<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: joe]]></title>
    <link>http://securityratty.com/tag/joe</link>
    <description></description>
    <pubDate>Sun, 06 Jul 2008 20:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Call out a phisher, get attacked by malware]]></title>
      <link>http://securityratty.com/article/89885d5af0acd98eee133555ee125c0c</link>
      <guid>http://securityratty.com/article/89885d5af0acd98eee133555ee125c0c</guid>
      <description><![CDATA[If you're the target of a phishing attack, one thing you probably shouldn't do is backtalk, said Joe Stewart, director of malware research at SecureWorks. Otherwise, you may be the target of a...]]></description>
      <content:encoded><![CDATA[If you're the target of a phishing attack, one thing you probably shouldn't do is backtalk, said Joe Stewart, director of malware research at SecureWorks. Otherwise, you may be the target of a follow-up attack.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=QuBIvS"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=QuBIvS" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/375364738" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 26 Aug 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <category domain="http://securityratty.com/tag/follow-up attack">follow-up attack</category>
      <category domain="http://securityratty.com/tag/malware research">malware research</category>
      <category domain="http://securityratty.com/tag/target">target</category>
      <category domain="http://securityratty.com/tag/joe stewart">joe stewart</category>
      <category domain="http://securityratty.com/tag/secureworks">secureworks</category>
      <category domain="http://securityratty.com/tag/director">director</category>
      <category domain="http://securityratty.com/tag/backtalk">backtalk</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/375364738/article.do">Call out a phisher, get attacked by malware</source>
    </item>
    <item>
      <title><![CDATA[American Launches In-Flight Broadband Pilot]]></title>
      <link>http://securityratty.com/article/5a1252977f7711ca2ccfda8f990edb58</link>
      <guid>http://securityratty.com/article/5a1252977f7711ca2ccfda8f990edb58</guid>
      <description><![CDATA[Welcome back, mile-high Wi-Fi: American Airlines has turned on Internet service in its fleet of 15 767-200s today. These aircraft ply routes between New York's JFK and three cities: San Francisco, Los...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" hspace="5" height="80" width="80" border="0" /><strong><a href="http://www.chicagotribune.com/travel/chicago-american-wifi-aug20,0,7823127.story">Welcome back, mile-high Wi-Fi:</a></strong> American Airlines has turned on Internet service in its fleet of 15 767-200s today. These aircraft ply routes between New York's JFK and three cities: San Francisco, Los Angeles, and Miami. Service is $13 per flight, and bandwidth is expected to be 1.5 Mbps (uncompressed) upstream and downstream, although the service provider, Aircell, claims some advantages above that.</p>

<p>This is a big day for Aircell, which spent tens of millions to acquire the exclusive spectrum license that allows them to shoot Mbps to and from planes. My big question will be whether coverage remains seamless across an entire flight--how often one has to reconnect their VPN would be a big issue. If Aircell has architected the network correctly, passengers should never be reassigned an IP address, and connections shouldn't be dropped even if there's a hiccup in air-to-ground communication.</p>

<p>I've covered in-flight broadband for several years, and I've been wondering lately whether we'd be waiting until 2009 to see real production service. American is calling this a 3-to-6 month pilot to see what their passengers think. Just yesterday, I <strong><a href="http://wifinetnews.com/archives/008422.html">wrote up</a></strong> veteran travel writer Joe Brancatelli's frustration with the lack of information and some misinformation about in-flight broadband.</p>

<p>You can read more background on American's plans and Aircell's technology in a <strong><a href="http://boingboing.net/2008/06/24/american-airlines-wi.html">post I wrote for BoingBoing</a></strong> on 24-June-2008.</p>]]></content:encoded>
      <pubDate>Wed, 20 Aug 2008 04:33:21 +0000</pubDate>
      <category domain="http://securityratty.com/tag/flight">flight</category>
      <category domain="http://securityratty.com/tag/in-flight broadband">in-flight broadband</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/service provider">service provider</category>
      <category domain="http://securityratty.com/tag/american">american</category>
      <category domain="http://securityratty.com/tag/internet service">internet service</category>
      <category domain="http://securityratty.com/tag/real production service">real production service</category>
      <category domain="http://securityratty.com/tag/american airlines">american airlines</category>
      <category domain="http://securityratty.com/tag/aircell">aircell</category>
      <source url="http://wifinetnews.com/archives/008424.html">American Launches In-Flight Broadband Pilot</source>
    </item>
    <item>
      <title><![CDATA[Leading Travel Writer Reams Out In-Flight Internet]]></title>
      <link>http://securityratty.com/article/f64004c5f420a4aa7be1520dea970d4b</link>
      <guid>http://securityratty.com/article/f64004c5f420a4aa7be1520dea970d4b</guid>
      <description><![CDATA[Joe Brancatelli pokes beneath the surface of claims that in-flight Internet is imminent: I've covered some of the same ground, but veteran travel writer Brancatelli connected the dots by checking with...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/08/19/AR2008081901066.html"><strong>Joe Brancatelli pokes beneath the surface of claims that in-flight Internet is imminent:</strong></a> I've covered some of the same ground, but veteran travel writer Brancatelli connected the dots by checking with the FAA to find the status of applications for aircraft certification by Aircell and others. </p>

