<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: mark]]></title>
    <link>http://securityratty.com/tag/mark</link>
    <description></description>
    <pubDate>Wed, 29 Oct 2008 21:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Online Finance Flaws: An Awareness Campaign]]></title>
      <link>http://securityratty.com/article/1aabc5edbe215010d8c71b5aa4aa7551</link>
      <guid>http://securityratty.com/article/1aabc5edbe215010d8c71b5aa4aa7551</guid>
      <description><![CDATA[Here begins a series regarding web application security inadequacies in online financial service offerings. The services to be discussed will include banks, credit unions, credit card companies, and...]]></description>
      <content:encoded><![CDATA[Here begins a series regarding web application security inadequacies in online financial service offerings. The services to be discussed will include banks, credit unions, credit card companies, and others. As the economy struggles profoundly, and much of the blame points at the financial sector, I believe it important to point out the false sense of security so many brand-name financial services wrongly instill in their customers.<br />Often this sense of security is coupled with a typical "security badge" provider, helping drive conversions rather than security, as we will also legitimize how often the badge providers miss the mark on their promises.<br />Accountability in loan making decisions and practices might have prevented the sub-prime market collapse and the subsequent credit crunch that has hogtied our economy. <br />Accountability with regard to web application security while providing online financial services is now all the more important as <a href="http://securitywatch.eweek.com/exploits_and_attacks/as_economy_dives_underground_thrives.html" target="_blank">cybercrime</a> will continue to increase at a pace proportionate to economic woes.<br />Each post relevant to this campaign will include Online Finance Flaw in its title for tracking purposes. <br />Look forward to surprising flaws in financial services brands you'll recognize.<br />Perhaps, the more attention we draw to services that should place security above all else, the more likely it is they'll commit to improving their security posture.<br />Feel free to comment or contribute; we'll begin in a day or two.]]></content:encoded>
      <pubDate>Sat, 29 Nov 2008 19:08:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/web application security">web application security</category>
      <category domain="http://securityratty.com/tag/financial services brands">financial services brands</category>
      <category domain="http://securityratty.com/tag/security badge">security badge</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/security posture">security posture</category>
      <category domain="http://securityratty.com/tag/online financial services">online financial services</category>
      <category domain="http://securityratty.com/tag/economy">economy</category>
      <category domain="http://securityratty.com/tag/economy struggles profoundly">economy struggles profoundly</category>
      <source url="http://holisticinfosec.blogspot.com/2008/11/online-finance-flaws-awareness-campaign_29.html">Online Finance Flaws: An Awareness Campaign</source>
    </item>
    <item>
      <title><![CDATA[Links List 11.24.08]]></title>
      <link>http://securityratty.com/article/f209f4653ec3034a29d9cf1ff2ca5cd8</link>
      <guid>http://securityratty.com/article/f209f4653ec3034a29d9cf1ff2ca5cd8</guid>
      <description><![CDATA[The hunt for the nations first CTO continues . Although names have been suggested, such as standout nominees include Bruce Schneier, founder of Counterpane and now chief security technology officer at...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/markcuban.jpg" border="0" alt="markcuban" width="240" height="164" align="left" /> The hunt for the <a href="http://weblog.infoworld.com/robertxcringely/archives/2008/11/the_once_and_fu.html?source=NLC-NOTES&amp;cgd=2008-11-17" target="_blank">nation’s first CTO continues</a>. Although names have been suggested, such as standout nominees include Bruce Schneier, founder of Counterpane and now chief security technology officer at BT; Mark Cuban for his obvious business sense – and in spite of the <a href="http://www.huffingtonpost.com/2008/11/17/mark-cuban-insider-tradin_n_144320.html" target="_blank">insider trading indictment</a> – and Carly Fiorina, former controversial CEO of HP, the next question is what policies should this CTO pursue? Visit <a href="http://obamacto.org/" target="_blank">ObamaCTO.org</a> to view and vote for policies.</p>
