<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: numerous]]></title>
    <link>http://securityratty.com/tag/numerous</link>
    <description></description>
    <pubDate>Thu, 31 Jul 2008 09:30:21 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Towards a Streaming SQL Standard]]></title>
      <link>http://securityratty.com/article/11661732df3a8a5a25e83671bf0c6979</link>
      <guid>http://securityratty.com/article/11661732df3a8a5a25e83671bf0c6979</guid>
      <description><![CDATA[In More Towards a Streaming SQL Standard , Marc Adler says, Despite what I think about Streambases marketing and sales organization, you must admit that Zdonik and Cherniack are first-class...]]></description>
      <content:encoded><![CDATA[<p>In <a href="http://www.cs.brown.edu/~ugur/streamsql.pdf" target="_blank">More Towards a Streaming SQL Standard</a>, Marc Adler says,<em> &#8220;Despite what I think about <span id="SPELLING_ERROR_3" class="blsp-spelling-error">Streambase&#8217;s</span> marketing and sales organization, you must admit that <span id="SPELLING_ERROR_4" class="blsp-spelling-error">Zdonik</span> and <span id="SPELLING_ERROR_5" class="blsp-spelling-error">Cherniack</span> are first-class researchers, and have contributed a lot to the field of <span id="SPELLING_ERROR_6" class="blsp-spelling-error">CEP.&#8221;</span></em></p>
<p>I agree that these gentlemen are top notch researchers, witnessed by the fact that the authors do not mention nor claim to be &#8220;complex event processing&#8221; anywhere in their paper!  This paper is not about CEP, nor does it claim to be about CEP, it is about stream processing and unifying SQL standards.</p>
<blockquote><p><em>ABSTRACT: This paper describes a unification of two different SQL extensions for streams and its associated semantics. We use the data models from Oracle and StreamBase as our examples. Oracle uses a time-based execution model while StreamBase uses a tuple-based execution model. Time-based execution provides a way to model simultaneity while tuple-based execution provides a way to react to primitive events as soon as they are seen by the system.</em></p></blockquote>
<p>Asmentioned on numerous occasions, stream processing is a very important area in CEP/EP.   It is important not to confuse the higher situational knowledge from object-object correlation and state management with the single-object event refinement that occurs in stream processsing.    Event stream processing is fundamentally different than complex event processing. </p>
<p>Event stream processing performs operations on streaming event objects.   In almost all advanced CEP/EP applications is is necessary to perform robust track and trace operations on streaming event objects, like tracking the position of an airplane.    Tracking the position of an aircraft can be modelled very nicely with event stream processing.  Tracking individual event objects is a precuror to multiclass object situation refinement.</p>
<p>When we manage the state of all the aircraft in the skies over New York, you need more than a stream processing construct.  You need to manage the state of all the aircraft.  Paul Vincent of TIBCO Software being to address this important point in <a title="Permalink" href="http://tibcoblogs.com/cep/2008/09/02/the-value-of-state/"><span style="color: #055486;">The Value of State…</span></a>  </p>
<p>Again, we will be better equiped to solve complex distributed event processing problems if we do not confuse the notion of event stream processing and complex event processing.   These technologies are indeed complimentary, both very important, but they are not the same.</p>
<p>I applaud Oracle and StreamBase&#8217;s work toward a unified standard for <em>SQL extensions for streams.</em></p>
]]></content:encoded>
      <pubDate>Fri, 05 Sep 2008 13:39:08 +0000</pubDate>
      <category domain="http://securityratty.com/tag/individual event objects">individual event objects</category>
      <category domain="http://securityratty.com/tag/event objects">event objects</category>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/single-object event refinement">single-object event refinement</category>
      <category domain="http://securityratty.com/tag/complex event">complex event</category>
      <category domain="http://securityratty.com/tag/event stream">event stream</category>
      <category domain="http://securityratty.com/tag/stream">stream</category>
      <category domain="http://securityratty.com/tag/standard">standard</category>
      <category domain="http://securityratty.com/tag/sql standard">sql standard</category>
      <source url="http://www.thecepblog.com/2008/09/05/towards-a-streaming-sql-standard/">Towards a Streaming SQL Standard</source>
    </item>
    <item>
      <title><![CDATA[Zango And The Batman Online Videogame]]></title>
      <link>http://securityratty.com/article/df88ab063f04def43d02f931dfa23c42</link>
      <guid>http://securityratty.com/article/df88ab063f04def43d02f931dfa23c42</guid>
      <description><![CDATA[This is Newsarama, a site (mostly) geared around comics and other related media





Click to Enlarge

You'll notice Batman, over on the right there. Let's take a closer look





Free Online Batman...]]></description>
      <content:encoded><![CDATA[
        This is Newsarama, a site (mostly) geared around comics and other related media:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang1.html" onclick="window.open('http://blog.spywareguide.com/images/batzang1.html','popup','width=839,height=492,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang1-thumb-339x198.jpg" alt="batzang1.jpg" class="mt-image-none" style="" height="198" width="339" /></a></span><br /> </div><div><div align="center">Click to Enlarge<br /></div><br />You'll notice Batman, over on the right there. Let's take a closer look:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="batzang2.gif" src="http://blog.spywareguide.com/images/batzang2.gif" class="mt-image-none" style="" height="266" width="316" /></span></div><br /></div><div><br />"Free Online Batman Game"? Well, that's curious because I follow comics pretty closely and I'd be the first to know if an "Online Batman Game" had been in the works (this advert has been doing the rounds on <a href="http://forums.superherohype.com/showthread.php?p=15406107">numerous</a> <a href="http://dcboards.warnerbros.com/web/message.jspa?messageID=2004718393#2004718393">comic-related</a> <a href="http://www.comicforum.de/showpost.php?s=543cba941aeb245f8174ec4943be2adc&amp;p=2733165&amp;postcount=29">websites</a>. Visit the URL in the ad - Batmangame.info - and you'll see this...<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang3.html" onclick="window.open('http://blog.spywareguide.com/images/batzang3.html','popup','width=725,height=666,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang3-thumb-325x298.gif" alt="batzang3.gif" class="mt-image-none" style="" height="298" width="325" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />There it is again - "Online Batman Game". Furthermore, the text goes on to say:<br /><i><br />"Batman Online lets you do anything and every little thing you'd like in a Batman game. From leveling up your character to destroying villans, it has it all. Download and play this amazing game now, all for free! I'm sure you'll be playing for hours on end, it's that much fun.<br /><br />&nbsp;&nbsp;&nbsp; Level Up Your Character<br />&nbsp;<br />&nbsp;&nbsp; Explore a Huge Vast World<br />&nbsp;<br />&nbsp;&nbsp; Play Online With Your Friends<br />&nbsp;<br />&nbsp;&nbsp; Hundreds of Quests To Finish<br />&nbsp;<br />&nbsp;&nbsp; Perfect Battle System<br /><br />So start your Batman adventure today! Download the&nbsp; full game below and fight them all!"</i><br /><br />Note that they specifically call it "Batman Online". It specifically sounds like a text blurb you'd expect to see with a <a href="http://en.wikipedia.org/wiki/Massively_multiplayer_online_role-playing_game">MMORPG</a>. However, something isn't quite right here.