<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: outlook]]></title>
    <link>http://securityratty.com/tag/outlook</link>
    <description></description>
    <pubDate>Fri, 13 Jun 2008 20:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Will Economic Slowdown Cause More Consumer Awareness of Security?]]></title>
      <link>http://securityratty.com/article/1ec87be1d566410ae3ffb4f67518a198</link>
      <guid>http://securityratty.com/article/1ec87be1d566410ae3ffb4f67518a198</guid>
      <description><![CDATA[The Consumerist has a post today exploring the possibility that consumers are more hesitant to get into credit card debts , and theyre realigning their needs and wants with a more realistic financial...]]></description>
      <content:encoded><![CDATA[<p>The Consumerist has a post today exploring the possibility that consumers are more hesitant to get into <a rel="nofollow" target="_blank" href="http://consumerist.com/5035769/are-we-nearing-the-end-of-credit-card-consumerism">credit card debts</a>, and they&#8217;re realigning their needs and wants with a more realistic financial outlook.</p>
<blockquote><p>Of course, if you&#8217;re broke and have no access to credit you don&#8217;t have much choice but to be frugal, but is that all that&#8217;s going on here? Or are consumers tired of being pressured to take on massive debt in order to &#8220;super size&#8221; and &#8220;bling&#8221; everything? What do you think? Is credit card consumerism over?</p></blockquote>
<p>I doubt consumerism is over entirely, but a slowdown seems inevitable in light of our current gloomy economic situation. What does this all mean for IT Security? Well, all the credit accounts are still out there, so there&#8217;s still plenty of information that is available to be exploited.</p>
<p>But will consumers&#8217; hesitance to go into debt also make them more watchful for ID Theft and other fraud-related crime, and more afraid of hackers online? In other words, is it possible the economic slowdown may also make people more hesitant to use technology for their commerce, and encourage them to check their bank accounts more regularly and thoroughly for fraud, and to make them altogether more cautious about IT Security? What is your thought?</p>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 11:13:54 +0000</pubDate>
      <category domain="http://securityratty.com/tag/credit card consumerism">credit card consumerism</category>
      <category domain="http://securityratty.com/tag/credit">credit</category>
      <category domain="http://securityratty.com/tag/slowdown">slowdown</category>
      <category domain="http://securityratty.com/tag/credit accounts">credit accounts</category>
      <category domain="http://securityratty.com/tag/economic slowdown">economic slowdown</category>
      <category domain="http://securityratty.com/tag/consumers hesitance">consumers hesitance</category>
      <category domain="http://securityratty.com/tag/consumers">consumers</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/credit card debts">credit card debts</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/363340892/">Will Economic Slowdown Cause More Consumer Awareness of Security?</source>
    </item>
    <item>
      <title><![CDATA[Microsoft and BearingPoint see space to play in the Enterprise GRC market]]></title>
      <link>http://securityratty.com/article/36af1d0bb845709d797550944d74b9e3</link>
      <guid>http://securityratty.com/article/36af1d0bb845709d797550944d74b9e3</guid>
      <description><![CDATA[Earlier this week in a joint press release, Microsoft and BearingPoint announced the new BearingPoint Enterprise Governance, Risk, and Compliance product offering. Ok... it will be a while before the...]]></description>
      <content:encoded><![CDATA[<p><img border="0" src="http://www.forrester.com/role_based/images/author/imported/forresterDotCom/Analyst_Photos/Silhouette/Color/Chris-McClean.gif" alt="Chris McClean" title="Chris McClean" style="margin: 0px 5px 5px 0px; float: left;" /></p>

<p>Earlier this week in a joint press release, Microsoft and BearingPoint announced the new <a href="http://www.businesswire.com/portal/site/google/?ndmViewId=news_view&amp;newsId=20080805005278&amp;newsLang=en">BearingPoint Enterprise Governance, Risk, and Compliance</a> product offering. Ok... it will be a while before the more veteran enterprise GRC vendors start really losing sleep over this deal. But BearingPoint continues to be a <a href="http://www.forrester.com/Research/Document/0,,40476,00.html">top risk consulting firm</a>, and Microsoft’s reach through the business user community will be an attractive benefit for compliance and risk professionals trying to get hundreds or thousands of staff members to contribute to the GRC program. There’s potential here for sure.</p>

