<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: outer]]></title>
    <link>http://securityratty.com/tag/outer</link>
    <description></description>
    <pubDate>Wed, 19 Dec 2007 02:10:15 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Opinion: Obama's Blackberry Is No Security Threat]]></title>
      <link>http://securityratty.com/article/e87ac9b85b1440c70317a2e3c99bc69a</link>
      <guid>http://securityratty.com/article/e87ac9b85b1440c70317a2e3c99bc69a</guid>
      <description><![CDATA[A lot of the stories about President-Elect Barack Obama possibly having to relinquish his BlackBerry when he takes office Jan. 20 are, for a variety of reasons, just plain dumb
Presented By
Expedition...]]></description>
      <content:encoded><![CDATA[A lot of the stories about President-Elect Barack Obama possibly having to relinquish his BlackBerry when he takes office Jan. 20 are, for a variety of reasons, just plain dumb.<br style="clear: both;"/>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:ec05a75c51a0c57bf749dc34de320338:9saJDFUNixvCt9W%2FnAURKdwA2cqnMddIgJicBm8aa7XRGqSr3d0tP4bmhbLQU11krWw1pJd5zPcU'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:ee597d2c1bb98b27efdcaefe8ebb3f75:EF6STR8ij2QRJ8xF4MBcoSPj2lJwQex7OGQm3R4yzLgsLbUdOaDqd300xLdPMY8UCWy9otIBA7UvIQ%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:d51c69caef3a79fa989b3a7574d817cb:uzyMPJwsArJb1adLPnID9o%2BjzBNZTeavL38C94JxNqfi1Cu7ClBDRM2SRcEXd0Rorv8gufvurWb2Vw%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:42f0cd0844493e4e350b139fc5b4aac4:MXMK2lz0WWHJX0PP4CSpEs7sIpFYH2zP5xNyh3ZAJhafvgGgWMApfnlvI1ecgN6drJ%2B6%2B12av%2F4TCA%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>
<hr />
<div style="font-size:xx-small;color:gray;padding-bottom:.5em">Presented By:</div>
<div><a href="http://www.pheedo.com/feeds/ht.php?t=c&amp;i=f38edf875ae6f3723280e92fea392c4c&amp;p=1">Expedition Week Continues Tonight</a></div>
<table border="0" cellpadding="0" cellspacing="0">
<tr><td valign="top"><embed src="http://services.brightcove.com/services/viewer/federated_f8/1902560944" bgcolor="#FFFFFF" flashVars="playerId=1902560944&viewerSecureGatewayURL=https://console.brightcove.com/services/amfgateway&servicesURL=http://services.brightcove.com/services&cdnURL=http://admin.brightcove.com&domain=embed&autoStart=false&" base="http://admin.brightcove.com" name="flashObj" width="300" height="250" seamlesstabbing="false" type="application/x-shockwave-flash" swLiveConnect="true" pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"></embed><br />
<br /><img src="http://images.pheedo.com/g/ngc/natgeologo_80x60.jpg"><br />
<font size="2" face="helvetica" >Seven nights of one great discovery after another continues tonight at 9P e/p only on National Geographic Channel.  From the ancient pyramids to the ocean depths, from lost cities to outer space, travel with the latest generation of intrepid explorers as they make one great discovery after another.  Expedition Week, only on National Geographic Channel.</font><br />
<a href="http://www.pheedo.com/click.phdo?a=v3%3Ac1abad0b6daa4d28e9a527be56ca4e2f%3As2rmGnBOH62ZTX7YSZtUtsuGGEa8BJPlu%2FnPAP5iBIxxx5lnUHVgxgWtXjRC%2BL9X6noRAJMryZFAD1poPIhkf6cQxJS8bBfGwQlOn880Zw7JEF%2BMyg8FaI55gEz%2FwsMAIsKOYGloldTlO7L2E7%2FRMBd5jFHoF%2BTSxltqVyVuyH%2BRkxk%3D" target="_blank">www.natgeotv.com/expedition</font><br />
</a></td></tr>
<tr><td>&nbsp;</td></tr>
</table>
<div style="font-size:xx-small; padding-top: 1em;"><span style="border-top: 1px solid">
<br style="display:none"/>
<a href="http://www.pheedo.com/">Ads by Pheedo</a>
</span><img alt="" style="border: 0; height: 1px; width: 1px;" border="0" height="1" width="1" src="http://www.pheedo.com/feeds/ht.php?t=v&amp;i=f38edf875ae6f3723280e92fea392c4c&amp;p=1"/>
<br/>
</div>
]]></content:encoded>
      <pubDate>Thu, 20 Nov 2008 02:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/national geographic channel">national geographic channel</category>
      <category domain="http://securityratty.com/tag/takes office jan">takes office jan</category>
      <category domain="http://securityratty.com/tag/plain dumb">plain dumb</category>
      <category domain="http://securityratty.com/tag/continues tonight">continues tonight</category>
      <category domain="http://securityratty.com/tag/blackberry">blackberry</category>
      <category domain="http://securityratty.com/tag/intrepid explorers">intrepid explorers</category>
      <category domain="http://securityratty.com/tag/expedition week">expedition week</category>
      <category domain="http://securityratty.com/tag/discovery">discovery</category>
      <category domain="http://securityratty.com/tag/ancient pyramids">ancient pyramids</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=f38edf875ae6f3723280e92fea392c4c">Opinion: Obama's Blackberry Is No Security Threat</source>