<br /><br /><b>1)</b> The only DC licensed MMORPG anybody knows of is <a href="http://en.wikipedia.org/wiki/DC_Universe_%28video_game%29">this</a>, and it isn't due out until 2009. It's not Batman-centric, either.<br /><br /><b>2)</b> The screenshots are lifted from the <a href="http://en.wikipedia.org/wiki/Batman_Begins_%28video_game%29">Batman Begins videogame</a>, which came out in 2005. If you were offering a "Batman Online Game", wouldn't you use screenshots from that instead of an unrelated title?<br /><br /><b>3)</b> Absolutely no licensing, copyright or legal mumbo-jumbo on the page anywhere. DC and Warner Bros don't roll like that.<br /><br /><b>4)</b> The website - Batmangame(dot)info - is <a href="http://whois.domaintools.com/batmangame.info">registered anonymously</a>. Not exactly something you see everyday for websites related to licensed DC franchises such as Batman videogames.<br /><br /><b>5)</b> "To download and play the Batman Online Game you must download and install Zango as well. It is free, very easy to install and will give you access to the full game."<br /><br />Shall we continue?<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang4.html" onclick="window.open('http://blog.spywareguide.com/images/batzang4.html','popup','width=757,height=638,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang4-thumb-357x300.gif" alt="batzang4.gif" class="mt-image-none" style="" height="300" width="357" /></a></span><br />Click to Enlarge<br /></div><br />A Zango installer prompt, complete with picture of Batman at the top. If you say "No" to the install, you end up on Google.com. What happens if you click "Start"? Well, you'll get the <a href="http://blog.spywareguide.com/images/batzang5.gif">usual collection</a> of <a href="http://blog.spywareguide.com/images/batzang6.gif">Zango installer screens</a> including one that rather humorously has a guy in a superhero costume.<br /><br /></div><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="batzang7.gif" src="http://blog.spywareguide.com/images/batzang7.gif" class="mt-image-none" style="" height="333" width="419" /></span></div><div><br />Once everything is installed, you're taken to another page and from here things just get plain confusing. Remember, up to this point you've been promised an "Online Batman Game", the description of which is clearly intended to evoke images of a MMORPG. However....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batveng.html" onclick="window.open('http://blog.spywareguide.com/images/batveng.html','popup','width=841,height=623,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batveng-thumb-341x252.jpg" alt="batveng.jpg" class="mt-image-none" style="" height="252" width="341" /></a></span><br />Click to Enlarge<br /></div><br />All of a sudden, you're being told you're downloading "Batman: Vengeance" on a cheap-looking splash page and shown what looks like an unofficially ripped <a href="http://www.youtube.com/watch?v=D1WqzbNB8tM&amp;eurl=http://www.batmangame.info/setup.exe">Batman: Vengeance trailer</a> on Youtube.<br /><br />In case you're unaware, Batman: Vengeance is a videogame <a href="http://en.wikipedia.org/wiki/Batman_Vengeance">first launched way back in 2001</a> for consoles (followed shortly after by a PC version). What does this have to do with an "Online Batman Game"? Well, nothing, actually. Aside from the fact you were presented with one thing and are now handed another, things get even stranger when you see the download location:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang00.html" onclick="window.open('http://blog.spywareguide.com/images/batzang00.html','popup','width=542,height=281,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang00-thumb-342x177.gif" alt="batzang00.gif" class="mt-image-none" style="" height="177" width="342" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />Have you ever heard of an officially licensed game being offered via Rapidshare downloads? It's possible, I guess, but it seems a little odd. However, the <i>real</i> oddness is reserved for the "Online Batman game" itself.<br /><br />Remember, we've been promised "Hundreds of quests", "A huge vast world", the ability to "level up your character" and (of course) the "play online with your friends" promise of greatness.<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batinstall.html" onclick="window.open('http://blog.spywareguide.com/images/batinstall.html','popup','width=811,height=549,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batinstall-thumb-311x210.gif" alt="batinstall.gif" class="mt-image-none" style="" height="210" width="311" /></a></span><br />Click to Enlarge<br /></div><br />Imagine your dismay, then, when you've installed Zango, downloaded the game from Rapidshare using up around 140MB of bandwidth, installed it and....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="batdemo.gif" src="http://blog.spywareguide.com/images/batdemo.gif" class="mt-image-none" style="" height="288" width="451" /></span></div><br />Oh dear.<br /><br />Not only are you given a totally different game than what was advertised, you're given a DEMO VERSION of that game with <a href="http://blog.spywareguide.com/images/menu.gif">four short sample levels</a> present, no online functionality and quite a few less quests than the "hundreds" advertised.<br /><br />Hilariously, you can download a 100% legit copy of this demo <a href="http://www.fileplanet.com/110885/110000/fileinfo/Batman-Vengeance-Demo">here at Fileplanet</a>, sans Adware. Setting aside the issue of whether this file is actually sitting on Rapidshare with either Ubisoft or DC / Warner Bros permission (and if it IS okay to be there, I'm pretty sure it's NOT okay to falsely advertise it as some kind of MMORPG) there are some questions that need to be raised here.<br /><br />When this guy approached them with his website, did nobody stop to think that this game did not actually match up with the "Online Batman" game it was touted as? Didn't someone at Zango Quality Control actually download the game and see the big "This is a demo" wording as soon as it starts up? Or question why the <a href="http://blog.spywareguide.com/images/begins1.gif">screenshots</a> on the website don't look like the graphics for <a href="http://blog.spywareguide.com/images/batveng1.gif">Batman: Vengeance</a> in the slightest?<br /><br />However you look at it, this is a scam, pure and simple. Whoever came up with the idea of an "Online Batman Game" is lying through their teeth. Of course, because their website is registered anonymously we have no idea who the culprit is, unless of course Zango want to deposit them on the steps of Gotham City and let me dispense some Batman-style justice to their posterior.<br /><br />However, based on the way these things tend to go - God forbid anyone ever offer up the identity of someone happily scamming the public at large, even when that person is dragging the name of the company associated with them through the mud by their antics - I think I might be waiting some time for the Bat Signal...<br /></div>
        
    ]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 07:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/batman">batman</category>
      <category domain="http://securityratty.com/tag/batman online">batman online</category>
      <category domain="http://securityratty.com/tag/batman game">batman game</category>
      <category domain="http://securityratty.com/tag/online batman game">online batman game</category>
      <category domain="http://securityratty.com/tag/batman online game">batman online game</category>
      <category domain="http://securityratty.com/tag/batman adventure">batman adventure</category>
      <category domain="http://securityratty.com/tag/batman begins videogame">batman begins videogame</category>
      <category domain="http://securityratty.com/tag/batman-centric">batman-centric</category>
