<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: miss]]></title>
    <link>http://securityratty.com/tag/miss</link>
    <description></description>
    <pubDate>Fri, 22 Aug 2008 10:15:31 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[We will miss you Paul Newman]]></title>
      <link>http://securityratty.com/article/0087551a911fab9d09a604e70f4ff977</link>
      <guid>http://securityratty.com/article/0087551a911fab9d09a604e70f4ff977</guid>
      <description><![CDATA[You did good Paul. Thanks for all the good you did. You have a great soul. Take care


clipped from www.mercurynews.com

Legendary actor Paul Newman dies at age 83

WESTPORT, Conn.Paul Newman, the...]]></description>
      <content:encoded><![CDATA[<div > You did good Paul. Thanks for all the good you did. You have a great soul.<br/>Take care. </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/5D83C440-CC1C-4870-A9E0-B7B49CCA5528/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/89c5be95-3408-428a-ac0d-fdc150777ba8/5D83C440-CC1C-4870-A9E0-B7B49CCA5528/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://www.mercurynews.com/movies/ci_10576339" href="http://www.mercurynews.com/movies/ci_10576339" style="font-size: 11px;">www.mercurynews.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.mercurynews.com/movies/ci_10576339 -->
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">Legendary actor Paul Newman dies at age 83</div>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.mercurynews.com/movies/ci_10576339 -->WESTPORT, Conn.—Paul Newman, the Academy-Award winning superstar who personified cool as the anti-hero of such films as &#8220;Hud,&#8221; &#8220;Cool Hand Luke&#8221; and &#8220;The Color of Money&#8221;—and as an activist, race car driver and popcorn impresario—has died. He was 83. </td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/5D83C440-CC1C-4870-A9E0-B7B49CCA5528/blog/" title="blog or email this clip"><img src="http://content6.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
<BR/><MAP name="bdv_RSS_Ad_270908025747"><AREA alt="Feed Ads By BidVertiser.com" shape="poly" coords="0,0,467,0,467,45,315,45,315,59,0,59" href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=270908025747&amp;click=1" target="_blank" /><AREA alt="Feed Ads By BidVertiser.com" shape="rect" coords="315,45,467,59" href="http://www.bidvertiser.com/bdv/bidvertiser/bdv_ref.dbm?Ref_PID=165886&amp;Ref_Option=main&amp;source=90614506" target="_blank" /></MAP><P><a href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=270908025747&amp;click=1" target="_blank"><IMG src="http://bdv.bidvertiser.com/BidVertiser.dbm?pid=165886&amp;bid=400950&amp;PHS=270908025747&amp;rssimage=1&amp;rSRC=2" border="0" usemap="#bdv_RSS_Ad_270908025747" /></a></P>]]></content:encoded>
      <pubDate>Sat, 27 Sep 2008 10:57:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/paul newman">paul newman</category>
      <category domain="http://securityratty.com/tag/paul">paul</category>
      <category domain="http://securityratty.com/tag/cool hand luke">cool hand luke</category>
      <category domain="http://securityratty.com/tag/cool">cool</category>
      <category domain="http://securityratty.com/tag/race car driver">race car driver</category>
      <category domain="http://securityratty.com/tag/popcorn impresariohas">popcorn impresariohas</category>
      <category domain="http://securityratty.com/tag/moneyand">moneyand</category>
      <category domain="http://securityratty.com/tag/westport">westport</category>
      <category domain="http://securityratty.com/tag/films">films</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=630">We will miss you Paul Newman</source>
    </item>
    <item>
      <title><![CDATA[The Two Classes of Airport Contraband]]></title>
      <link>http://securityratty.com/article/9add41f24cfea6a99d21547a04d8fdaf</link>
      <guid>http://securityratty.com/article/9add41f24cfea6a99d21547a04d8fdaf</guid>
      <description><![CDATA[Airport security found a jar of pasta sauce in my luggage last month. It was a 6-ounce jar, above the limit; the official confiscated it, because allowing it on the airplane with me would have been...]]></description>
      <content:encoded><![CDATA[<p>Airport security found a jar of pasta sauce in my luggage last month. It was a 6-ounce jar, above the limit; the official confiscated it, because allowing it on the airplane with me would have been too dangerous. And to demonstrate how dangerous he really thought that jar was, he blithely tossed it in a nearby bin of similar liquid bottles and sent me on my way.</p>