    </item>
    <item>
      <title><![CDATA[IETF: Should we ignore the Kaminsky bug?]]></title>
      <link>http://securityratty.com/article/6975adc4b544aeb8b0396e1313e93ab4</link>
      <guid>http://securityratty.com/article/6975adc4b544aeb8b0396e1313e93ab4</guid>
      <description><![CDATA[The ongoing debate about a serious flaw in the DNS discovered this summer brings to mind a famous quotation from Voltaire: &quot;The perfect is the enemy of the good
Presented By
Expedition Week Continues...]]></description>
      <content:encoded><![CDATA[The ongoing debate about a serious flaw in the DNS discovered this summer brings to mind a famous quotation from Voltaire: "The perfect is the enemy of the good."<br style="clear: both;"/>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:e98ff362db899b2e040e19c88e1fee62:Qf3Blz6NO2UDwDBzsnXuNsXW1lcfVfm2HeUNc5j9JnAB4Robv7e%2B%2BkMf9IDNbMTtKJ%2BFZrTGyR%2B1'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:476ecdf8d4911b3c132800f55947c97d:VYvnBXCXpc16XToke4ae5bPrRispjXT66paCrRQRv%2FHoEJnxg89j%2BydNhpWevJYkrBy8TbB8EsM5iA%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:b3d2d39d24209a5a68360d6f388b235d:a6B3LqlGwGY%2BlBwmScylHX7qq4YKBrWtb87hjc09KX8NPsCfN9bIIsfHryuzPu7Ei5s%2Bd7KkpOnt9g%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:77fedf7512667d83d6db2fe537bb7433:yJmvetAqvQ4ADDITfukN8w%2FX7mbgOaHAibHlz20Nr6pjHIydT%2FalgCWHtJeTPar5eaTkK1MZJoaDng%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>
<hr />
<div style="font-size:xx-small;color:gray;padding-bottom:.5em">Presented By:</div>
<div><a href="http://www.pheedo.com/feeds/ht.php?t=c&amp;i=f507528dc99a0b0b1c90f3b3e61f5656&amp;p=1">Expedition Week Continues Tonight</a></div>
<table border="0" cellpadding="0" cellspacing="0">
<tr><td valign="top"><embed src="http://services.brightcove.com/services/viewer/federated_f8/1902560944" bgcolor="#FFFFFF" flashVars="playerId=1902560944&viewerSecureGatewayURL=https://console.brightcove.com/services/amfgateway&servicesURL=http://services.brightcove.com/services&cdnURL=http://admin.brightcove.com&domain=embed&autoStart=false&" base="http://admin.brightcove.com" name="flashObj" width="300" height="250" seamlesstabbing="false" type="application/x-shockwave-flash" swLiveConnect="true" pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"></embed><br />
<br /><img src="http://images.pheedo.com/g/ngc/natgeologo_80x60.jpg"><br />
<font size="2" face="helvetica" >Seven nights of one great discovery after another continues tonight at 9P e/p only on National Geographic Channel.  From the ancient pyramids to the ocean depths, from lost cities to outer space, travel with the latest generation of intrepid explorers as they make one great discovery after another.  Expedition Week, only on National Geographic Channel.</font><br />
<a href="http://www.pheedo.com/click.phdo?a=v3%3Ac1abad0b6daa4d28e9a527be56ca4e2f%3As2rmGnBOH62ZTX7YSZtUtsuGGEa8BJPlu%2FnPAP5iBIxxx5lnUHVgxgWtXjRC%2BL9X6noRAJMryZFAD1poPIhkf6cQxJS8bBfGwQlOn880Zw7JEF%2BMyg8FaI55gEz%2FwsMAIsKOYGloldTlO7L2E7%2FRMBd5jFHoF%2BTSxltqVyVuyH%2BRkxk%3D" target="_blank">www.natgeotv.com/expedition</font><br />
</a></td></tr>
<tr><td>&nbsp;</td></tr>
</table>
<div style="font-size:xx-small; padding-top: 1em;"><span style="border-top: 1px solid">
<br style="display:none"/>
<a href="http://www.pheedo.com/">Ads by Pheedo</a>
</span><img alt="" style="border: 0; height: 1px; width: 1px;" border="0" height="1" width="1" src="http://www.pheedo.com/feeds/ht.php?t=v&amp;i=f507528dc99a0b0b1c90f3b3e61f5656&amp;p=1"/>
<br/>
</div>
]]></content:encoded>
      <pubDate>Thu, 20 Nov 2008 02:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/national geographic channel">national geographic channel</category>
      <category domain="http://securityratty.com/tag/continues tonight">continues tonight</category>
      <category domain="http://securityratty.com/tag/intrepid explorers">intrepid explorers</category>
      <category domain="http://securityratty.com/tag/expedition week">expedition week</category>
      <category domain="http://securityratty.com/tag/famous quotation">famous quotation</category>
      <category domain="http://securityratty.com/tag/summer brings">summer brings</category>
      <category domain="http://securityratty.com/tag/discovery">discovery</category>
      <category domain="http://securityratty.com/tag/ancient pyramids">ancient pyramids</category>
      <category domain="http://securityratty.com/tag/lost cities">lost cities</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=f507528dc99a0b0b1c90f3b3e61f5656">IETF: Should we ignore the Kaminsky bug?</source>
    </item>
    <item>
      <title><![CDATA[Feds urged to provide cybersecurity incentives]]></title>