      <category domain="http://securityratty.com/tag/batman-style justice">batman-style justice</category>
      <source url="http://blog.spywareguide.com/2008/09/zango-and-the-batman-online-vi.html">Zango And The Batman Online Videogame</source>
    </item>
    <item>
      <title><![CDATA[Gartner Event Processing Summit (and EPTS Meeting), Sept 2008]]></title>
      <link>http://securityratty.com/article/d942f118e90958175378be5d866f230c</link>
      <guid>http://securityratty.com/article/d942f118e90958175378be5d866f230c</guid>
      <description><![CDATA[Many folks have been sending me email,inquiring if I will beattending the Gartner Event Processing Summit, September 15-16 or the 4th Event Processing Symposium, September 17-19, 2008 (the EPTS...]]></description>
      <content:encoded><![CDATA[<p style="text-align: left;">Many folks have been sending me email, inquiring if I will be attending the <a href="http://www.gartner.com/it/page.jsp?id=616710" target="_blank">Gartner Event Processing Summit, September 15-16</a> or the <a href="http://complexevents.com/?p=405 ">4th Event Processing Symposium, September 17-19, 2008</a> (the EPTS meeting).    I regret not attending either event this year and will miss getting together with everyone.  In addition, I would like to thank Opher and the EPTS team for inviting me.</p>
<p>As we get closer to the conference dates, I wish that I had made plans to fly back to the US to meet everyone.    However, I have been cutting back on public speaking, taking a break since May.  In addition, Gartner did not ask me to speak at their Event Processing Summit this year, I assume because they did not want to pay airfare for my flight from Thailand to the US.    Also, Gartner always likes to fill their conference speaking slots with as many <a href="http://www.gartner.com/it/content/616700/616710/ep_agenda.pdf" target="_blank">Gartner speakers</a> as they can, unless you are a paid sponsor; and I noticed a number of Gartner employees speaking in multiple slots.</p>
<blockquote><p><em>(Editorial Note) Then again, maybe I complained to much about the lack of organization and conference problems when I was invited at be a Gartner keynote speaker last time - reservations not made propertly,  problems with the guest speaker registration list at sign-in, rooms shifted without notifying the speakers and panelists.   Admittedly, I was not happy with the conference organizers at the last get together.  This was my fault, as I am accustomed to better conference execution and am probally too &#8220;picky&#8221; about details these days - my bad.  Anyway, the Gartner organizers apologized numerous times, saying they had too many conferences going on at the same time and not enough people to cover them all.</em></p></blockquote>
<p>One of the problems with spending so much time in Asia, especially in Thailand, is that guest speakers are really treated as VIPs.  There are usually special comfy couches set up for the speakers and the conference staff really treat you very nice, taking care of you every step of the way.   In fact, there is an entire very nice culture around how guest speakers are treated in Thailand.   Often, they pin flowers on the VIP speakers and take your photos like you are a star.    Very nice culture.</p>
<p>I absolutely look forward to speaking on event processing or CEP at a future venue and meeting everyone face-to-face instead of over the net.  My sincere and deepest apologies for not attending either the Gartner or the EPTS event this year.   </p>
<p>PS:  If you take up a collection and send me a RT business class air ticket, I might change my mind <img src='http://www.thecepblog.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /></p>
]]></content:encoded>
      <pubDate>Sat, 30 Aug 2008 08:57:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/gartner event">gartner event</category>
      <category domain="http://securityratty.com/tag/gartner">gartner</category>
      <category domain="http://securityratty.com/tag/epts">epts</category>
      <category domain="http://securityratty.com/tag/guest speakers">guest speakers</category>
      <category domain="http://securityratty.com/tag/speakers">speakers</category>
      <category domain="http://securityratty.com/tag/gartner keynote speaker">gartner keynote speaker</category>
      <category domain="http://securityratty.com/tag/gartner employees">gartner employees</category>
      <category domain="http://securityratty.com/tag/conference">conference</category>
      <source url="http://www.thecepblog.com/2008/08/30/gartner-event-processing-symposium-and-epts-meeting-sept-2008/">Gartner Event Processing Summit (and EPTS Meeting), Sept 2008</source>
    </item>
    <item>
      <title><![CDATA[File Integrity Monitoring: Secure Your Virtual and Physical IT Environments]]></title>
      <link>http://securityratty.com/article/f25697c6547acff1ffe2bf8a0039f459</link>
      <guid>http://securityratty.com/article/f25697c6547acff1ffe2bf8a0039f459</guid>
      <description><![CDATA[Source: Tripwire) Looking for a File Integrity Monitoring Solution? With the numerous servers, devices and applications organizations rely on to support their everyday business, outages and security...]]></description>
      <content:encoded><![CDATA[<b>(Source: Tripwire)</b>  Looking for a File Integrity Monitoring Solution? With the numerous servers, devices and applications organizations rely on to support their everyday business, outages and security breaches due to poor IT configurations are unacceptable. In addition, many organizations must now prove compliance with standards like PCI DSS designed to protect systems and sensitive data. File integrity monitoring solutions minimize security risk resulting from undesirable configuration change by monitoring, detecting, and reconciling changes to key files throughout the virtual and physical IT infrastructures.<p>Learn how file integrity monitoring solutions work and the capabilities you should expect your solution to have. Then review a detailed checklist you should complete before purchasing your solution. Finally, discover how Tripwire Enterprise effectively combines file integrity monitoring with configuration assessment-a single configuration control solution that proactively assesses and monitors the IT infrastructure and enables organizations to achieve and maintain compliance with standards and regulations.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=4fD2VT"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=4fD2VT" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/374621002" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 25 Aug 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/file integrity">file integrity</category>
      <category domain="http://securityratty.com/tag/applications organizations rely">applications organizations rely</category>
      <category domain="http://securityratty.com/tag/organizations">organizations</category>
      <category domain="http://securityratty.com/tag/enables organizations">enables organizations</category>
      <category domain="http://securityratty.com/tag/security breaches due">security breaches due</category>
      <category domain="http://securityratty.com/tag/solution">solution</category>
      <category domain="http://securityratty.com/tag/undesirable configuration change">undesirable configuration change</category>
      <category domain="http://securityratty.com/tag/maintain compliance">maintain compliance</category>
      <category domain="http://securityratty.com/tag/numerous servers">numerous servers</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/374621002/whitepapers.do">File Integrity Monitoring: Secure Your Virtual and Physical IT Environments</source>
    </item>
    <item>
      <title><![CDATA[Web Based Botnet Command and Control Kit 2.0]]></title>
      <link>http://securityratty.com/article/4f945955ba8a424fe6b9352583602062</link>