<p>SaaS is taking a bite out of the $18 billion IT management market. A <a href="http://www.informationweek.com/blog/main/archives/2008/11/will_it_managem.html?cid=RSSfeed_IWK_ALL" target="_blank">new Forrester Research report forecasts SaaS-based IT management accounts will be 10%</a> of the market by 2013. The reason: high level of interest from medium-sized and large enterprises. Forrester also predicts that enterprises with 1,000 or more employees will account for 50% of SaaS installations in 2009. We’ve seen this on the service desk side with the <a href="http://www.redmonk.com/cote/2007/01/17/service-nowcom-briefing-itil-saas/" target="_blank">rapid growth of upstart Service-now.com</a>. Companies are looking for easier and rapid deployment, lower upfront and capital costs and rapid time to value – all benefits of SaaS as well as our own <a href="http://www.sciencelogic.com/appliancebenefits.htm" target="_blank">appliance model</a>.</p>
<p><a href="http://chucksblog.emc.com/chucks_blog/2008/11/the-speculation-game-ibm-buys-transitive.html" target="_blank">IBM snapped up Transitive</a> this week. Their QuickTransit software dynamically translates native code <a href="http://arstechnica.com/news.ars/post/20081120-ibm-to-buy-transitive.html" target="_blank">between architectures</a>, enabling apps compiled for one processor to be run on another without any modification. Apple was the first licensee and used it to build Rosetta, a translation system that allowed users of Intel Macs to seamlessly run legacy PowerPC apps. IBM plans to use the technology to move workloads onto IBM systems without recompiling, allowing customers to “save on energy costs due to hardware consolidation and reduced TCO.”</p>
<p>At CA World, CA announced a partnership with Amazon to provide “<a href="http://stage.vambenepe.com/archives/442" target="_blank">management capabilities around Amazon’s EC2</a> utility computing platform, potentially including discovery of software running on EC2 instances, performance monitoring, configuration management, software deployment capabilities and provisioning”. John Willis, in spite of some pretty funny potshots and stories about CA (don’t we all have them), writes that “<a href="http://www.johnmwillis.com/amazon/what-color-is-your-cloud/" target="_blank">CA is the first of the Big Four to take the cloud serious</a>”.</p>
]]></content:encoded>
      <pubDate>Mon, 24 Nov 2008 11:15:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/software deployment capabilities">software deployment capabilities</category>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/ibm plans">ibm plans</category>
      <category domain="http://securityratty.com/tag/ibm">ibm</category>
      <category domain="http://securityratty.com/tag/apps">apps</category>
      <category domain="http://securityratty.com/tag/legacy powerpc apps">legacy powerpc apps</category>
      <category domain="http://securityratty.com/tag/saas">saas</category>
      <category domain="http://securityratty.com/tag/saas installations">saas installations</category>
      <category domain="http://securityratty.com/tag/market">market</category>
      <source url="http://blog.sciencelogic.com/links-list-112408/11/2008">Links List 11.24.08</source>
    </item>
    <item>
      <title><![CDATA[The Future of Ephemeral Conversation]]></title>
      <link>http://securityratty.com/article/1474b03de8a1d60cdf0aa28759ddce93</link>
      <guid>http://securityratty.com/article/1474b03de8a1d60cdf0aa28759ddce93</guid>
      <description><![CDATA[When he becomes president, Barack Obama will have to give up his BlackBerry. Aides are concerned that his unofficial conversations would become part of the presidential record, subject to subpoena and...]]></description>
      <content:encoded><![CDATA[<p>When he becomes president, Barack Obama will have to <a href="http://www.nytimes.com/2008/11/16/us/politics/16blackberry.html">give up</a> his BlackBerry.  Aides are concerned that his unofficial conversations would become part of the presidential record, subject to subpoena and eventually made public as part of the country's historical record.</p>