      <link>http://securityratty.com/article/c073f8a60ea6341c662700b80792b2f4</link>
      <guid>http://securityratty.com/article/c073f8a60ea6341c662700b80792b2f4</guid>
      <description><![CDATA[President-elect Barack Obama needs to take a new approach to cybersecurity, with government providing incentives for private businesses to adopt security measures, the Internet Security Alliance, a...]]></description>
      <content:encoded><![CDATA[President-elect Barack Obama needs to take a new approach to cybersecurity, with government providing incentives for private businesses to adopt security measures, the Internet Security Alliance, a cybersecurity group, said today.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:ce20a5162ecbe5f18bbc8bb886a02b40:UoPs0lMSoT1%2F8Pwr2I0eKVwqreMUc6xwo74vSlUicN1gMYnMSLSBK9APqWI8oglG3XJdNW6arADQ'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:34948390e72c4ebccdd87135e472e4e4:So%2Fivo0PyxqMtLW2GOsFDqSTIGwl%2BJM%2FarcmTsnQjRD%2BIk4znaTEfQH6TakdXvRUz6YMVTLd%2F8GEiQ%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:86497f03b10dd0921820f814c4d40b80:oxPEfjuiVk%2BEFPGZC%2Fma43z3JpVWEoWjMPdWv%2FUIqiRmwCsTs1Smid8fJmRaV2l100pdTsJYJXSu%2FQ%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:a885971128c8d6ad7bffe0b100fe976d:%2BvJf%2BHLixrslrUv29ujt6XzKip3eSba%2FYir%2BbV8R2cPNtr1%2BPbd65Q2xRIYOU9DKNjzCvm003e1AyQ%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>      <hr />
<div style="font-size:xx-small;color:gray;padding-bottom:.5em">Presented By:</div>
<div><a href="http://www.pheedo.com/feeds/ht.php?t=c&amp;i=9874eeb4994e7a068a102cd956f7327d">Expedition Week Continues Tonight</a></div><table border="0" cellpadding="0" cellspacing="0">
<tr><td valign="top"><embed src="http://services.brightcove.com/services/viewer/federated_f8/1902560944" bgcolor="#FFFFFF" flashVars="playerId=1902560944&viewerSecureGatewayURL=https://console.brightcove.com/services/amfgateway&servicesURL=http://services.brightcove.com/services&cdnURL=http://admin.brightcove.com&domain=embed&autoStart=false&" base="http://admin.brightcove.com" name="flashObj" width="300" height="250" seamlesstabbing="false" type="application/x-shockwave-flash" swLiveConnect="true" pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"></embed><br />
<br /><img src="http://images.pheedo.com/g/ngc/natgeologo_80x60.jpg"><br />
<font size="2" face="helvetica" >Seven nights of one great discovery after another continues tonight at 9P e/p only on National Geographic Channel.  From the ancient pyramids to the ocean depths, from lost cities to outer space, travel with the latest generation of intrepid explorers as they make one great discovery after another.  Expedition Week, only on National Geographic Channel.</font><br />
<a href="http://www.pheedo.com/click.phdo?a=v3%3Ac1abad0b6daa4d28e9a527be56ca4e2f%3As2rmGnBOH62ZTX7YSZtUtsuGGEa8BJPlu%2FnPAP5iBIxxx5lnUHVgxgWtXjRC%2BL9X6noRAJMryZFAD1poPIhkf6cQxJS8bBfGwQlOn880Zw7JEF%2BMyg8FaI55gEz%2FwsMAIsKOYGloldTlO7L2E7%2FRMBd5jFHoF%2BTSxltqVyVuyH%2BRkxk%3D" target="_blank">www.natgeotv.com/expedition</font><br />
</a></td></tr>
<tr><td>&nbsp;</td></tr>
</table>
<div style="font-size:xx-small; padding-top: 1em;"><span style="border-top: 1px solid">
<br style="display:none"/>
<a href="http://www.pheedo.com/">Ads by Pheedo</a>
</span><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/feeds/ht.php?t=v&amp;i=9874eeb4994e7a068a102cd956f7327d"/>
<br/>
</div>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=9874eeb4994e7a068a102cd956f7327d" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Wed, 19 Nov 2008 02:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/national geographic channel">national geographic channel</category>
      <category domain="http://securityratty.com/tag/cybersecurity">cybersecurity</category>
      <category domain="http://securityratty.com/tag/internet security alliance">internet security alliance</category>
      <category domain="http://securityratty.com/tag/president-elect barack obama">president-elect barack obama</category>
      <category domain="http://securityratty.com/tag/adopt security measures">adopt security measures</category>
      <category domain="http://securityratty.com/tag/continues tonight">continues tonight</category>
      <category domain="http://securityratty.com/tag/intrepid explorers">intrepid explorers</category>
      <category domain="http://securityratty.com/tag/incentives">incentives</category>
      <category domain="http://securityratty.com/tag/expedition week">expedition week</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=9874eeb4994e7a068a102cd956f7327d">Feds urged to provide cybersecurity incentives</source>
    </item>
    <item>