      <guid>http://securityratty.com/article/4f945955ba8a424fe6b9352583602062</guid>
      <description><![CDATA[The average web based command and control kit for a botnet consisting of single user, single campaign functions only, has just lost its charm, with a recent discovery of a proprietary botnet kit whose...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SK7vNKA_3xI/AAAAAAAACFk/bFba_0dWvI4/s1600-h/web_botnet_cc_1.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SK7vNKA_3xI/AAAAAAAACFk/TqKIw6bxpjw/s200-R/web_botnet_cc_1.JPG" /></a>The average web based command and control kit for a botnet consisting of single user, single campaign functions only, has just lost its charm, with a recent discovery of a proprietary botnet kit whose features clearly indicate that the kit's coder know exactly which niches to fill - presumably based on his personal experience or market research into competing products.<br />
<br />
What are some its key differentiation factors? <b>Multitasking</b> at its best, for instance, the kits provides the botnet master with the opportunity to manage numerous different task such as several malware campaigns and DDoS attacks simultaneously, where each of these gets a separate metrics page.  <b>&nbsp;</b><br />
<br />
<a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8Bf1BEKoI/AAAAAAAACFs/Yicbw9alvSs/s1600-h/web_botnet_cc_2.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8Bf1BEKoI/AAAAAAAACFs/rzG7g1DxhQs/s200-R/web_botnet_cc_2.JPG" /></a><b>Automation</b> of malicious tasks, by setting up tasks, and issuing notices on the status of the task, when it was run and when it was ended. Just consider the possibilities for a scheduling malware and DDoS attacks for different quarters. <b>&nbsp;</b><br />
<br />
<b>Segmentation</b> in every aspect of the tasks, for instance, a DDoS attacks against a particular site can be scheduled to launched on a specific date from infected hosts based in chosen countries only. <b>&nbsp;</b><br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SK8BqO4a_VI/AAAAAAAACF0/UMGxAh9uGF0/s1600-h/web_botnet_cc_3.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SK8BqO4a_VI/AAAAAAAACF0/ZlxV-mc44fM/s200-R/web_botnet_cc_3.JPG" /></a><b>Customized DDoS</b> in the sense of empowering the botnet master with point'n'click ability to dedicate a precise number of the bots to participate, which countries they should be based in, and for how long the attack should remain active. <b>Quality and assurance in DDoS attacks</b> based on the measurement of the bot's bandwidth against a particular country, in this case the object of the attack, so theoretically bots from neighboring countries would DDoS the country in question far more efficiently. <b>&nbsp;</b><br />
<br />
<a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SK8B0rE_rgI/AAAAAAAACF8/NKwLnKmmH44/s1600-h/web_botnet_cc_4.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SK8B0rE_rgI/AAAAAAAACF8/pVosEgAltxk/s200-R/web_botnet_cc_4.JPG" /></a><b>Historical malware campaign performance</b>, is perhaps the most quality assurance feature in the entire kit, presumably created in order to allow the person behind it to measure which were the most effective malware and DDoS campaigns that he executed in the past. From an OSINT perspective, sacrificing his operational security by maintaing detailed logs from previous attacks is a gold mine directly establishing his relationships with previous malware campaigns.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8B8T36-3I/AAAAAAAACGE/BhFmeDoa8Lk/s1600-h/web_botnet_cc_5.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8B8T36-3I/AAAAAAAACGE/vij9THb60ow/s200-R/web_botnet_cc_5.JPG" /></a><b>Bot Description</b>:  &nbsp; <br />
<div dir="ltr" id="result_box">1. Completely invisible Bot work in the system.  <br />
2. Not loads system.  <br />
3. Invisible in the process.  <br />
4. Workaround all firewall.  <br />
5. Bot implemented as a driver.  </div><div dir="ltr" id="result_box"><a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SK8CIQJHsKI/AAAAAAAACGM/SzpE6NqryP8/s1600-h/web_botnet_cc_6.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SK8CIQJHsKI/AAAAAAAACGM/CptzW9_ji-k/s200-R/web_botnet_cc_6.JPG" /></a><b>Functions Bot</b> (constantly updated):&nbsp;</div><div dir="ltr" id="result_box">1. Downloading a file (many options). <br />
2. HTTP DDoS (many options, including http authentication).  </div><div dir="ltr" id="result_box"><a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SK8CQZXzF1I/AAAAAAAACGU/LI52hSDJhpA/s1600-h/web_botnet_cc_7.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SK8CQZXzF1I/AAAAAAAACGU/AIaGhGUL0Fk/s200-R/web_botnet_cc_7.JPG" /></a><b>The web interface</b>&nbsp;</div><div dir="ltr" id="result_box">-- Convenient manager tasks. <br />
-- Every task can be stopped, put on pause, etc. ... <br />
-- Interest and visual scale of the task.&nbsp;&nbsp;</div><div dir="ltr" id="result_box">-- A task manager for DDoS and Loader <br />
&nbsp;&nbsp;&nbsp;&nbsp;</div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div dir="ltr" id="result_box"><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SK8Cvw3fTbI/AAAAAAAACGc/Zqcrn6XWYEw/s1600-h/web_botnet_cc_8.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SK8Cvw3fTbI/AAAAAAAACGc/0PQgE_timh4/s200-R/web_botnet_cc_8.JPG" /></a>-- <b>For DDoS tasks</b> </div><div dir="ltr" id="result_box">Bots involved in DDoS 'f. <br />
Condition of the victim (works, fell).  <br />
</div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div dir="ltr" id="result_box"><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8C5JVrIeI/AAAAAAAACGk/HNHO_ar0MgA/s1600-h/web_botnet_cc_9.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8C5JVrIeI/AAAAAAAACGk/Y1z0VIR3B9k/s200-R/web_botnet_cc_9.JPG" /></a>2. <b>Bots manager  </b><br />
-- Displays a list of bots (postranichno). <br />
-- Obratseniya date of the first and last. <br />
-- ID Bot. <br />
-- Country Bot. <br />
-- Type Bot. <br />
-- The status Bot (online / offline). <br />
-- Bot bandwidth to different parts of the world (europe, asia). <br />
-- The possibility of removing bots</div><div dir="ltr" id="result_box">-- When you click on ID Bot loadable still a wealth of information about it</div><div dir="ltr" id="result_box"></div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div dir="ltr" id="result_box"><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SK8D0Vm4XxI/AAAAAAAACGs/BM5pm1_Rtag/s1600-h/web_botnet_cc_11.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SK8D0Vm4XxI/AAAAAAAACGs/mQEa7wVxDNc/s200-R/web_botnet_cc_11.JPG" /></a>3. <b>Statistics botneta  </b><br />
-- Statistics both common and build Bot. <br />
-- Information on the growth and decline botneta dates (and build). <br />
-- Bots online <br />
-- All bots</div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div dir="ltr" id="result_box"><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8D6Gv_qnI/AAAAAAAACG0/JTOJS-ZHQek/s1600-h/web_botnet_cc_12.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SK8D6Gv_qnI/AAAAAAAACG0/ujbOfFEX9TA/s200-R/web_botnet_cc_12.JPG" /></a>-- Dead bots. <br />
<br />
4. <b>Statistics botneta country</b></div><div dir="ltr" id="result_box">-- All countries to work on&nbsp;</div><div dir="ltr" id="result_box">-- New work by country&nbsp;</div><div dir="ltr" id="result_box">-- Online work from country to country</div><div dir="ltr" id="result_box">-- Dead bots by country</div><div dir="ltr" id="result_box"></div><div dir="ltr" id="result_box">5. <b>Detailed history botneta</b>&nbsp;</div><div dir="ltr" id="result_box">6. <b>Convenient user-friendly interface adding teams</b> <br />
8. <b>Admin minimal server loads</b>  <br />
-- Use php5/mysql  <br />
</div><div dir="ltr" id="result_box"><a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SK8EKSfrczI/AAAAAAAACG8/3oulo2cgTtM/s1600-h/web_botnet_cc_13.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SK8EKSfrczI/AAAAAAAACG8/xEI9xAwNGNM/s200-R/web_botnet_cc_13.JPG" /></a><b>Upcoming features : </b><br />
