<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: month]]></title>
    <link>http://securityratty.com/tag/month</link>
    <description></description>
    <pubDate>Thu, 03 Jul 2008 07:12:58 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[ICANN's Announcement Of Anti-Domain Tasting Measures To Registrars]]></title>
      <link>http://securityratty.com/article/913d52903ceaedff758808be4b11d5bf</link>
      <guid>http://securityratty.com/article/913d52903ceaedff758808be4b11d5bf</guid>
      <description><![CDATA[The recent new that ICANN had taken measures to combat Domain Tasting came out in blogs, such as this one , based on second-hand news. ICANN had sent an e-mail to registrars announcing the policy...]]></description>
      <content:encoded><![CDATA[The recent new that ICANN had taken measures to combat Domain Tasting came out in blogs, <a href="http://www.domainnamenews.com/miscellaneous/icann-board-resolution-kills-domain-tasting/1689">such as this one</a>, based on second-hand news. ICANN had sent an e-mail to registrars announcing the policy change. But there was confusion over exactly what the policy was; most people just assumed it followed the recommendations of the GNSO council from April.  The incomplete information caused some confused analysis such as <a href="http://www.cadna.org/en/newsroom/press-releases/icann-tasting-solution">this from CADNA (the Coalition Against Domain Name Abuse)</a>.

I asked ICANN and they sent me the actual e-mail that they sent out to registrars. It is published below. My analysis of it is in <a href="http://www.eweek.com/c/a/Security/Yes-Domain-Tasting-Will-End/">a column on eWEEK</a>.

<blockquote>
Dear Registrar,

This message is intended to explain how certain decisions that were made by the ICANN Board of Directors at its meeting in Paris last week may affect your registrar.

Specifically, the Board adopted GNSO recommendations on domain tasting that included both budget and non-budget provisions designed to restrict the applicability of the Add Grace Period (AGP).  Please note that this message is a summary of changes that affect registrars.  You should refer to the adopted budget document and adopted motions for further information.


Summary of Important Timing Issues

After several months of discussion and public comment on both the budget and the GNSO recommendations, the Board has approved the proposed budget containing a provision for collecting transaction fees above a threshold during the AGP.  Effective 1 July 2008, the registrar-level transaction fee will be collected on transactions, including names added on or after 1 July
2008 and deleted during the Add Grace Period above a certain minimum threshold.  Each "transaction" will continue to be defined as a one-year domain registration increment caused by a successful add, renewal or transfer command, but this year any domain names deleted during the AGP (if
offered)
will be included as transactions if they exceed the maximum of (i) 10% of that registrar's net new registrations in that month (defined as total new registrations less domains deleted during AGP), or (ii) fifty (50) domain names, whichever is greater.  The budget assumes the transaction fee rate will remain at US ./send.20.

The second change prohibits registries from issuing refunds above a similar threshold for names registered and deleted during the AGP (although some registries have made plans to charge for such transactions independent of this motion).  The implementation timing of this change has not been set, but should be expected to take place over a period of some months.  ICANN staff will solicit public comments and post a registrar advisory prior to implementation of this aspect of the GNSO recommendation.


Budget - Registrar Fees Effective 1 July 2008

The Operating Plan and Budget details for 2008-2009 fiscal year can be found at:

http://www.icann.org/en/financials/proposed-opplan-budget-v3-fy09-25jun0
8-en.pdf

Relevant section from the approved budget:

* Registrar-Level Transaction Fees

In FY08 the per transaction-year rate was ./send.20 (or a 5 cent discount from the established ./send.25 rate).  The draft FY09 budget assumes that the ./send.20 rate will continue for registrar transaction fees.  As in past years, each transaction will be defined as one-year domain registration increment caused by a successful add renewal or transfer command.  FY09 revenue is estimated to be .4 million for registrar-level transaction fees.  Each "transaction"
will continue to be defined as a one-year domain registration increment caused by a successful add, renewal or transfer command, but this year any domain names deleted during the AGP (if offered) will be included as transactions if they exceed the maximum of (i) 10% of that registrar's net new registrations in that month (defined as total new registrations less domains deleted during AGP), or (ii) fifty (50) domain names, whichever is greater.  Therefore per-transaction fee will continue to be charged for each one-year increment of every transaction (e.g.  at a ./send.20 fee level, the fee for a three-year renewal will be US ./send.60), and registrars will continue to have the option to "defer" payment of the fees for the years beyond one for each transaction.  n

