointing to <b>huytegygle .com</b>/index.php (200.46.83.246).<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SLaOX5IUu2I/AAAAAAAACIs/UmA8sFcQCIA/s1600-h/antivirus0003.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SLaOX5IUu2I/AAAAAAAACIs/YL8oDzvUAeY/s200-R/antivirus0003.png" /></a>Here's another example <b>antivirus0003.net</b> with an IFRAME pointing to a different location - <b>124.217.250.85 /~ave/etc/count.php?o=16</b>.<br />
<br />
Despite that these domains are part of the "International Virus Research Lab" fake domains portfolio, it remains to be seen whether others will start multitasking as well.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=yRDO0K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=yRDO0K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=mEJFVK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=mEJFVK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=74vKNk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=74vKNk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=FMF6wk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=FMF6wk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=fnoShK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=fnoShK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=5q8hIK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=5q8hIK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=GNqd3k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=GNqd3k" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/377056323" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 28 Aug 2008 02:41:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/exploits">exploits</category>
      <category domain="http://securityratty.com/tag/domains">domains</category>
      <category domain="http://securityratty.com/tag/client-side exploits courtesy">client-side exploits courtesy</category>
      <category domain="http://securityratty.com/tag/client-side exploits start">client-side exploits start</category>
      <category domain="http://securityratty.com/tag/start">start</category>
      <category domain="http://securityratty.com/tag/fake security software">fake security software</category>
      <category domain="http://securityratty.com/tag/antivirus">antivirus</category>
      <category domain="http://securityratty.com/tag/google adwords">google adwords</category>
      <category domain="http://securityratty.com/tag/fake domains portfolio">fake domains portfolio</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/377056323/fake-security-software-domains-serving.html">Fake Security Software Domains Serving Exploits</source>
    </item>
    <item>
      <title><![CDATA[Fake Porn Sites Serving Malware - Part Three]]></title>
      <link>http://securityratty.com/article/df6f06139a5c1a6029631a2d5221d428</link>
      <guid>http://securityratty.com/article/df6f06139a5c1a6029631a2d5221d428</guid>
      <description><![CDATA[Continue the Fake Porn Sites Serving Malware and Fake Porn Sites Serving Malware - Part Two series, in part three we'll take a peek at the emerging trend of parking a single domain at up to three...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SLQENtZvVWI/AAAAAAAACHU/3Th9wGTcre4/s1600-h/fake_porn_zlob_codec_localized.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SLQENtZvVWI/AAAAAAAACHU/1aZSLqClTi4/s200-R/fake_porn_zlob_codec_localized.JPG" /></a>Continue the <a href="http://ddanchev.blogspot.com/2008/06/fake-porn-sites-serving-malware.html">Fake Porn Sites Serving Malware</a> and <a href="http://ddanchev.blogspot.com/2008/07/fake-porn-sites-serving-malware-part.html">Fake Porn Sites Serving Malware - Part Two</a> series, in part three we'll take a peek at the emerging trend of parking a single domain at up to three different hosting locations, re-establishing connections between malicious ISPs for yet another time in between exposing the domains and the download locations sharing the same IPs.<br />
<br />
<b>downlfreesexgirlbeach .com</b> first redirects to <b>infodist1 .com/in.cgi?2 </b>then to <b>watchnenjoy.com/index.php?id=1314&amp;style=black</b>, and finally to the front end to the codec's download location <b>handmadeclips .com</b>, where the codec is downloaded from <b>fwlprocedure .com</b>.  Behind these domains, we can easily expose many other fake porn sites and pharmaceutical scams, next to a small portfolio of domains specifically used for hosting the binaries. Due to the obvious rotation I've encountered several times so far, a fake porn site today, is tomorrow's blackhat SEO content farm :<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SLQHSj0XVWI/AAAAAAAACHc/DX-IaOAduVs/s1600-h/fake_porn_august.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SLQHSj0XVWI/AAAAAAAACHc/k9h1_E21wag/s200-R/fake_porn_august.JPG" /></a><b>downlfreesexgirlbeach .com</b> - (88.214.198.25)<br />