1. Form grabber (price increase substantially), for old customers will be charged as an upgrade <br />
2. Public key cryptography<br />
3. Clustering campaigns and DDoS attacks<br />
<br />
Despite it's proprietary nature, it's quality and innovative features will sooner or later leak out for everyone to take advantage of, a rather common lifecycle for the majority of proprietary malware kits in general.</div><div dir="ltr" id="result_box"><br />
<b>Related posts:</b></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2008/02/blackenergy-ddos-bot-web-based-c.html">BlackEnergy DDoS Bot Web Based<br />
</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2007/09/new-ddos-malware-kit-in-wild.html">A New DDoS Malware Kit in the Wild</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2007/04/shots-from-malicious-wild-west-sample_20.html">The Cyber Bot - Web Based Malware</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2007/04/shots-from-malicious-wild-west-sample_7672.html">The Black Sun Bot - Web Based Malware</a> </div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2007/09/custom-ddos-capabilities-within-malware.html">Custom DDoS Capabilities Within a Malware</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2007/10/botnet-on-demand-service.html">Botnet on Demand Service</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2008/03/loadsccs-ddos-for-hire-service.html">Loads.cc - DDoS for Hire Service</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2008/06/using-market-forces-to-disrupt-botnets.html">Using Market Forces to Disrupt Botnets</a>&nbsp;</div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2007/03/botnet-communication-platforms.html">Botnet Communication Platforms</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2008/04/botnet-masters-to-do-list.html">A Botnet Master's To-Do List</a></div><div dir="ltr" id="result_box"><a href="http://ddanchev.blogspot.com/2007/05/ddos-on-demand-vs-ddos-extortion.html">DDoS on Demand VS DDoS Extortion</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/how-does-botnet-with-100k-infected-pcs.html">How Does a Botnet with 100k Infected PCs Look Like?</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Y5dBtK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Y5dBtK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=WsNccK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=WsNccK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ToV4Pk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ToV4Pk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=I6a7ak"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=I6a7ak" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2S7WNK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2S7WNK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Qk66sK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Qk66sK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=8S5ask"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=8S5ask" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/372102101" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 10:02:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ddos attacks based">ddos attacks based</category>
      <category domain="http://securityratty.com/tag/ddos attacks">ddos attacks</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/previous malware campaigns">previous malware campaigns</category>
      <category domain="http://securityratty.com/tag/ddos attacks simultaneously">ddos attacks simultaneously</category>
      <category domain="http://securityratty.com/tag/botnet">botnet</category>
      <category domain="http://securityratty.com/tag/country">country</category>
      <category domain="http://securityratty.com/tag/country bot">country bot</category>
      <category domain="http://securityratty.com/tag/ddos">ddos</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/372102101/web-based-botnet-command-and-control.html">Web Based Botnet Command and Control Kit 2.0</source>
    </item>
    <item>
      <title><![CDATA[Let's Play Two]]></title>
      <link>http://securityratty.com/article/83bf8d018a7d0aa80e3dc49adab30013</link>
      <guid>http://securityratty.com/article/83bf8d018a7d0aa80e3dc49adab30013</guid>
      <description><![CDATA[Every year my Dad and I go to see a Red Sox series. Last weekend was this year's trip and we went to Chicago to see the World Champion Boston Red Sox (saying that never gets old) play the White Sox....]]></description>
      <content:encoded><![CDATA[<p>Every year my Dad and I go to see a Red Sox series. Last weekend was this year&#39;s trip and we went to Chicago to see the World Champion Boston Red Sox (saying that never gets old) play the White Sox. Of course, while you are in Chicago you have to see Wrigley Field, and we really lucked out. This weekend was Red Sox versus the White Sox (the battle of the Soxes they used to call it on Channel 38) on the southside and northside featured Cubs versus Cardinals! The last four World Series winners in town on the same weekend (Red Sox 04, 07, White Sox 05, Cards 06).</p><br /><div>We learned several things- first in heaven the Cubs play the Red Sox in the World Series. Those ballparks are true gems. (In hell its probably the Yankees versus Phillies). Also, the people on the southside and northside *really* have a rivalry going. Its basically Boston v NY but they live in the same town! Here is one example from the southside</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc0c9d8834-pi" style="display: inline;"><img alt="IMG_0597" border="0" class="at-xid-6a00d83451c75869e200e553fc0c9d8834 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc0c9d8834-800wi" title="IMG_0597" /></a>
<br /></div><br /><div>One of the great things about Wrigley (and there are many despite what southsiders say), is that its in the middle of a real neighborhood</div><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bbb38833-pi" style="display: inline;"><img alt="IMG_0486" border="0" class="at-xid-6a00d83451c75869e200e553e0bbb38833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bbb38833-800wi" title="IMG_0486" /></a>
<br /></div><br /><div>Epicenter of Cub universe</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bbf68833-pi" style="display: inline;"><img alt="IMG_0487" border="0" class="at-xid-6a00d83451c75869e200e553e0bbf68833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bbf68833-800wi" title="IMG_0487" /></a>&#160;</div><br /><div>Lots of action before and after game time, lots of people wandering around with gloves catching batting practices homers outside the stadium...err Field. Key point - Wrigley is a field, not a Stadium. Also Fenway is a Park. The Greek root of the word &quot;paradise&quot;, means &quot;enclosed green space&quot;, not concreteopolis</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc0ed98834-pi" style="display: inline;"><img alt="IMG_0489" border="0" class="at-xid-6a00d83451c75869e200e553fc0ed98834 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc0ed98834-800wi" title="IMG_0489" /></a>
<br /></div><br /><div>Wrigley is baseball Mecca</div><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc15338834-pi" style="display: inline;"><img alt="IMG_0507" border="0" class="at-xid-6a00d83451c75869e200e553fc15338834 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc15338834-800wi" title="IMG_0507" /></a>
<br /></div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bebd8833-pi" style="display: inline;"><img alt="IMG_0515" border="0" class="at-xid-6a00d83451c75869e200e553e0bebd8833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bebd8833-800wi" title="IMG_0515" /></a>
<br /></div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bef48833-pi" style="display: inline;"><img alt="IMG_0533" border="0" class="at-xid-6a00d83451c75869e200e553e0bef48833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bef48833-800wi" title="IMG_0533" /></a>