      <title><![CDATA[Friday Squid Blogging: Talking Squids in Outer Space]]></title>
      <link>http://securityratty.com/article/87f5c6b689b960e5f179a191af6bc43b</link>
      <guid>http://securityratty.com/article/87f5c6b689b960e5f179a191af6bc43b</guid>
      <description><![CDATA[An index of fiction
The site was inspired by Margaret Atwood's infamous comment that Oryx and Crake isn't really science fiction, because science fiction is &quot;talking squids in outer space.&quot; This...]]></description>
      <content:encoded><![CDATA[<p>An index of <a href="http://talkingsquidsinouterspace.com/">fiction</a>.</p>

<p>The site was inspired by Margaret Atwood's infamous comment that <i>Oryx and Crake</i> isn't really science fiction, because science fiction is "talking squids in outer space." This prompted a hunt for science fiction which actually did feature talking squids in outer space.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=q2EugK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=q2EugK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=V8N3JK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=V8N3JK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 15 Aug 2008 12:57:09 +0000</pubDate>
      <category domain="http://securityratty.com/tag/outer space">outer space</category>
      <category domain="http://securityratty.com/tag/fiction">fiction</category>
      <category domain="http://securityratty.com/tag/science fiction">science fiction</category>
      <category domain="http://securityratty.com/tag/squids">squids</category>
      <category domain="http://securityratty.com/tag/margaret atwood">margaret atwood</category>
      <category domain="http://securityratty.com/tag/infamous comment">infamous comment</category>
      <category domain="http://securityratty.com/tag/hunt">hunt</category>
      <category domain="http://securityratty.com/tag/feature">feature</category>
      <category domain="http://securityratty.com/tag/index">index</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/friday_squid_bl_63.html">Friday Squid Blogging: Talking Squids in Outer Space</source>
    </item>
    <item>
      <title><![CDATA[The Network Firewall is a Consensual Hallucination]]></title>
      <link>http://securityratty.com/article/c05f6f72f82ab4c25ddc9c804d1973ec</link>
      <guid>http://securityratty.com/article/c05f6f72f82ab4c25ddc9c804d1973ec</guid>
      <description><![CDATA[James McGovern asks why we don't see enterprisey folks focusing on SOA *and* security? Well there are a lot of reasons here, but lets look at some facts. Most enterprisey folks look at security in...]]></description>
      <content:encoded><![CDATA[<p>James McGovern <a href="http://duckdown.blogspot.com/2008/07/how-come-enterprise-architects-are.html">asks</a> why we don't see enterprisey folks focusing on SOA *and* security? Well there are a lot of reasons here, but lets look at some facts. Most enterprisey folks look at security in binary terms - inside the firewall or outside the firewall. When a transaction is "inside the firewall" they can do silly things like load all their transaction on to something like MQ Series with no authentication, send it to the mainframe which runs their entire book of business, and in essence run their transactional backbone on anonymous ftp. Because its "inside the firewall"</p><br><div>Problem is - its just a Visio drawing, its not reality, its historical baggage. We were trained to think about things in these terms in the 90s</div><br><div><a style="display: inline;" href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553a923008833-pi"><img  class="at-xid-6a00d83451c75869e200e553a923008833 selected " alt="Goodstuffbadstuff" src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553a923008833-320pi" title="Goodstuffbadstuff"></a>
<br></div><br><div>But the business and software worlds have changed a bit from the early 90s, even if security tooling hasn't</div><br>
<p><br>
<a href="http://1raindrop.typepad.com/photos/uncategorized/2008/05/19/innovatecompare_2.png"><img  alt="Innovatecompare_2" title="Innovatecompare_2" src="http://1raindrop.typepad.com/1_raindrop/images/2008/05/19/innovatecompare_2.png" width="300" height="167" border="0"></a></p>