<b>vids365 .com<br />
downlfreesexgirlbeach .com<br />
top.only-bi .com<br />
wikiei .com<br />
paysuperporn .com<br />
aboutsexporn .com<br />
freactor .com<br />
cheapofficialpills .com<br />
finance-leaders.comnudenakedboys .com<br />
photosgayboys&nbsp; .com<br />
uniqueincest.com<br />
shyincest .com<br />
banrnd.central-xxx .com<br />
tvisklick .info<br />
thebg .net<br />
termion .net<br />
xoxvids .net<br />
bestpricepills .net<br />
bcodecnow .net</b><br />
<br />
<b>infodist1 .com</b> - (88.214.204.40)<br />
<b>farmasearch2008 .com<br />
flaxxvid .com<br />
xanax777pills .com<br />
18virgingirls .com<br />
girlnudegallaryvideox .com<br />
allxxxpornogerlsx .com<br />
jproshin .info<br />
familytaboo .info<br />
fullsitehost .info<br />
20searchonlinesite .net<br />
add-your-video .net<br />
blogs4y .net</b><br />
<br />
<div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SLQIspjO3tI/AAAAAAAACHs/MaMXiAw02F8/s1600-h/downlfreesexgirlbeach_viz.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SLQIspjO3tI/AAAAAAAACHs/znHGKTmbcHE/s200-R/downlfreesexgirlbeach_viz.JPG" /></a><b>adult-shemale .com</b> - (88.214.198.25)<br />
<b>adult-tranny .com<br />
all-shemale&nbsp; .com&nbsp;&nbsp;&nbsp; <br />
bcodecnow .net<br />
best-tranny .com&nbsp;&nbsp;&nbsp; <br />
bestguyportal .com<br />
bestmoviez .com&nbsp;&nbsp;&nbsp; <br />
central-xxx .com<br />
downlfreesexgirlbeach .com&nbsp;&nbsp;&nbsp; <br />
gallery-boy .com<br />
hiosexywomensxxxgirlsx .com&nbsp;&nbsp;&nbsp; <br />
lady-dick .com<br />
bcodecnow .net<br />
mytoppharmacy .com<br />
nakednudeboys .com&nbsp;&nbsp;&nbsp; <br />
nakednudemen .com<br />
nudenakedboys .com<br />
only-bi .com<br />
only-shemale .com<br />
page-reviews .com<br />
paulaslosingit .com<br />
photosgayboys .com<br />
stud-boys .com&nbsp;&nbsp;&nbsp; <br />
the0download .com<br />
wikiei .com&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />
moviez .com<br />
hiosexywomensxxxgirlsx .com<br />
sexygirlsisuniformh0t .com&nbsp;&nbsp;&nbsp; <br />
the0download .com</b><br />
<br />
<b>flwprocedure .com </b>- (77.91.231.201)<b><br />
movupdate .com<br />
flwupdate .com<br />
formatmpeg .com<br />
movieexternal .com<br />
flwtool .com <br />
aviexecution .com<br />
releasedvideo .com<br />
wmvcompressor .com<br />
movieopens .com<br />
mpegapparatus .com<br />
flwassistant .com<br />
flwinstrument .com<br />
piterserv .com<br />
wovview .com</b><br />
<br />
<b>Some info on a sample codec :</b><br />
Scanners Result: 11/36 (30.56%)<br />
Trojan-Downloader.Win32.Zlob.cos<br />
Trojan.Popuper.7315<br />
File size: 10240 bytes <br />
MD5...: 467e4e78974dc8b2ee5d7da024daf31a <br />
SHA1..: 311e0c710bb15761ef3dace54b55489830cf5803<br />
<br />
Phones back to <b>69.50.164.50</b>/this/is/stereo/music.php?param=0;1314;1550; <b>69.50.164.50</b>/this/is/stereo/jazz.php?param=49325611;2:191:5|7:271:0|6:130:0|9:0:5|34:65536:0 and to <b>85.255.119.244</b>/this/is/stereo/music.php?param=0;4135;1548.<br />
<br />
When <b>Emil Kaperski's</b> owned <a href="http://ddanchev.blogspot.com/2008/06/malicious-isps-you-rarely-see-in-any.html">InterCage, Inc.</a> (69.50.164.50) meets <a href="http://ddanchev.blogspot.com/2008/07/lazy-summer-days-at-ukrtelegroup-ltds.html">UkrTeleGroup Ltd.</a> (85.255.119.244) previously known as <b>Andrei Kislizin's</b> owned InHoster, you know you're on the right track.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=kUs27K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=kUs27K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sRXTAK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sRXTAK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sOsoWk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sOsoWk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=fnooek"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=fnooek" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=R3T9kK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=R3T9kK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=WaKp6K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=WaKp6K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=R12pRk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=R12pRk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/375241515" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 26 Aug 2008 05:02:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/fake porn sites">fake porn sites</category>
