<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: m-tech]]></title>
    <link>http://securityratty.com/tag/m-tech</link>
    <description></description>
    <pubDate>Fri, 22 Aug 2008 20:12:38 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[An A to Z of confusion]]></title>
      <link>http://securityratty.com/article/1d340a34dfca897f3be184f083200758</link>
      <guid>http://securityratty.com/article/1d340a34dfca897f3be184f083200758</guid>
      <description><![CDATA[A few days ago I blogged about my paper on email spam volumes comparing aardvarks (email local parts [left of the @] beginning with A) with zebras (those starting with a Z
I observed that provided one...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.lightbluetouchpaper.org/2008/08/25/zebras-and-aardvarks/">A few days ago</a> I blogged about <a href="http://www.cl.cam.ac.uk/~rnc1/aardvark.pdf">my paper on email spam volumes</a> &#8212; comparing &#8220;aardvarks&#8221; (email local parts [left of the @] beginning with &#8220;A&#8221;) with &#8220;zebras&#8221; (those starting with a &#8220;Z&#8221;).</p>
<p>I observed that provided one considered &#8220;real&#8221; aardvarks and zebras &#8212; addresses that received good email amongst the spam &#8212; then aardvarks got 35% spam and zebras a mere 20%.</p>
<p>This has been widely picked up, first in the <a href="http://blogs.guardian.co.uk/technology/2008/08/26/how_to_avoid_spam_start_with_a_z.html">Guardian</a>, and later in many <a href="http://www.itnews.com.au/News/83579,the-a-to-z-of-spamming-exposed.aspx">other</a> papers as well (<a href="http://www.berlingske.dk/article/20080828/verden/80828092/">even in Danish</a>). However, many of these articles have got hold of the <a href="http://www.cartoonstock.com/lowres/aha0007l.jpg">wrong end of the stick</a>. So besides mentioning A and Z, it looks as if I should have published this figure from the paper as well&#8230;</p>
<p><img src="http://www.lightbluetouchpaper.org/wp-content/uploads/2008/08/figure3.png" alt="Figure 3 from the academic paper" class="size-full wp-image-364" /></p>
<p>&#8230; the point being that the effect I am describing has little to do with Z being at the end of the alphabet, and A at the front, but seems to be connected to the relative rarity of zebras.</p>
<p>As you can see from the figure, <a href="http://www.fonts.com/aboutfonts/articles/letterseries/letterm.htm">marmosets</a> and <a href="http://www.fonts.com/aboutfonts/articles/letterseries/letterm.htm">pelicans</a> get around 42% spam (M and P being popular letters for people&#8217;s names) and <a href="http://www.ucmp.berkeley.edu/mammal/mesaxonia/quagga.html">quaggas</a> 21% (there are very few <a href="http://www.brainyquote.com/quotes/authors/q/quentin_crisp.html">Quentins</a>, just as there are very few <a href="http://whimsiedolls.tripod.com/Zach_the_Sack.htm">Zacks</a>).</p>
<p>There are some outliers in the figure: for example &#8220;3&#8243; relates to spammers failing to parse HTML properly and ending up with &#8220;3c&#8221;  (<a href="http://unicode.org/charts/PDF/U0000.pdf">a < character</a>) at the start of names. However, it isn&#8217;t immediately apparent why &#8220;<a href="http://www.unicorncollector.com/legends.htm">unicorns</a>&#8221; get quite so much spam, it may just be a quirk of the way that I have assessed &#8220;realness&#8221;. Doubtless some future research will be able to explain this more fully.</p>
]]></content:encoded>
      <pubDate>Fri, 29 Aug 2008 01:16:28 +0000</pubDate>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/email spam volumes">email spam volumes</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/email local">email local</category>
      <category domain="http://securityratty.com/tag/zebras">zebras</category>
      <category domain="http://securityratty.com/tag/zebras addresses">zebras addresses</category>
      <category domain="http://securityratty.com/tag/aardvarks">aardvarks</category>
      <category domain="http://securityratty.com/tag/real aardvarks">real aardvarks</category>
      <category domain="http://securityratty.com/tag/figure">figure</category>
      <source url="http://www.lightbluetouchpaper.org/2008/08/29/an-a-to-z-of-confusion/">An A to Z of confusion</source>
    </item>
    <item>
      <title><![CDATA[The Stigma Enigma, Revisited]]></title>
      <link>http://securityratty.com/article/c238be0f778cce325c4423b05b36b9e3</link>
      <guid>http://securityratty.com/article/c238be0f778cce325c4423b05b36b9e3</guid>
      <description><![CDATA[Recently my pal Bill Pytlovany (of WinPatrol fame) wrote an article on his blog asking &quot;What's Wrong With Toolbars

I wrote something along similar lines way back in 2005 , and it's vaguely depressing...]]></description>
      <content:encoded><![CDATA[
        Recently my pal Bill Pytlovany (of WinPatrol fame) wrote an <a href="http://billpstudios.blogspot.com/2008/08/what-wrong-with-toolbars.html">article</a> on his blog asking "What's Wrong With Toolbars"?<br /><br />I wrote something along similar lines <a href="http://www.revenews.com/chrisboyd/the-stigma-enigma/">way back in 2005</a>, and it's vaguely depressing to see how little has apparently changed. I'm not going to quote myself, but rather compare and contrast Bills experiences (and those of his commentators) with the person who posted a comment to my entry, which I quote below in full:<br /><br /><div class="comment-content">
                                                <p><i>"Unfortunately,
the few 'honest' toolbars have indeed taken the wrath of users as a
result of the spyware, parasite, adware and other creepy applications
of an otherwise good technology.</i></p>
<p><i>What's interesting is that, as far as my own toolbar system goes,
I've had offers from clients all over the world to develop different
kinds of toolbars -- and without fail -- it is the US-based companies
that seem most willing to cross the line and request applications that
I simply refuse to develop.</i></p>
<p><i>We're talking about features like:</i></p>
<p><i>- Forced Install<br />
- Hidden Install<br />
- Report all URLs back<br />
- Report all searches back<br />
- Forcibly and hidden set home page<br />
- Forcibly and hidden set default search engine<br />
- Forcibly generate un-blockable pop-ups<br />
- Install and run hidden executables<br />
- Bypass all security and anti-virus tools<br />
- The list goes on...</i></p>
<p><i>What's sad is that I'm able to generate the most powerful and
incredibly useful toolbars imaginable. Ones that can save countless
hours of time and effort. Ones that can be customized on a per-user