<div>If you sent an alien from outer space to observe what an enterprise looks like today, and asked that alien to file an objective report as to the actual connections and message exchanges it wouldn't look like the idyllic, clear separation of good stuff from bad stuff, it would look like this</div><br><br><p><a href="http://1raindrop.typepad.com/photos/uncategorized/thenetwork.jpg"><img  class="image-full " alt="Thenetwork" title="Thenetwork" src="http://1raindrop.typepad.com/photos/uncategorized/thenetwork.jpg" border="0"></a></p><br><div>There is no firewall in any meaningful sense, there are links, federations, communities of interest, business units, integration points, outsourcing arrangements, business processes. In short, there is information and commerce in all its messy vitality. </div><br><div>Inside the firewall and outside the firewall is not a security architecture, its historical <a href="http://en.wikipedia.org/wiki/Cruft">cruft</a> a Victorian, industrial age artifact that snuck into your Visio, not something that protects your businesses' applications and data.</div><br><div>If you want to let the world access your maifnrame, SAP, Siebel, or whatever so they can buy things from you, that is probably a really good idea. But don't assume that RACF or what have you came down on stone tablets from Moses. Just because your transaction is "inside the firewall" doesnt mean that your security model can only focus on resources and objects in isolation. It has to focus on how your business just broke everything apart and then re-connected everything. The subjects are different, the sessions are different, and the transactions are different. Just because the objects and resources are the same and are "inside the firewall" means little when all the context and all the relationships are different.</div><br><div>The world is not firewalled, its federated. Just because its convenient for enterprisey folks to buy into the same hallucination doesn't make it reality.</div><br><div>Next week, I am speaking at <a href="http://www.ssosummit.com/program/Agenda-at-a-Glance.cfm">Ping's SSO Summit</a> on Web Services SSO basically everything that happens after you press <span style="font-family: Arial; line-height: normal; ">"SUBMIT" on a website. Your data has a journey as dangerous as Frodo Baggins' travels through Mordor. The talk traces the path from the website through the perils that lurk in the enterprise and legacy systems, we will look at ways to get Frodo and Sam home safely and we won't rely on Visio firewalls where Mithril is required.</span></div><div><span><br></span></div><div><span><a style="display: inline;" href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553c410e98834-pi"><img  class="at-xid-6a00d83451c75869e200e553c410e98834 " alt="Ghostseparationwall" src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553c410e98834-320wi"></a>
<br></span></div><br><div>(Note - Thanks for reminding me of the analogy <a href="http://radar.oreilly.com/jims/">Jim</a>)</div>]]></content:encoded>
      <pubDate>Fri, 18 Jul 2008 07:04:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/firewall">firewall</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security model">security model</category>
      <category domain="http://securityratty.com/tag/business units">business units</category>
      <category domain="http://securityratty.com/tag/inside">inside</category>
      <category domain="http://securityratty.com/tag/enterprisey folks">enterprisey folks</category>
      <category domain="http://securityratty.com/tag/security architecture">security architecture</category>
      <category domain="http://securityratty.com/tag/business processes">business processes</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/07/the-network-firewall-is-a-consensual-hallucination.html">The Network Firewall is a Consensual Hallucination</source>
    </item>
    <item>
      <title><![CDATA[Techie Travels- What Do YOU Look for in a Hotel Room?]]></title>
      <link>http://securityratty.com/article/178018c516b7e9b8545727cad074913a</link>
      <guid>http://securityratty.com/article/178018c516b7e9b8545727cad074913a</guid>
      <description><![CDATA[Im on the road again. After some really great (and a few really crappy) hotel stays in the past few weeks, I started thinking about what makes a good hotel
Recently I spent one week at a customer in a...]]></description>
      <content:encoded><![CDATA[<p>I&#8217;m on the road&#8230; again. After some really great (and a few really crappy) hotel stays in the past few weeks, I started thinking about &#8216;what makes a good hotel&#8217;. </p><p>Recently I spent one week at a customer in a hotel&nbsp;where the staff obviously was hosting nightly parties down at my end of the hall- from about 2:00am - 5:30am each (yes- every) night I was there. The hotel&nbsp;I&#8217;m in tonight has no elevator. Yeah. @#$! That&#8217;s what I&nbsp;said. Twice in the past 10 days or so, I&#8217;ve been in really nice resort-hotels, so I&#8217;ve had the whole spectrum this month and last. </p><p><strong>For me, sometimes it&#8217;s the little things&#8230; </strong>I really like it when hotels have <strong>conditioner</strong>, instead of just shampoo. I like <strong>space</strong>- so a nice work area is important to