<br /></div><br /><div><span style="color: #0000ff; text-decoration: underline;"><br /></span></div><div>The greatest Cub of all, Ernie Banks, was our touchstone for the day - &quot;Let&#39;s Play Two.&quot; we started at Wrigley for the day game (Zambrano got shelled) and then got crosstown for the night game.</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bce68833-pi" style="display: inline;"><img alt="IMG_0496" border="0" class="at-xid-6a00d83451c75869e200e553e0bce68833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bce68833-800wi" title="IMG_0496" /></a>
<br /></div><div>To pull this off the L is your friend. As several Chicagoans pointed out, they are the only city that can have a true subway series, because the Red Line services both the White Sox and Cubs, whereas Mets-Yankees involves numerous transfers and so on.</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc0e988834-pi" style="display: inline;"><img alt="IMG_0488" border="0" class="at-xid-6a00d83451c75869e200e553fc0e988834 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc0e988834-800wi" title="IMG_0488" /></a>
<br /></div><br /><div>We got to US Cellular Field which is fine but a shadow of Wrigley and absolutely nothing good to <a href="http://www.nytimes.com/interactive/2008/06/08/travel/20080608_BALLPARK_GRAPHIC.html">eat</a>. Luckily we had Daisuke Matsuzaka on the hill</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc187a8834-pi" style="display: inline;"><img alt="IMG_0569" border="0" class="at-xid-6a00d83451c75869e200e553fc187a8834 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc187a8834-800wi" title="IMG_0569" /></a>
<br /></div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc18a88834-pi" style="display: inline;"><img alt="IMG_0573" border="0" class="at-xid-6a00d83451c75869e200e553fc18a88834 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553fc18a88834-800wi" title="IMG_0573" /></a>
<br /></div><br /><div>Before every game, Big Papi holds court in center with some players from the other team, he is to be a very popular guy. Ozzie Guillen told him before the series that with Manny gone, he wouldn&#39;t see a pitch to hit all weekend (ps. he did and crushed a bases loaded double)</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bfa78833-pi" style="display: inline;"><img alt="IMG_0581" border="0" class="at-xid-6a00d83451c75869e200e553e0bfa78833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bfa78833-800wi" title="IMG_0581" /></a>
<br /></div><br /><br /><div>The question we got most was - what about the Manny trade? His replacement strikes out a lot, but is otherwise a promising player</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bb978833-pi" style="display: inline;"><img alt="IMG_0468" border="0" class="at-xid-6a00d83451c75869e200e553e0bb978833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bb978833-800wi" title="IMG_0468" /></a>
<br /></div><br /><div>The Red Sox and White Sox share a little history, most especially Pudge Fisk who hit the famous homer in the 75 world series for the Red Sox and then had a great career for the White Sox (actually played more games for Chicago than Boston, but went into Cooperstown with a B on his hat)</div><br /><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bb778833-pi" style="display: inline;"><img alt="IMG_0456" border="0" class="at-xid-6a00d83451c75869e200e553e0bb778833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0bb778833-800wi" title="IMG_0456" /></a></div><div>
<br /></div><div>Red Sox won, hanging out in Wrigley was an even bigger highlight, and Chicago is a beautiful city to visit, by far the most accessible of the big US cities. Also, lots of good places to eat courtesy of <a href="http://www.matasano.com/log/">Thomas Ptacek</a>.</div><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0c08f8833-pi" style="display: inline;"><img alt="IMG_0591" border="0" class="at-xid-6a00d83451c75869e200e553e0c08f8833 " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553e0c08f8833-800wi" title="IMG_0591" /></a>
<br /></div>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 08:47:51 +0000</pubDate>
      <category domain="http://securityratty.com/tag/world series winners">world series winners</category>
      <category domain="http://securityratty.com/tag/world series">world series</category>
      <category domain="http://securityratty.com/tag/red sox versus">red sox versus</category>
      <category domain="http://securityratty.com/tag/red sox">red sox</category>
      <category domain="http://securityratty.com/tag/red sox series">red sox series</category>
      <category domain="http://securityratty.com/tag/series">series</category>
      <category domain="http://securityratty.com/tag/white sox">white sox</category>
      <category domain="http://securityratty.com/tag/white sox share">white sox share</category>
      <category domain="http://securityratty.com/tag/play">play</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/08/lets-play-two.html">Let's Play Two</source>
    </item>
    <item>
      <title><![CDATA[FaceBook Under Massive Phishing Attack From China]]></title>
      <link>http://securityratty.com/article/47a657fc4d930aab9e7fff5ff8be5a2b</link>
      <guid>http://securityratty.com/article/47a657fc4d930aab9e7fff5ff8be5a2b</guid>
      <description><![CDATA[Facebook is under attack with numerous phishing scams and it looks like the network effect is coming into full swing to allow the prolification of these scammers to spread virally. The worrying thing...]]></description>
      <content:encoded><![CDATA[Facebook is under attack with numerous phishing scams and it looks like the network effect is coming into full swing to allow the prolification of these scammers to spread virally. The worrying thing about these scams is that they are increasingly sophisticated.]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 04:20:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <category domain="http://securityratty.com/tag/network effect">network effect</category>
      <category domain="http://securityratty.com/tag/facebook">facebook</category>
      <category domain="http://securityratty.com/tag/scams">scams</category>
      <category domain="http://securityratty.com/tag/scammers">scammers</category>
      <category domain="http://securityratty.com/tag/increasingly">increasingly</category>
      <category domain="http://securityratty.com/tag/prolification">prolification</category>
      <category domain="http://securityratty.com/tag/spread">spread</category>
      <category domain="http://securityratty.com/tag/numerous">numerous</category>
      <source url="http://digg.com/security/FaceBook_Under_Massive_Phishing_Attack_From_China">FaceBook Under Massive Phishing Attack From China</source>
    </item>
    <item>
      <title><![CDATA[Links List 8.8.08]]></title>
      <link>http://securityratty.com/article/e04889523cd12799c82bedae1e2f93f6</link>
      <guid>http://securityratty.com/article/e04889523cd12799c82bedae1e2f93f6</guid>
      <description><![CDATA[Peace Corps meets long-term next-generation global leadership development meets really long-term international business development. IBMs new Corporate Service Corps program is assisting numerous...]]></description>
      <content:encoded><![CDATA[<p>Peace Corps meets long-term next-generation global leadership development meets really long-term international business development. IBM’s new Corporate Service Corps program is assisting numerous nonprofits and companies across the globe to <a href="http://online.wsj.com/article/SB121779236200008095.html?mod=djemTECH" target="_blank">become more efficient and more computer-savvy</a>. In a span of three years, over 600 of IBM’s employees will spend month-long projects in countries where it wants a bigger footprint by donating their time and services. A reason (besides getting to work with <a href="http://dougmcclure.net" target="_blank">Doug McClure</a>) to work for IBM.