basis to make the Internet and use of ones's own computer a pleasure.</i></p>
<p><i>However, there will always be people around who's sole motivation is the almighty dollar -- and who will do ANYTHING to get it.</i></p>
<p><i>These people don't care about you, your wants, your needs, your
security or safety -- as long as they can line their pockets with your
money, or by taking advantage of actions you perform (even one lousy
click!).</i></p>
<p><i>They'll infect your machine, using whatever means necessary, and they won't stop -- EVER."</i><br /><br />The "industry" has certainly cleaned up since then, but the insistence on wanting to cram a toolbar on every PC, ever, remains. I must admit to being kind of disturbed that none of these companies seemingly want to take "No" for an answer - instead of leaving alone, they keep coming back every month or so. Of course, given the potential for mass moneymaking that's on offer I can't say I'm entirely surprised...<br /></p>
                    </div><br /> 
        
    ]]></content:encoded>
      <pubDate>Wed, 27 Aug 2008 10:58:56 +0000</pubDate>
      <category domain="http://securityratty.com/tag/toolbars imaginable">toolbars imaginable</category>
      <category domain="http://securityratty.com/tag/toolbars">toolbars</category>
      <category domain="http://securityratty.com/tag/forcibly">forcibly</category>
      <category domain="http://securityratty.com/tag/install">install</category>
      <category domain="http://securityratty.com/tag/toolbar">toolbar</category>
      <category domain="http://securityratty.com/tag/applications">applications</category>
      <category domain="http://securityratty.com/tag/contrast bills experiences">contrast bills experiences</category>
      <category domain="http://securityratty.com/tag/companies">companies</category>
      <category domain="http://securityratty.com/tag/toolbar system">toolbar system</category>
      <source url="http://blog.spywareguide.com/2008/08/the-stigma-enigma-revisited.html">The Stigma Enigma, Revisited</source>
    </item>
    <item>
      <title><![CDATA[Holy Media Codecs, Batman!]]></title>
      <link>http://securityratty.com/article/3d984264f929456ea8e4f274d55394ef</link>
      <guid>http://securityratty.com/article/3d984264f929456ea8e4f274d55394ef</guid>
      <description><![CDATA[Batman is still in full swing at the box office - I'm sure me seeing it seven times probably didn't hurt - so with that in mind (and thoughts of the Zango / Dark Knight issue still rattling around my...]]></description>
      <content:encoded><![CDATA[
        Batman is still in full swing at the box office - I'm sure me seeing it seven times probably didn't hurt - so with that in mind (and thoughts of the <a href="http://www.theregister.co.uk/2008/08/18/dark_knight_zango_affiliate_gateway/">Zango / Dark Knight issue</a> still rattling around my brain) I thought it would be fun to see exactly how quickly it can all go wrong when looking for Dark Knight material online.<br /><br />The answer is: extremely quickly.<br /><br />There's a lot of sites out there claiming to carry "full versions" of The Dark Knight, and although they don't offer Zango, they <i>do</i> offer fake media codecs (which usually do all sorts of horrible things to a computer). Let's pull one of these sites apart as an example of how the scam fits together.<br /><br />Here's a typical site pushing what they claim to be The Dark Knight:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman000.html" onclick="window.open('http://blog.spywareguide.com/images/dbman000.html','popup','width=717,height=564,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman000-thumb-317x249.jpg" alt="dbman000.jpg" class="mt-image-none" style="" height="249" width="317" /></a></span><br />Click to Enlarge<br /></div><br />Dijgg(dot)com, an obvious Digg.com knockoff apparently hosting a large streaming window - the movie quality will be awesome, won't it? Well, actually, no it won't.<br /><br />In the middle of the video window is a popup:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman0.jpg" src="http://blog.spywareguide.com/images/dbman0.jpg" class="mt-image-none" style="" height="145" width="399" /></span></div><br /><br /> <div>Install the "codec", and this won't end well. The EXE comes from a site called Favoritetube(dot)com:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman1.jpg" src="http://blog.spywareguide.com/images/dbman1.jpg" class="mt-image-none" style="" height="203" width="348" /></span></div><br /><br />A quick check for the <a href="http://www.siteadvisor.com/sites/favoritetube.net/postid?p=1063293">safety</a> <a href="http://safeweb.norton.com/report/show?name=favoritetube.net">ratings</a> of that website should be enough to tell you this is a scam. Indeed, there isn't even a movie being streamed here (despite it saying "Connecting" at the bottom of the movie player) - because if you right click on the player itself:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman0000.jpg" src="http://blog.spywareguide.com/images/dbman0000.jpg" class="mt-image-none" style="" height="370" width="418" /></span></div><br /></div><div><br />You can see the "player" is actually just a static image (because I'm given the option to "Copy Image Location"). The image is hosted at Favoritetube, just like the "codecs":<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman2.html" onclick="window.open('http://blog.spywareguide.com/images/dbman2.html','popup','width=655,height=570,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman2-thumb-355x308.jpg" alt="dbman2.jpg" class="mt-image-none" style="" height="308" width="355" /></a></span><br /><br />Click to Enlarge<br /></div><br />There are quite a lot of these sites floating around out there at present:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman3.html" onclick="window.open('http://blog.spywareguide.com/images/dbman3.html','popup','width=738,height=532,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman3-thumb-338x243.jpg" alt="dbman3.jpg" class="mt-image-none" style="" height="243" width="338" /></a></span><br /><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman4.html" onclick="window.open('http://blog.spywareguide.com/images/dbman4.html','popup','width=599,height=533,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman4-thumb-399x355.jpg" alt="dbman4.jpg" class="mt-image-none" style="" height="355" width="399" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman100.html" onclick="window.open('http://blog.spywareguide.com/images/dbman100.html','popup','width=625,height=516,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman100-thumb-325x268.jpg" alt="dbman100.jpg" class="mt-image-none" style="" height="268" width="325" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />At this point, it's a given that I'm going to show you what happens if you install one of the files typically pushed from the above sites, right? Well, wait no longer - this....