<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: indoor]]></title>
    <link>http://securityratty.com/tag/indoor</link>
    <description></description>
    <pubDate>Tue, 01 Apr 2008 20:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Portland's Network Gets Shut Off Date]]></title>
      <link>http://securityratty.com/article/95660aa1d0e132b9f625652dcc15c42c</link>
      <guid>http://securityratty.com/article/95660aa1d0e132b9f625652dcc15c42c</guid>
      <description><![CDATA[It was a matter of time, but the death knell date has been set for Portland, Ore.'s Wi-Fi network: MetroFi told the city that it will turn its network off on June 30, and remove all devices by about...]]></description>
      <content:encoded><![CDATA[<p><a href="http://blog.oregonlive.com/breakingnews/2008/06/portlands_wifi_network_coming.html"><strong>It was a matter of time, but the death knell date has been set for Portland, Ore.'s Wi-Fi network:</strong></a> MetroFi told the city that it will turn its network off on June 30, and remove all devices by about July 30. MetroFi's business model required most of its revenue to come from advertising shown to users of the network; they also offered ad-free service, and business services. The network never reached a scale in Portland with enough reach to hit a critical mass.</p>

<p>As with most Wi-Fi networks built or planned in 2005 and 2006, indoor coverage required wireless boosters, and the necessity of those signal bridges wasn't clear to early users. That led to early adopters rejecting MetroFi's and others' services, which didn't help spread use.</p>]]></content:encoded>
      <pubDate>Thu, 19 Jun 2008 08:14:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/portland">portland</category>
      <category domain="http://securityratty.com/tag/metrofi">metrofi</category>
      <category domain="http://securityratty.com/tag/business services">business services</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/wi-fi networks">wi-fi networks</category>
      <category domain="http://securityratty.com/tag/death knell">death knell</category>
      <category domain="http://securityratty.com/tag/users">users</category>
      <source url="http://wifinetnews.com/archives/008369.html">Portland's Network Gets Shut Off Date</source>
    </item>
    <item>
      <title><![CDATA[Phila. Saviors Name Corp., Provide Details]]></title>
      <link>http://securityratty.com/article/d20a5814f6a5dc4a6598a656ea6ed04d</link>
      <guid>http://securityratty.com/article/d20a5814f6a5dc4a6598a656ea6ed04d</guid>
      <description><![CDATA[Okay, the name is Network Acquisition Corporation (NAC), so it's likely to change: But the deal closed yesterday. Tropos gets a win here because their equipment will continue to be used as the Wi-Fi...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.marketwatch.com/news/story/nac-provides-details-wi-fi-network/story.aspx?guid=%7BDB0D5C32-B6EE-4B5D-AD23-4F8DCF09670F%7D&dist=msr_5"><strong>Okay, the name is Network Acquisition Corporation (NAC), so it's likely to change:</strong></a> But the deal closed yesterday. Tropos gets a win here because their equipment will continue to be used as the Wi-Fi network is upgraded. As I noted yesterday, NAC's plan (elaborated in this press release) is to rely on well-understood business services that are undelivered or overpriced in Philadelphia to provide recurrent, baseline revenue, rather than being yet-another-Wi-Fi-network-operator.</p>

<p>Three other significant details appear in the release, as well: The network will be free (that was discussed but wasn't entirely clear before), and may includes advertising, sponsorships, and other programs; the network will be focused on outdoor applications, not indoor service, hurray; and there will be <em>no customer support</em>--this will be a best-effort network that you can't complain about when it doesn't work.</p>