Note, as in previous years, ICANN can collect such fees directly from the registrars only if they are "expressly approved by registrars who account, in the aggregate, for payment of two-thirds of all registrar-level fees collected by ICANN." ICANN will shortly undertake the process of requesting such approval for the 2008-09 fiscal year.  While ICANN is grateful for consistent approval by registrars of fee levels in prior years, and is optimistic about such approval this year, if for some reason the necessary approval is not achieved, the fees will be collected by ICANN, as permitted under the registry agreements through the registries.  (Note that the amount of such fees varies by registry, but in no case exceeds US ./send.25.) Registries will then be able to collect those payments from registrars to the extent permitted under the relevant contracts.  It is expected that the same transaction increments (including AGP) will be covered, whether collected directly by ICANN or in! directly by the registries, so registrars should anticipate this liability under either scenario.


ICANN Board Resolution

Whereas, ICANN community stakeholders are increasingly concerned about domain tasting, which is the practice of using the add grace period (AGP) to register domain names in bulk in order to test their profitability.

Whereas, on 17 April 2008, the GNSO Council approved, by a Supermajority vote, a motion to prohibit any gTLD operator that has implemented an AGP from offering a refund for any domain name deleted during the AGP that exceeds 10% of its net new registrations in that month, or fifty domain names, whichever is greater.  <http://gnso.icann.org/meetings/minutes-gnso-17apr08.shtml>

Whereas, on 25 April 2008, the GNSO Council forwarded its formal "Report to the ICANN Board - Recommendation for Domain Tasting"
<http://gnso.icann.org/issues/domain-tasting/domain-tasting-board-report
-gnso-council-25apr08.pdf>,
which outlines the full text of the motion and the full context and procedural history of this proceeding.

Whereas, the Board is also considering the Proposed FY 09 Operating Plan and Budget <http://www.icann.org/financials/fiscal-30jun09.htm>, which includes (at the encouragement of the GNSO Council) a proposal similar to the GNSO policy recommendation to expand the applicability of the ICANN transaction fee in order to limit domain tasting.

Resolved (2008.06.26.06), the Board adopts the GNSO policy recommendation on domain tasting, and directs staff to implement the policy following appropriate comment and notice periods on the implementation documents.


Domain tasting motion approved by the GNSO Council 17 April 2008

<http://gnso.icann.org/issues/domain-tasting/domain-tasting-board-report
-gnso-council-25apr08.pdf>

Whereas, the GNSO Council has discussed the Issues Report on Domain Tasting and the Final Outcomes Report of the ad hoc group on Domain Tasting;

Whereas, the GNSO Council resolved on 31 October 2007 to launch a PDP on Domain Tasting;

Whereas, the GNSO Council authorized on 17 January 2008 the formation of a small design team to develop a plan for the deliberations on the Domain Tasting PDP (the "Design Team"), the principal volunteers to which had been members of the Ad Hoc Group on Domain Tasting and were well-informed of both the Final Outcomes Report of the Ad Hoc Group on Domain Tasting and the GNSO Initial Report on Domain Tasting (collectively with the Issues Report, the "Reports on Domain Tasting");

Whereas, the GNSO Council has received the Draft Final Report on Domain Tasting;

Whereas, PIR, the .org registry operator, has amended its Registry Agreement to charge an Excess Deletion Fee; and both NeuStar, the .biz registry operator, and Afilias, the .info registry operator, are seeking amendments to their respective Registry Agreements to modify the existing AGP;

The GNSO Council recommends to the ICANN Board of Directors that:

1.  The applicability of the Add Grace Period shall be restricted for any gTLD which has implemented an AGP ("Applicable gTLD Operator").
Specifically, for each Applicable gTLD Operator:

  a.  During any given month, an Applicable gTLD Operator may not offer any
  refund to a registrar for any domain names deleted during the AGP that
  exceed (i) 10% of that registrar's net new registrations in that month
  (defined as total new registrations less domains deleted during AGP), or
  (ii) fifty (50) domain names, whichever is greater.