<p>He's not very positive about it, because his research shows a mismatch between claims and work. He writes that an unnamed American airline executive is frustrated by the delay in launching the 3-to-6 month pilot on their trans-continental fleet; that Aircell hasn't submitted paperwork for Virgin's Airbus models for certification; and that the FAA just received a request to certify Delta's MD-80 craft, which makes a launch with 75 planes this year on that airline less likely.</p>

<p>Competitor Row 44 doesn't fare better in his analysis, as they promised spring and summer 2008 tests that still haven't happened, with Southwest and Alaska Airlines.</p>

<p>I'm a little more positive about the future of in-flight broadband. There's no particular conspiracy. It's hard to make it work. Development and testing is tricky due to FAA limits, and getting in-flight handoffs to work for seamless service at 35,000 feet is far more difficult than, say, cellular handoffs in a moving car at 100 feet above sea level. My suspicion is that tuning the service to be entirely reliable at launch is what's taking so long.</p>

<p>Brancatelli blames the high price of Connexion on its failure, but I don't think the $27 fee for long-haul flights deterred users. Lufthansa, which deployed all its long-haul fleet, apparently had very good usage. Most other airlines had few craft equipped, which didn't allow business travelers, able to expense several hours of work for a $27 fee, the reliability of having on-board Internet when they needed it. Connexion also had many reports of spotty service in certain areas. </p>

<p>Connexion's failure came from deploying technology that was old when it was deployed, which weighed too much, and which was too expensive to install. Connexion's revenue and expenses were forecast based on having several hundred aircraft with Connexion service--recall that it was supposed to be a domestic U.S. service, too. In the end they had about 100, I believe. </p>