<p>With software giants IBM, Oracle, SAP, and now Microsoft increasing their level of commitment in the enterprise GRC space, the 2-3 year market outlook continues to change. The risk and regulatory landscape is only going to get tougher to handle, and the more GRC programs can run seamlessly with existing business processes and applications, the better. The vendors focused solely on GRC still have the advantage for now, but market consolidation is on its way... and it’s coming maybe just a tiny bit faster than it was at the start of this week.</p>]]></content:encoded>
      <pubDate>Thu, 07 Aug 2008 12:12:55 +0000</pubDate>
      <category domain="http://securityratty.com/tag/grc">grc</category>
      <category domain="http://securityratty.com/tag/bearingpoint">bearingpoint</category>
      <category domain="http://securityratty.com/tag/grc programs">grc programs</category>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/bearingpoint continues">bearingpoint continues</category>
      <category domain="http://securityratty.com/tag/grc program">grc program</category>
      <category domain="http://securityratty.com/tag/top risk">top risk</category>
      <category domain="http://securityratty.com/tag/bearingpoint enterprise governance">bearingpoint enterprise governance</category>
      <category domain="http://securityratty.com/tag/enterprise grc space">enterprise grc space</category>
      <source url="http://blogs.forrester.com/srm/2008/08/microsoft-and-b.html">Microsoft and BearingPoint see space to play in the Enterprise GRC market</source>
    </item>
    <item>
      <title><![CDATA[Simulating Email in .NET]]></title>
      <link>http://securityratty.com/article/0c454dbe28b5b63d07ee0089e019de77</link>
      <guid>http://securityratty.com/article/0c454dbe28b5b63d07ee0089e019de77</guid>
      <description><![CDATA[I use email as a notification mechanism a lot, and often in class I'll demo sending email via a technique that I use frequently when developing code. It allows you to simulate sending an email...]]></description>
      <content:encoded><![CDATA[<p>I use email as a notification mechanism a lot, and often in class I&#39;ll demo sending email via a technique that I use frequently when developing code. It allows you to simulate sending an email message.</p> <p>The trick to doing this is not to hardcode things like host, port, etc. for your SMTP server when you use System.Net.Mail to send mail. Instead, use the default ctor for <a href="http://msdn.microsoft.com/en-us/library/system.net.mail.smtpclient.aspx" target="_blank">SmtpClient</a> as I&#39;ve done in the code below.</p> <blockquote><pre class="csharpcode"><span class="kwrd">static</span> <span class="kwrd">void</span> Main(<span class="kwrd">string</span>[] args)
{
    <span class="rem">// note the use of the MailAddress class</span>
    <span class="rem">// this allows me to specify display names as well as email addresses</span>
    MailAddress from = <span class="kwrd">new</span> MailAddress(<span class="str">&quot;admin@fabrikam.com&quot;</span>, <span class="str">&quot;Fabrikam Website&quot;</span>);
    MailAddress to = <span class="kwrd">new</span> MailAddress(<span class="str">&quot;mari@fabrikam.com&quot;</span>, <span class="str">&quot;Mari Joyce&quot;</span>);

    MailMessage msg = <span class="kwrd">new</span> MailMessage(from, to);
    msg.Subject  = <span class="str">&quot;Testing 123&quot;</span>;
    msg.Body = <span class="str">&quot;This is only a test!&quot;</span>;

    <span class="rem">// note use of default ctor</span>
    <span class="rem">// this looks in config to figure out how to send mail</span>
    <span class="kwrd">new</span> SmtpClient().Send(msg);
}</pre></blockquote>
.csharpcode, .csharpcode pre
{
	font-size: small;
	color: black;
	font-family: consolas, &quot;Courier New&quot;, courier, monospace;
	background-color: #ffffff;
	/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt 
{
	background-color: #f4f4f4;
	width: 100%;
	margin: 0em;
}
.csharpcode .lnum { color: #606060; }