  b.  A Registrar may seek an exemption from the application of such
  restriction in a specific month, upon the documented showing of
  extraordinary circumstances.  For any Registrar requesting such an
  exemption, the Registrar must confirm in writing to the Registry Operator
  how, at the time the names were deleted, these extraordinary circumstances
  were not known, reasonably could not have been known, and were outside of
  the Registrar's control.  Acceptance of any exemption will be at the sole
  reasonable discretion of the Registry Operator, however "extraordinary
  circumstances" which reoccur regularly will not be deemed extraordinary.

  c.  In addition to all other reporting requirements to ICANN, each
  Applicable gTLD Operator shall identify each Registrar that has sought an
  exemption, along with a brief descriptive identification of the type of
  extraordinary circumstance and the action (if any) that was taken by the
  Applicable gTLD Operator.

2.  Implementation and execution of these recommendations shall be monitored by the GNSO.  Specifically;

  a.  ICANN Staff shall analyze and report to the GNSO at six month intervals
  for two years after implementation, until such time as the GNSO resolves
  otherwise, with the goal of determining;

    i.  How effectively and to what extent the policies have been implemented
    and followed by Registries and Registrars, and

    ii.  Whether or not modifications to these policies should be considered
    by the GNSO as a result of the experiences gained during the
    implementation and monitoring stages,

  b.  The purpose of these monitoring and reporting requirements are to allow
  the GNSO to determine when, if ever, these recommendations and any ensuing
  policy require additional clarification or attention based on the results
  of the reports prepared by ICANN Staff.