<p>This reality of the information age might be particularly stark for the president, but it's no less true for all of us.  Conversation used to be ephemeral.  Whether face-to-face or by phone, we could be reasonably sure that what we said disappeared as soon as we said it. Organized crime bosses worried about phone taps and room bugs, but that was the exception.  Privacy was just assumed.</p>

<p>This has changed.  We chat in e-mail, over SMS and IM, and on social networking websites like Facebook, MySpace, and LiveJournal.  We blog and we Twitter.  These conversations -- with friends, lovers, colleagues, members of our cabinet -- are not ephemeral; they <a href="http://www.schneier.com/essay-109.html">leave their own electronic trails</a>.</p>

<p>We know this intellectually, but we haven't truly internalized it.  We type on, engrossed in conversation, forgetting we're being recorded and those recordings might come back to haunt us later.</p>

<p>Oliver North learned this, way back in 1987, when messages he thought he had deleted were saved by the White House PROFS system, and then subpoenaed in the Iran-Contra affair.  Bill Gates learned this in 1998 when his conversational e-mails were provided to opposing counsel as part of the antitrust litigation discovery process.  Mark Foley learned this in 2006 when his instant messages were <a href="http://abcnews.go.com/WNT/BrianRoss/story?id=2509586">saved and made public</a> by the underage men he talked to.  Paris Hilton learned this in 2005 when her cell phone account was <a href="http://www.washingtonpost.com/wp-dyn/content/article/2005/05/19/AR2005051900711.html">hacked</a>, and Sarah Palin learned it earlier this year when her Yahoo e-mail account was hacked.  Someone in George W. Bush's administration learned this, and <a href="http://www.cnn.com/2007/POLITICS/04/13/white.house.email/index.html">millions of e-mails</a> went mysteriously and conveniently missing.</p>

<p>Ephemeral conversation is dying.</p>

<p>Cardinal Richelieu famously said, :If one would give me six lines written by the hand of the most honest man, I would find something in them to have him hanged."  When all our ephemeral conversations can be saved for later examination, different rules have to apply.  Conversation is not the same thing as correspondence.  Words uttered in haste over morning coffee, whether spoken in a coffee shop or thumbed on a Blackberry, are not official pronouncements.  Discussions in a meeting, whether held in a boardroom or a chat room, are not the same as answers at a press conference.  And privacy isn't just about having something to hide; it <a href="http://www.schneier.com/essay-114.html">has enormous value</a> to democracy, liberty, and our basic humanity.</p>

<p>We can't turn back technology; electronic communications are here to stay and <a href="http://en.wikipedia.org/wiki/NSA_warrantless_surveillance_controversy">even our voice conversations are threatened</a>.  But as technology makes our conversations less ephemeral, we need laws to step in and safeguard ephemeral conversation.  We need a comprehensive data privacy law, protecting our data and communications regardless of where it is stored or how it is processed. We need laws forcing companies to keep it private and delete it as soon as it is no longer needed.  Laws requiring ISPs to store e-mails and other personal communications are exactly what we don't need.</p>

<p>Rules pertaining to government need to be different, because of the <a href="http://www.schneier.com/essay-208.html">power differential</a>.  Subjecting the president's communications to eventual public review increases liberty because it reduces the government's power with respect to the people.  Subjecting our communications to government review decreases liberty because it reduces our power with respect to the government.  The president, as well as other members of government, need some ability to converse ephemerally -- just as they're allowed to have unrecorded meetings and phone calls -- but more of their actions need to be subject to public scrutiny.</p>

<p>But laws can only go so far.  Law or no law, when something is made public it's too late.  And many of us like having complete records of all our e-mail at our fingertips; it's like our offline brains.</p>

<p>In the end, this is cultural.</p>

<p>The Internet is the greatest generation gap since rock and roll.  We're now witnessing one aspect of that generation gap: the younger generation chats digitally, and the older generation treats those chats as written correspondence.  Until our CEOs blog, our Congressmen Twitter, and our world leaders send each other LOLcats &ndash; until we have a Presidential election where both candidates have a complete history on social networking sites from before they were teenagers&ndash; we aren't fully an information age society.</p>

<p>When everyone leaves a public digital trail of their personal thoughts since birth, no one will think twice about it being there.  Obama might be on the younger side of the generation gap, but the rules he's operating under were written by the older side.  It will take another generation before society's tolerance for digital ephemera changes.</p>