<p>What you&#39;re telling .NET by using the default ctor for SmtpClient is, &quot;please use my config file to figure out how to send mail&quot;. Now you can use the system.net/mailSettings/smtp section in config to specify the details of your mail server, and all of the code in your app that is written to use the default SmtpClient ctor will inherit these settings. Here&#39;s an example of what the config on a production server might look like (if you put passwords in your config files, be sure to <a href="http://msdn.microsoft.com/en-us/library/ms998283.aspx" target="_blank">encrypt those sections</a>): </p><pre class="csharpcode"><span class="kwrd">&lt;</span><span class="html">configuration</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
      <span class="kwrd">&lt;</span><span class="html">smtp</span> <span class="attr">deliveryMethod</span><span class="kwrd">=&quot;Network&quot;</span><span class="kwrd">&gt;</span>
        <span class="kwrd">&lt;</span><span class="html">network</span> <span class="attr">host</span><span class="kwrd">=&quot;mail.fabrikam.com&quot;</span>
                 <span class="attr">port</span><span class="kwrd">=&quot;25&quot;</span>
                 <span class="attr">userName</span><span class="kwrd">=&quot;WebsiteMailAccount&quot;</span>
                 <span class="attr">password</span><span class="kwrd">=&quot;whatever&quot;</span><span class="kwrd">/&gt;</span>
      <span class="kwrd">&lt;/</span><span class="html">smtp</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;/</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;/</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
<span class="kwrd">&lt;/</span><span class="html">configuration</span><span class="kwrd">&gt;</span></pre><pre class="csharpcode">&nbsp;</pre>
.csharpcode, .csharpcode pre
{
	font-size: small;
	color: black;
	font-family: consolas, &quot;Courier New&quot;, courier, monospace;
	background-color: #ffffff;
	/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt 
{
	background-color: #f4f4f4;
	width: 100%;
	margin: 0em;
}
.csharpcode .lnum { color: #606060; }


<p>During development, I use different settings because I don&#39;t usually want to deal with the hassle of installing an SMTP server on my development box. Instead, I want email messages delivered as individual files in a directory on my hard drive (I always have a c:\mail directory on my development box for just this purpose):</p>
<blockquote><pre class="csharpcode"><span class="kwrd">&lt;</span><span class="html">configuration</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
      <span class="kwrd">&lt;</span><span class="html">smtp</span> <span class="attr">deliveryMethod</span><span class="kwrd">=&quot;SpecifiedPickupDirectory&quot;</span><span class="kwrd">&gt;</span>
        <span class="kwrd">&lt;</span><span class="html">specifiedPickupDirectory</span> <span class="attr">pickupDirectoryLocation</span><span class="kwrd">=&quot;c:\mail&quot;</span><span class="kwrd">/&gt;</span>
      <span class="kwrd">&lt;/</span><span class="html">smtp</span><span class="kwrd">&gt;</span>
    <span class="kwrd">&lt;/</span><span class="html">mailSettings</span><span class="kwrd">&gt;</span>
  <span class="kwrd">&lt;/</span><span class="html">system.net</span><span class="kwrd">&gt;</span>
<span class="kwrd">&lt;/</span><span class="html">configuration</span><span class="kwrd">&gt;</span></pre></blockquote>
.csharpcode, .csharpcode pre
{
	font-size: small;
	color: black;
	font-family: consolas, &quot;Courier New&quot;, courier, monospace;
	background-color: #ffffff;
	/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt 
{
	background-color: #f4f4f4;
	width: 100%;
	margin: 0em;
}
.csharpcode .lnum { color: #606060; }


<p>Now when I run the program above, I get a .EML file in my c:\mail directory:</p>
<p><a href="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_2.png"><img style="border-right:0px;border-top:0px;margin:0px 0px 0px 35px;border-left:0px;border-bottom:0px;" height="230" alt="image" src="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_thumb.png" width="404" border="0" /></a> </p>
<p>Outlook Express is normally registered as the viewer for .EML files, so double-click the file to view it:</p>
<p><a href="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_4.png"><img style="border-right:0px;border-top:0px;margin:0px 0px 0px 35px;border-left:0px;border-bottom:0px;" height="287" alt="image" src="http://www.pluralsight.com/community/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/keith/image_5F00_thumb_5F00_1.png" width="292" border="0" /></a> </p>