<p>So far, promising.</p>]]></content:encoded>
      <pubDate>Wed, 18 Jun 2008 07:05:42 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/network acquisition corporation">network acquisition corporation</category>
      <category domain="http://securityratty.com/tag/best-effort network">best-effort network</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/well-understood business services">well-understood business services</category>
      <category domain="http://securityratty.com/tag/noted yesterday">noted yesterday</category>
      <category domain="http://securityratty.com/tag/press release">press release</category>
      <category domain="http://securityratty.com/tag/release">release</category>
      <category domain="http://securityratty.com/tag/yesterday">yesterday</category>
      <source url="http://wifinetnews.com/archives/008366.html">Phila. Saviors Name Corp., Provide Details</source>
    </item>
    <item>
      <title><![CDATA[EarthLink Will Shutter Philadelphia Network, Company Says]]></title>
      <link>http://securityratty.com/article/5a938e0c429c5b2b2511d2b537800149</link>
      <guid>http://securityratty.com/article/5a938e0c429c5b2b2511d2b537800149</guid>
      <description><![CDATA[It's the end of the cycle, folks: The first shall be last and the last shall, apparently, be first to sue. The Philadelphia Wi-Fi network will be shuttered under plans by EarthLink that they announced...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://news.yahoo.com/s/ap/20080513/ap_on_hi_te/wireless_philadelphia_2"><strong>It's the end of the cycle, folks:</strong></a> The first shall be last and the last shall, apparently, be first to sue. The Philadelphia Wi-Fi network will be shuttered under plans by EarthLink that they announced via <a href="http://ir.earthlink.net/releasedetail.cfm?ReleaseID=310055"><strong>press release today</strong></a>. </p>

<p>The company plans to pull all its gear from the poles starting 12-June-2008. The company's press release said it offered to give the network at no cost to an unnamed non-profit, as well as to the city, but claimed that "unresolved issues" led to the effort falling apart. EarthLink offered cash and more equipment, as well, in undisclosed quantities. Wireless Philadelphia, the non-profit in charge of managing the network provider and administering digital divide programs, was apparently not the non-profit mentioned. </p>

<p>EarthLink filed a lawsuit to allow it to remove its Wi-Fi nodes and cap its liability at $1m. That's a pretty hostile move, given that the city would have been the more likely party to feel aggrieved and file suit against EarthLink for failing to live up to the terms of their agreement.</p>

<p>EarthLink's claims of offering the network to "a non-profit" or the city for free skirts the issue that EarthLink may have certain liabilities for electrical power and other fees that haven't yet been paid; Wireless Philadelphia had agreed to pick up or defer certain charges as part of the deal that brought the network provider in. But without a completed network, and the contract therefore perhaps susceptible to being declared in default in court, it's unlikely that this will play out nicely.</p>

<p>And I'll say bluntly: If someone offered you $17m of outdated equipment on a network that never worked to specification that wasn't completed, and that already had known high annual costs, and which a private firm gave up as a bad job that they couldn't turn a dime on--would you take that deal? No. EarthLink will ultimately have to pay much more than $1m, I predict, and I suspect some of the settlement will leave gear in selected neighborhoods behind for more modest networking purposes. It's not going to be as easy as releasing a press release, although I haven't read the contract's provisions for this set of circumstances, and I'm not a lawyer.</p>

<p>The failure in Philadelphia, and EarthLink's exiting the entire muni-Fi business, represents the end of a bad model in which a company agreed to assume all risk and costs associated with building a public access network. When the assumptions were that networks would be cheaper and easier to build in 2005, and that citizens in many larger cities had few affordable broadband options, it made some sense to build a network on spec.</p>

<p>Three years into this, however, it's clear that that capital investment is 2 to 3 times higher than what was anticipated to reach a level of service quality that people will expect; that, when presented with potential competition, DSL and cable operators will slash prices and offer cheap 1-year or "lifetime" rates with long-term contracts; and that wireless broadband delivered via Wi-Fi isn't the best of ideas for indoor service.</p>