<p>There are two classes of contraband at airport security checkpoints: the class that will get you in trouble if you try to bring it on an airplane, and the class that will cheerily be taken away from you if you try to bring it on an airplane. This difference is important: Making security screeners confiscate anything from that second class is a waste of time. All it does is harm innocents; it doesn't stop terrorists at all.</p>

<p>Let me explain. If you're caught at airport security with a bomb or a gun, the screeners aren't just going to take it away from you. They're going to call the police, and you're going to be stuck for a few hours answering a lot of awkward questions. You may be arrested, and you'll almost certainly miss your flight. At best, you're going to have a very unpleasant day.</p>

<p>This is why articles about how screeners don't catch <a href="http://www.cnn.com/2008/US/01/28/tsa.bombtest/index.html">every</a> -- or even <a href="http://www.homelandstupidity.us/2007/10/25/tsa-screeners-fail-most-bomb-tests/">a</a> <a href="http://www.homelandstupidity.us/2006/10/31/tsa-screeners-still-fail-to-find-guns-bombs/">majority</a> -- of guns and bombs that <a href="http://www.boston.com/news/local/articles/2003/10/16/logan_screeners_fail_weapons_tests/">go through the checkpoints</a> don't bother me. The screeners don't have to be perfect; they just have to be good enough. No terrorist is going to base his plot on getting a gun through airport security if there's decent chance of getting caught, because the consequences of getting caught are too great.</p>

<p>Contrast that with a terrorist plot that requires a 12-ounce bottle of liquid. There's no evidence that the London liquid bombers actually had a workable plot, but assume for the moment they did. If some copycat terrorists try to bring their liquid bomb through airport security and the screeners catch them -- like they caught me with my bottle of pasta sauce -- the terrorists can simply try again. They can try again and again. They can keep trying until they succeed. Because there are no consequences to trying and failing, the screeners have to be 100 percent effective. Even if they slip up one in a hundred times, the plot can succeed.</p>

<p>The same is true for knitting needles, pocketknives, scissors, corkscrews, cigarette lighters and whatever else the airport screeners are confiscating this week. If there's no consequence to getting caught with it, then confiscating it only hurts innocent people. At best, it mildly annoys the terrorists.</p>