<p>If you&#39;ve never seen this method of simulating email before, I hope you find it as useful as I have. Happy coding!</p><div style="clear:both;"></div><img src="http://www.pluralsight.com/community/aggbug.aspx?PostID=52305" width="1" height="1">]]></content:encoded>
      <pubDate>Fri, 01 Aug 2008 09:59:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/csharpcode pre">csharpcode pre</category>
      <category domain="http://securityratty.com/tag/pre">pre</category>
      <category domain="http://securityratty.com/tag/csharpcode">csharpcode</category>
      <category domain="http://securityratty.com/tag/color">color</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/email addresses mailaddress">email addresses mailaddress</category>
      <category domain="http://securityratty.com/tag/mailaddress">mailaddress</category>
      <category domain="http://securityratty.com/tag/mail server">mail server</category>
      <category domain="http://securityratty.com/tag/mail">mail</category>
      <source url="http://www.pluralsight.com/community/blogs/keith/archive/2008/08/01/simulating-email-in-net.aspx">Simulating Email in .NET</source>
    </item>
    <item>
      <title><![CDATA[Dissecting a Managed Spamming Service]]></title>
      <link>http://securityratty.com/article/a86a7c12b2395b3c5ee8667c3a4d13e0</link>
      <guid>http://securityratty.com/article/a86a7c12b2395b3c5ee8667c3a4d13e0</guid>
      <description><![CDATA[With cybercrime getting easier to outsource these days, and with the overall underground economy's natural maturity from products to services, &quot; managed spamming appliances &quot; and managed spamming...]]></description>
      <content:encoded><![CDATA[<div class="separator" style="text-align: left; clear: both;"><a href="http://bp2.blogger.com/_wICHhTiQmrA/SJAiYgYGvGI/AAAAAAAAB-c/0z_b5zxZV0c/s1600-h/customer_support.jpg" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp2.blogger.com/_wICHhTiQmrA/SJAiYgYGvGI/AAAAAAAAB-c/bUYt5gvY6SU/s320-R/customer_support.jpg" style="border: 0pt none ;" /></a></div>With cybercrime getting easier to outsource these days, and with the overall underground economy's natural maturity from products to services, "<a href="http://ddanchev.blogspot.com/2007/10/managed-spamming-appliances-future-of.html">managed spamming appliances</a>" and managed spamming services are becoming rather common. Increasingly, these "vendors" are starting to "vertically integrate", namely, start diversifying the portfolio of services they offer in order to steal market share from other "vendors" offering related services like, email database cleaning, segmentation of email databases, email servers or botnets whose hosts have a pre-checked and relatively clean IP reputation, namely they're not blacklisted yet.<br />
<br />
How much does it cost to send 1 million spam emails these days? According to a random spamming service, $100 excluding the discounts based on the speed of sending desired, namely 10-20 per second or 20-30 per second. Let's dissect the service, and emphasize on its key differentiation factors, as well as the customerization offered in the form of a dedicated server if the customer would like to send billions of emails :<br />
<br />
"<i>-- High quality and percentage of spam delivery&nbsp;</i><br />
<i> -- Fast speed of delivery<br />
-- Spam database on behalf of the vendor, or using your own database of harvested emails<br />
-- Easily obtainable and segmented spam databases on per country basis<br />
-- Randomization of the spam email's body and headers in order to achieve a higher delivery rate<br />
-- Support for attachments, executables, and image files<br />
<br />
The cost - $100 for a million for letters delivered spam, with the large volume of spam discounts 20% -30% -40% based on the value-added Do-it-yourself customer interfare based on a multi-user botnet command and control interface :<br />
&nbsp;</i><br />
<i>-- Automatic RBL verification  <br />
-- Support for many subjects, headers,  <br />
-- Total customization of the email sending process  <br />
-- Autogenerating junk content next to the spammers email/link in order to bypass filtering<br />
-- Faking Outlook Message ID / Boundary / Content-ID  <br />
-- Interface added. Now do not necessarily understand all the features into the system to start the list.  <br />
-- Convenient management tasks.  <br />
-- A high percentage of punching, on the basis of good europe - 40-60% (For the United States - less because there aol and others). <br />
-- Improved metrics, whether or not the emails have been sent, lost, unknown receipt, or have been RBL-ed<br />