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman7.jpg" src="http://blog.spywareguide.com/images/dbman7.jpg" class="mt-image-none" style="" height="81" width="84" /></span></div><br /></div><div><br />...will deposit a rogue antispyware tool on your desktop (one of more more obnoxious ones that refuses to leave you alone):<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/antispycheck1.html" onclick="window.open('http://blog.spywareguide.com/images/antispycheck1.html','popup','width=877,height=668,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/antispycheck1-thumb-377x287.jpg" alt="antispycheck1.jpg" class="mt-image-none" style="" height="287" width="377" /></a></span><br /><br />Click to Enlarge<br /></div><br />Strange and annoying icons will start to creep across your desktop:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman8.jpg" src="http://blog.spywareguide.com/images/dbman8.jpg" class="mt-image-none" style="" height="82" width="245" /></span></div><br /></div><div><br />....and you'll have more fake system alerts than you can shake a very large stick at:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="antispycheck22.jpg" src="http://blog.spywareguide.com/images/antispycheck22.jpg" class="mt-image-none" style="" height="304" width="273" /></span></div><br /><br />This concludes my public safety announcement. I'm off to see Dark Knight again...<br /></div>
        
    ]]></content:encoded>
      <pubDate>Wed, 27 Aug 2008 06:10:53 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dark knight issue">dark knight issue</category>
      <category domain="http://securityratty.com/tag/dark knight">dark knight</category>
      <category domain="http://securityratty.com/tag/movie player">movie player</category>
      <category domain="http://securityratty.com/tag/click">click</category>
      <category domain="http://securityratty.com/tag/player">player</category>
      <category domain="http://securityratty.com/tag/enlarge">enlarge</category>
      <category domain="http://securityratty.com/tag/image">image</category>
      <category domain="http://securityratty.com/tag/copy image location">copy image location</category>
      <category domain="http://securityratty.com/tag/movie">movie</category>
      <source url="http://blog.spywareguide.com/2008/08/holy-media-codecs-batman.html">Holy Media Codecs, Batman!</source>
    </item>
    <item>
      <title><![CDATA[ASCII Art Spam]]></title>
      <link>http://securityratty.com/article/49c86c75eefe5a4e5a516c983562397c</link>
      <guid>http://securityratty.com/article/49c86c75eefe5a4e5a516c983562397c</guid>
      <description><![CDATA[I recently had a chat with Stephen Shankland over at CNET regarding the weird and wacky world of ASCII Art Spam . It's been around for some time now, and every now and again there's a little surge...]]></description>
      <content:encoded><![CDATA[
        I recently had a chat with Stephen Shankland over at CNET regarding the weird and wacky world of <a href="http://news.cnet.com/8301-1023_3-10025917-93.html">ASCII Art Spam</a>. It's been around for some time now, and every now and again there's a little surge (currently most of it seems to be coming out of Korea &amp; China) before dying down again.<br /><br />Of course, it has an element of visual appeal to it in some cases:<br /><br /><div class="flickr-frame">	<a href="http://www.flickr.com/photos/petecooper/2759424270/" title="photo sharing"><img src="http://farm4.static.flickr.com/3109/2759424270_7a76511520.jpg" class="flickr-photo" alt="" /></a><br />	<font class="flickr-caption"><a href="http://www.flickr.com/photos/petecooper/2759424270/">A bowl of  spammy noodles</a>, originally uploaded by <a href="http://www.flickr.com/people/petecooper/">pragmatic_pete</a>.</font><br /><br />They're pretty cool noodles, however you look at it. The biggest problem (for the spammers, anyway) continues to be the fact that, for the most part, the spam is largely unintelligble.<br /><br /><div class="flickr-frame">	<a href="http://www.flickr.com/photos/schoschie/351948223/" title="photo sharing"><img src="http://farm1.static.flickr.com/159/351948223_7ba810f520.jpg" class="flickr-photo" alt="" /></a><br />	<font class="flickr-caption"><a href="http://www.flickr.com/photos/schoschie/351948223/">ASCII Art Spam</a>, originally uploaded by <a href="http://www.flickr.com/people/schoschie/">schoschie</a>.<br /><br />.....wha? Sexy....grrmfs? Girls? Gorillas? Who knows. The problem with mangled text also extends (somewhat more crucially) to the URLs they happen to be pimping:<br /><br /></font><div class="flickr-frame">	<a href="http://www.flickr.com/photos/22381191@N02/2697722316/" title="photo sharing"><img src="http://farm4.static.flickr.com/3277/2697722316_f70bc0d65e.jpg" class="flickr-photo" alt="" /></a><br />	<font class="flickr-caption"><a href="http://www.flickr.com/photos/22381191@N02/2697722316/">Spam</a>, originally uploaded by <a href="http://www.flickr.com/people/22381191@N02/">cablejimmy</a>.<br /><br />They're not doing too badly there until they reach the web address, at which point it might as well say<br /><br />www. absolutelynoideawhatthatsays .com<br /><br />Of course, the last thing I'm suggesting is that I long for the day when the spammers get it <i>right</i>, but at least they can provide us with some cheap laughs regarding how hopeless their spam is in the meantime.<br /></font></div></div></div><br /> 
        
    ]]></content:encoded>
      <pubDate>Wed, 27 Aug 2008 04:35:14 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ascii art spam">ascii art spam</category>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/pretty cool noodles">pretty cool noodles</category>
      <category domain="http://securityratty.com/tag/spammy noodles">spammy noodles</category>
      <category domain="http://securityratty.com/tag/web address">web address</category>
      <category domain="http://securityratty.com/tag/visual appeal">visual appeal</category>
      <category domain="http://securityratty.com/tag/pragmatic pete">pragmatic pete</category>
      <category domain="http://securityratty.com/tag/cheap laughs">cheap laughs</category>
      <category domain="http://securityratty.com/tag/spammers">spammers</category>
      <source url="http://blog.spywareguide.com/2008/08/ascii-art-spam.html">ASCII Art Spam</source>
    </item>