<p>To fix this, airport security has to make a choice. If something is dangerous, treat it as dangerous and treat anyone who tries to bring it on as potentially dangerous. If it's not dangerous, then stop trying to keep it off airplanes. Trying to have it both ways just distracts the screeners from actually making us safer.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=bB1FL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=bB1FL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=Uc79L"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=Uc79L" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 23 Sep 2008 01:47:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/airport security checkpoints">airport security checkpoints</category>
      <category domain="http://securityratty.com/tag/checkpoints">checkpoints</category>
      <category domain="http://securityratty.com/tag/airport security">airport security</category>
      <category domain="http://securityratty.com/tag/screeners">screeners</category>
      <category domain="http://securityratty.com/tag/security screeners">security screeners</category>
      <category domain="http://securityratty.com/tag/liquid">liquid</category>
      <category domain="http://securityratty.com/tag/london liquid bombers">london liquid bombers</category>
      <category domain="http://securityratty.com/tag/airport screeners">airport screeners</category>
      <category domain="http://securityratty.com/tag/plot">plot</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/the_two_classes.html">The Two Classes of Airport Contraband</source>
    </item>
    <item>
      <title><![CDATA[Security Matters: Airport Pasta-Sauce Interdiction Considered Harmful]]></title>
      <link>http://securityratty.com/article/9b6db0f25f815641ea3655ef3cb29af5</link>
      <guid>http://securityratty.com/article/9b6db0f25f815641ea3655ef3cb29af5</guid>
      <description><![CDATA[Airport security found a jar of pasta sauce in my luggage last month. It was a 6-ounce jar, above the limit; the official confiscated it, because allowing it on the airplane with me would have been...]]></description>
      <content:encoded><![CDATA[<p>
Airport security found a jar of pasta sauce in my luggage last month. It was a 6-ounce jar, above the limit; the official confiscated it, because allowing it on the airplane with me would have been too dangerous. And to demonstrate how dangerous he really thought that jar was, he blithely tossed it in a nearby bin of similar liquid bottles and sent me on my way.
</p><p>
There are two classes of contraband at airport security checkpoints: the class that will get you in trouble if you try to bring it on an airplane, and the class that will cheerily be taken away from you if you try to bring it on an airplane. This difference is important: Making security screeners confiscate anything from that second class is a waste of time. All it does is harm innocents; it doesn't stop terrorists at all.
</p><p>
Let me explain. If you're caught at airport security with a bomb or a gun, the screeners aren't just going to take it away from you. They're going to call the police, and you're going to be stuck for a few hours answering a lot of awkward questions. You may be arrested, and you'll almost certainly miss your flight. At best, you're going to have a very unpleasant day.
</p><p>
This is why articles about how screeners don't catch <a href="http://www.cnn.com/2008/US/01/28/tsa.bombtest/index.html">every</a> -- or even <a href="http://www.homelandstupidity.us/2007/10/25/tsa-screeners-fail-most-bomb-tests/">a</a> <a href="http://www.homelandstupidity.us/2006/10/31/tsa-screeners-still-fail-to-find-guns-bombs/">majority</a> -- of guns and bombs that <a href="http://www.boston.com/news/local/articles/2003/10/16/logan_screeners_fail_weapons_tests/">go through the checkpoints</a> don't bother me. The screeners don't have to be perfect; they just have to be good enough. No terrorist is going to base his plot on getting a gun through airport security if there's decent chance of getting caught, because the consequences of getting caught are too great.
</p><p>
Contrast that with a terrorist plot that requires a 12-ounce bottle of liquid. There's no evidence that the London liquid bombers actually had a workable plot, but assume for the moment they did. If some copycat terrorists try to bring their liquid bomb through airport security and the screeners catch them -- like they caught me with my bottle of pasta sauce -- the terrorists can simply try again. They can try again and again. They can keep trying until they succeed. Because there are no consequences to trying and failing, the screeners have to be 100 percent effective. Even if they slip up one in a hundred times, the plot can succeed.
</p><p>
The same is true for knitting needles, pocketknives, scissors, corkscrews, cigarette lighters and whatever else the airport screeners are confiscating this week. If there's no consequence to getting caught with it, then confiscating it only hurts innocent people. At best, it mildly annoys the terrorists.
</p><p>
To fix this, airport security has to make a choice. If something is dangerous, treat it as dangerous and treat anyone who tries to bring it on as potentially dangerous. If it's not dangerous, then stop trying to keep it off airplanes. Trying to have it both ways just distracts the screeners from actually making us safer.
</p>
<p>
---
</p>
<p><cite>Bruce Schneier is chief security technology officer of BT. His new book is </cite>Schneier on Security<cite>.

</p><br style="clear: both;"/>
      <a href="http://www.pheedo.com/click.phdo?s=aefd56c11b2eee64280f816001ed44dc"><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/img.phdo?s=aefd56c11b2eee64280f816001ed44dc"/></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=aefd56c11b2eee64280f816001ed44dc" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=K4hTL"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=K4hTL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=gnANl"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=gnANl" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=7cfHl"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=7cfHl" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=lizGL"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=lizGL" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=4j0mL"><img src="http://feeds.wired.com/~f/wired/politics/security?i=4j0mL" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=McKUl"><img src="http://feeds.wired.com/~f/wired/politics/security?i=McKUl" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=F517l"><img src="http://feeds.wired.com/~f/wired/politics/security?i=F517l" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=FIJtL"><img src="http://feeds.wired.com/~f/wired/politics/security?i=FIJtL" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/396484059" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/396484061" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 18 Sep 2008 14:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security screeners">security screeners</category>
      <category domain="http://securityratty.com/tag/airport security checkpoints">airport security checkpoints</category>
      <category domain="http://securityratty.com/tag/checkpoints">checkpoints</category>
      <category domain="http://securityratty.com/tag/airport security">airport security</category>
      <category domain="http://securityratty.com/tag/screeners">screeners</category>
      <category domain="http://securityratty.com/tag/liquid">liquid</category>
      <category domain="http://securityratty.com/tag/london liquid bombers">london liquid bombers</category>
      <category domain="http://securityratty.com/tag/airport screeners">airport screeners</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/396484061/securitymatters_0918">Security Matters: Airport Pasta-Sauce Interdiction Considered Harmful</source>
    </item>
    <item>
      <title><![CDATA[Chrome, Safari And Selt-Signed Certificates]]></title>
      <link>http://securityratty.com/article/21c07c2ffc76dd0bcffce90d5ab15846</link>
      <guid>http://securityratty.com/article/21c07c2ffc76dd0bcffce90d5ab15846</guid>
      <description><![CDATA[I ran a column a couple weeks back about browsers and how they handle unsigned certificates . How does Chrome handle them? For that matter, how does Safari handle them, since I forgot to include it in...]]></description>
      <content:encoded><![CDATA[I ran a column a couple weeks back about <a href="http://www.eweek.com/c/a/Security/The-Untrustworthiness-of-SelfSigned-Certificates/">browsers and how they handle unsigned certificates</a>.