</blockquote>

<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=152f487f101abbcdd9c900fc3eb46268" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=152f487f101abbcdd9c900fc3eb46268" style="display: none;" border="0" height="1" width="1" alt=""/><img src="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~4/330098895" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 08 Jul 2008 11:42:32 +0000</pubDate>
      <category domain="http://securityratty.com/tag/icann">icann</category>
      <category domain="http://securityratty.com/tag/directly">directly</category>
      <category domain="http://securityratty.com/tag/fees directly">fees directly</category>
      <category domain="http://securityratty.com/tag/fees">fees</category>
      <category domain="http://securityratty.com/tag/registrar fees effective">registrar fees effective</category>
      <category domain="http://securityratty.com/tag/effective">effective</category>
      <category domain="http://securityratty.com/tag/registrar-level fees">registrar-level fees</category>
      <category domain="http://securityratty.com/tag/fee">fee</category>
      <category domain="http://securityratty.com/tag/per-transaction fee">per-transaction fee</category>
      <source url="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~3/330098895/ch_icanns_announcement_of_antidomain_tasting_measures_to_registrars.html">ICANN's Announcement Of Anti-Domain Tasting Measures To Registrars</source>
    </item>
    <item>
      <title><![CDATA[Techie Travels- What Do YOU Look for in a Hotel Room?]]></title>
      <link>http://securityratty.com/article/178018c516b7e9b8545727cad074913a</link>
      <guid>http://securityratty.com/article/178018c516b7e9b8545727cad074913a</guid>
      <description><![CDATA[Im on the road again. After some really great (and a few really crappy) hotel stays in the past few weeks, I started thinking about what makes a good hotel
Recently I spent one week at a customer in a...]]></description>
      <content:encoded><![CDATA[<p>I&#8217;m on the road&#8230; again. After some really great (and a few really crappy) hotel stays in the past few weeks, I started thinking about &#8216;what makes a good hotel&#8217;. </p><p>Recently I spent one week at a customer in a hotel&nbsp;where the staff obviously was hosting nightly parties down at my end of the hall- from about 2:00am - 5:30am each (yes- every) night I was there. The hotel&nbsp;I&#8217;m in tonight has no elevator. Yeah. @#$! That&#8217;s what I&nbsp;said. Twice in the past 10 days or so, I&#8217;ve been in really nice resort-hotels, so I&#8217;ve had the whole spectrum this month and last. </p><p><strong>For me, sometimes it&#8217;s the little things&#8230; </strong>I really like it when hotels have <strong>conditioner</strong>, instead of just shampoo. I like <strong>space</strong>- so a nice work area is important to me. Of course a <strong>big soft bed</strong> and plenty-o-pillows is a key ingredient. A <strong>whirlpool</strong> or jetted tub (in the room) is icing on the cake. <strong>Exercise </strong>rooms are good, although half the time I&#8217;m too tired when traveling or have work to do&nbsp;(I know- excuses, excuses ;). <strong>Convenience</strong> is also a biggie- I had a run in Las Vegas where *every* room I had felt like it was a 10-minute walk just to the elevators. When I&#8217;m on-site for a customer, I also love the hotels with the&nbsp;<strong>do-it-yourself breakfast</strong>- I can go when I want and grab something before heading out for the day. I love the little lighted makeup <strong>mirrors</strong>&#8230; and of course a<strong> full-length</strong> for checking out the wardrobe. <strong>Plugs</strong>! I love lots of plugs. I like hotels that <strong>secure the outer doors</strong> early and require a key for access to various parts of the building. </p><p><strong>Sometimes it&#8217;s the bigger things&#8230;</strong> Hotels with <strong>outside-facing doors</strong> make me paranoid, and obviously those in neighborhoods where your rims may disappear is not good either. I hate hotels that <strong>MAKE me valet </strong>park my car. It&#8217;s my car, my keys, I park it and I keep the keys- that&#8217;s my rule. (My Dad taught me a little trick of telling the valet boys that it&#8217;s a company car and against corporate policy for valet- it works!)</p><p>Traveling techies sometimes have unique needs or requests, and many of the &#8216;good list&#8217; is universal for all traveler types. </p><p>So, those are some items from my little list&#8230; What about you-<strong> what do YOU look for in a good hotel?</strong></p><p><strong># # #</strong></p><p>&nbsp;</p>
]]></content:encoded>
      <pubDate>Tue, 08 Jul 2008 00:05:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/hotel">hotel</category>
      <category domain="http://securityratty.com/tag/nice resort-hotels">nice resort-hotels</category>
      <category domain="http://securityratty.com/tag/nice">nice</category>
      <category domain="http://securityratty.com/tag/hotels">hotels</category>
      <category domain="http://securityratty.com/tag/hotel stays">hotel stays</category>
      <category domain="http://securityratty.com/tag/love">love</category>
      <category domain="http://securityratty.com/tag/love lots">love lots</category>
      <category domain="http://securityratty.com/tag/car">car</category>
      <category domain="http://securityratty.com/tag/company car">company car</category>
      <source url="http://www.securityuncorked.com/security-uncorked/2008/7/8/techie-travels-what-do-you-look-for-in-a-hotel-room.html">Techie Travels- What Do YOU Look for in a Hotel Room?</source>
    </item>
    <item>
      <title><![CDATA[ICANN blames June site hijack on registrar]]></title>
      <link>http://securityratty.com/article/cc12ba97605248e285c91b83039b3b00</link>
      <guid>http://securityratty.com/article/cc12ba97605248e285c91b83039b3b00</guid>
      <description><![CDATA[ICANN, the international organization that oversees the Web's top-level DNS said that a hijacking last month of several of its domains was due to a security breach at the registrar that manages those...]]></description>
      <content:encoded><![CDATA[ICANN, the international organization that oversees the Web's top-level DNS said that a hijacking last month of several of its domains was due to a security breach at the registrar that manages those URLs.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=YB43YA"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=YB43YA" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/329151082" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 07 Jul 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/top-level dns">top-level dns</category>
      <category domain="http://securityratty.com/tag/icann">icann</category>
      <category domain="http://securityratty.com/tag/security breach">security breach</category>
      <category domain="http://securityratty.com/tag/international organization">international organization</category>
      <category domain="http://securityratty.com/tag/registrar">registrar</category>
      <category domain="http://securityratty.com/tag/due">due</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/urls">urls</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/329151082/article.do">ICANN blames June site hijack on registrar</source>
    </item>
    <item>
      <title><![CDATA[The ICANN Responds to the DNS Hijacking, Its Blog Under Attack]]></title>
      <link>http://securityratty.com/article/d13c5bd9583b365d899fb8ff92dd001e</link>
      <guid>http://securityratty.com/article/d13c5bd9583b365d899fb8ff92dd001e</guid>
      <description><![CDATA[Last week, the ICANN has issued an official statement regarding last month's DNS hijackings of some of their domains