<p>This essay <a href="http://online.wsj.com/article/SB122722381368945937.html">previously appeared</a> on <ui>The Wall Street Journal</a> website (not the print newspaper), and is an update of <a href="http://www.schneier.com/essay-129.html">something I wrote previously</a>.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=jPWiN"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=jPWiN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=hlUTN"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=hlUTN" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Mon, 24 Nov 2008 11:06:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ephemeral conversation">ephemeral conversation</category>
      <category domain="http://securityratty.com/tag/conversation">conversation</category>
      <category domain="http://securityratty.com/tag/safeguard ephemeral conversation">safeguard ephemeral conversation</category>
      <category domain="http://securityratty.com/tag/ephemeral">ephemeral</category>
      <category domain="http://securityratty.com/tag/ephemeral conversations">ephemeral conversations</category>
      <category domain="http://securityratty.com/tag/conversations">conversations</category>
      <category domain="http://securityratty.com/tag/generation">generation</category>
      <category domain="http://securityratty.com/tag/generation gap">generation gap</category>
      <category domain="http://securityratty.com/tag/public scrutiny">public scrutiny</category>
      <source url="http://www.schneier.com/blog/archives/2008/11/the_future_of_e.html">The Future of Ephemeral Conversation</source>
    </item>
    <item>
      <title><![CDATA[Oregon Woman Loses $400,000 to Nigerian E-Mail Scam]]></title>
      <link>http://securityratty.com/article/83da04f5ef428bba9cf9bb0cc9995e30</link>
      <guid>http://securityratty.com/article/83da04f5ef428bba9cf9bb0cc9995e30</guid>
      <description><![CDATA[An Oregon woman who is out $400,000 after falling for a well-known Internet scam says she wasn't a sucker or an easy...]]></description>
      <content:encoded><![CDATA[An Oregon woman who is out $400,000 after falling for a well-known Internet scam says she wasn't a sucker or an easy mark.<img src="http://feedproxy.google.com/~r/digg/topic/security/popular/~4/y9ANZlblTJc" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 18 Nov 2008 09:20:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/oregon woman">oregon woman</category>
      <category domain="http://securityratty.com/tag/well-known internet scam">well-known internet scam</category>
      <category domain="http://securityratty.com/tag/easy mark">easy mark</category>
      <category domain="http://securityratty.com/tag/sucker">sucker</category>
      <source url="http://feeds.digg.com/~r/digg/topic/security/popular/~3/y9ANZlblTJc/Oregon_Woman_Loses_400_000_to_Nigerian_E_Mail_Scam">Oregon Woman Loses $400,000 to Nigerian E-Mail Scam</source>
    </item>
    <item>
      <title><![CDATA[Mamma.com: Insider trading and XSS]]></title>
      <link>http://securityratty.com/article/56fd5d403c630cbec7e9ec62becaafc5</link>
      <guid>http://securityratty.com/article/56fd5d403c630cbec7e9ec62becaafc5</guid>
      <description><![CDATA[Mamma.com 's got issues other than Mark Cuban's insider trading allegations. As a point of reference for this conversation, Mamma.com is ranked 4064 on Alexa as of today
I won't profess to following...]]></description>
      <content:encoded><![CDATA[<a href="http://mamma.com/" target="_blank">Mamma.com</a>'s got issues other than Mark Cuban's insider trading allegations. As a point of reference for this conversation, Mamma.com is ranked <a href="http://www.alexa.com/search?q=mamma.com" target="_blank">4064</a> on <a href="http://www.alexa.com" target="_blank">Alexa</a> as of today.<br />I won't profess to following Mr. Cuban's public life and the occasional antics. Obviously, he's a colorful and popular figure; certainly in Dallas, if not nationally. <br />What follows is not a judgment of Mr. Cuban or his pending legal challenges. I'm sure the process will play itself out accordingly.<br />A quick summary and some reference material:<br />The SEC has <a href="http://www.businessweek.com/the_thread/blogspotting/archives/2008/11/sec_hits_mark_c.html?chan=technology_technology+index+page_top+stories" target="_blank">filed</a> insider trading charges against Mr. Cuban. "According to the SEC, Cuban dumped 600,000 shares, or all of his 6.3% stake, in the search engine Mamma.com (The Mother of All Search Engines), in June 2004 after learning about private financing that the company was proposing. By selling, he avoided losing $750,000, the SEC alleges."<br />The whole issue for Mr. Cuban was <a href="http://blogmaverick.com/2008/11/17/the-sec/" target="_blank">PIPE</a> financing because it's "dilutive to existing shareholders’ stakes."