    <item>
      <title><![CDATA[Doctoring Photographs without Photoshop]]></title>
      <link>http://securityratty.com/article/343f81e5ef64999b63085fa59a40a0d8</link>
      <guid>http://securityratty.com/article/343f81e5ef64999b63085fa59a40a0d8</guid>
      <description><![CDATA[It's all about the captions : ...doctored photographs are the least of our worries. If you want to trick someone with a photograph, there are lots of easy ways to do it. You don't need Photoshop. You...]]></description>
      <content:encoded><![CDATA[<p>It's all about the <a href="http://morris.blogs.nytimes.com/2008/08/11/photography-as-a-weapon/?ref=opinion">captions</a>:</p>

<blockquote>...doctored photographs are the least of our worries. If you want to trick someone with a photograph, there are lots of easy ways to do it. You don't need Photoshop. You don't need sophisticated digital photo-manipulation. You don't need a computer. All you need to do is change the caption.

<p>The photographs presented by Colin Powell at the United Nations in 2003 provide several examples. Photographs that were used to justify a war. And yet, the actual photographs are low-res, muddy aerial surveillance photographs of buildings and vehicles on the ground in Iraq. I'm not an aerial intelligence expert. I could be looking at anything. It is the labels, the captions, and the surrounding text that turn the images from one thing into another. Photographs presented by Colin Powell at the United Nations in 2003.</p>

<p>Powell was arguing that the Iraqis were doing something wrong, knew they were doing something wrong, and were trying to cover their tracks. Later, it was revealed that the captions were wrong. There was no evidence of chemical weapons and no evidence of concealment. Morris's mockery of the sweeping interpretations made in Powell's photographs.</p>

<p>There is a larger point. I don't know what these buildings were really used for. I don't know whether they were used for chemical weapons at one time, and then transformed into something relatively innocuous, in order to hide the reality of what was going on from weapons inspectors. But I do know that the yellow captions influence how we see the pictures. "Chemical Munitions Bunker" is different from "Empty Warehouse" which is different from "International House of Pancakes." The image remains the same but we see it differently.</p>

<p>Change the yellow labels, change the caption and you change the meaning of the photographs. You don't need Photoshop. That's the disturbing part. Captions do the heavy lifting as far as deception is concerned. The pictures merely provide the window-dressing. The unending series of errors engendered by falsely captioned photographs are rarely remarked on.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=agGdKK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=agGdKK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=6dATMK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=6dATMK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Wed, 27 Aug 2008 03:27:27 +0000</pubDate>
      <category domain="http://securityratty.com/tag/photographs">photographs</category>
      <category domain="http://securityratty.com/tag/actual photographs">actual photographs</category>
      <category domain="http://securityratty.com/tag/captions">captions</category>
      <category domain="http://securityratty.com/tag/yellow captions influence">yellow captions influence</category>
      <category domain="http://securityratty.com/tag/powell">powell</category>
      <category domain="http://securityratty.com/tag/colin powell">colin powell</category>
      <category domain="http://securityratty.com/tag/change">change</category>
      <category domain="http://securityratty.com/tag/chemical weapons">chemical weapons</category>
      <category domain="http://securityratty.com/tag/photoshop">photoshop</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/doctoring_photo.html">Doctoring Photographs without Photoshop</source>
    </item>
    <item>
      <title><![CDATA[Links for 2008-08-26 [del.icio.us]]]></title>
      <link>http://securityratty.com/article/b3feb4d860dfa18b442fbd6aabc5a61d</link>
      <guid>http://securityratty.com/article/b3feb4d860dfa18b442fbd6aabc5a61d</guid>
      <description><![CDATA[Layer 8
The Limits of Running IT Like a Business If you've tried managing an internal IT department as a bona fide business you already know that you can't take that very far, for the obvious reason...]]></description>
      <content:encoded><![CDATA[<ul>
<li><a href="http://layer8.itsecuritygeek.com/layer8/quant-love">Layer 8</a></li>
<li><a href="http://www.cio.com/article/print/335813">The Limits of Running IT Like a Business</a><br/>
If you&#039;ve tried managing an internal IT department as a bona fide business you already know that you can&#039;t take that very far, for the obvious reason that your IT department isn&#039;t a business. It is, after all, a part of a business: a significant contributor to a value chain, not a self-contained value chain of its own.</li>
<li><a href="http://taosecurity.blogspot.com/2008/08/limits-of-running-it-like-business.html">TaoSecurity: The Limits of Running IT Like a Business</a><br/>
The Limits of Running IT Like a Business</li>
<li><a href="http://risktical.com/2008/07/31/what-is-risk/">What is Risk? &laquo; Risktical Ramblings</a></li>
<li><a href="http://searchnetworking.techtarget.com/news/article/0,289142,sid7_gci1326271,00.html">Networking data visualization not just for pointy-headed bosses</a></li>
<li><a href="http://onsaas.net/2008/08/23/challenges-of-enterprise-cloud-computing/">OnSaaS &raquo; Blog Archive &raquo; Challenges of Enterprise Cloud Computing</a></li>
<li><a href="http://channelmarker.blogs.techtarget.com/2008/08/19/794/">Regulatory compliance: Getting customers to look at the big picture &mdash; Channel Marker</a></li>
<li><a href="http://andyitguy.blogspot.com/2008/08/im-not-expert-in-all-things-security.html">Andy, ITGuy: I'm not an expert in all things security, but I am a thinker</a></li>
<li><a href="http://chuvakin.blogspot.com/2008/08/anton-security-tip-of-day-16-virtually.html">Anton Chuvakin Blog - &quot;Security Warrior&quot;: Anton Security Tip of the Day #16: Virtually There - Journey Into VMWare ESX Log Analysis</a></li>
</ul><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/375866715" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 26 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/bona fide business">bona fide business</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/anton security tip">anton security tip</category>