The DNS redirect was a result of an attack on ICANN's registrar's systems . A...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div>
<div class="separator" style="text-align: center; clear: both;"></div>
<a href="http://bp1.blogger.com/_wICHhTiQmrA/SG_d9uPKWSI/AAAAAAAAB38/7wRuO8nBz2s/s1600-h/netdevilz_icann_iana.png" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp1.blogger.com/_wICHhTiQmrA/SG_d9uPKWSI/AAAAAAAAB38/52awHiQbAeE/s200-R/netdevilz_icann_iana.png" style="border: 0pt none ;" /></a>Last week, the ICANN has issued <a href="http://www.icann.org/en/announcements/announcement-03jul08-en.htm">an official statement regarding last month's DNS hijackings</a> of some of their domains :<br />
<br />
"<i><b>The DNS redirect was a result of an attack on ICANN's registrar's systems</b>. A full, confidential, security report from that registrar has since been provided to ICANN with respect to this attack.<br />
<br />
It would appear <b>the attack was sophisticated, combining both social and technological techniques</b>, but was also limited and focused. The redirect was noticed and corrected within 20 minutes; however it may have taken anywhere up to 48 hours for the redirect to be entirely removed from the Internet. ICANN is confident that the lessons learned and new security measures since introduced will ensure there is not a repeat of this situation in future.</i>"<br />
<br />
They also mentioned that their Wordpress blog has also been a target of a recent attack automatically exploiting vulnerable Wordpres blogs :<br />
<br />
"<i>In a separate and unrelated incident a few days later, attackers used a very recent exploit in popular blogging software Wordpress to target the ICANN blog. The attack was noticed immediately and the blog taken offline while an analysis was run. That analysis pointed to an automated attack. The blogging software has since been patched and no wider impact (except the disappearance of the blog while the analysis was carried out) was noted.</i>"<br />
<br />
Go through the <a href="http://ddanchev.blogspot.com/2008/06/icann-and-ianas-domain-names-hijacked.html">complete coverage of the incident</a>, the technical details regarding it, and the actionable intelligence obtained for <a href="http://ddanchev.blogspot.com/2008/06/update-to-photobuckets-dns-hijacking.html">the NetDevilz hacking group</a>, in case you haven't done so already.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sCcaRJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sCcaRJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=qlNNQJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=qlNNQJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=zl5h8j"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=zl5h8j" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=4dloAj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=4dloAj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=5ofgHJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=5ofgHJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=3e0BsJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=3e0BsJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1iaysj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1iaysj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/328804318" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 07 Jul 2008 02:27:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/blog">blog</category>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <category domain="http://securityratty.com/tag/icann">icann</category>
      <category domain="http://securityratty.com/tag/wordpress blog">wordpress blog</category>
      <category domain="http://securityratty.com/tag/icann blog">icann blog</category>
      <category domain="http://securityratty.com/tag/recent attack">recent attack</category>
      <category domain="http://securityratty.com/tag/dns redirect">dns redirect</category>
      <category domain="http://securityratty.com/tag/redirect">redirect</category>
      <category domain="http://securityratty.com/tag/software wordpress">software wordpress</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/328804318/icann-responds-to-dns-hijacking-its.html">The ICANN Responds to the DNS Hijacking, Its Blog Under Attack</source>
    </item>
    <item>
      <title><![CDATA[Ironkey High Security Flash Drive: Use and Review]]></title>
      <link>http://securityratty.com/article/e0322cef5058990607beceacaf2e8df7</link>
      <guid>http://securityratty.com/article/e0322cef5058990607beceacaf2e8df7</guid>
      <description><![CDATA[New Video: Ironkey High Security Flash Drive: Use and Review
The Ironkey is a high security thumb drive designed to provide strong AES encryption, tamper resistance and other security services. Id...]]></description>