How does Chrome handle them? For that matter, how does Safari handle them, since I forgot to include it in that column?

Chrome, at first, is much like IE7; it puts up an impossible-to-miss warning but lets you continue past it:

<img alt="chrome-ssl-error.jpg" src="http://blogs.eweek.com/cheap_hack/chrome-ssl-error.jpg" width="567" height="726" />

Then if you do continue, like Firefox, it keeps a warning present in the address bar. Neat.

<img alt="chrome-address-error.jpg" src="http://blogs.eweek.com/cheap_hack/chrome-address-error.jpg" width="220" height="62" />

Safari is much like IE7: It pops up warning dialog box:

<img alt="safari.JPG" src="http://blogs.eweek.com/cheap_hack/safari.JPG" width="461" height="186" />

But when you choose Continue it continues with no visible indicator that anything is different.
<p><a href="http://feedads.googleadservices.com/~a/_z0nr5C9AO58xcjpr24ZlPLiekI/a"><img src="http://feedads.googleadservices.com/~a/_z0nr5C9AO58xcjpr24ZlPLiekI/i" border="0" ismap="true"></img></a></p><img src="http://feedproxy.google.com/~r/RSS/cheap_hack/~4/8Yo7pdDzb9g" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 05:10:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/safari">safari</category>
      <category domain="http://securityratty.com/tag/chrome">chrome</category>
      <category domain="http://securityratty.com/tag/chrome handle">chrome handle</category>
      <category domain="http://securityratty.com/tag/handle">handle</category>
      <category domain="http://securityratty.com/tag/choose continue">choose continue</category>
      <category domain="http://securityratty.com/tag/continue">continue</category>
      <category domain="http://securityratty.com/tag/safari handle">safari handle</category>
      <category domain="http://securityratty.com/tag/continue past">continue past</category>
      <category domain="http://securityratty.com/tag/address bar">address bar</category>
      <source url="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~3/8Yo7pdDzb9g/chrome_safari_and_seltsigned_certificates.html">Chrome, Safari And Selt-Signed Certificates</source>
    </item>
    <item>
      <title><![CDATA[Tomoko in Bangkok with Emerson Lake & Palmer]]></title>
      <link>http://securityratty.com/article/b74e32f4452f74ee922157fa286d06d3</link>
      <guid>http://securityratty.com/article/b74e32f4452f74ee922157fa286d06d3</guid>
      <description><![CDATA[A few friends and colleagues have written privately, or blogged , and kindly mentioned how much they will miss not seeing Tomoko at the Event Processing Summit and Symposium this month. She is...]]></description>
      <content:encoded><![CDATA[<p>A few friends and colleagues have written privately, or <a href="http://magmasystems.blogspot.com/2008/08/4th-annual-event-processing-symposium.html" target="_blank">blogged</a>, and kindly mentioned how much they will miss not seeing Tomoko at the Event Processing Summit and Symposium this month.  She is currently in Japan visiting friends and family.    Here is a video I made  with Tomoko on the Chao Phraya River in Bangkok, set to the music of ELP.  Enjoy!</p>
<p><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="425" height="344" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="align" value="center" /><param name="allowFullScreen" value="true" /><param name="src" value="http://www.youtube.com/v/jxCQUok-tgk&amp;hl=en&amp;fs=1" /><embed type="application/x-shockwave-flash" width="425" height="344" src="http://www.youtube.com/v/jxCQUok-tgk&amp;hl=en&amp;fs=1" allowfullscreen="true" align="center"></embed></object></p>
]]></content:encoded>
      <pubDate>Tue, 02 Sep 2008 03:48:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tomoko">tomoko</category>
      <category domain="http://securityratty.com/tag/chao phraya river">chao phraya river</category>
      <category domain="http://securityratty.com/tag/friends">friends</category>
      <category domain="http://securityratty.com/tag/bangkok">bangkok</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/symposium">symposium</category>
      <category domain="http://securityratty.com/tag/privately">privately</category>
      <category domain="http://securityratty.com/tag/summit">summit</category>
      <category domain="http://securityratty.com/tag/music">music</category>
      <source url="http://www.thecepblog.com/2008/09/02/tomoko-in-bangkok-with-emerson-lake-palmer/">Tomoko in Bangkok with Emerson Lake &amp; Palmer</source>
    </item>
    <item>
      <title><![CDATA[Gartner Event Processing Summit (and EPTS Meeting), Sept 2008]]></title>
      <link>http://securityratty.com/article/d942f118e90958175378be5d866f230c</link>
      <guid>http://securityratty.com/article/d942f118e90958175378be5d866f230c</guid>