<p>Brancatelli is also modest when he says Boeing "lost" $300m. That's part of what they wrote down. My sources say they spent more than a billion in R&D, transponder leases, ground station operation, airline incentives, and payoffs at the end.</p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 05:34:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/seamless service">seamless service</category>
      <category domain="http://securityratty.com/tag/spotty service">spotty service</category>
      <category domain="http://securityratty.com/tag/connexion service">connexion service</category>
      <category domain="http://securityratty.com/tag/connexion">connexion</category>
      <category domain="http://securityratty.com/tag/airline incentives">airline incentives</category>
      <category domain="http://securityratty.com/tag/airline">airline</category>
      <category domain="http://securityratty.com/tag/in-flight internet">in-flight internet</category>
      <category domain="http://securityratty.com/tag/ground">ground</category>
      <source url="http://wifinetnews.com/archives/008422.html">Leading Travel Writer Reams Out In-Flight Internet</source>
    </item>
    <item>
      <title><![CDATA[Show 029 - An Interview with Dennis Fisher]]></title>
      <link>http://securityratty.com/article/ed23afa251e7ed42c51726c5d78957a6</link>
      <guid>http://securityratty.com/article/ed23afa251e7ed42c51726c5d78957a6</guid>
      <description><![CDATA[On the 29th episode of The Silver Bullet Security Podcast, Gary talks with Dennis Fisher, executive editor of The Security Media Group at TechTarget. Dennis helps run SearchSecurity.com and...]]></description>
      <content:encoded><![CDATA[<p><img align="right" alt="Dennis Fisher" title="Dennis Fisher" src="http://www.cigital.com/silverbullet/dfisher-108.png" style="padding-left: 7px;" /></p>
<p>On the 29th episode of The Silver Bullet Security Podcast, Gary talks with Dennis Fisher, executive editor of The Security Media Group at TechTarget.  Dennis helps run SearchSecurity.com and <em>Information Security Magazine</em>.  Gary and Dennis discuss the current &#8220;BS factor&#8221; in security journalism, shopping at TJ Maxx right after the TJX privacy breach, the state of software security, and which is harder: being a fry cook at Hardees or working as a PR flack.</p>
<ul>
<li><a href="http://security.blogs.techtarget.com/author/security/">Dennis&#8217; blog</a></li>
<li><a href="http://searchsecurity.techtarget.com/news/column/0,294698,sid14_gci1239802,00.html">TJX</a></li>
<li><a href="http://music.aol.com/video/dirty-laundry/the-eagles/tag/joe-walsh/1354381">Joe Walsh plays dirty laundry</a></li>
<li><a href="http://www.informit.com/articles/article.aspx?p=1237978">Software Security Grows</a></li>
<li><a href="http://securitywireweekly.blogs.techtarget.com/2008/07/31/the-state-of-software-security">Dennis&#8217; un-named podcast</a></li>
<li><a href="http://www.youtube.com/watch?v=f99PcP0aFNE">Series of Tubes</a></li>
<li><a href="http://www.hardees.com/">Hardees</a></li>
<li><a href="http://www.cs.washington.edu/research/systems/privacy.htm">Nike/iPod</a></li>
</ul>
]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 11:05:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dennis">dennis</category>
      <category domain="http://securityratty.com/tag/dennis fisher">dennis fisher</category>
      <category domain="http://securityratty.com/tag/dennis discuss">dennis discuss</category>
      <category domain="http://securityratty.com/tag/software security">software security</category>
      <category domain="http://securityratty.com/tag/software security grows">software security grows</category>
      <category domain="http://securityratty.com/tag/dennis helps">dennis helps</category>
      <category domain="http://securityratty.com/tag/tjx privacy breach">tjx privacy breach</category>
      <category domain="http://securityratty.com/tag/tjx">tjx</category>
      <category domain="http://securityratty.com/tag/gary talks">gary talks</category>
      <source url="http://www.cigital.com/silverbullet/show-029/">Show 029 - An Interview with Dennis Fisher</source>
    </item>
    <item>
      <title><![CDATA[Baseball, baseball, baseball]]></title>
      <link>http://securityratty.com/article/38719590135fe54054c5e5e6e5020151</link>
      <guid>http://securityratty.com/article/38719590135fe54054c5e5e6e5020151</guid>
      <description><![CDATA[It may be the dog days of summer, but it is the height of the baseball season and the trade deadline just passed. Not without some blockbuster deals going down though. The biggest one is the a 3 team...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/manny.jpg"><img title="manny" style="border-right: 0px; border-top: 0px; margin: 0px 0px 10px 10px; border-left: 0px; border-bottom: 0px" height="167" alt="manny" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/manny_thumb.jpg" width="240" align="right" border="0"></img></a> It may be the dog days of summer, but it is the height of the baseball season and the trade deadline just passed.  Not without some blockbuster deals going down though.  The biggest one is the a <a href="http://sports.yahoo.com/mlb/news;_ylt=AqX_mse4Ys11r7mt8kibiU05nYcB?slug=txmannyramireztrade&amp;prov=st&amp;type=lgns">3 team deal involving the Dodgers, Pirates and the Red Sox</a>.  The BoSox give up the heart and soul of their championship team, future hall of famer, Manny Ramirez. In exchange they get from the Pirates, Jason Bay. A few other players involved, but who cares.  Does this mean the Sox are giving up on this season?  As a Yankee fan I can’t tell you how happy I am not to see Manny so many times a year.  I also think Joe Torre will do a great job of managing Manny out in LA. Good luck to Manny.  Though he killed us for years, I respected his talent.</p>  <p>Speaking of the Yankees, they have made a few moves for the pennant run.  In addition to their own trade with the Pirates to get Xavier Nady and Damaso Marte, they pulled off a great deal <a href="http://sports.yahoo.com/mlb/news?slug=ap-tigers-yankees-trade&amp;prov=ap&amp;type=lgns">yesterday getting Pudge Rodriguez</a> to fill in as catcher for Jorge Posada.  This could be a huge deal for the Yankees.  They gave up Kyle Farnsworth, who while threw well this year, gave up home runs like candy.  I am flying up to NY with my two sons tomorrow and will be at the Stadium tomorrow night to watch the Yanks play the Angels, <a href="http://www.beyondtheboxscore.com/2008/7/30/582411/teixeira-trade-a-mistake-f">who also made a big trade</a> for the Braves Mark Teixeira.</p>  <p>Another future hall of famer, Ken Griffey, Jr was also traded to the White Sox today.  Wow! What a day in baseball. I can’t wait to sit in the temple that is Yankee Stadium with my two boys tomorrow. It is like a dream come true, similar to taking them to a Steeler game last year.  With all of the action going on around baseball it is also a great time to do it.</p>
<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=pkoIDN"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=pkoIDN" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=JHo9BJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=JHo9BJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=bDxF3J"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=bDxF3J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=RaNfiJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=RaNfiJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=HXIgVJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=HXIgVJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Bqyamj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Bqyamj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=7HtECj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=7HtECj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/351933443" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 31 Jul 2008 12:13:20 +0000</pubDate>
      <category domain="http://securityratty.com/tag/baseball">baseball</category>
      <category domain="http://securityratty.com/tag/sox">sox</category>
      <category domain="http://securityratty.com/tag/manny ramirez">manny ramirez</category>
      <category domain="http://securityratty.com/tag/baseball season">baseball season</category>
      <category domain="http://securityratty.com/tag/manny">manny</category>
      <category domain="http://securityratty.com/tag/red sox">red sox</category>
      <category domain="http://securityratty.com/tag/trade deadline">trade deadline</category>
      <category domain="http://securityratty.com/tag/future hall">future hall</category>
      <category domain="http://securityratty.com/tag/trade">trade</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/351933443/baseball-baseba.html">Baseball, baseball, baseball</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Kentucky Town-Fi; Exorbitant Hotel-Fi]]></title>
      <link>http://securityratty.com/article/f6c9992466c72a222e4afddfdbb584de</link>
      <guid>http://securityratty.com/article/f6c9992466c72a222e4afddfdbb584de</guid>
      <description><![CDATA[Kentucky town shaves 97 percent of Wi-Fi network cost: The town of Prestonsburg, Kent., thought a city-wide Wi-Fi network could help attract tourists and businesses, while expanding remote access for...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.govtech.com/gt/377232?topic=117699"><strong>Kentucky town shaves 97 percent of Wi-Fi network cost:</strong></a> The town of Prestonsburg, Kent., thought a city-wide Wi-Fi network could help attract tourists and businesses, while expanding remote access for telemedicine and other purposes. But Government Technology reports that the first estimates for building a network were from $48,000 to $248,000. They opted to use Meraki's mesh gear and spent $8,500 instead, covering just a 2-mi stretch of their downtown. About 2/3rds was for the equipment, the rest for DSL connections and marketing. The service is free and has no ads at present.</p>