      <content:encoded><![CDATA[<b>New Video:</b><a href="http://www.irongeek.com/i.php?page=videos/ironkey-high-security-flash-drive-use-and-review">Ironkey High Security Flash Drive: Use and Review</a><br>
The Ironkey is a high security thumb drive designed to provide strong AES 
encryption, tamper resistance and other security services. I’d seen the Ironkey 
advertised quite a bit, and even read about its crypto systems and ruggedness, 
but was left wondering about how it works in operation. Since the hardcore tech 
side has been covered elsewhere, I’ll concentrate on the Ironkey’s usability and 
features. Some of the topics covered will include: How is the drive mounted 
without admin privileges in Windows? How is it mounted in Linux? How does the 
“Self Destruct” feature work? What is Secure Sessions? How is the Ironkey better 
than just using Truecrypt? I made this video to answer those sorts of questions 
for myself and others. If you want more details on the crypto involved, see the 
links section at the end of this video. The model I will be working with is the 
1GB Ironkey Personal. I’ll show its use and give my opinions on the device.<p>By 
the way, you may notice that I'm making fewer posts over the next month or so. 
I'll be busy studying for the GRE, wish me luck.
<p><a href="http://feeds.feedburner.com/~a/IrongeeksSecuritySite?a=LgLqIf"><img src="http://feeds.feedburner.com/~a/IrongeeksSecuritySite?i=LgLqIf" border="0"></img></a></p><img src="http://feeds.feedburner.com/~r/IrongeeksSecuritySite/~4/328510758" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 20:48:42 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ironkey">ironkey</category>
      <category domain="http://securityratty.com/tag/drive">drive</category>
      <category domain="http://securityratty.com/tag/security flash drive">security flash drive</category>
      <category domain="http://securityratty.com/tag/security thumb drive">security thumb drive</category>
      <category domain="http://securityratty.com/tag/1gb ironkey personal">1gb ironkey personal</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/crypto">crypto</category>
      <category domain="http://securityratty.com/tag/crypto systems">crypto systems</category>
      <category domain="http://securityratty.com/tag/secure sessions">secure sessions</category>
      <source url="http://feeds.feedburner.com/~r/IrongeeksSecuritySite/~3/328510758/i.php">Ironkey High Security Flash Drive: Use and Review</source>
    </item>
    <item>
      <title><![CDATA[ICANN blames June site hijack on registrar]]></title>
      <link>http://securityratty.com/article/d889ba40ed21fc070bf540c4e79e6ce0</link>
      <guid>http://securityratty.com/article/d889ba40ed21fc070bf540c4e79e6ce0</guid>
      <description><![CDATA[The international organization that oversees the Web's top-level domain naming system said that the hijacking last month of several of its domains was due to a security breach at the registrar that...]]></description>
      <content:encoded><![CDATA[The international organization that oversees the Web's top-level domain naming system said that the hijacking last month of several of its domains was due to a security breach at the registrar that manages those URLs.]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security breach">security breach</category>
      <category domain="http://securityratty.com/tag/international organization">international organization</category>
      <category domain="http://securityratty.com/tag/registrar">registrar</category>
      <category domain="http://securityratty.com/tag/top-level domain">top-level domain</category>
      <category domain="http://securityratty.com/tag/due">due</category>
      <category domain="http://securityratty.com/tag/system">system</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/urls">urls</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <source url="http://www.networkworld.com/news/2008/070708-icann-blames-june-site-hijack.html?fsrc=rss-security">ICANN blames June site hijack on registrar</source>
    </item>
    <item>
      <title><![CDATA[Data Breach At Benefits Company Affects Google Employees]]></title>
      <link>http://securityratty.com/article/d0eb5c58d999614771fc6610857714f6</link>
      <guid>http://securityratty.com/article/d0eb5c58d999614771fc6610857714f6</guid>
      <description><![CDATA[Google employees hired before 2006 have been warned to watch out for possible attempts to steal their identities. InformationWeek reports that in a letter last month, Google attorney Lewis A. Segall...]]></description>
      <content:encoded><![CDATA[Google employees hired before 2006 have been warned to watch out for possible attempts to steal their identities.