<br />
With the weight of a billion - even discounts and the possibility of making a personal server. " <br />
<br />
</i>Rather surprising, they state that European email users have a higher probability of receiving the spam message compared the U.S due to AOL. What they're actually trying to say is due to AOL's use of Domain Keys Identified Mail (DKIM). As far as <a href="http://ddanchev.blogspot.com/2008/05/segmenting-and-localizing-spam.html">localization of the spam to the email owner's native languag</a>e is concerned, this segmentation concept has been take place for over an year now.<br />
<br />
<a href="http://bp0.blogger.com/_wICHhTiQmrA/SJA7MWbx4jI/AAAAAAAAB-k/BvKdLNRflW4/s1600-h/phishme_demo_ethical.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp0.blogger.com/_wICHhTiQmrA/SJA7MWbx4jI/AAAAAAAAB-k/Y5691Se7e2k/s200-R/phishme_demo_ethical.JPG" style="border: 0pt none ;" /></a>This service, like the majority of others rely entirely on malware infected hosts, which due to the multi-user nature of most of the malware command and control interfaces, allows them to easily add customers and set their privileges based on the type of service that they purchase. This leaves a countless number of opportunities for targeted spamming, and yes, spear phishing attacks made possible due to the segmentation of the emails based on a country, city, even company.<br />
<br />
In the long term, the people behind spamming providers, web malware exploitation kits and <a href="http://ddanchev.blogspot.com/2008/05/diy-phishing-kits-introducing-new.html">DIY phishing kits</a>, will inevitably start introducing built-in features which were once available through third-party services. For instance, hosting infrastructure for the spam/phishing/live exploit URLs, or even managed fast-flux infrastructure, have the potential to become widely available if such optional features get built-in phishing kits, or start getting offered by the spamming provider itself. And since the affiliate based model seems to be working just fine, the <a href="http://ddanchev.blogspot.com/2007/12/phishers-spammers-and-malware-authors.html">ongoing underground consolidation</a> will converge providers of different underground goods and services, where everyone would be driving customers to one another's services and earning revenue in the process.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=bsJ3iJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=bsJ3iJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=IEP1EJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=IEP1EJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ZzurFj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ZzurFj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=uIY3Pj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=uIY3Pj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=60gQsJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=60gQsJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Nb7yGJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Nb7yGJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=y37sBj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=y37sBj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/350363899" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 30 Jul 2008 01:32:44 +0000</pubDate>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/spam message">spam message</category>
      <category domain="http://securityratty.com/tag/spam discounts">spam discounts</category>
      <category domain="http://securityratty.com/tag/spam database">spam database</category>
      <category domain="http://securityratty.com/tag/spam databases">spam databases</category>
      <category domain="http://securityratty.com/tag/spam email">spam email</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/emails based">emails based</category>
      <category domain="http://securityratty.com/tag/email servers">email servers</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/350363899/dissecting-managed-spamming-service.html">Dissecting a Managed Spamming Service</source>
    </item>
    <item>
      <title><![CDATA[Diane Greene Ousted from VMware]]></title>
      <link>http://securityratty.com/article/45c4c8711f215690f4a6a577490ce607</link>
      <guid>http://securityratty.com/article/45c4c8711f215690f4a6a577490ce607</guid>