<p>Buying a lemon is always a bad thing – but when you pay $1 billion for it?! Back in 2005, Google bought a <a href="http://blogs.zdnet.com/BTL/?p=9601" target="_blank">5% stake in AOL for $1 billion</a> and now is calling that investment <a href="http://legal-dictionary.thefreedictionary.com/impaired" target="_blank">“impaired”.</a> That’s one way of putting it, so it’s a good thing Google has money to burn.
<p>At LinuxWorld this week, Bob Sutor, VP of open source and standards at IBM, said that the next <a href="http://www.infoworld.com/article/08/08/07/IBM_exec_on_Linux_apps_Im_tired_of_waiting_1.html?source=NLC-Daily&amp;gcd=2008-08-08" target="_blank">10 years is “do or die”</a> for open source software designed for specific industries. 10 years? That’s like 70 years in open source development time.
<p>And finally…8/8/08…the <a href="http://www.nbcolympics.com/" target="_blank">Olympics</a> are here! Network administrators around the world, except for <a href="http://blog.sciencelogic.com/top-10-signs-your-network-admin-has-gone-rogue/07/2008" target="_blank">Terry Childs</a>, will be eyeing office network bandwidth closely as people go online to watch streaming video of the games. NBC and Microsoft will offer <a href="http://www.bcs.org/server.php?show=ConWebDoc.20432" target="_blank">2,200 hours of live video coverage</a> with up to 20 simultaneous live streams of different events. Plus <a href="http://www.nbcolympics.com/" target="_blank">NBCOlympics.com</a> will offer 3,000 hours of on-demand video content. The time difference means that much of the primetime events will be broadcast while the Western hemisphere is supposed to be hard at work. Me – I’m just glad it’s the weekend, and I can get the Olympics fix I’ve been waiting years for.</p>
]]></content:encoded>
      <pubDate>Fri, 08 Aug 2008 15:03:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/time difference">time difference</category>
      <category domain="http://securityratty.com/tag/on-demand video content">on-demand video content</category>
      <category domain="http://securityratty.com/tag/source">source</category>
      <category domain="http://securityratty.com/tag/source software">source software</category>
      <category domain="http://securityratty.com/tag/source development time">source development time</category>
      <category domain="http://securityratty.com/tag/live video coverage">live video coverage</category>
      <category domain="http://securityratty.com/tag/ibms">ibms</category>
      <source url="http://blog.sciencelogic.com/links-list-8808/08/2008">Links List 8.8.08</source>
    </item>
    <item>
      <title><![CDATA[Phishers Backdooring Phishing Pages to Scam One Another]]></title>
      <link>http://securityratty.com/article/6ccaae3434fe8c6502ba9a6fc0cfb3e0</link>
      <guid>http://securityratty.com/article/6ccaae3434fe8c6502ba9a6fc0cfb3e0</guid>
      <description><![CDATA[There seems to be no such thing as a free phishing page these days, with phishers scamming one another at an alarming rate according to a recently published research entitled &quot; There is No Free...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="text-align: center; clear: both;"></div><div style="text-align: left;"></div><div class="separator" style="text-align: center; clear: both;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SJsXrRQtHeI/AAAAAAAACA8/wxZZ1xFCjPk/s1600-h/phishing_pages.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://4.bp.blogspot.com/_wICHhTiQmrA/SJsXrRQtHeI/AAAAAAAACA8/TiCS7pP_jF0/s200-R/phishing_pages.JPG" style="border: 0pt none ;" /></a>There seems to be no such thing as a free phishing page these days, with phishers scamming one another at an alarming rate according to a recently published research entitled "<a href="http://www.usenix.org/event/woot08/tech/full_papers/cova/cova_html/">There is No Free Phish:An Analysis of “Free” and Live Phishing Kits</a>".<br />
<br />
Cybercriminals attempting to scam other cybercriminals has been happening for years, with old school cases where backdoored malware tools such as crypters and binders are offered for free, or a newly released RAT whose client is in fact infected with a third-party malware. Realizing and definitely not enjoying the fact that the lowered entry barriers into cybercrime are empowering yesterday's script kiddies will malware kits that used to be utilized by a set of people who invested time and money into the process several years ago, this unethical competitive practice is only going to get more common. Backdooring phishing pages is one thing, <a href="http://blogs.zdnet.com/security/?p=1641">backdooring entire web malware exploitation kits, next to the possibility to remotely exploit a competitor's command and control server is entirely another</a> : <br />
<br />
"<i>Taking a more strategic approach, a cybercriminal wanting to scam another cybercriminal would backdoor <a href="http://blogs.zdnet.com/security/?p=1598" title="The Neosploit cybercrime group abandons its web malware exploitation kit">a highly expensive web malware exploitation kit</a>, then start distributing it for free, and in fact, there have been numerous cases when such kits have been distributed in such a fraudulent manner. The result is a total outsourcing of the process of coming up with ways to infect hundreds of thousands of users though client side exploits <a href="http://blogs.zdnet.com/security/?p=1122" title="Fast-Fluxing SQL injection attacks executed from the Asprox botnet">embedded or SQL injected at legitimate sites</a>, and basically collecting the final output - the stolen E-banking data and the botnet itself.</i>"<br />
<br />
What's to come in the long term? Why just backdoor the phishing page, when you can embedd it with a live exploit URL in an attempt to both, infect the cybercriminal about to use and obtain all of the already stolen virtual assets has has already stolen, and also, <a href="http://ddanchev.blogspot.com/2008/05/skype-phishing-pages-serving-exploits.html">have a third-party maintain a blended attack campaign without even knowing it</a>.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/06/phishing-campaign-spreading-across.html">Phishing Campaign Spreading Across Facebook </a><b><br />
</b><a href="http://ddanchev.blogspot.com/2008/03/phishing-pages-for-every-bank-are.html">Phishing Pages for Every Bank are a Commodity</a> <br />
<a href="http://ddanchev.blogspot.com/2008/02/rbns-phishing-activities.html">RBN's Phishing Activities</a><br />