<br />That's the long and the short of the current issue, and again, not my real interest here, with the exception of the bet I made with myself regarding the probable web application security posture of mamma.com. <br />All this talk about a popular site immediately sets off the little bell in my head (I hear it a lot). <span style="font-weight:bold;"><br />"What's wrong with the site?" is always the first question I ask myself.</span> <br /><br />I was not disappointed. <br /><br />Mamma.com exhibits the following issues:<br />1) XSS vulnerability in the <span style="font-style:italic;">utfout<span style="font-weight:bold;"><span style="font-style:italic;"></span></span></span> variable.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_kVOWaY1TAF0/SSNDBtG5jhI/AAAAAAAAAEs/rIT7buzVsao/s1600-h/mamma1.png" target="_blank"><img style="cursor:pointer; cursor:hand;width: 320px; height: 184px;" src="http://1.bp.blogspot.com/_kVOWaY1TAF0/SSNDBtG5jhI/AAAAAAAAAEs/rIT7buzVsao/s320/mamma1.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5270129685521075730" /></a><br /><br />2) XSS vulnerability in the <span style="font-style:italic;">qtype</span> variable.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_kVOWaY1TAF0/SSNDSxiGVeI/AAAAAAAAAE0/E-McmPqvoDQ/s1600-h/mamma2.png" target="_blank"><img style="cursor:pointer; cursor:hand;width: 320px; height: 201px;" src="http://3.bp.blogspot.com/_kVOWaY1TAF0/SSNDSxiGVeI/AAAAAAAAAE0/E-McmPqvoDQ/s320/mamma2.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5270129978766677474" /></a><br /><br />3) XSS vulnerability in their Mammajobs site at the <span style="font-style:italic;">pid</span> variable. This one's weirder still; if you drop an IFRAME in, it simply redirects to any URL you include in the IFRAME string.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://4.bp.blogspot.com/_kVOWaY1TAF0/SSNDd-U7c0I/AAAAAAAAAE8/GCrCAoYom5k/s1600-h/mamma3.png" target="_blank"><img style="cursor:pointer; cursor:hand;width: 320px; height: 99px;" src="http://4.bp.blogspot.com/_kVOWaY1TAF0/SSNDd-U7c0I/AAAAAAAAAE8/GCrCAoYom5k/s320/mamma3.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5270130171179660098" /></a><br /><br />4) The prospect of CSRF (rather pointless here given that its just a search engine, but but still defies best practices) appears likely given that mamma.com blindly accepts updates via GET and POST with no sign of a formkey (canary) in sight.<br /><br />I figured it best to stop there, and have submitted all these to Copernic (the Momma parent company). <br />I am however truly disappointed that an enterprise as ambitious and motivated as Momma/Copernic seems to have thrown the baby out with the bath water when it comes to web application security.<br />With regard to Mark Cuban dumping his shares: maybe he was afraid of getting pwned. ;-) All kidding aside, it's a shame that the whimsical and pessimistic thoughts regarding web site security that bounce around in my head inevitably bear themselves out.<br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/11/mammacom-insider-trading-and-xss.html&title=Mamma.com:%20Insider%20trading%20and%20XSS " title="Mamma.com: Insider trading and XSS ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/11/mammacom-insider-trading-and-xss.html" title="Mamma.com: Insider trading and XSS ">digg</a> | <a href="http://slashdot.org/submit.pl?url=http://holisticinfosec.blogspot.com/2008/11/mammacom-insider-trading-and-xss.html">Submit to Slashdot</a>]]></content:encoded>
      <pubDate>Tue, 18 Nov 2008 06:55:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mamma">mamma</category>
      <category domain="http://securityratty.com/tag/mark cuban">mark cuban</category>
      <category domain="http://securityratty.com/tag/cuban">cuban</category>
      <category domain="http://securityratty.com/tag/engine">engine</category>
      <category domain="http://securityratty.com/tag/engine mamma">engine mamma</category>
      <category domain="http://securityratty.com/tag/xss vulnerability">xss vulnerability</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/insider">insider</category>
      <category domain="http://securityratty.com/tag/web site security">web site security</category>
      <source url="http://holisticinfosec.blogspot.com/2008/11/mammacom-insider-trading-and-xss.html">Mamma.com: Insider trading and XSS</source>
    </item>
    <item>
      <title><![CDATA[The Neuroscience of Cons]]></title>
      <link>http://securityratty.com/article/1612b3705bc2d5e59aa4c3d5c4ee99ae</link>
      <guid>http://securityratty.com/article/1612b3705bc2d5e59aa4c3d5c4ee99ae</guid>
      <description><![CDATA[Fascinating : The key to a con is not that you trust the conman, but that he shows he trusts you . Conmen ply their trade by appearing fragile or needing help, by seeming vulnerable. Because of THOMAS...]]></description>
      <content:encoded><![CDATA[<p><a href="http://blogs.psychologytoday.com/blog/the-moral-molecule/200811/how-run-a-con">Fascinating</a>: </p>