      <category domain="http://securityratty.com/tag/net">net</category>
      <category domain="http://securityratty.com/tag/info">info</category>
      <category domain="http://securityratty.com/tag/codec">codec</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <category domain="http://securityratty.com/tag/sample codec">sample codec</category>
      <category domain="http://securityratty.com/tag/locations">locations</category>
      <category domain="http://securityratty.com/tag/fake porn site">fake porn site</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/375241515/fake-porn-sites-serving-malware-part.html">Fake Porn Sites Serving Malware - Part Three</source>
    </item>
    <item>
      <title><![CDATA[Fake Celebrity Video Sites Serving Malware - Part Two]]></title>
      <link>http://securityratty.com/article/c395d54f1c682346aee8b2d88973e345</link>
      <guid>http://securityratty.com/article/c395d54f1c682346aee8b2d88973e345</guid>
      <description><![CDATA[Malicious parties remain busy crunching out domain portfolios of legitimately looking celebrity video sites. The very same templates used on the majority of fake celebrity video sites which I exposed...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SKx9HqDP8dI/AAAAAAAACE8/IGlb0IMf6r0/s1600-h/fake_celebrity_malware.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SKx9HqDP8dI/AAAAAAAACE8/O-KOwx_gTlI/s200-R/fake_celebrity_malware.png" /></a>Malicious parties remain busy crunching out domain portfolios of legitimately looking celebrity video sites. The very same templates used on the majority of <a href="http://ddanchev.blogspot.com/2008/06/fake-celebrity-video-sites-serving.html">fake celebrity video sites</a> which I exposed in a previous post, remain in circulation with anecdotal situations where they aren't even bothering to match the site's logo with the domain name -- it would ruin the malicious economies of scale approach. And since centralization to some, an laziness to others, remains in tact, the fake security software and fake codecs served remain once parked at the same IP as the fake celebrity sites which I'll expose in this post.<br />
<br />
<b>starfeed1 .com</b> - (85.255.117.218)<br />
<b>codecservice1 .com<br />
siteresults1 .com<br />
codecservice6 .com<br />
celebs69 .com<br />
topdirectdownload .com<br />
sexlookupworld .com<br />
favoredtube .com<br />
yourfavoritetube .com<br />
wwvyoutube .com<br />
celebsnofake .com<br />
celebsvidsonline .com<br />
celebstape .com<br />
freevidshardcore .com<br />
topsoftupdate .com<br />
porndebug .com<br />
newfunnyvideo .com<br />
bestfunnyvids .com<br />
pornmoviestube .net</b><br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: right;"><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SKx_zJYKp8I/AAAAAAAACFE/s1Gjxxgtk60/s1600-h/celebrity_fake_windows_player.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SKx_zJYKp8I/AAAAAAAACFE/ebj-Ry4Nk8g/s200-R/celebrity_fake_windows_player.JPG" /></a><b>worldstars2008 .com</b> - (79.135.167.54)</div><b>antivirus2008-pro .name<br />
antivirus-2008pro .name<br />
antivirus2008pro .name<br />
antivirus2008pro-download .org<br />
antivirus-2008-pro .org<br />
antivirus2008-pro .org<br />
antivirus-2008pro .org<br />
antivirus2008pro .org<br />
thesoft-portal-08 .com<br />
stars-08 .com<br />
thestars-08 .com<br />
thebigstars-08 .com<br />
funny-08 .com<br />
realonlinevideo-2008 .com<br />
2008-adult-2008 .com<br />
adult18tube2008 .com<br />
adultstreamportal2008 .com<br />
2008-adult-s2008 .com&nbsp;</b><br />
<a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SKyBJNS-u7I/AAAAAAAACFU/0QslE2edBHQ/s1600-h/best_celebs_viz.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SKyBJNS-u7I/AAAAAAAACFU/KWv9siOWkAg/s200-R/best_celebs_viz.JPG" /></a><b>new-content-s2008 .com<br />
newcontent-s2008 .com<br />
worldstars2008 .com<br />
thestars2008 .com<br />
thebigstars2008 .com<br />
newcontents2008 .com<br />
18x-adult2008 .com<br />
2008adult2008 .com<br />
adult-x2008 .com<br />
hotadulttube08 .com<br />
adultxx-18 .com<br />
newcontent-s2008a .com<br />
antivirus2008pro-download .com<br />
onlinestreamvide .com<br />
onlinestreamvide .com<br />
ns2.onlinestreamvide .com<br />
xxxstreamonline .com4<br />
supersoft21freeware .com<br />
kvm-secure .com<br />
kvmsecure .com<br />
themusic-08portal .com<br />
adultstreamportal .com<br />
streamxxxvideo .com<br />
antivirus-2008-pro .com<br />
antivirus2008-pro .com<br />
antivirus-2008pro .com<br />