      <description><![CDATA[Many folks have been sending me email,inquiring if I will beattending the Gartner Event Processing Summit, September 15-16 or the 4th Event Processing Symposium, September 17-19, 2008 (the EPTS...]]></description>
      <content:encoded><![CDATA[<p style="text-align: left;">Many folks have been sending me email, inquiring if I will be attending the <a href="http://www.gartner.com/it/page.jsp?id=616710" target="_blank">Gartner Event Processing Summit, September 15-16</a> or the <a href="http://complexevents.com/?p=405 ">4th Event Processing Symposium, September 17-19, 2008</a> (the EPTS meeting).    I regret not attending either event this year and will miss getting together with everyone.  In addition, I would like to thank Opher and the EPTS team for inviting me.</p>
<p>As we get closer to the conference dates, I wish that I had made plans to fly back to the US to meet everyone.    However, I have been cutting back on public speaking, taking a break since May.  In addition, Gartner did not ask me to speak at their Event Processing Summit this year, I assume because they did not want to pay airfare for my flight from Thailand to the US.    Also, Gartner always likes to fill their conference speaking slots with as many <a href="http://www.gartner.com/it/content/616700/616710/ep_agenda.pdf" target="_blank">Gartner speakers</a> as they can, unless you are a paid sponsor; and I noticed a number of Gartner employees speaking in multiple slots.</p>
<blockquote><p><em>(Editorial Note) Then again, maybe I complained to much about the lack of organization and conference problems when I was invited at be a Gartner keynote speaker last time - reservations not made propertly,  problems with the guest speaker registration list at sign-in, rooms shifted without notifying the speakers and panelists.   Admittedly, I was not happy with the conference organizers at the last get together.  This was my fault, as I am accustomed to better conference execution and am probally too &#8220;picky&#8221; about details these days - my bad.  Anyway, the Gartner organizers apologized numerous times, saying they had too many conferences going on at the same time and not enough people to cover them all.</em></p></blockquote>
<p>One of the problems with spending so much time in Asia, especially in Thailand, is that guest speakers are really treated as VIPs.  There are usually special comfy couches set up for the speakers and the conference staff really treat you very nice, taking care of you every step of the way.   In fact, there is an entire very nice culture around how guest speakers are treated in Thailand.   Often, they pin flowers on the VIP speakers and take your photos like you are a star.    Very nice culture.</p>
<p>I absolutely look forward to speaking on event processing or CEP at a future venue and meeting everyone face-to-face instead of over the net.  My sincere and deepest apologies for not attending either the Gartner or the EPTS event this year.   </p>
<p>PS:  If you take up a collection and send me a RT business class air ticket, I might change my mind <img src='http://www.thecepblog.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /></p>
]]></content:encoded>
      <pubDate>Sat, 30 Aug 2008 08:57:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/gartner event">gartner event</category>
      <category domain="http://securityratty.com/tag/gartner">gartner</category>
      <category domain="http://securityratty.com/tag/epts">epts</category>
      <category domain="http://securityratty.com/tag/guest speakers">guest speakers</category>
      <category domain="http://securityratty.com/tag/speakers">speakers</category>
      <category domain="http://securityratty.com/tag/gartner keynote speaker">gartner keynote speaker</category>
      <category domain="http://securityratty.com/tag/gartner employees">gartner employees</category>
      <category domain="http://securityratty.com/tag/conference">conference</category>
      <source url="http://www.thecepblog.com/2008/08/30/gartner-event-processing-symposium-and-epts-meeting-sept-2008/">Gartner Event Processing Summit (and EPTS Meeting), Sept 2008</source>
    </item>
    <item>
      <title><![CDATA[Links List 8.29.08]]></title>
      <link>http://securityratty.com/article/f1038682e1a7f7e06f6d230b158bd8a3</link>
      <guid>http://securityratty.com/article/f1038682e1a7f7e06f6d230b158bd8a3</guid>
      <description><![CDATA[ChangeWave Research released a survey of 1,947 people responsible for IT spending. Thirty percent of the respondents reported that third-quarter IT spending was lower than previously planned while 12...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" height="240" alt="michaelphelps" src="http://blog.sciencelogic.com/wp-content/uploads/2008/08/michaelphelps.jpg" width="174" align="left" border="0" /> ChangeWave Research released a survey of 1,947 people responsible for IT spending. Thirty percent of the respondents <a href="http://www.infoworld.com/article/08/08/27/Grim_outlook_for_US_IT_spending_1.html?source=NLC-DAILY&amp;cgd=2008-08-28" target="_blank">reported that third-quarter IT spending was lower</a> than previously planned &#8211; while 12 percent spent more than planned. Thirty-five percent cited higher energy costs as the top factor for spending slowdown. </p>