      <description><![CDATA[VMware and EMC announced today that co-founder Diane Greene is leaving her post as CEO of the virtualization giant, effectively immediately. Former Microsoft executive, Paul Maritz, head of EMCs cloud...]]></description>
      <content:encoded><![CDATA[<p><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; margin: 0px 10px 10px 0px; border-right-width: 0px" height="153" alt="diane_greene_03" src="http://blog.sciencelogic.com/wp-content/uploads/2008/07/diane-greene-03.jpg" width="220" align="left" border="0" />VMware and EMC announced today that co-founder <a href="http://virtualization.com/news/2008/07/08/diane-greene-vmware-paul-maritz/" target="_blank">Diane Greene is leaving her post as CEO</a> of the virtualization giant, effectively immediately. Former Microsoft executive, Paul Maritz, head of EMC&#8217;s cloud computing division, will replace her. (<em>img credit <a href="http://gowest.blogs.fortune.cnn.com/2008/07/08/emc-to-vmware-ceo-buh-bye/" target="_blank">Fortune Magazine</a>/Joe Pugliese)</em></p>
<p>There&#8217;s speculation that falling VMware share prices, with no end in sight because of &#8220;poor revenue outlook&#8221; is the reason for the ouster.</p>
<p>Hmm. The stock went public at $29, went as high as $125 and is now at $40.26 (and falling as I write), almost a 40% premium over the first offering. Say what you will about the recently launched Microsoft Hyper-V and the Citrix offering that we never hear about, but VMware is the dominant virtualization player (and likely to remain so for at least some time given Microsoft&#8217;s track record with new product releases) in an exploding market. Gartner predictions are that the installed base of VMs will grow more than 10x between 2007 and 2011 and that by 2012 the majority of x86 server workloads will be running in a VM.</p>
<p>The future still looks pretty rosy for VMware &#8211; perhaps they&#8217;ll be taking a smaller chunk of the pie, but the pie&#8217;s getting much bigger. And all indications pointed to VMware moving up the stack and providing more management solutions (and more revenue streams) for the x86 virtualization market they helped to build.</p>
<p>So why the change? And why now? Is it a coincidence that it&#8217;s an ex-Microsoft exec taking over just as Hyper-V ships? Can only someone who knows the <a href="http://www.25hoursaday.com/weblog/PermaLink.aspx?guid=eaf394bd-c36a-4565-bd5a-9a5c92d42590" target="_blank">Microsoft Way</a> combat the Microsoft Way? Remember this is the guy who wrote that Microsoft should &#8220;<a href="http://www.thestandard.com/news/2008/07/08/founder-diane-greene-ousted-vmware-poor-results-announced" target="_blank">cut off Netscape&#8217;s air supply</a>&#8221;.</p>
<p>So, good idea to say that Microsoft execs are better than VMware execs just as the Hyper-V juggernaut gets rolling? If I didn&#8217;t know better, I&#8217;d say this is the latest example of a <a href="http://www.linuxjournal.com/content/microsoft-fud-campaign-vs-customer" target="_blank">MS FUD campaign</a>&#8230;</p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Diane+Greene+Ousted+from+VMware&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fdiane-greene-ousted-from-vmware%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Tue, 08 Jul 2008 15:09:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/vmware">vmware</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/microsoft executive">microsoft executive</category>
      <category domain="http://securityratty.com/tag/microsoft execs">microsoft execs</category>
      <category domain="http://securityratty.com/tag/vmware share prices">vmware share prices</category>
      <category domain="http://securityratty.com/tag/microsoft hyper-v">microsoft hyper-v</category>
      <category domain="http://securityratty.com/tag/vmware execs">vmware execs</category>
      <category domain="http://securityratty.com/tag/ex-microsoft exec">ex-microsoft exec</category>
      <category domain="http://securityratty.com/tag/market">market</category>
      <source url="http://blog.sciencelogic.com/diane-greene-ousted-from-vmware/07/2008">Diane Greene Ousted from VMware</source>
    </item>
    <item>
      <title><![CDATA[Xobni and LinkedIn - perfect together]]></title>
      <link>http://securityratty.com/article/3764355b51b16eb61f35699b43628aa7</link>
      <guid>http://securityratty.com/article/3764355b51b16eb61f35699b43628aa7</guid>