<blockquote>The key to a con is not that you trust the conman, <i>but that he shows he trusts you</i>. Conmen ply their trade by appearing fragile or needing help, by seeming vulnerable. Because of THOMAS [The Human Oxytocin Mediated Attachment System], the human brain makes us feel good when we help others--this is the basis for attachment to family and friends and cooperation with strangers. "I need your help" is a potent stimulus for action.</blockquote>

<p>This is interesting.  They say that all cons rely on the mark's greed to work. But this short essay implies that greed is only a secondary factor.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=xsRHN"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=xsRHN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=7DDsN"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=7DDsN" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 18 Nov 2008 03:32:42 +0000</pubDate>
      <category domain="http://securityratty.com/tag/attachment system">attachment system</category>
      <category domain="http://securityratty.com/tag/attachment">attachment</category>
      <category domain="http://securityratty.com/tag/short essay implies">short essay implies</category>
      <category domain="http://securityratty.com/tag/cons rely">cons rely</category>
      <category domain="http://securityratty.com/tag/human oxytocin">human oxytocin</category>
      <category domain="http://securityratty.com/tag/greed">greed</category>
      <category domain="http://securityratty.com/tag/secondary factor">secondary factor</category>
      <category domain="http://securityratty.com/tag/human brain">human brain</category>
      <category domain="http://securityratty.com/tag/potent stimulus">potent stimulus</category>
      <source url="http://www.schneier.com/blog/archives/2008/11/the_neuroscienc.html">The Neuroscience of Cons</source>
    </item>
    <item>
      <title><![CDATA[SEC files insider trading charges against Mark Cuban]]></title>
      <link>http://securityratty.com/article/132a8af275b21e56cb2445ab5099f456</link>
      <guid>http://securityratty.com/article/132a8af275b21e56cb2445ab5099f456</guid>
      <description><![CDATA[The Securities and Exchange Commission filed insider trading charges against Mark Cuban. The Internet entrepreneur vehemently denied the...]]></description>
      <content:encoded><![CDATA[The Securities and Exchange Commission filed insider trading charges against Mark Cuban. The Internet entrepreneur vehemently denied the charges.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:0697d5c96abb48e39af5f167aa795272:yol%2FiCgC5aGTTMgeFwOO%2BMHKtBGuenW%2FmJhTl1fzN%2FkzW4aqnN8mLIpojWUaJIxoO3PCfU0KBEmL'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:adcf15e3c3d4a6d2b920db4336bebf46:saPvoCV6rbg%2FRccQbhbVBfhT1JfVaoT%2Bj00W1jsbnK4MYEeeGm4L9L%2BmZ6r938rhgM7xW66YDOYs5A%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:8383369aa40430444da9573faa508c70:k7BgpVAd6PF%2BOx5fpuFxN3ILhJm8ZW1WDRYixq4yBquU7WR9J1a9lFLVXpRGmgD1j9Avaz1CcgdglA%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:28e05f40e58c26b8a516abb3a9e10232:R1JADRoXDdaJGPHgqmdBJXaWsilwzF%2B7YDKcfO6DFnCSkt72Ozp%2FFmIHpQWqPFDqdVaz4WZaVy9jbw%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>      <a href="http://www.pheedo.com/feeds/ht.php?t=c&amp;i=4ae876688db25c4c33abe4548aebafd4"><img src="http://www.pheedo.com/feeds/ht.php?t=v&amp;i=4ae876688db25c4c33abe4548aebafd4" border="0" /></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=4ae876688db25c4c33abe4548aebafd4" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Mon, 17 Nov 2008 02:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mark cuban">mark cuban</category>
      <category domain="http://securityratty.com/tag/charges">charges</category>
      <category domain="http://securityratty.com/tag/internet entrepreneur vehemently">internet entrepreneur vehemently</category>
      <category domain="http://securityratty.com/tag/securities">securities</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=4ae876688db25c4c33abe4548aebafd4">SEC files insider trading charges against Mark Cuban</source>
    </item>
    <item>
      <title><![CDATA[RSA BSAFE Security A Billion Times Over]]></title>
      <link>http://securityratty.com/article/e2a5ccc509c33f4f95eb06795ee13da8</link>
      <guid>http://securityratty.com/article/e2a5ccc509c33f4f95eb06795ee13da8</guid>
      <description><![CDATA[RSA has marked a McDonalds-like landmark, quietly over one billion applications and devices are now embedded with RSA BSAFE security software. No numbers changed under ubiquitous golden arches to mark...]]></description>