<p>Parlez-vous open source? While wide-spread open source usage is still debated in many companies, the French have been advocating for <a href="http://www.infoworld.com/article/08/08/28/35NF-open-source-france-lessons_1.html" target="_blank">all open source all the time in government and education</a>. French President Nicolas Sarkozy set up an economic commission that recommended tax benefits to stimulate more open source development. Lesson learned from France: start &#8216;em early. &#8220;All students in France use open source.&#8221;</p>
<p>Just in time for Labor Day, John Edwards (no, not that one) comes out with an informative guide on &#8220;<a href="http://www.infoworld.com/article/08/08/27/35NF-cloud-providers_1.html" target="_blank">Who provides what in the cloud</a>&#8221;. No doubt, this will be a rapidly expanding list, but what&#8217;s really interesting is the comment on the article. People have very strong opinions on the cloud&#8230;</p>
<p>Research firm Aberdeen Group reports that <a href="http://www.cio.com/article/445863/Network_Management_Tips_for_Managing_Costs?page=1" target="_blank">network costs will increase</a> slightly more than 5 percent over 2007. Contributing factors: &#8220;need for speed&#8221;, shift from standard to mobile PCs (more end points of connectivity), and the ever-expanding network. And of course the hidden costs of multiple tools with multiple management consoles &#8211; if you&#8217;re not smart enough to choose say a comprehensive network management solution that is vendor agnostic&#8230;One tool to monitor them all&#8230;</p>
<p>And just because I miss the Olympics already, here&#8217;s an irreverent take on what it&#8217;s like to lose to Michael Phelps. <a href="http://www.thetechstop.net/?p=1503">http://www.thetechstop.net/?p=1503</a></p>
<p>Enjoy your long Labor Day Weekend!</p>
]]></content:encoded>
      <pubDate>Fri, 29 Aug 2008 10:00:44 +0000</pubDate>
      <category domain="http://securityratty.com/tag/percent">percent</category>
      <category domain="http://securityratty.com/tag/source">source</category>
      <category domain="http://securityratty.com/tag/source development">source development</category>
      <category domain="http://securityratty.com/tag/thirty percent">thirty percent</category>
      <category domain="http://securityratty.com/tag/labor day">labor day</category>
      <category domain="http://securityratty.com/tag/source usage">source usage</category>
      <category domain="http://securityratty.com/tag/costs">costs</category>
      <category domain="http://securityratty.com/tag/energy costs">energy costs</category>
      <category domain="http://securityratty.com/tag/thirty-five percent cited">thirty-five percent cited</category>
      <source url="http://blog.sciencelogic.com/links-list-82908/08/2008">Links List 8.29.08</source>
    </item>
    <item>
      <title><![CDATA[More security often means lower costs]]></title>
      <link>http://securityratty.com/article/810bad8ddd053d94e9cfdd55eb9b55d0</link>
      <guid>http://securityratty.com/article/810bad8ddd053d94e9cfdd55eb9b55d0</guid>
      <description><![CDATA[People often miss one of the biggest selling points about security--cost reduction. This is the problem with comments in a recent article in Dark...]]></description>
      <content:encoded><![CDATA[People often miss one of the biggest selling points about security--cost reduction.  This is the problem with comments in a recent article in Dark Reading.]]></content:encoded>
      <pubDate>Tue, 26 Aug 2008 03:11:45 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cost reduction">cost reduction</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/recent article">recent article</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/miss">miss</category>
      <category domain="http://securityratty.com/tag/dark">dark</category>
      <category domain="http://securityratty.com/tag/comments">comments</category>
      <source url="http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/adventuresinsecurity/more-security-often-means-lower-costs-26790">More security often means lower costs</source>
    </item>
    <item>
      <title><![CDATA[Unsubscribe from Spam emails?]]></title>
      <link>http://securityratty.com/article/ac04276cd4dc0ccd78035ac2992eca34</link>
      <guid>http://securityratty.com/article/ac04276cd4dc0ccd78035ac2992eca34</guid>
      <description><![CDATA[Replying or hitting the unsubscribe will most probably get you even more Spam folks