InformationWeek reports that in a letter last month, Google attorney Lewis A. Segall alerted New Hampshire Attorney General Kelly A. Ayotte that computers had been stolen from Colt Express Outsourcing Services, a third-party employee benefits administrator for Google [...]]]></content:encoded>
      <pubDate>Fri, 04 Jul 2008 00:53:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/google employees hired">google employees hired</category>
      <category domain="http://securityratty.com/tag/google attorney lewis">google attorney lewis</category>
      <category domain="http://securityratty.com/tag/colt express">colt express</category>
      <category domain="http://securityratty.com/tag/informationweek reports">informationweek reports</category>
      <category domain="http://securityratty.com/tag/hampshire attorney">hampshire attorney</category>
      <category domain="http://securityratty.com/tag/ayotte">ayotte</category>
      <category domain="http://securityratty.com/tag/segall">segall</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <source url="http://cyberinsecure.com/data-breach-at-benefits-company-affects-google-employees/">Data Breach At Benefits Company Affects Google Employees</source>
    </item>
    <item>
      <title><![CDATA[Microsoft trumpets security additons in upcoming IE8]]></title>
      <link>http://securityratty.com/article/158b9419cb474bbc997555c1b306b0c0</link>
      <guid>http://securityratty.com/article/158b9419cb474bbc997555c1b306b0c0</guid>
      <description><![CDATA[Microsoft Wednesday outlined new security features it will add to Internet Explorer (IE) next month, including anti-malware protection to match tools similar to those offer by its rivals and a filter...]]></description>
      <content:encoded><![CDATA[Microsoft Wednesday outlined new security features it will add to Internet Explorer (IE) next month, including anti-malware protection to match tools similar to those offer by its rivals and a filter the company said would block most cross-site scripting attacks.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=31485?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=31485?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Thu, 03 Jul 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/match tools similar">match tools similar</category>
      <category domain="http://securityratty.com/tag/microsoft wednesday">microsoft wednesday</category>
      <category domain="http://securityratty.com/tag/security features">security features</category>
      <category domain="http://securityratty.com/tag/anti-malware protection">anti-malware protection</category>
      <category domain="http://securityratty.com/tag/internet explorer">internet explorer</category>
      <category domain="http://securityratty.com/tag/rivals">rivals</category>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <category domain="http://securityratty.com/tag/cross-site">cross-site</category>
      <category domain="http://securityratty.com/tag/filter">filter</category>
      <source url="http://www.networkworld.com/news/2008/070208-microsoft-trumpets-security-additons-in.html?fsrc=rss-security">Microsoft trumpets security additons in upcoming IE8</source>
    </item>
    <item>
      <title><![CDATA[Visualized Storm fireworks for your 4th of July]]></title>
      <link>http://securityratty.com/article/cd69cdbb404159575b86657784e007bb</link>
      <guid>http://securityratty.com/article/cd69cdbb404159575b86657784e007bb</guid>
      <description><![CDATA[As expected, the Storm botnet maestros have queued up some pwnage for your 4th of July
See the SANS diary for all the details
Upon receipt of my first fireworks.exe sample this evening, I went through...]]></description>
      <content:encoded><![CDATA[As expected, the Storm botnet maestros have queued up some pwnage for your 4th of July. <br />See the SANS <a href="http://isc.sans.org/diary.html?storyid=4669" target="_blank">diary</a> for all the details.<br />Upon receipt of my first fireworks.exe sample this evening, I went through the standard routine and ran it through the analysis mill. Like the ISC said, not much new here, but if you'd like the nitty-gritty, I've put the analysis report <a href="http://holisticinfosec.org/analysis/storm/fireworks/fireworks_storm.txt" target="_blank">here</a>, the peers config list <a href="http://holisticinfosec.org/analysis/storm/fireworks/peers.txt" target="_blank">here</a>, and the pcap <a href="http://holisticinfosec.org/analysis/storm/fireworks/fireworks.pcap" target="_blank">here</a>.