<p>Minneapolis may wind up being the only large city, if the network quality and subscriber rates play out, that has a public access network that works and produces a return. </p>]]></content:encoded>
      <pubDate>Tue, 13 May 2008 05:48:07 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/philadelphia wi-fi network">philadelphia wi-fi network</category>
      <category domain="http://securityratty.com/tag/earthlink">earthlink</category>
      <category domain="http://securityratty.com/tag/network provider">network provider</category>
      <category domain="http://securityratty.com/tag/philadelphia">philadelphia</category>
      <category domain="http://securityratty.com/tag/public access network">public access network</category>
      <category domain="http://securityratty.com/tag/company">company</category>
      <category domain="http://securityratty.com/tag/earthlink filed">earthlink filed</category>
      <source url="http://wifinetnews.com/archives/008316.html">EarthLink Will Shutter Philadelphia Network, Company Says</source>
    </item>
    <item>
      <title><![CDATA[NSA Attacks West Point! Relax, It's a Cyberwar Game]]></title>
      <link>http://securityratty.com/article/f11d60d6da0ea55d61cdb03f3578daa6</link>
      <guid>http://securityratty.com/article/f11d60d6da0ea55d61cdb03f3578daa6</guid>
      <description><![CDATA[Five hours into their assault on West Point, the hackers got serious
The SQL [structured query language] inserts that came earlier were just pablum intended to lull the Army cadets into a false sense...]]></description>
      <content:encoded><![CDATA[<p>Five hours into their assault on West Point, the hackers got serious. 
</p>

<p>
The SQL [structured query language] inserts that came earlier were just pablum intended to lull the Army cadets into a false sense of security. But then the bad guys unleashed a stealthy kernel-level rootkit that burrowed into one workstation, started scraping data and "calling home."
</p>

<p>
It was a highly sophisticated attack, but this time the bad guys were really good guys in wolves' clothing.
</p>

<p>
For four days in late April, the National Security Agency -- the nation's most secretive repository of spooks, snoops and electronic eavesdroppers -- directed coordinated assaults on custom-built networks at seven of the nation's military academies, including West Point, the Army university 50 miles north of New York City.
</p>

<p>
It was all part of the seventh annual Cyber Defense Exercise, a training event for future military IT specialists. The exercise offered a rare window into the NSA's toolkit for infiltrating, corrupting or destroying computer networks.
</p>

<p>
The 34 Army cadets comprising the West Point IT team operated in a different kind of battlefield, but their combat skills and instincts need to be every bit as sharp. Like George Washington said: "There is nothing so likely to produce peace as to be well prepared to meet the enemy."
</p>

<p>
The SQL injections, targeting their Fedora Core 8 Web server, were a piece of cake for these IT combatants. Each injection tried to smuggle malicious code inside the seemingly harmless language used by the network’s MySQL software. The cadets handily defended with open source Apache web server modules, plus some manual tweaking of the SQL database to "avoid any surprises," in the words of Lt Col. Joe Adams, a West Point instructor who helped coach the team.
</p>

<p>
But the kernel-level rootkit was much more dangerous. This stealthy operating-system hijacker can open unseen "back doors" into even highly protected networks. When they detected the rootkit's "calls home" the cadets launched Sysinternal's security software to find the hijacker, then they manually scoured the workstation to find the unwelcome executable file. 
</p><p>
Then they terminated it. With extreme prejudice.
</p>
<p>
"This was probably the most challenging part of the exercise, since it required them to use some advanced techniques to find the rootkit," Adams says. And rooting it out helped boost the West Point team to the top of the pile when, in the aftermath of the exercise, the referees rated all the universities' network defenses.
</p>
<p>
For the second year in a row, the Army placed first over the Navy, Air Force, Coast Guard and others, winning geek bragging rights and the privilege of holding onto a gaudy, 60-pound brass trophy festooned with bald eagles and American flags. Adams credits the team’s thorough preparation and their excellent teamwork despite the round-the-clock schedule.
</p>
<!--pagebreak-->