<p><a href="http://www.portfolio.com/business-travel/seat-2B/2008/07/15/Hotel-Internet-Access?rss=true"><strong>Portfolio critiques crazy hotel Wi-Fi pricing:</strong></a> The travel guru that is Joe Brancatelli turns a steely eye to $15 per night charges at fancy hotels for Internet access, noting that cheaper hotels include such service at no cost. The higher-end hotels won't talk for attribution, but they say that a "fraction" of guests use Internet, so why bundle it into the room rate? Pshaw. At $15 per night, four to six users pay the entire cost, while the hotel or its operator accepts a fraction of that rate as settlement from Boingo and iPass and other aggregators. So it's nonsense. They charge because business travelers will expense it and be reimbursed.</p>]]></content:encoded>
      <pubDate>Tue, 15 Jul 2008 07:06:22 +0000</pubDate>
      <category domain="http://securityratty.com/tag/town">town</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/cost">cost</category>
      <category domain="http://securityratty.com/tag/wi-fi network cost">wi-fi network cost</category>
      <category domain="http://securityratty.com/tag/city-wide wi-fi network">city-wide wi-fi network</category>
      <category domain="http://securityratty.com/tag/kentucky town shaves">kentucky town shaves</category>
      <category domain="http://securityratty.com/tag/cheaper hotels include">cheaper hotels include</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <category domain="http://securityratty.com/tag/night">night</category>
      <source url="http://wifinetnews.com/archives/008397.html">Wee-Fi: Kentucky Town-Fi; Exorbitant Hotel-Fi</source>
    </item>
    <item>
      <title><![CDATA[You want the truth, you can't handle the truth!]]></title>
      <link>http://securityratty.com/article/5e8ee0a0eb7aec0d6393e17e6cc64b3d</link>
      <guid>http://securityratty.com/article/5e8ee0a0eb7aec0d6393e17e6cc64b3d</guid>
      <description><![CDATA[I am not sure what it is with Richard Stiennon. Maybe his mom beat him with a NAC stick when he was young. Hence his Jack Nicholson looks (more like the Joker in Batman , than Col Jessep in A Few Good...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/fewgoodmen.jpg"><img title="fewgoodmen" height="183" alt="fewgoodmen" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/fewgoodmen_thumb.jpg" width="179" align="left" border="0" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; MARGIN: 0px 10px 5px 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: 0px" /></a> I am not sure what it is with Richard Stiennon.&nbsp; Maybe his mom beat him with a NAC stick when he was young.&nbsp; Hence his Jack Nicholson looks (more like the Joker in <a class="zem_slink" title="Batman" href="http://www.dccomics.com/sites/batman/" rel="homepage">Batman</a>, than Col Jessep in <a class="zem_slink" title="A Few Good Men" href="http://www.imdb.com/title/tt0104257" rel="imdb">A Few Good Men</a>) and his total disdain for NAC.&nbsp; In any event Richard never seems to miss a chance to take a pot shot at NAC.&nbsp; I have fired back and debated him many times on this.&nbsp; In fact I am convinced that Richard's problem with NAC is that like Uncle Joe, he is just moving a little slow.&nbsp; Richard still thinks of NAC as Cisco???s network admission control, circa Dec ???03.&nbsp; He has not gotten up to speed on anything happening with NAC since.&nbsp; Richard is going to debate NAC with Joel Snyder according to <a href="http://www.networkworld.com/newsletters/vpn/2008/070708nac2.html">this article</a> by Tim Greene today. My prediction is Snyder by a knockout in 3 rounds or less.</p>