thefunny-08 .com<br />
thestars-08 .com<br />
thestars08 .com <br />
celebsnofake .com<br />
adult-s-portal .com<br />
adultsoftcodec .com<br />
adultstreamportal .com<br />
adultxx-18 .com</b><br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SKyAwLrICsI/AAAAAAAACFM/qnTzrD0L-ow/s1600-h/fake_celebrity_malware1.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SKyAwLrICsI/AAAAAAAACFM/zejNrANC_lc/s200-R/fake_celebrity_malware1.png" /></a>And while none of these seem to be taking advantage of client-side exploits, a Russian celebrity site that seems to by syndicating the malicious redirectors from a legitimate advertising network, is an exception worth point out due to the Adobe Flash player exploit it's attempting to take advantage of. <b>&nbsp;</b><br />
<br />
<b>Bestcelebs .ru</b> javascript redirectors through several different doorways :<br />
<br />
<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKyCIPWrPkI/AAAAAAAACFc/1o_3Oou-C9U/s1600-h/best_celebs1.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKyCIPWrPkI/AAAAAAAACFc/sp7U9iiSyqg/s200-R/best_celebs1.JPG" /></a><b>crklab .us</b>/index.php =&gt; <b>firstblu .cn</b>/3.php?19383577 =&gt; <b>xanjan .cn</b>/in.cgi?mytraf =&gt; <b>atomakayan .biz</b>/afterftpcheck/2603/index.php =&gt; <br />
<b>toksikoza .net</b>/fi/index.php?mytraf =&gt; <b>toksikoza .net</b>/fi/1.swf<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div>What you see is so not what you get.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=wHAK8K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=wHAK8K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=irKgjK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=irKgjK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=uNxeIk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=uNxeIk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=NhDw6k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=NhDw6k" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=wScNuK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=wScNuK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=m9soyK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=m9soyK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ISkINk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ISkINk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/370688968" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 20 Aug 2008 21:52:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/celebrity video sites">celebrity video sites</category>
      <category domain="http://securityratty.com/tag/net">net</category>
      <category domain="http://securityratty.com/tag/org">org</category>
      <category domain="http://securityratty.com/tag/net fi1">net fi1</category>
      <category domain="http://securityratty.com/tag/russian celebrity site">russian celebrity site</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <category domain="http://securityratty.com/tag/net fiindex">net fiindex</category>
      <category domain="http://securityratty.com/tag/previous post">previous post</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/370688968/fake-celebrity-video-sites-serving.html">Fake Celebrity Video Sites Serving Malware - Part Two</source>
    </item>
    <item>
      <title><![CDATA[Friday Squid Blogging: Talking Squids in Outer Space]]></title>
      <link>http://securityratty.com/article/87f5c6b689b960e5f179a191af6bc43b</link>
      <guid>http://securityratty.com/article/87f5c6b689b960e5f179a191af6bc43b</guid>
      <description><![CDATA[An index of fiction
The site was inspired by Margaret Atwood's infamous comment that Oryx and Crake isn't really science fiction, because science fiction is &quot;talking squids in outer space.&quot; This...]]></description>
      <content:encoded><![CDATA[<p>An index of <a href="http://talkingsquidsinouterspace.com/">fiction</a>.</p>

<p>The site was inspired by Margaret Atwood's infamous comment that <i>Oryx and Crake</i> isn't really science fiction, because science fiction is "talking squids in outer space." This prompted a hunt for science fiction which actually did feature talking squids in outer space.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=q2EugK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=q2EugK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=V8N3JK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=V8N3JK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 15 Aug 2008 12:57:09 +0000</pubDate>
      <category domain="http://securityratty.com/tag/outer space">outer space</category>