<p>At the network control room on the second floor of West Point’s 200-year-old engineering building (which once was an indoor horse corral and still smells like it in some remote corners, according to one instructor), the IT team set up cots and, just for the hell of it, camouflaged netting. They worked in shifts, with one team member always monitoring incoming and outgoing traffic. He or she would alert other cadets -- "router guys" -- to block any suspicious addresses. Meanwhile, off-shift cadets would make food and coffee runs to keep everyone fueled up and alert. Together, the team was "faster than anyone else," Adams says.
</p>

<p>
But the way the cadets designed their network was a big factor in their victory, too. The NSA dictated some terms: All networks had to be capable of e-mail, chat and other services and had to be up and running at all times despite any attacks or defensive measures. Beyond that, the teams were free to come up with their own designs.
</p>

<p>
West Point's took three weeks to build. The cadets settled on a fairly standard Linux and FreeBSD-based network with advanced routing techniques for steering incoming traffic in directions of the IT team's choosing.
</p>

<p>
The choices in software tools for responding to any attack really boiled down to "automatic" versus "custom," says Eric Dean, a civilian programmer and instructor. He adds that while automatic tools that do most of their own work are certainly easier, custom tools that allow more manual tweaking are more effective. "I expect one of the 'lessons learned' will be the use of custom tools instead of automatics."
</p>

<p>
Even with a solid network design and passable software choices, there was an element of intuitiveness required to defend against the NSA, especially once it became clear the agency was using minor, and perhaps somewhat obvious, attacks to screen for sneakier, more serious ones.
</p>

<p>
"One of the challenges was when they see a scan, deciding if this is it, or if it’s a cover," says Dean. Spotting "cover" attacks meant thinking like the NSA -- something Dean says the cadets did quite well. "I was surprised at their creativity."
</p>

<p>
Legal limitations were a surprising obstacle to a realistic exercise. Ideally, the teams would be allowed to attack other schools' networks while also defending their own. But only the NSA, with its arsenal of waivers, loopholes, special authorizations (and heaven knows what else) is allowed to take down a U.S. network.
</p>

<p>
And despite the relative sophistication of the NSA's assaults, the agency told Wired.com that it had tailored its attacks to be just "a little too hard for the strongest undergraduate team to deal with, so that we could distinguish the strongest teams from the weaker ones."
</p>

<p>
In other words, grasshopper, nice work -- but the NSA is capable of much craftier network take-downs.
</p><br style="clear: both;"/>
      <a href="http://www.pheedo.com/click.phdo?s=0eebae201dd1f9c87fb47b2629d1bf60"><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/img.phdo?s=0eebae201dd1f9c87fb47b2629d1bf60"/></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=0eebae201dd1f9c87fb47b2629d1bf60" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=PBGxjH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=PBGxjH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=wwsfeh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=wwsfeh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=HcZiLh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=HcZiLh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=MnJ3rH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=MnJ3rH" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=54tGLH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=54tGLH" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=CP1KJh"><img src="http://feeds.wired.com/~f/wired/politics/security?i=CP1KJh" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=ieiu4h"><img src="http://feeds.wired.com/~f/wired/politics/security?i=ieiu4h" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=rCn1GH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=rCn1GH" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/287200226" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/287200227" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 09 May 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/army university">army university</category>
      <category domain="http://securityratty.com/tag/army">army</category>
      <category domain="http://securityratty.com/tag/custom-built networks">custom-built networks</category>
      <category domain="http://securityratty.com/tag/networks">networks</category>
      <category domain="http://securityratty.com/tag/nsa">nsa</category>
      <category domain="http://securityratty.com/tag/army cadets">army cadets</category>
      <category domain="http://securityratty.com/tag/west">west</category>
      <category domain="http://securityratty.com/tag/cadets">cadets</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/287200227/nsa_cyberwargames">NSA Attacks West Point! Relax, It's a Cyberwar Game</source>
    </item>
    <item>
      <title><![CDATA[Russia Requires Wi-Fi Registration]]></title>
      <link>http://securityratty.com/article/a4f1b55c79265e183f80e8c532a08d9c</link>
      <guid>http://securityratty.com/article/a4f1b55c79265e183f80e8c532a08d9c</guid>
      <description><![CDATA[Russian regulator requires registration: The folks at the Rossvyazokhrankultura (Russian Mass Media, Communications and Cultural Protection Service) have decided that every device with Wi-Fi inside...]]></description>
      <content:encoded><![CDATA[<p><strong><a href="http://www.theotherrussia.org/2008/04/15/russian-agency-demands-registration-for-all-wi-fi-devices/">Russian regulator requires registration:</a></strong> The folks at the Rossvyazokhrankultura (Russian Mass Media, Communications and Cultural Protection Service) have decided that every device with Wi-Fi inside requires registration for use by an individual user without a transferrable license, according to The Other Russia, which picked the story up from Russian-language site <strong><a href="http://www.fontanka.ru/2008/04/14/045/">Fontanka.ru</a></strong>.</p>