clipped from www.crime-research.org

Should you EVER reply to a spam message

First you need to determine what...]]></description>
      <content:encoded><![CDATA[<div>Replying or hitting the unsubscribe will most probably get you even more Spam folks.</div>
<table style="border: 4px solid #e5e5e5; margin: 12px 0px; background: #ffffff none repeat scroll 0%; font-family: arial; color: #333333; width: 100%; clear: left;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top">
<table class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top">
<table style="border-bottom: 1px solid #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee; background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top"><a title="go to this clipmark" href="http://clipmarks.com/clipmark/D0F738A0-9887-4BBB-A78D-20DEEE9432EE/"><img style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" src="http://content.clipmarks.com/blog_icon/44570421-4192-4b35-95a4-985df17e94a0/D0F738A0-9887-4BBB-A78D-20DEEE9432EE/" border="0" alt="" width="19" height="19" /></a>clipped from <a style="font-size: 11px;" title="http://www.crime-research.org/news/19.08.2008/3520/" href="http://www.crime-research.org/news/19.08.2008/3520/">www.crime-research.org</a></td>
</tr>
</tbody>
</table>
<table style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.crime-research.org/news/19.08.2008/3520/ --></p>
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">Should you EVER reply to a spam message?</div>
</td>
</tr>
</tbody>
</table>
<table style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.crime-research.org/news/19.08.2008/3520/ --></p>
<div>
First you need to determine what kind of junk mail you have. Is it being sent by a company you&#8217;ve ever done business with, or something you might have signed up for in the past, however long ago? Most commercial mail being sent by legitimate companies will have an unsubscribe link at the bottom, and though those links can take a few days (up to 10 in some cases) to go into effect, if you follow the instructions to unsubscribe from a mailing list (be sure to complete the transaction and read what to do carefully so you don&#8217;t miss anything) the messages should stop.</div>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td style="background:transparent;border-width:0px;padding:0px;"></td>
<td style="border-width: 0px; padding: 0px; background: transparent none repeat scroll 0%; width: 107px;" width="107" align="right"><a title="blog or email this clip" href="http://clipmarks.com/share/D0F738A0-9887-4BBB-A78D-20DEEE9432EE/blog/"><img style="border-width:0px;padding:0px;margin:0px;" src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" /></a></td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
]]></content:encoded>
      <pubDate>Sat, 23 Aug 2008 11:53:14 +0000</pubDate>
      <category domain="http://securityratty.com/tag/unsubscribe">unsubscribe</category>
      <category domain="http://securityratty.com/tag/unsubscribe link">unsubscribe link</category>
      <category domain="http://securityratty.com/tag/junk mail">junk mail</category>
      <category domain="http://securityratty.com/tag/commercial mail">commercial mail</category>
      <category domain="http://securityratty.com/tag/spam folks">spam folks</category>
      <category domain="http://securityratty.com/tag/spam message">spam message</category>
      <category domain="http://securityratty.com/tag/follow">follow</category>
      <category domain="http://securityratty.com/tag/instructions">instructions</category>
      <category domain="http://securityratty.com/tag/crime-research">crime-research</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=569">Unsubscribe from Spam emails?</source>
    </item>
    <item>
      <title><![CDATA[Phish Page Steals Your Details, Then Logs You In]]></title>
      <link>http://securityratty.com/article/e0c481644319927eb1e7294a68a9efdb</link>
      <guid>http://securityratty.com/article/e0c481644319927eb1e7294a68a9efdb</guid>
      <description><![CDATA[One of the few things that - perhaps - alerts users that they've been phished is when (after entering perfectly valid login details) they see something like this