      <category domain="http://securityratty.com/tag/fiction">fiction</category>
      <category domain="http://securityratty.com/tag/science fiction">science fiction</category>
      <category domain="http://securityratty.com/tag/squids">squids</category>
      <category domain="http://securityratty.com/tag/margaret atwood">margaret atwood</category>
      <category domain="http://securityratty.com/tag/infamous comment">infamous comment</category>
      <category domain="http://securityratty.com/tag/hunt">hunt</category>
      <category domain="http://securityratty.com/tag/feature">feature</category>
      <category domain="http://securityratty.com/tag/index">index</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/friday_squid_bl_63.html">Friday Squid Blogging: Talking Squids in Outer Space</source>
    </item>
    <item>
      <title><![CDATA[Spamming Deterrent?]]></title>
      <link>http://securityratty.com/article/c741c374a71c3b0df07ca7840d188883</link>
      <guid>http://securityratty.com/article/c741c374a71c3b0df07ca7840d188883</guid>
      <description><![CDATA[Its a harsher sentence than that handed to some spammers, but is it enough? Have your say at http://www.virusbtn.com/news/polls/index


clipped from www.virusbtn.com
Is 47 months imprisonment...]]></description>
      <content:encoded><![CDATA[<div > It&#8217;s a harsher sentence than that handed to some spammers,<br/>but is it enough? Have your say at<br/><a href="http://www.virusbtn.com/news/polls/index" rel="nofollow" target="_blank">http://www.virusbtn.com/news/polls/index</a> </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/C6CAD6B9-01B0-44EF-86D8-10B2670C2451/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/71da8d5d-68e6-447c-87ba-ef263a31cdf0/C6CAD6B9-01B0-44EF-86D8-10B2670C2451/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://www.virusbtn.com/news/polls/index" href="http://www.virusbtn.com/news/polls/index" style="font-size: 11px;">www.virusbtn.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.virusbtn.com/news/polls/index --><B>Is 47 months imprisonment sufficient punishment for a convicted spammer?</B></td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.virusbtn.com/news/polls/index --><P class="section">It seems like a pretty tough sentence but there&#8217;ve been quite a few big arrests/trials/tough sentences and it doesn&#8217;t seem to be putting these people off - all these &#8217;spam kings&#8217; are repeat offenders with long histories of fines and sentences but they keep on doing it.<br />
</P></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/C6CAD6B9-01B0-44EF-86D8-10B2670C2451/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
]]></content:encoded>
      <pubDate>Wed, 13 Aug 2008 09:38:22 +0000</pubDate>
      <category domain="http://securityratty.com/tag/pretty tough sentence">pretty tough sentence</category>
      <category domain="http://securityratty.com/tag/harsher sentence">harsher sentence</category>
      <category domain="http://securityratty.com/tag/sentences">sentences</category>
      <category domain="http://securityratty.com/tag/spam kings">spam kings</category>
      <category domain="http://securityratty.com/tag/repeat offenders">repeat offenders</category>
      <category domain="http://securityratty.com/tag/virusbtn">virusbtn</category>
      <category domain="http://securityratty.com/tag/spammer">spammer</category>
      <category domain="http://securityratty.com/tag/spammers">spammers</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=555">Spamming Deterrent?</source>
    </item>
    <item>
      <title><![CDATA[Fun Reading on Security - 6]]></title>
      <link>http://securityratty.com/article/9a84eccd9e65597ca9f13e1a6c56c52f</link>
      <guid>http://securityratty.com/article/9a84eccd9e65597ca9f13e1a6c56c52f</guid>
      <description><![CDATA[Instead of my usual &quot;blogging frenzy&quot; machine gun blast of short posts, I will just combine them into my new blog series &quot; Fun Reading on Security .&quot; Here is an issue #6, dated August 7th, 2008
DNS +...]]></description>