      <content:encoded><![CDATA[RSA has marked a McDonald&rsquo;s-like landmark, quietly&mdash; over one billion applications and devices are now embedded with RSA<strong> &reg; </strong> BSAFE<strong>&reg; </strong>security software. No numbers changed under ubiquitous golden arches to mark this monumental achievement, but it did get me thinking on how deep an impact RSA BSAFE has had in the broad industry sectors as well as at EMC in particular&hellip;]]></content:encoded>
      <pubDate>Sat, 15 Nov 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/rsa">rsa</category>
      <category domain="http://securityratty.com/tag/impact rsa bsafe">impact rsa bsafe</category>
      <category domain="http://securityratty.com/tag/broad industry sectors">broad industry sectors</category>
      <category domain="http://securityratty.com/tag/billion applications">billion applications</category>
      <category domain="http://securityratty.com/tag/mcdonalds-like landmark">mcdonalds-like landmark</category>
      <category domain="http://securityratty.com/tag/monumental achievement">monumental achievement</category>
      <category domain="http://securityratty.com/tag/deep">deep</category>
      <category domain="http://securityratty.com/tag/arches">arches</category>
      <category domain="http://securityratty.com/tag/quietly">quietly</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1388">RSA BSAFE Security A Billion Times Over</source>
    </item>
    <item>
      <title><![CDATA[Morris worm turns 20: Look what it's done]]></title>
      <link>http://securityratty.com/article/20f7cedab1057334c067bec5c49f7548</link>
      <guid>http://securityratty.com/article/20f7cedab1057334c067bec5c49f7548</guid>
      <description><![CDATA[The Internet will mark an infamous anniversary on Sunday, when the Morris worm turns...]]></description>
      <content:encoded><![CDATA[The Internet will mark an infamous anniversary on Sunday, when the Morris worm turns 20.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:84563822f0e81f16cc7cde22cfe57cd5:IrMyu9YAM4Ms77NceityuGGZPBa0mW7rqBT9tpY5DPrRMCXZ%2F8UJ4nbi5bqbBeo%2BsGrIyRdShDiq'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:3c91d9a0f0367308ad557163f9c6e20b:9uXDv13d01%2FbGz51jDdSHmiXcL5SXHxRTIPB98AdjSnfsdWTBVvW3rzZz0wyBZ8rSlS6p2RXuxTD%2BA%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:7dcdae1e91345ddee948359e37fbc718:Oh6qIdAb9r%2BBofYE89rDUi3o6IhcO9P5ASU3QNdLrids9ca8%2BPyEjq68iV3sEoTJSqzookuRr1V1ZQ%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:3d385ef4f0473f0082a66422f4f4f242:Jor0E2Dejt8PoTzvSEUoEMnniZjuXiv7%2Fw%2B2motuNPnqaRvSdKeFIuOArZd37GHD%2FK7%2FUqN6eLvuOw%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=5800dc3e320ee73e27983b81d7569083" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=5800dc3e320ee73e27983b81d7569083" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Thu, 30 Oct 2008 01:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/morris worm">morris worm</category>
      <category domain="http://securityratty.com/tag/infamous anniversary">infamous anniversary</category>
      <category domain="http://securityratty.com/tag/sunday">sunday</category>
      <category domain="http://securityratty.com/tag/mark">mark</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=5800dc3e320ee73e27983b81d7569083">Morris worm turns 20: Look what it's done</source>
    </item>
    <item>
      <title><![CDATA[Morris worm turns 20: Look what it's done ]]></title>
      <link>http://securityratty.com/article/ef4e0610b6b1c16b5c92aadd02927b49</link>
      <guid>http://securityratty.com/article/ef4e0610b6b1c16b5c92aadd02927b49</guid>
      <description><![CDATA[The Internet will mark an infamous anniversary on Sunday, when the Morris worm turns...]]></description>
      <content:encoded><![CDATA[The Internet will mark an infamous anniversary on Sunday, when the Morris worm turns 20.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=90731?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=90731?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Wed, 29 Oct 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/morris worm">morris worm</category>
      <category domain="http://securityratty.com/tag/infamous anniversary">infamous anniversary</category>
      <category domain="http://securityratty.com/tag/sunday">sunday</category>
      <category domain="http://securityratty.com/tag/mark">mark</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <source url="http://www.networkworld.com/news/2008/103008-morris-worm.html?fsrc=rss-security">Morris worm turns 20: Look what it's done </source>
    </item>
  </channel>
</rss>