      <category domain="http://securityratty.com/tag/limits">limits</category>
      <category domain="http://securityratty.com/tag/security warrior">security warrior</category>
      <category domain="http://securityratty.com/tag/anton chuvakin blog">anton chuvakin blog</category>
      <category domain="http://securityratty.com/tag/picture channel marker">picture channel marker</category>
      <category domain="http://securityratty.com/tag/department">department</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/375866715/anton18">Links for 2008-08-26 [del.icio.us]</source>
    </item>
    <item>
      <title><![CDATA[Returning from the hiatus... ]]></title>
      <link>http://securityratty.com/article/5df100eb9a27e1bb1da3ce3976f59ce6</link>
      <guid>http://securityratty.com/article/5df100eb9a27e1bb1da3ce3976f59ce6</guid>
      <description><![CDATA[Blue Box listeners
Well, it's been a while. A long while. This summer turned out to be a bit crazier than Jonathan or I ever expected. The good news is that the renovation at my home is finally done...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Blue Box listeners,</p>

<p>Well, it's been a while.  A <em>long</em> while.  This summer turned out to be a bit crazier than Jonathan or I ever expected.  The good news is that the renovation at my home is finally done and I've moved into my home office.  The box of podcasting gear has come up from the basement. I'm not traveling for several weeks... so everything looks good to finally get the huge queue of back episodes out the door.
<p>My goal this week is to get some of the older main shows out first followed by some of the excellent Special Editions that our volunteer production team has put together.  If things work out the way I hope I should be getting you a show a day for the rest of the week. (We'll see.)
<p>Thanks for your patience and continued interest in the show.  We have very definitely <em>not</em> "podfaded"... and we'll be back with more shows and interviews in the weeks and months ahead!  Thanks for continuing to listen.

<p>Dan & Jonathan</div>

<p><a href="http://feeds.feedburner.com/~a/BlueBox?a=eQ5WHi"><img src="http://feeds.feedburner.com/~a/BlueBox?i=eQ5WHi" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/BlueBox?a=rdGF8K"><img src="http://feeds.feedburner.com/~f/BlueBox?i=rdGF8K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BlueBox?a=TRMp3K"><img src="http://feeds.feedburner.com/~f/BlueBox?i=TRMp3K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BlueBox?a=iAPmGK"><img src="http://feeds.feedburner.com/~f/BlueBox?i=iAPmGK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BlueBox?a=6xBEqK"><img src="http://feeds.feedburner.com/~f/BlueBox?i=6xBEqK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BlueBox?a=fttQzk"><img src="http://feeds.feedburner.com/~f/BlueBox?i=fttQzk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BlueBox?a=MxkHFK"><img src="http://feeds.feedburner.com/~f/BlueBox?i=MxkHFK" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/BlueBox/~4/375722179" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 26 Aug 2008 16:15:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/blue box listeners">blue box listeners</category>
      <category domain="http://securityratty.com/tag/box">box</category>
      <category domain="http://securityratty.com/tag/excellent special editions">excellent special editions</category>
      <category domain="http://securityratty.com/tag/home office">home office</category>
      <category domain="http://securityratty.com/tag/home">home</category>
      <category domain="http://securityratty.com/tag/volunteer production team">volunteer production team</category>
      <category domain="http://securityratty.com/tag/jonathan">jonathan</category>
      <category domain="http://securityratty.com/tag/bit crazier">bit crazier</category>
      <category domain="http://securityratty.com/tag/huge queue">huge queue</category>
      <source url="http://feeds.feedburner.com/~r/BlueBox/~3/375722179/returning-from.html">Returning from the hiatus... </source>
    </item>
    <item>
      <title><![CDATA[Thoughts on Token Security]]></title>
      <link>http://securityratty.com/article/e520684c06df65bce8e1084919798c74</link>
      <guid>http://securityratty.com/article/e520684c06df65bce8e1084919798c74</guid>
      <description><![CDATA[RSnake has a piece up on Token Security which raises some good points, but also misses some perspective. Firstly any article that makes a serious attempt at mitigating FUD is most welcome, especially...]]></description>
      <content:encoded><![CDATA[<p>RSnake has a piece up on <a href="http://www.darkreading.com/blog.asp?blog_sectionid=403">Token Security</a> which raises some good points, but also misses some perspective. Firstly any article that makes a serious attempt at mitigating FUD is most welcome, especially in a space that is as overloaded as identity. That <span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">said, I think RSnake is taking too narrow of a view, specifically B2C, on federation and tokens</span><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">. It is true that works on the web eventually filters into the enterprise, but it is also true that sometimes that things that start out as enterprise technologies later become cost effective on the web. So I would not assume that the current status quo on the web will hold. I don&#39;t think it will, the identity problems are too big and there is too much money at stake.</span></p><div><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></div><div><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">I encourage you to read his article, here are some of my thoughts<br /></span><div><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></div></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;consumers hate tokens.&quot;</span></p></blockquote><div><div><span style="font-size: 12px; line-height: normal; "><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">
</span><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">Except that people use atm cards every day. Consumers will absolutely be inconvenienced, if there is some value created. The problem today is not the token, its the lack of a value proposition to the person you are inconveniencing.&#160;</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
</span></div></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;Everyone wants to be the single federation platform for everyone else.&quot;</span></p></blockquote><div><div><span style="font-size: 12px; line-height: normal; "><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">