<p>Richard???s latest NAC knock comes on a comment to an <a href="http://rationalsecurity.typepad.com/blog/2008/07/security-analys.html?cid=121871540#comment-121871540">excellent article by the Hoff</a>.&nbsp; Chris takes a bold stand for someone working for a vendor and calls BS on the whole analyst thing (I will write more about that later in this article). Richard being an ex-analyst himself (lets face it, with Richard you can take the man out of the analyst job, but you can???t take the analyst out of the man), takes exception to Hoff???s ???whining??? (Richards words, not mine) and tries to tell Hoff that giving up is not the answer and the way to show up analysts, is to prove them wrong.&nbsp; Great Richard you try to prove them wrong, when because of what they report you don???t have a market, can???t get any capital and have no visibility.&nbsp; I guess that is when it is time to move on to the next gig, right? Then Richard has a bad NAC deja vu and feels it necessary to write this: </p><blockquote><p><em>???Look how easy it is to one up the analyst firms, who as near as I can tell support Network Admission Control universally. Everyone except the folks at Updata Ventures know how seriously flawed NAC is with only one viable market, edu.???</em></p></blockquote><p>I assume Richard is referring to Updata recently leading the Bradford Networks VC round. But more importantly Richard it is time to call a code red on you and give you the cold hard truth.&nbsp; Richard the fact is that the edu market is not the only viable market for NAC.&nbsp; In fact, one of the biggest customers of NAC is the DoD.&nbsp; That is right Richard at least 3 of the 4 armed forces use NAC in helping to secure their networks. To paraphrase my friend Col Jessep - Richard, you want the truth, you can???t handle the truth!&nbsp; You sleep securely under the blanket of protection that NAC provides.&nbsp; If it is good enough to help ???clean the sand??? out of laptops coming home from SWA (that is SouthWest Asia, like in Iraq and Afghanistan, in case you don???t know Richard), it should be good enough for you. Think about that next time you are about to bad mouth NAC.</p>

<p>Let me give you some other truths you may not like Richard.&nbsp; Why do you think every switch vendor (of which we partner with many of them) is lining up and bringing out NAC solutions?&nbsp; Why has Microsoft put such a big push on NAP?&nbsp; Why despite the Luddites like you does NAC still draw crowds at conferences like Interop (ask Joel about that).&nbsp; Richard we are still signing new major OEM partners.&nbsp; I am afraid you are the one sadly out of touch on this one Richard.&nbsp; Just as you are out of touch in missing Hoff???s point in his article.</p>

<p>As to Hoff???s article, as I said I give Chris credit for speaking his mind. I spend an ungodly amount of my time speaking with analysts and trying to ???learn??? from them while at the same time trying to educate them.&nbsp; I am constantly amazed that so many analysts (and press for that matter) just take a vendors word as gospel. I have seen research reports from analysts big and small, that I am sure did not have any more research done than calling a handful of vendors and listening to their spiel. Too many of these vendors if they do speak to customers, base their findings on such a small sample that it is impossible to have an accurate picture.</p>

<p>Personally, like Hoff says, who watches the watchers is the truth. I would like to see a code of conduct among analysts. I would start by dictating that vendors cannot pay analysts.&nbsp; Take the payola out of the equation the way they did to the DJ/Radio business in the late 50s. Next analyst reports have to come with metrics to back up the findings. I want to know how many customers they spoke to, how big they were, how they were found, etc.&nbsp; A vendor giving an analyst a real live???pet??? customer is not real research. I want to know if the customer pays the analyst. It is a dirty business. </p>

<p>Hey let me be clear, I play the game as well as the next guy.&nbsp; But I agree with Hoff we need to clean up the rules to make the whole analyst thing more fair, viable and valuable.</p>