me. Of course a <strong>big soft bed</strong> and plenty-o-pillows is a key ingredient. A <strong>whirlpool</strong> or jetted tub (in the room) is icing on the cake. <strong>Exercise </strong>rooms are good, although half the time I&#8217;m too tired when traveling or have work to do&nbsp;(I know- excuses, excuses ;). <strong>Convenience</strong> is also a biggie- I had a run in Las Vegas where *every* room I had felt like it was a 10-minute walk just to the elevators. When I&#8217;m on-site for a customer, I also love the hotels with the&nbsp;<strong>do-it-yourself breakfast</strong>- I can go when I want and grab something before heading out for the day. I love the little lighted makeup <strong>mirrors</strong>&#8230; and of course a<strong> full-length</strong> for checking out the wardrobe. <strong>Plugs</strong>! I love lots of plugs. I like hotels that <strong>secure the outer doors</strong> early and require a key for access to various parts of the building. </p><p><strong>Sometimes it&#8217;s the bigger things&#8230;</strong> Hotels with <strong>outside-facing doors</strong> make me paranoid, and obviously those in neighborhoods where your rims may disappear is not good either. I hate hotels that <strong>MAKE me valet </strong>park my car. It&#8217;s my car, my keys, I park it and I keep the keys- that&#8217;s my rule. (My Dad taught me a little trick of telling the valet boys that it&#8217;s a company car and against corporate policy for valet- it works!)</p><p>Traveling techies sometimes have unique needs or requests, and many of the &#8216;good list&#8217; is universal for all traveler types. </p><p>So, those are some items from my little list&#8230; What about you-<strong> what do YOU look for in a good hotel?</strong></p><p><strong># # #</strong></p><p>&nbsp;</p>
]]></content:encoded>
      <pubDate>Tue, 08 Jul 2008 00:05:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/hotel">hotel</category>
      <category domain="http://securityratty.com/tag/nice resort-hotels">nice resort-hotels</category>
      <category domain="http://securityratty.com/tag/nice">nice</category>
      <category domain="http://securityratty.com/tag/hotels">hotels</category>
      <category domain="http://securityratty.com/tag/hotel stays">hotel stays</category>
      <category domain="http://securityratty.com/tag/love">love</category>
      <category domain="http://securityratty.com/tag/love lots">love lots</category>
      <category domain="http://securityratty.com/tag/car">car</category>
      <category domain="http://securityratty.com/tag/company car">company car</category>
      <source url="http://www.securityuncorked.com/security-uncorked/2008/7/8/techie-travels-what-do-you-look-for-in-a-hotel-room.html">Techie Travels- What Do YOU Look for in a Hotel Room?</source>
    </item>
    <item>
      <title><![CDATA[Fiber: Review of Optics, Cables & Connectors]]></title>
      <link>http://securityratty.com/article/96dc850bc005748fcb2bba0b6554c568</link>
      <guid>http://securityratty.com/article/96dc850bc005748fcb2bba0b6554c568</guid>
      <description><![CDATA[When I started this blog, I said I wanted to give you useful information, sometimes in the form of lengthy technology overviews, and sometimes in short snippets. I like to dig around the search terms,...]]></description>
      <content:encoded><![CDATA[<p>When I started this blog, I said I wanted to give&nbsp;you useful information, sometimes in the form of lengthy technology overviews, and sometimes in short snippets. I like to dig around the search terms, comments and emails to see what you want to know more about, and I&#8217;ve seen a lot of interest in&nbsp;fiber information. </p><p>The fiber types (such as&nbsp;multi-mode, single-mode), standards (SX, LX, LH) and &nbsp;connectors (LC, ST, SC) seem to be a topics that need clarification about 80% of the time when we&#8217;re working with customers on networking equipment or site surveys. </p><p>Here&#8217;s a <strike>brief</strike> review of the various types of fiber, optics, connectors and when to use what. Let&#8217;s start with the basic stuff, and move down the line. </p><p><strong>Multi-mode vs Single-mode<br /></strong>First of all, we have multi-mode and single-mode fiber. <strong>Multimode</strong> has a larger diameter&nbsp;&#8216;core&#8217; or the area in the middle the light travels through. The larger diameter- think of it as a big tunnel- lets the light take different paths, creating multiple rays, or modes. The light bounces around more, which means the connectors and splices for multimode are more&nbsp;forgiving than for singlemode, but the bouncing causes&nbsp;dispersion&nbsp;and fidelity loss.