<a href="http://ddanchev.blogspot.com/2008/02/inside-botnets-phishing-activities.html">Inside a Botnet's Phishing Activities</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/large-scale-myspace-phishing-attack.html">Large Scale MySpace Phishing Attack</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/update-on-myspace-phishing-campaign.html">Update on the MySpace Phishing Campaign</a><br />
<a href="http://ddanchev.blogspot.com/2008/01/myspace-phishers-now-targeting-facebook.html">MySpace Phishers Now Targeting Facebook</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/myspace-hosting-myspace-phishing.html">MySpace Hosting MySpace Phishing Profiles</a><br />
<a href="http://ddanchev.blogspot.com/2007/08/diy-phishing-kits.html">DIY Phishing Kits</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/diy-phishing-kit-goes-20.html">DIY Phishing Kit Goes 2.0</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/paypal-and-ebay-phishing-domains.html">PayPal and Ebay Phishing Domains</a><br />
<a href="http://ddanchev.blogspot.com/2007/07/average-online-time-for-phishing-sites.html">Average Online Time for Phishing Sites</a><br />
<a href="http://ddanchev.blogspot.com/2007/02/phishing-ecosystem.html">The Phishing Ecosystem</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/assessing-rock-phish-campaign.html">Assessing a Rock Phish Campaign</a><br />
<a href="http://ddanchev.blogspot.com/2007/04/taking-down-phishing-sites-business.html">Taking Down Phishing Sites - A Business Model?</a><br />
<a href="http://ddanchev.blogspot.com/2007/03/take-this-malicious-site-down.html">Take this Malicious Site Down - Processing Order..</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/209-host-locked.html">209 Host Locked</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/2091-host-locked.html">209.1 Host Locked</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/661-host-locked.html">66.1 Host Locked</a><br />
<a href="http://ddanchev.blogspot.com/2007/07/confirm-your-gullibility.html">Confirm Your Gullibility</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/phishers-spammers-and-malware-authors.html">Phishers, Spammers and Malware Authors Clearly Consolidating</a><br />
<a href="http://ddanchev.blogspot.com/2007/08/economics-of-phishing.html">The Economics of Phishing</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=adzwcK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=adzwcK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=r3qKtK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=r3qKtK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=lKP1Kk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=lKP1Kk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=kwEXWk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=kwEXWk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=vKtnuK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=vKtnuK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=hxAsFK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=hxAsFK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=3CLAFk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=3CLAFk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/358721854" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 07 Aug 2008 11:01:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/phishers">phishers</category>
      <category domain="http://securityratty.com/tag/myspace phishers">myspace phishers</category>
      <category domain="http://securityratty.com/tag/campaign">campaign</category>
      <category domain="http://securityratty.com/tag/myspace">myspace</category>
      <category domain="http://securityratty.com/tag/rock phish campaign">rock phish campaign</category>
      <category domain="http://securityratty.com/tag/free phish">free phish</category>
      <category domain="http://securityratty.com/tag/free">free</category>
      <category domain="http://securityratty.com/tag/kits">kits</category>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/358721854/phishers-backdooring-phishing-pages-to.html">Phishers Backdooring Phishing Pages to Scam One Another</source>
    </item>
    <item>
      <title><![CDATA[Open Wireless Networks on University Campuses]]></title>
      <link>http://securityratty.com/article/853802f13943f6fe01ed0f94bb57cde5</link>
      <guid>http://securityratty.com/article/853802f13943f6fe01ed0f94bb57cde5</guid>
      <description><![CDATA[Open wireless networks raise privacy issues and entail increased risk of malicious attacks and illegal downloading activities. Such networks are nonetheless attractiveparticularly to...]]></description>
      <content:encoded><![CDATA[Open wireless networks raise privacy issues and entail increased risk of malicious attacks and illegal downloading activities. Such networks are nonetheless attractive—particularly to universities—because they enhance usability and thus expand access to nonsensitive system resources. At universities, such access brings numerous benefits to students, faculty, and the surrounding community alike. Here, the authors describe the challenges of removing individual user authentication requirements at the perimeter of a university network in which mobile device users access system resources over wireless links to the wired infrastructure. The authors discuss how to mitigate the security and privacy risks entailed in an open network of this sort, and also describe how IT departments can vary the network's degree of openness.<br style="clear: both;"/>
      <a href="http://www.pheedo.com/click.phdo?s=886fadebac38b82b1bf95eab60070589"><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/img.phdo?s=886fadebac38b82b1bf95eab60070589"/></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=886fadebac38b82b1bf95eab60070589" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Thu, 31 Jul 2008 09:30:21 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/university network">university network</category>
      <category domain="http://securityratty.com/tag/authors describe">authors describe</category>
      <category domain="http://securityratty.com/tag/nonsensitive system resources">nonsensitive system resources</category>
      <category domain="http://securityratty.com/tag/describe">describe</category>
      <category domain="http://securityratty.com/tag/malicious attacks">malicious attacks</category>
      <category domain="http://securityratty.com/tag/wired infrastructure">wired infrastructure</category>
      <category domain="http://securityratty.com/tag/authors discuss">authors discuss</category>
      <category domain="http://securityratty.com/tag/privacy risks">privacy risks</category>
      <source url="http://www.pheedo.com/click.phdo?i=886fadebac38b82b1bf95eab60070589">Open Wireless Networks on University Campuses</source>
    </item>
  </channel>
</rss>