<div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/e6165b9b-253e-4392-a8dd-ef9917b5dc2e/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_e.png?x-id=e6165b9b-253e-4392-a8dd-ef9917b5dc2e" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>
]]></content:encoded>
      <pubDate>Thu, 10 Jul 2008 18:50:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/nac">nac</category>
      <category domain="http://securityratty.com/tag/nac stick">nac stick</category>
      <category domain="http://securityratty.com/tag/richard">richard</category>
      <category domain="http://securityratty.com/tag/richard stiennon">richard stiennon</category>
      <category domain="http://securityratty.com/tag/bad mouth nac">bad mouth nac</category>
      <category domain="http://securityratty.com/tag/importantly richard">importantly richard</category>
      <category domain="http://securityratty.com/tag/nac knock">nac knock</category>
      <category domain="http://securityratty.com/tag/assume richard">assume richard</category>
      <category domain="http://securityratty.com/tag/event richard">event richard</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/07/you-want-the-tr.html">You want the truth, you can't handle the truth!</source>
    </item>
    <item>
      <title><![CDATA[You want the truth, you can't handle the truth!]]></title>
      <link>http://securityratty.com/article/8ffe83b77278161ca4798e9097d5d497</link>
      <guid>http://securityratty.com/article/8ffe83b77278161ca4798e9097d5d497</guid>
      <description><![CDATA[I am not sure what it is with Richard Stiennon. Maybe his mom beat him with a NAC stick when he was young. Hence his Jack Nicholson looks (more like the Joker in Batman , than Col Jessep in A Few Good...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/fewgoodmen.jpg"><img title="fewgoodmen" height="183" alt="fewgoodmen" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/fewgoodmen_thumb.jpg" width="179" align="left" border="0" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; MARGIN: 0px 10px 5px 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: 0px" /></a> I am not sure what it is with Richard Stiennon.&nbsp; Maybe his mom beat him with a NAC stick when he was young.&nbsp; Hence his Jack Nicholson looks (more like the Joker in <a class="zem_slink" title="Batman" href="http://www.dccomics.com/sites/batman/" rel="homepage">Batman</a>, than Col Jessep in <a class="zem_slink" title="A Few Good Men" href="http://www.imdb.com/title/tt0104257" rel="imdb">A Few Good Men</a>) and his total disdain for NAC.&nbsp; In any event Richard never seems to miss a chance to take a pot shot at NAC.&nbsp; I have fired back and debated him many times on this.&nbsp; In fact I am convinced that Richard's problem with NAC is that like Uncle Joe, he is just moving a little slow.&nbsp; Richard still thinks of NAC as Cisco’s network admission control, circa Dec ‘03.&nbsp; He has not gotten up to speed on anything happening with NAC since.&nbsp; Richard is going to debate NAC with Joel Snyder according to <a href="http://www.networkworld.com/newsletters/vpn/2008/070708nac2.html">this article</a> by Tim Greene today. My prediction is Snyder by a knockout in 3 rounds or less.</p>

<p>Richard’s latest NAC knock comes on a comment to an <a href="http://rationalsecurity.typepad.com/blog/2008/07/security-analys.html?cid=121871540#comment-121871540">excellent article by the Hoff</a>.&nbsp; Chris takes a bold stand for someone working for a vendor and calls BS on the whole analyst thing (I will write more about that later in this article). Richard being an ex-analyst himself (lets face it, with Richard you can take the man out of the analyst job, but you can’t take the analyst out of the man), takes exception to Hoff’s “whining” (Richards words, not mine) and tries to tell Hoff that giving up is not the answer and the way to show up analysts, is to prove them wrong.&nbsp; Great Richard you try to prove them wrong, when because of what they report you don’t have a market, can’t get any capital and have no visibility.&nbsp; I guess that is when it is time to move on to the next gig, right? Then Richard has a bad NAC deja vu and feels it necessary to write this: </p><blockquote><p><em>“Look how easy it is to one up the analyst firms, who as near as I can tell support Network Admission Control universally. Everyone except the folks at Updata Ventures know how seriously flawed NAC is with only one viable market, edu.”</em></p></blockquote><p>I assume Richard is referring to Updata recently leading the Bradford Networks VC round. But more importantly Richard it is time to call a code red on you and give you the cold hard truth.&nbsp; Richard the fact is that the edu market is not the only viable market for NAC.&nbsp; In fact, one of the biggest customers of NAC is the DoD.&nbsp; That is right Richard at least 3 of the 4 armed forces use NAC in helping to secure their networks. To paraphrase my friend Col Jessep - Richard, you want the truth, you can’t handle the truth!&nbsp; You sleep securely under the blanket of protection that NAC provides.&nbsp; If it is good enough to help “clean the sand” out of laptops coming home from SWA (that is SouthWest Asia, like in Iraq and Afghanistan, in case you don’t know Richard), it should be good enough for you. Think about that next time you are about to bad mouth NAC.</p>