</span><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">This will never work. and that&#39;s a good thing. i think most companies already realize this though. I think the walled garden model has gone the way of the dodo.</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
</span></div></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;Federation will never work. It won’t work because the single most important consumer Web applications in the world are scared of it. Banks hate the concept because it becomes a weakest link in the chain problem.&quot;</span></p></blockquote><div><div><span style="font-size: 12px; line-height: normal; "><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">
</span><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">Federation works quite well. have a look at google for one example. The reason banks hate federation is that their infosec people have a </span><a href="http://1raindrop.typepad.com/1_raindrop/2008/08/mainframe-mindset.html"><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">mainframe mindset</span></a><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">, they are focused only on resource protection. the problem is they dont run mainframes on closed networks, they went and connected it to the web and so now they need to think about subject and claim security not just resource security. its not hatred its a lack of understanding stemming from a legacy mindset.</span></p><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"></p><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">Linking up identity providers and relying parties into a federation has been a solved problem for quite some time.</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
</span></div></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;Tokens don’t actually solve most security problems, like man-in-the-middle, phishing, and keystroke-logging malware.&quot;</span></p></blockquote><div><div><span style="font-size: 12px; line-height: normal; "><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">
</span><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">Rule 1. there are no silver bullets in security</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">Rule 2. dont forget rule 1</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">but...</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">...there is a rule 3</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">rule 3. just because a security mechanism doesnt solve all of our problems doesnt mean its worthless.</span></p><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"></p><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">I see this with security consultants all the time, they playa hate on static analysis or some scanning tool where they can find hundreds of things the tool doesn&#39;t. Fair point except 99.9999% of IT can&#39;t and won&#39;t find them. Engineering is about solving one incremental problem at a time.</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
</span></div></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;Oh yes, and finally, consumers are going to have to carry around 13 of them just to make sure they can log into whatever they need to log into since no one will federate.&quot;</span></p></blockquote><div><div><span style="font-size: 12px; line-height: normal; "><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">
</span><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">This misses the point of federation. i carry around one atm card its up to banks, Visa, Cirrus and so on to make sure i get my cash. the funny thing about banks not understanding federation is that they have the bet example right in front of their noses, the problem is its in a different department so they never see it.</span></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
</span></div></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;Global federation is nowhere near a solid concept in the consumer space, despite what the vendors will try to sell you.&quot;</span></p></blockquote><div><div><span style="font-size: 12px; line-height: normal; "><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">
</span><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"></p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica"><span style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">rule 4. do your own due diligence</span></p><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><div><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">Tokens and federation are important building blocks for our digital future. I will leave you with a </span><a href="http://1raindrop.typepad.com/1_raindrop/2007/01/integrated_tran.html"><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">story</span></a><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "> that</span><a href="http://en.wikipedia.org/wiki/Robert_Morris_%28cryptographer%29"><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "> Robert Morris Sr.</span></a><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "> told at Defcon several years ago:</span></div><span style="line-height: normal; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></span></div></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;This is a long term problem. If you work on it and make any progress against it, you&#39;ll find yourself much smarter at the far end, than you were at the near end.</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">When I was in Norway about 5 years ago, I was there very close to the summer solstice. I was wandering around town at 2 o&#39;clock in the morning and there was plenty of light out. You come to a sign that says New Minsk about 60 km and it points south.</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">And I ask the lady &quot;what country is this?&quot;</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">She scratched her head for a bit, and said &quot;well I think its Norway&quot;</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">I said &quot;well who plows the roads?&quot;</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">&quot;well Norway does, but he have to pay them.&quot;</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">There is a triple boundary in this town that I was in between Norway, Finland and Russia.</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">But what I did there, was, I had a card about wallet size, I stuck it into a machine, I punched in four digits, and it gave me about 2,000 krone, whatever the hell that is.