&nbsp;On the other hand, <strong>singlemode</strong> has a much smaller diameter core, giving the light one straight path, or mode, through the cable. Because of this, singlemode offers higher throughput and longer distance, but the light equipment and connectors are much more finely-tuned. Which, of course, means singlemode is much more expensive. </p><p>When you&#8217;re adding or surveying multimode fiber, you should know what <strong>core size</strong> you&#8217;re working with. The core size affects bandwidth and the maximum distance you can reliably run it. Multimode usually comes in 50- or 62.5-micron, which is the core diameter.&nbsp;The larger the core size, the more bandwidth you get, but the shorter distance you&#8217; can go.&nbsp;To give you a general comparison, most singlemode comes in 9-micron core, which is about 1/6<sup>th</sup> the diameter of multimode. </p><p><u>When to use what</u>. In short, the fiber type you choose will depend on 1) budget and 2) distance. Mostly, you&#8217;ll use multimode for short fiber runs, between switches, to servers and possibly between buildings, if they&#8217;re adjacent. You should use singlemode when you need higher throughput or a longer distance. Here&#8217;s a quick look at the types and maximum distances for each.<em> I&#8217;ve also included a proprietary rating, for connectors using 1550nm wavelength over singlemode fiber, to get increased distance. (Standard for singlemode is 1310).</em></p><ul><li><div>Multimode - up to 220m&nbsp;with 62.5 micron core</div></li><li><div>Multimode - up to 550m with 50 micron core</div></li><li><div>Singlemode - up to 5km-10km <em>(standard, using 1310nm optics)</em></div></li><li><div>Singlemode - up to 70+km* <em>(proprietary,&nbsp;using 1550 nm optics)<br /></em></div></li></ul><p><strong>Fiber Optic Standards</strong> <br />You&#8217;ll need to know the type of optic to specify for your network equipment. Some vendors have their own proprietary fiber optics, but the standards are <strong>1000Base-SX</strong> for multimode, and <strong>1000Base-LX</strong> for singlemode. You can use multimode with 1000Base-LX with the addition of a mode-conditioning cable to set the light along the correct path down the cable. LX, which is standard, uses the ~1310nm wavelength. Vendors have created <strong>1000BASE-ZX</strong> and <strong>1000BASE-LH</strong>, which use the 1550nm optics to obtain longer distances. Note, here we&#8217;re talking about 1-Gig fiber, not 10GbE, hence the <em>1000Base</em>. We usually just refer to these as SX, LX and LH, leaving off the <em>1000Base</em>- when talking about the optics.</p><ul><li><div>1000Base-SX - multimode</div></li><li><div>1000Base-LX - singlemode standard<em> (can be used over MM with mode-conditioning cable)</em></div></li><li><div>1000Base-LH - singlemode non-standard <em>(proprietary for longer distances at 1550nm)</em></div></li></ul><p><strong>Connectors</strong><br />Here&#8217;s the fun part, and no one remembers what connectors they have (if they even knew in the first place!). There are several out there, but you&#8217;re probably going to only ever run into&nbsp;three&nbsp;- <strong>LC</strong>, <strong>ST</strong> and <strong>SC</strong>. </p><p>I&#8217;ll start with <strong>LC</strong> since that&#8217;s usually found on switches and other current network equipment these days. LC stands for &#8216;Lucent Connector&#8217; (the creator) and is&nbsp;the connection type&nbsp;on&nbsp;SFPs (Small Factor Pluggable) or Mini-GBICs. They&#8217;re small, and were designed to replace the SC connectors. </p><p>Since I mentioned <strong>SC</strong>, let&#8217;s go there next. SC, or &#8216;Standard Connector&#8217; are the predecessor to LC, and are similar in shape, but quite a bit larger. We suggest using the mnemonic &#8216;Square Connector&#8217; to remember SC. </p><p>Last- and possibly least- we have <strong>ST</strong>, which really means &#8216;Straight Tip&#8217;, but many folks have a better time thinking of &#8216;Stab and Twist&#8217;. You stick it in and lock it in place by turning the outer barrel, sort of like BNC did. <em>And yes, I&#8217;m old enough to remember the BNC days ;)</em></p><p><strong>Duplex and Simplex</strong><br />Most often, you&#8217;ll be using duplex fiber, which consists of a pair of fiber for bi-directional communication. Then- of course- you would use simplex fiber cables if you only need to send data a single direction. Those applications are more specific, but they do exist.