<p>Let me give you some other truths you may not like Richard.&nbsp; Why do you think every switch vendor (of which we partner with many of them) is lining up and bringing out NAC solutions?&nbsp; Why has Microsoft put such a big push on NAP?&nbsp; Why despite the Luddites like you does NAC still draw crowds at conferences like Interop (ask Joel about that).&nbsp; Richard we are still signing new major OEM partners.&nbsp; I am afraid you are the one sadly out of touch on this one Richard.&nbsp; Just as you are out of touch in missing Hoff’s point in his article.</p>

<p>As to Hoff’s article, as I said I give Chris credit for speaking his mind. I spend an ungodly amount of my time speaking with analysts and trying to “learn” from them while at the same time trying to educate them.&nbsp; I am constantly amazed that so many analysts (and press for that matter) just take a vendors word as gospel. I have seen research reports from analysts big and small, that I am sure did not have any more research done than calling a handful of vendors and listening to their spiel. Too many of these vendors if they do speak to customers, base their findings on such a small sample that it is impossible to have an accurate picture.</p>

<p>Personally, like Hoff says, who watches the watchers is the truth. I would like to see a code of conduct among analysts. I would start by dictating that vendors cannot pay analysts.&nbsp; Take the payola out of the equation the way they did to the DJ/Radio business in the late 50s. Next analyst reports have to come with metrics to back up the findings. I want to know how many customers they spoke to, how big they were, how they were found, etc.&nbsp; A vendor giving an analyst a real live“pet” customer is not real research. I want to know if the customer pays the analyst. It is a dirty business. </p>

<p>Hey let me be clear, I play the game as well as the next guy.&nbsp; But I agree with Hoff we need to clean up the rules to make the whole analyst thing more fair, viable and valuable.</p>