</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">Now there are a lot of participants in that transaction. When I put a card into that machine, punch in a pin, and it gurgles for awhile, and finally gives me, a fairly large amount of money. There are a lot of participants in that transaction. The bank that owned the machine that gave me the money, it gave some money away -- that bank wants it back. The pin is necessary to convince my own bank that I&#39;m me. But I don&#39;t want my pin to be broadcast all over the world. My bank in the us, it hasn&#39;t really given out or taken in any money, really. But there is a lot of credits involved here. Somebody needs to charge somebody else for having more money&#160;available. Even though there was actually no cash transfer.</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">And the problem that I have in mind is</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">- who are all the participants in an ATM transaction?</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">- what do those participants need to satisfy their problems?</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">- how is that in fact done?</span><span style="font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="color: #333333; line-height: 19px; font-size: 13px; font-family: &#39;Trebuchet MS&#39;; ">In a general way, does the atm system actually work in some reasonable sense? To which the answer is by the way: yes. The atm system damn well works. With extremely high reliability and accuracy. It surprises me. Its quite a bit different than voting machines.</span></p></blockquote>]]></content:encoded>
      <pubDate>Tue, 26 Aug 2008 12:35:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/global federation">global federation</category>
      <category domain="http://securityratty.com/tag/federation">federation</category>
      <category domain="http://securityratty.com/tag/single federation platform">single federation platform</category>
      <category domain="http://securityratty.com/tag/security mechanism">security mechanism</category>
      <category domain="http://securityratty.com/tag/resource security">resource security</category>
      <category domain="http://securityratty.com/tag/security consultants">security consultants</category>
      <category domain="http://securityratty.com/tag/consumer web applications">consumer web applications</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/08/thoughts-on-token-security.html">Thoughts on Token Security</source>
    </item>
    <item>
      <title><![CDATA[A Diverse Portfolio of Fake Security Software - Part Four]]></title>
      <link>http://securityratty.com/article/89e92ac703db317a9f2d0ad0ae004a56</link>
      <guid>http://securityratty.com/article/89e92ac703db317a9f2d0ad0ae004a56</guid>
      <description><![CDATA[Thanks to the affiliate based business model that's driving the increase of fake security software and rogue codecs serving domains, the very same templates, but with different domain names, continue...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SLKFy9dsYiI/AAAAAAAACHE/DiRDPArpb4A/s1600-h/fake_security_software_august.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SLKFy9dsYiI/AAAAAAAACHE/jlXrnI7ApPo/s200-R/fake_security_software_august.JPG" /></a>Thanks to the affiliate based business model that's driving the increase of fake security software and rogue codecs serving domains, the very same templates, but with different domain names, continue appearing in blackhat SEO, spam, and malicious doorways redirection campaigns.<br />
<br />
Moreover, with the "time-to-market" of a fake security software decreasing due to the efficiency approach introduced in the form of tips for abuse-free hosting services provided by the "known suspects", and the freely available templates, we're slowly starting to see the upcoming peak of this approach. <br />
<br />
In a true proactive spirit, the domains parked at 216.195.56.88 are all upcoming fake security software, to be introduced anytime soon.<br />
<br />
<b>fast-pc-scanner-online .com</b> - (92.62.101.41; 91.203.92.48; 91.203.92.106; 58.65.238.171)<br />
<b>top-pc-scanner .com<br />
buy-secure-protection .com<br />
security-scan-pc .com<br />
pc-scanner-online .com<br />
viruses-scanonline .com<br />
virus-scanonline .com<br />
antivirus-scanonline .com<br />
topvirusscan .com<br />
virusbestscan .com<br />
best-security-protection .com<br />
infectionscanner .com<br />
virusbestscanner .com<br />
full-protection-now .com</b><br />
<br />
<b>Pwrantivirus .com</b> - 91.208.0.246<br />
<b>vav-x-scanner .com<br />
vav-scanner .com<br />
scanner.vavscan .com<br />
malware-scan .com<br />
Scanner-Pwrantivirus .com<br />
Xpertantivirus .com<br />
Scanner-xpertantivirus .com</b><br />
<br />
<b>spyware-quickscan-2008 .com</b> - (216.195.56.88)<br />
<b>virus-quickscan-2008 .com<br />
spyware-quickscan-2009 .com<br />
virus-quickscan-2009 .com<br />
winmalwarecontrol .com<br />
antispyware-quick-scan .com<br />
virus-quick-scan .com<br />
antivirus-quick-scan .com<br />
winprivacytool .com</b><br />
<br />
<b>topantispyware2008 .com</b> - (216.195.56.86)<br />
<b>cleanermaster .com</b> - (216.195.56.85)<br />
<b>antivirus777 .com</b> - (67.228.120.3)<br />
<b>pcsecuritynotice .com </b>- (67.228.120.3)<br />
<br />
Whereas the average Internet users are falling victims into this type of fraud, what I'm more concerned about is the large traffic the malicious domains receive in general due to all the different traffic acquisition tactics the people behind them apply. This anticipated traffic can then be greatly used as valuable metrics for the many other malicious ways in which it can be monetized.<br />
<br />
Ironically, the participant in the affiliate program whose original objective was to drive traffic to the fake security software's site, may in fact start receiving so much traffic due to the combination of traffic acquisition tactics, that <a href="http://ddanchev.blogspot.com/2008/02/serving-malware-through-advertising.html">introducing client-side exploits courtesy of a third-party affiliate network</a>, may in fact prove more profitable then the revenue sharing partnership with the rogue security software's vendor at the first place.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/08/diverse-portfolio-of-fake-security_20.html">A Diverse Portfolio of Fake Security Software - Part Three</a><b> </b><br />