or like this




Generally, when...]]></description>
      <content:encoded><![CDATA[
        One of the few things that - perhaps - alerts users that they've been phished is when (after entering perfectly valid login details) they see something like this:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="hablog6.jpg" src="http://blog.spywareguide.com/images/hablog6.jpg" class="mt-image-none" style="" height="163" width="326" /></span></div><br />...or like this:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="hablog7.jpg" src="http://blog.spywareguide.com/images/hablog7.jpg" class="mt-image-none" style="" height="41" width="355" /></span></div><br /><br />Generally, when net-savvy users get phished, they're alert enough to know that messages such as the ones above are a clue that they might have stumbled onto a Phishing page (assuming they're 100% sure they entered their details correctly, of course). This "break" in the login cycle has always been a weakness of a phish page, and the typical flow of events is as follows:<br /><br />1. Visit Phish page<br />2. Enter details<br />3. User is told "your login cannot be processed at this time", and your information is stolen<br /><br />What if the process could go like this:<br /><br />1. Visit Phish page<br />
2. Enter details<br />3. Phish page steals your information, but logs you into the target site<br /><br />You'd miss that vital clue - the failed login - and assume everything was okay.<br /><br />Well, a Phish for the popular Habbo Hotel caught my eye today because it does just that - seamlessly logging you into Habbo Hotel once your details have been stolen. Here is the Phish page in question:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/hablog111.html" onclick="window.open('http://blog.spywareguide.com/images/hablog111.html','popup','width=605,height=448,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/hablog111-thumb-305x225.jpg" alt="hablog111.jpg" class="mt-image-none" style="" height="225" width="305" /></a></span><br />Click to Enlarge<br /></div><br />Here I am, entering my login details into the page:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="hablog2.jpg" src="http://blog.spywareguide.com/images/hablog2.jpg" class="mt-image-none" style="" height="115" width="318" /></span></div><br /><br />At this point, a regular Phish page risks giving the game away because of the familiar variations on "Your login could not be processed" that appear at this point in the procedure.<br /><br />However, the Phish page takes you to a page hosting an encoded base64 script:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="hablog3.jpg" src="http://blog.spywareguide.com/images/hablog3.jpg" class="mt-image-none" style="" height="34" width="258" /></span></div>
<br /><br />From there, the user is deposited onto the Habbo Hotel website, fully logged in - no "Your login could not be processed" messages here!<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/hablog411.html" onclick="window.open('http://blog.spywareguide.com/images/hablog411.html','popup','width=595,height=476,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/hablog41-thumb-395x316.jpg" alt="hablog41.jpg" class="mt-image-none" style="" height="316" width="395" /></a></span><br /><br />Click to Enlarge<br /></div><br />Meanwhile, my login has been stolen (it's the one in red) and placed in the ever growing pile collected by the Phisher:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/hablog5.html" onclick="window.open('http://blog.spywareguide.com/images/hablog5.html','popup','width=489,height=372,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/hablog5-thumb-389x295.jpg" alt="hablog5.jpg" class="mt-image-none" style="" height="295" width="389" /></a></span><br />Click to Enlarge<br /></div><br />From the point where I decided to login to Habbo Hotel, to the point where I'm actually logged into the site there is no break in the usual procedure and I have absolutely no indication I've just been phished. If this kind of devious tactic is employed for banking phishes, it'll make it all the more crucial that end-users start to think about running Anti-Phishing programs and browsers that have built-in Phish Detectors because the stakes seem to have raised once again.<br /><div><br /></div>
        
    ]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 10:15:31 +0000</pubDate>
      <category domain="http://securityratty.com/tag/phish">phish</category>
      <category domain="http://securityratty.com/tag/phish page steals">phish page steals</category>
      <category domain="http://securityratty.com/tag/phish page">phish page</category>
      <category domain="http://securityratty.com/tag/visit phish page">visit phish page</category>
      <category domain="http://securityratty.com/tag/page">page</category>
      <category domain="http://securityratty.com/tag/phish page takes">phish page takes</category>
      <category domain="http://securityratty.com/tag/details">details</category>
      <category domain="http://securityratty.com/tag/login details">login details</category>
      <category domain="http://securityratty.com/tag/login">login</category>
      <source url="http://blog.spywareguide.com/2008/08/phishing-page-that-logs-you-in.html">Phish Page Steals Your Details, Then Logs You In</source>
    </item>
  </channel>
</rss>