<div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/e6165b9b-253e-4392-a8dd-ef9917b5dc2e/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_e.png?x-id=e6165b9b-253e-4392-a8dd-ef9917b5dc2e" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=dcwJi7"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=dcwJi7" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Tb6DcJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Tb6DcJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=MtzjiJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=MtzjiJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=BbZUEJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=BbZUEJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=zXRM7J"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=zXRM7J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=9dGsDj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=9dGsDj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=IUwOmj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=IUwOmj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/332294950" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 10 Jul 2008 18:35:46 +0000</pubDate>
      <category domain="http://securityratty.com/tag/nac">nac</category>
      <category domain="http://securityratty.com/tag/nac stick">nac stick</category>
      <category domain="http://securityratty.com/tag/richard">richard</category>
      <category domain="http://securityratty.com/tag/bad mouth nac">bad mouth nac</category>
      <category domain="http://securityratty.com/tag/richard stiennon">richard stiennon</category>
      <category domain="http://securityratty.com/tag/importantly richard">importantly richard</category>
      <category domain="http://securityratty.com/tag/nac knock">nac knock</category>
      <category domain="http://securityratty.com/tag/assume richard">assume richard</category>
      <category domain="http://securityratty.com/tag/nac solutions">nac solutions</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/332294950/you-want-the-tr.html">You want the truth, you can't handle the truth!</source>
    </item>
    <item>
      <title><![CDATA[Diane Greene Ousted from VMware]]></title>
      <link>http://securityratty.com/article/45c4c8711f215690f4a6a577490ce607</link>
      <guid>http://securityratty.com/article/45c4c8711f215690f4a6a577490ce607</guid>
      <description><![CDATA[VMware and EMC announced today that co-founder Diane Greene is leaving her post as CEO of the virtualization giant, effectively immediately. Former Microsoft executive, Paul Maritz, head of EMCs cloud...]]></description>
      <content:encoded><![CDATA[<p><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; margin: 0px 10px 10px 0px; border-right-width: 0px" height="153" alt="diane_greene_03" src="http://blog.sciencelogic.com/wp-content/uploads/2008/07/diane-greene-03.jpg" width="220" align="left" border="0" />VMware and EMC announced today that co-founder <a href="http://virtualization.com/news/2008/07/08/diane-greene-vmware-paul-maritz/" target="_blank">Diane Greene is leaving her post as CEO</a> of the virtualization giant, effectively immediately. Former Microsoft executive, Paul Maritz, head of EMC&#8217;s cloud computing division, will replace her. (<em>img credit <a href="http://gowest.blogs.fortune.cnn.com/2008/07/08/emc-to-vmware-ceo-buh-bye/" target="_blank">Fortune Magazine</a>/Joe Pugliese)</em></p>
<p>There&#8217;s speculation that falling VMware share prices, with no end in sight because of &#8220;poor revenue outlook&#8221; is the reason for the ouster.</p>
<p>Hmm. The stock went public at $29, went as high as $125 and is now at $40.26 (and falling as I write), almost a 40% premium over the first offering. Say what you will about the recently launched Microsoft Hyper-V and the Citrix offering that we never hear about, but VMware is the dominant virtualization player (and likely to remain so for at least some time given Microsoft&#8217;s track record with new product releases) in an exploding market. Gartner predictions are that the installed base of VMs will grow more than 10x between 2007 and 2011 and that by 2012 the majority of x86 server workloads will be running in a VM.</p>
<p>The future still looks pretty rosy for VMware &#8211; perhaps they&#8217;ll be taking a smaller chunk of the pie, but the pie&#8217;s getting much bigger. And all indications pointed to VMware moving up the stack and providing more management solutions (and more revenue streams) for the x86 virtualization market they helped to build.</p>
<p>So why the change? And why now? Is it a coincidence that it&#8217;s an ex-Microsoft exec taking over just as Hyper-V ships? Can only someone who knows the <a href="http://www.25hoursaday.com/weblog/PermaLink.aspx?guid=eaf394bd-c36a-4565-bd5a-9a5c92d42590" target="_blank">Microsoft Way</a> combat the Microsoft Way? Remember this is the guy who wrote that Microsoft should &#8220;<a href="http://www.thestandard.com/news/2008/07/08/founder-diane-greene-ousted-vmware-poor-results-announced" target="_blank">cut off Netscape&#8217;s air supply</a>&#8221;.</p>
<p>So, good idea to say that Microsoft execs are better than VMware execs just as the Hyper-V juggernaut gets rolling? If I didn&#8217;t know better, I&#8217;d say this is the latest example of a <a href="http://www.linuxjournal.com/content/microsoft-fud-campaign-vs-customer" target="_blank">MS FUD campaign</a>&#8230;</p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Diane+Greene+Ousted+from+VMware&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fdiane-greene-ousted-from-vmware%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Tue, 08 Jul 2008 15:09:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/vmware">vmware</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/microsoft executive">microsoft executive</category>
      <category domain="http://securityratty.com/tag/microsoft execs">microsoft execs</category>
      <category domain="http://securityratty.com/tag/vmware share prices">vmware share prices</category>
      <category domain="http://securityratty.com/tag/microsoft hyper-v">microsoft hyper-v</category>
      <category domain="http://securityratty.com/tag/vmware execs">vmware execs</category>
      <category domain="http://securityratty.com/tag/ex-microsoft exec">ex-microsoft exec</category>
      <category domain="http://securityratty.com/tag/market">market</category>
      <source url="http://blog.sciencelogic.com/diane-greene-ousted-from-vmware/07/2008">Diane Greene Ousted from VMware</source>
    </item>
    <item>
      <title><![CDATA[ConSentry CEO talks up security issues ]]></title>
      <link>http://securityratty.com/article/77fcd8812f0bb4518c6c047c0dc5e048</link>
      <guid>http://securityratty.com/article/77fcd8812f0bb4518c6c047c0dc5e048</guid>
      <description><![CDATA[Network-access-control start-up ConSentry Networks has filled its long-vacant CEO position with Joe Golden, a partner in Accel Partners, a ConSentry investor. Golden was a partner in Accel Partners'...]]></description>
      <content:encoded><![CDATA[Network-access-control start-up ConSentry Networks has filled its long-vacant CEO position with Joe Golden, a partner in Accel Partners, a ConSentry investor. Golden was a partner in Accel Partners' London venture-capital office from 2001 until ConSentry hired him; before that he was Cisco's managing director of business development and strategic alliances for Europe, Middle East and Africa. With NAC in flux and with some start-ups having failed, Golden spoke with Network World Senior Editor Tim Greene about ConSentry, its strategy and the future of NAC.]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/consentry">consentry</category>
      <category domain="http://securityratty.com/tag/consentry hired">consentry hired</category>
      <category domain="http://securityratty.com/tag/consentry investor">consentry investor</category>
      <category domain="http://securityratty.com/tag/start-up consentry networks">start-up consentry networks</category>
      <category domain="http://securityratty.com/tag/accel partners">accel partners</category>
      <category domain="http://securityratty.com/tag/london venture-capital office">london venture-capital office</category>
      <category domain="http://securityratty.com/tag/long-vacant ceo position">long-vacant ceo position</category>
      <category domain="http://securityratty.com/tag/middle east">middle east</category>
      <category domain="http://securityratty.com/tag/nac">nac</category>
      <source url="http://www.networkworld.com/news/2008/070708-consentry-ceo.html?fsrc=rss-security">ConSentry CEO talks up security issues </source>
    </item>
  </channel>
</rss>