      <content:encoded><![CDATA[<p>Instead of my usual &quot;blogging frenzy&quot; machine gun blast of short posts, I will just combine them into my new blog series &quot;<a href="http://chuvakin.blogspot.com/search/label/reading">Fun Reading on Security</a>.&quot; Here is an issue #6, dated August 7th, 2008.</p>  <ol>   <li><a href="http://andyitguy.blogspot.com/2008/07/for-everything-else-there-karma.html">DNS + Karma = Boom!</a> Enuf said. Also, hear Pete Linstrom <a href="http://spiresecurity.typepad.com/spire_security_viewpoint/2008/07/dan-kaminsky-wants-the-worlds-gratitude---should-we-give-it-to-him.html">squeal</a>.</li>    <li><a href="http://www.riskbloggers.com/jimreavis/2008/07/party-like-its-1993/">Fun essay</a> on &quot;blocking&quot; and risk. Is it our job to stop'em from using Facebook?</li>    <li><a href="http://blogs.technet.com/ecostrat/archive/2008/08/05/predicting-the-future-microsoft-launches-an-exploitability-index.aspx">MS Exploitability Index</a>. Smart ... or misguidedly focused on &quot;vulnerability release&quot; (and not creation)</li>    <li><a href="http://pcianswers.com/2008/07/30/pci-survey/">Chip-n-PIN, a PCI killer?</a> I don't think so!</li>    <li>Mike R revisits &quot;good enough security&quot; - <a href="http://securityincite.com/blog/mike-rothman/revisiting-big-is-the-new-small">read it</a>, then review your IR plans (...for you will be 0wned)</li>    <li>Very fun RSA survey <a href="http://www.net-security.org/secworld.php?id=6380">here</a>; data leakage beats malware again, people still not report incidents (to whom???) </li>    <li>More and more and more people point at <a href="http://lists.immunitysec.com/pipermail/dailydave/2008-August/005251.html">idiocies of academic security research</a>... Read the whole <a href="http://lists.immunitysec.com/pipermail/dailydave/2008-August/thread.html">w00t 08 thread here</a>. Weep. Laugh.</li>    <li><a href="http://www.rsa.com/blog/blog_entry.aspx?id=1314">Neosploit has a bad quarter</a>... breaks support &quot;contracts&quot; ... shuts down? Ah, the economy :-)</li>    <li>Awesome stuff from&#160; Richard Bejtlich: <a href="http://taosecurity.blogspot.com/2008/07/security-operations-do-you-caer.html">CAER.</a></li>    <li><a href="http://1raindrop.typepad.com/1_raindrop/2008/07/the-network-firewall-is-a-consensual-hallucination.html">&quot;The Network Firewall is a Consensual Hallucination&quot;</a> :-)</li>    <li>More GRC-ball-kicking: <a href="http://bgidps.typepad.com/bgidps/2008/07/chasing-the-mag.html">here</a>, <a href="http://blogs.forrester.com/srm/2008/06/it-grc-who-is-a.html">here</a> (&quot;IT-GRC &quot;vendors&quot; are not IT-GRC vendors&quot;) - both are pretty insightful for GRC-lovers and GRC-haters)</li>    <li>More SIEM-ball-kicking: <a href="http://securityincite.com/TDI-2008-07-03#TSN1">here</a> (&quot;underwhelming&quot;,&quot;ridiculous&quot;, &quot;missing the point&quot;), <a href="http://blogs.splunk.com/raffy/2008/07/18/sim-is-dead-unless/">here</a> (&quot;dead ...unless&quot;,&quot;cripple&quot;)</li>    <li>Fun DLP <a href="http://www.dlpindepth.org/index.php">portal launches.</a></li>    <li>Final word (?) on TerryChilds-gate <a href="http://weblog.infoworld.com/venezia/archives/017989.html">here</a>. &quot;When management starts controlling the actions of admins, things start to fall apart.&quot; Huh? When management loses control of the business, it dies. Folks, IT vs IT security gap IS real. I never quite believed it, but this taught me a lesson. <a href="http://blog.isc2.org/isc2_blog/2008/07/the-cautionary.html">Some</a> common security sense for a change (also <a href="http://securityincite.com/TDI-2008-07-25#TBP2">here</a>).</li> </ol>  <p>Enjoy.</p>  <div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=5lLnfK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=5lLnfK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=PWbrFK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=PWbrFK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=NEVgkK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=NEVgkK" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/358954457" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 07 Aug 2008 14:01:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/fun">fun</category>
      <category domain="http://securityratty.com/tag/academic security research">academic security research</category>
      <category domain="http://securityratty.com/tag/security gap">security gap</category>
      <category domain="http://securityratty.com/tag/fun essay">fun essay</category>
      <category domain="http://securityratty.com/tag/common security sense">common security sense</category>
      <category domain="http://securityratty.com/tag/fun rsa survey">fun rsa survey</category>
      <category domain="http://securityratty.com/tag/it-grc">it-grc</category>
      <category domain="http://securityratty.com/tag/it-grc vendors">it-grc vendors</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/358954457/fun-reading-on-security-6.html">Fun Reading on Security - 6</source>
    </item>
  </channel>
</rss>