</p><p><strong>Ordering Fiber Cables</strong><br />If we&#8217;re translating all our acronyms and numbers into something we can use, then let&#8217;s talk about how you put it all together when you&#8217;re procuring cables. </p><p><u>For example</u>, let&#8217;s say you&#8217;re purchasing short fiber jumpers for connecting your patch cable to your switch. Most likely, you&#8217;ll want multimode, in a short length (2meters), with LC on the end going to the switch and let&#8217;s say SC on your patch panel. In our example, we&#8217;re assuming we have 62.5micron mm fiber. </p><p><u>What you&#8217;ll ask for is</u>: Fiber jumper, 2 meters, duplex, 62.5-micron&nbsp;multimode, LC to SC. </p><table><tbody><tr><td><img style="width: 123px; height: 70px" alt="fiber_LC_2.jpg" src="http://www.securityuncorked.com/storage/fiber_LC_2.jpg" /></td><td><img style="width: 118px; height: 76px" alt="fiber_SC_2.jpg" src="http://www.securityuncorked.com/storage/fiber_SC_2.jpg" /></td><td><img style="width: 117px; height: 74px" alt="fiber_ST_2.jpg" src="http://www.securityuncorked.com/storage/fiber_ST_2.jpg" /></td></tr><tr><td><span class="sizeLess20">LC</span></td><td><span class="sizeLess20">SC</span></td><td><span class="sizeLess20">ST</span></td></tr></tbody></table><p><em>These are the best images I found to demonstrate the shapes and orientation of the various duplex fiber connectors we talked about. You can find these images and descriptions&nbsp;at </em><a class="offsite-link-inline" href="http://www.cablestogo.com/resources/fiber.asp" target="_blank"><em>Cables To Go</em></a><em>.</em></p><p>&nbsp;</p><p><strong>Wowzers</strong>, I said this was going to be a short one. In fact, this post was originally titled &#8220;<em>Fiber: A&nbsp;Very Brief Review of Cables&nbsp;&amp; Connectors</em>&#8221; but I had to rename it ;)&nbsp;Oh well- now you have all the information in one place for future reference. </p><p># # #</p>
]]></content:encoded>
      <pubDate>Fri, 04 Apr 2008 23:22:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cables">cables</category>
      <category domain="http://securityratty.com/tag/simplex fiber cables">simplex fiber cables</category>
      <category domain="http://securityratty.com/tag/fiber">fiber</category>
      <category domain="http://securityratty.com/tag/connectors">connectors</category>
      <category domain="http://securityratty.com/tag/fiber cables">fiber cables</category>
      <category domain="http://securityratty.com/tag/short fiber runs">short fiber runs</category>
      <category domain="http://securityratty.com/tag/short">short</category>
      <category domain="http://securityratty.com/tag/single-mode">single-mode</category>
      <category domain="http://securityratty.com/tag/single-mode fiber">single-mode fiber</category>
      <source url="http://www.securityuncorked.com/security-uncorked/2008/4/5/fiber-review-of-optics-cables-connectors.html">Fiber: Review of Optics, Cables &amp; Connectors</source>
    </item>
    <item>
      <title><![CDATA[Prison Break]]></title>
      <link>http://securityratty.com/article/c466218f12eab3b1f313fd6b589ba9ef</link>
      <guid>http://securityratty.com/article/c466218f12eab3b1f313fd6b589ba9ef</guid>
      <description><![CDATA[Details: Police said Espinosa and Blunt were in adjacent cells and used a long metal wire to scrape away mortar around the cinder block between their cells and the outer wall in Espinosa's cell. Once...]]></description>
      <content:encoded><![CDATA[Details: Police said Espinosa and Blunt were in adjacent cells and used a long metal wire to scrape away mortar around the cinder block between their cells and the outer wall in Espinosa's cell. Once the cement block between the...<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/excerpts?a=3WVXb1C"><img src="http://feeds.feedburner.com/~f/schneier/excerpts?i=3WVXb1C" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/excerpts?a=C0nPPhC"><img src="http://feeds.feedburner.com/~f/schneier/excerpts?i=C0nPPhC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/excerpts?a=K0eI9PC"><img src="http://feeds.feedburner.com/~f/schneier/excerpts?i=K0eI9PC" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Wed, 19 Dec 2007 02:10:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cells">cells</category>
      <category domain="http://securityratty.com/tag/adjacent cells">adjacent cells</category>
      <category domain="http://securityratty.com/tag/cement block">cement block</category>
      <category domain="http://securityratty.com/tag/cinder block">cinder block</category>
      <category domain="http://securityratty.com/tag/outer wall">outer wall</category>
      <category domain="http://securityratty.com/tag/espinosa">espinosa</category>
      <category domain="http://securityratty.com/tag/metal wire">metal wire</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <category domain="http://securityratty.com/tag/details">details</category>
      <source url="http://www.schneier.com/blog/archives/2007/12/prison_break.html">Prison Break</source>
    </item>
  </channel>
</rss>