<p>While Wi-Fi wasn't as broadly unlicensed in Russia as it is in most other industrialized nations, a state regulator exempted indoor use in certain bands from registration. The Mass Media agency apparently believes that it has the authority to compel this, although there's some doubt by observers as to whether it really falls in their purview.</p>

<p>Setting up a home Wi-Fi network or a hotspot would require what sounds like vast amounts of paperwork, akin to putting a cell tower.</p>]]></content:encoded>
      <pubDate>Mon, 14 Apr 2008 16:04:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/russia">russia</category>
      <category domain="http://securityratty.com/tag/home wi-fi network">home wi-fi network</category>
      <category domain="http://securityratty.com/tag/russian mass media">russian mass media</category>
      <category domain="http://securityratty.com/tag/cultural protection service">cultural protection service</category>
      <category domain="http://securityratty.com/tag/site fontanka">site fontanka</category>
      <category domain="http://securityratty.com/tag/registration">registration</category>
      <category domain="http://securityratty.com/tag/transferrable license">transferrable license</category>
      <category domain="http://securityratty.com/tag/vast amounts">vast amounts</category>
      <source url="http://wifinetnews.com/archives/008277.html">Russia Requires Wi-Fi Registration</source>
    </item>
    <item>
      <title><![CDATA[Cisco reinforces physical security family]]></title>
      <link>http://securityratty.com/article/7a8573c1d1e48f155f9389f786462a65</link>
      <guid>http://securityratty.com/article/7a8573c1d1e48f155f9389f786462a65</guid>
      <description><![CDATA[Cisco upgrades physical-security product line, with the Cisco High Definition 1080P Intelligent Camera for indoor use and the introduction of the Cisco Physical Access Manager for electronic-access...]]></description>
      <content:encoded><![CDATA[Cisco upgrades physical-security product line, with the Cisco High Definition 1080P Intelligent Camera for indoor use and the introduction of the Cisco Physical Access Manager for electronic-access control for existing door readers, locks and biometric devices.]]></content:encoded>
      <pubDate>Tue, 01 Apr 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cisco">cisco</category>
      <category domain="http://securityratty.com/tag/cisco upgrades">cisco upgrades</category>
      <category domain="http://securityratty.com/tag/product line">product line</category>
      <category domain="http://securityratty.com/tag/door readers">door readers</category>
      <category domain="http://securityratty.com/tag/biometric devices">biometric devices</category>
      <category domain="http://securityratty.com/tag/indoor">indoor</category>
      <category domain="http://securityratty.com/tag/locks">locks</category>
      <category domain="http://securityratty.com/tag/introduction">introduction</category>
      <category domain="http://securityratty.com/tag/control">control</category>
      <source url="http://www.networkworld.com/news/2008/040208-cisco-reinforces-security.html?fsrc=rss-security">Cisco reinforces physical security family</source>
    </item>
  </channel>
</rss>