<a href="http://ddanchev.blogspot.com/2008/08/diverse-portfolio-of-fake-security.html">A Diverse Portfolio of Fake Security Software - Part Two</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/localized-fake-security-software.html">Localized Fake Security Software</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/diverse-portfolio-of-fake-security.html">Diverse Portfolio of Fake Security Software</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/got-your-xpshield-up-and-running.html">Got Your XPShield Up and Running?</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/fake-pestpatrol-security-software.html">Fake PestPatrol Security Software</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/rbns-fake-security-software.html">RBN's Fake Security Software</a><br />
<a href="http://ddanchev.blogspot.com/2008/07/lazy-summer-days-at-ukrtelegroup-ltds.html">Lazy Summer Days at UkrTeleGroup Ltd</a><br />
<a href="http://ddanchev.blogspot.com/2008/02/geolocating-malicious-isps.html">Geolocating Malicious ISPs</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/malicious-isps-you-rarely-see-in-any.html">The Malicious ISPs You Rarely See in Any Report</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=T4pWXK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=T4pWXK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=fUdxLK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=fUdxLK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=wfXZZk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=wfXZZk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=DNdBTk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=DNdBTk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=A69ooK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=A69ooK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=kvp7rK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=kvp7rK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=PdsGMk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=PdsGMk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/374177616" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 25 Aug 2008 01:58:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/fake security software">fake security software</category>
      <category domain="http://securityratty.com/tag/traffic">traffic</category>
      <category domain="http://securityratty.com/tag/drive traffic">drive traffic</category>
      <category domain="http://securityratty.com/tag/diverse portfolio">diverse portfolio</category>
      <category domain="http://securityratty.com/tag/traffic acquisition tactics">traffic acquisition tactics</category>
      <category domain="http://securityratty.com/tag/malicious">malicious</category>
      <category domain="http://securityratty.com/tag/malicious isps">malicious isps</category>
      <category domain="http://securityratty.com/tag/due">due</category>
      <category domain="http://securityratty.com/tag/traffic due">traffic due</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/374177616/diverse-portfolio-of-fake-security_25.html">A Diverse Portfolio of Fake Security Software - Part Four</source>
    </item>
    <item>
      <title><![CDATA[[OT rant] Are there any home WiFi routers that DON'T SUCK?]]></title>
      <link>http://securityratty.com/article/2110e94e736fbe5f32088eee09481bee</link>
      <guid>http://securityratty.com/article/2110e94e736fbe5f32088eee09481bee</guid>
      <description><![CDATA[Warning: rant ahead, and names named
When I'm not traveling, I like to work from home some days rather than endure the trek from Seattle to Redmond (although it's much better now that our own employee...]]></description>
      <content:encoded><![CDATA[<p><em>Warning: rant ahead, and names named.</em></p>  <p>When I'm not traveling, I like to work from home some days rather than endure the trek from Seattle to Redmond (although it's much better now that our own <a href="http://seattlepi.nwsource.com/business/332970_msftbus25.html" target="_blank">employee transit service</a> has expanded into my neighborhood -- the existence of which is sad commentary on the availability and reliability of Seattle's public transit companies).</p>  <p>This means, of course, that I need fast and stable network connections. Comcast with their PowerBoost is working very well for me. But I just can't find a decent wireless router at all. My Lenovo T61p (with Intel 4965abgn adapter) just won't stay connected to my D-Link DIR-628 and IT'S DRIVING ME CRAZY! (Yes, I've tried various driver versions, from both Lenovo and Intel.)</p>  <p>My house is in an area with a lot of wireless activity -- sometimes I can see nine or ten SSIDs. I'm running draft N on 2.4GHz (which occupies two non-adjacent channels, currently 1 and 4), and I suspect the problem is collision interference. I could shift the router to 5.2GHz, which I probably would help, but then the rest of the computers in my house won't connect. Why, you ask? Well get this: the DIR-628 is part of <a href="http://www.dlink.com/products/category.asp?cid=1&amp;sec=1#cid_103" target="_blank">D-Link's RangeBooster N family</a>. So I stayed in the family and got two DWA-542 adapters for the desktop computers. Yet they only do 2.4GHz! Silly me, I assumed that being in the same family means full support of the router's capabilities.</p>  <p>I'm very tempted to replace my router again -- and I'm thinking that the best option is to get one with dual radios. That way I can move my T61p to 5.2GHz and replace the desktop adapters, while still having single-channel 802.11b/g on 2.4GHz for the Wii and my PlayStation Portable.</p>  <p>Now my request: tell me about your experience with home routers. What do you really like, and why? What should I buy?</p><img src="http://blogs.technet.com/aggbug.aspx?PostID=3110595" width="1" height="1">]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 20:12:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/decent wireless router">decent wireless router</category>
      <category domain="http://securityratty.com/tag/home">home</category>
      <category domain="http://securityratty.com/tag/router">router</category>
      <category domain="http://securityratty.com/tag/lenovo">lenovo</category>
      <category domain="http://securityratty.com/tag/d-link dir-628">d-link dir-628</category>
      <category domain="http://securityratty.com/tag/lenovo t61p">lenovo t61p</category>
      <category domain="http://securityratty.com/tag/intel">intel</category>
      <category domain="http://securityratty.com/tag/dir-628">dir-628</category>
      <category domain="http://securityratty.com/tag/intel 4965abgn adapter">intel 4965abgn adapter</category>
      <source url="http://blogs.technet.com/steriley/archive/2008/08/22/ot-rant-are-there-any-home-wifi-routers-that-don-t-suck.aspx">[OT rant] Are there any home WiFi routers that DON'T SUCK?</source>
    </item>
  </channel>
</rss>