<br />However, what I was really inspired to do this evening was visualize the pcap with Raffael Marty's AfterGlow. His new <a href="http://www.amazon.com/Applied-Security-Visualization-Raffael-Marty/dp/0321510100" target="_blank">book</a>, Applied Security Visualization, is coming out next month, so we can turn old Storm news into a celebration of the 4th and the pending release of Applied Security Visualization. By the way, Raffael's visualization workshop slides from the 20th Annual <a href="http://www.first.org/" target="_blank">FIRST</a> Conference in Vancouver, B.C. last week are <a href="http://www.secviz.org/content/applied-security-visualization-first-2008-talk" target="_blank">here</a>, and mine regarding Malcode Analysis for Incident Handlers are <a href="http://holisticinfosec.org/publications/McRee_MATFIH_FIRST_final.pdf" target="_blank">here</a>.<br />So, a little AfterGlow magic,<br /><span style="font-style:italic;">tcpdump -vttttnnelr /home/rmcree/pcap/fireworks.pcap | ./tcpdump2csv.pl "sip dip ttl" | perl ../graph/afterglow.pl -c /home/rmcree/afterglow/src/perl/graph/color.properties -p 2 | neato -Tgif -o fireworks.gif</span>, and the results look just like the fireworks we hoped they would. <br />Happy 4th of July everyone! <br />Except you Storm a$$hat$. ;-)<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://holisticinfosec.org/analysis/storm/fireworks/fireworks.gif" target="_blan"><img style="display:block; margin:0px auto 10px; text-align:center;cursor:pointer; cursor:hand;width: 320px;" src="http://holisticinfosec.org/analysis/storm/fireworks/fireworks.gif" border="0" alt="" /></a><br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/07/visualized-storm-fireworks-for-your-4th.html&title=Visualized%20Storm%20fireworks%20for%20your%204th%20of%20July " title="Visualized Storm fireworks for your 4th of July ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/07/visualized-storm-fireworks-for-your-4th.html" title="Visualized Storm fireworks for your 4th of July ">digg</a>]]></content:encoded>
      <pubDate>Thu, 03 Jul 2008 16:54:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/4th">4th</category>
      <category domain="http://securityratty.com/tag/fireworks">fireworks</category>
      <category domain="http://securityratty.com/tag/july">july</category>
      <category domain="http://securityratty.com/tag/security visualization">security visualization</category>
      <category domain="http://securityratty.com/tag/happy 4th">happy 4th</category>
      <category domain="http://securityratty.com/tag/peers config list">peers config list</category>
      <category domain="http://securityratty.com/tag/afterglow">afterglow</category>
      <category domain="http://securityratty.com/tag/visualization workshop slides">visualization workshop slides</category>
      <category domain="http://securityratty.com/tag/raffael marty">raffael marty</category>
      <source url="http://holisticinfosec.blogspot.com/2008/07/visualized-storm-fireworks-for-your-4th.html">Visualized Storm fireworks for your 4th of July</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Santa Cruz-Fi, Boingo for Mac]]></title>
      <link>http://securityratty.com/article/389a9220dbe5830c420ad44deaab9cd0</link>
      <guid>http://securityratty.com/article/389a9220dbe5830c420ad44deaab9cd0</guid>
      <description><![CDATA[Santa Cruz opts for micro-Fi: the City had hoped to get a full deployment, but has decided to start with a hotzone in their tourist areas, which is far easier to build and quantify the success of...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.mercurynews.com/breakingnews/ci_9773683"><strong>Santa Cruz opts for micro-Fi:</strong></a> the City had hoped to get a full deployment, but has decided to start with a hotzone in their tourist areas, which is far easier to build and quantify the success of.</p>

<p><a href="http://arstechnica.com/journals/apple.ars/2008/07/03/boingo-offers-new-mac-compatible-client-for-wifi-network"><strong>Boingo releases Mac client for its aggregated service:</strong></a> The free GoBoingo for Mac client works with Leopard, at last. Boingo resells U.S. and worldwide service at $22 and $40 per month, respectively, for unlimited use. </p>]]></content:encoded>
      <pubDate>Thu, 03 Jul 2008 07:12:58 +0000</pubDate>
      <category domain="http://securityratty.com/tag/worldwide service">worldwide service</category>
      <category domain="http://securityratty.com/tag/santa cruz opts">santa cruz opts</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/mac client">mac client</category>
      <category domain="http://securityratty.com/tag/free goboingo">free goboingo</category>
      <category domain="http://securityratty.com/tag/boingo resells">boingo resells</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/micro-fi">micro-fi</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <source url="http://wifinetnews.com/archives/008386.html">Wee-Fi: Santa Cruz-Fi, Boingo for Mac</source>
    </item>
  </channel>
</rss>