      <description><![CDATA[A while back I wrote about how much I liked the Xobni email add on for Outlook . A short time later I heard rumors that Microsoft was buying them , but that appears not to be true at this point,...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><img title="Xobnilinkedin" alt="Xobnilinkedin" src="http://www.stillsecureafteralltheseyears.com/photos/uncategorized/2008/06/30/xobnilinkedin.png" border="0" style="FLOAT: right; MARGIN: 0px 0px 5px 5px" />A while back<a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/02/xobni-but-can-i.html"> I wrote about</a> how much I liked the <a class="zem_slink" title="Xobni" href="http://www.xobni.com/" rel="homepage">Xobni</a> email add on for <a class="zem_slink" title="Microsoft Outlook" href="http://www.microsoft.com/outlook" rel="homepage">Outlook</a>. A short time later <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/04/microsoft-buys.html">I heard rumors that Microsoft was buying them</a>, but that appears not to be true at this point, though I still think it makes a lot of sense.&nbsp; In the meantime, I have continued to use and be impressed with Xobni.&nbsp; I have come to rely on its ultra fast search and the way it organizes threads of conversations and groups of people, as well as attached files. </p>

<p>An interesting thing though about Xobni. As I was given invitations, I would send them out to people I know.&nbsp; Though many of them liked the functionality of the product, they said that it slowed their Outlook to a crawl and just did not think the performance hit was worth it.&nbsp; Maybe I got used to the slowness or I am just not seeing it, but I did not see what they saw. In any event, many people were not using the product.</p>

<p>Well the Xobni folks <a href="http://http//www.xobni.com/blog/2008/06/26/out-is-in-xobni-linkedin-job-titles-employer-and-pictures/">just released a new version</a> of the product that promises improved performance. I hope that helps those people who were complaining about this. It also offers several other new features, the biggest being LinkedIn integration.&nbsp; I really like this <a class="zem_slink" title="LinkedIn" href="http://www.linkedin.com/" rel="homepage">LinkedIn</a> integration as it gives you yet another layer of information on the people writing to you. All in all, I think this just makes the product more indispensable than it is already.&nbsp; It is now available to the public, so I would encourage you to check it out for yourself!</p>

<fieldset class="zemanta-related"><legend>Related articles</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.somewhatfrank.com/2008/05/xobni-finally-o.html">Xobni Social Mail Plugin Finally Goes Public</a> [via Zemanta] </li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.techcrunch.com/2008/06/25/xobni-gets-even-better-with-linkedin-data-for-your-contacts/">Xobni Gets Even Better With LinkedIn Data For Your Contacts</a> [via Zemanta] </li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.techcrunch.com/2008/02/29/microsoft-may-buy-email-startup-xobni/">Microsoft May Buy Email Startup Xobni</a> [via Zemanta]</li></ul>

<p class="zemanta-article-ul-li"></p></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/0c8bdcd3-c6f4-4c80-8bfc-e023d3e63b46/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=0c8bdcd3-c6f4-4c80-8bfc-e023d3e63b46" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>
]]></content:encoded>
      <pubDate>Tue, 01 Jul 2008 03:53:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/xobni">xobni</category>
      <category domain="http://securityratty.com/tag/xobni email">xobni email</category>
      <category domain="http://securityratty.com/tag/email startup xobni">email startup xobni</category>
      <category domain="http://securityratty.com/tag/xobni folks">xobni folks</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/linkedin integration">linkedin integration</category>
      <category domain="http://securityratty.com/tag/product">product</category>
      <category domain="http://securityratty.com/tag/zemanta">zemanta</category>
      <category domain="http://securityratty.com/tag/performance hit">performance hit</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/07/xobni-and-linke.html">Xobni and LinkedIn - perfect together</source>
    </item>
    <item>
      <title><![CDATA[Xobni and LinkedIn - perfect together]]></title>
      <link>http://securityratty.com/article/e4cea3a673516c2866741b04b7254509</link>
      <guid>http://securityratty.com/article/e4cea3a673516c2866741b04b7254509</guid>
      <description><![CDATA[A while back I wrote about how much I liked the Xobni email add on for Outlook . A short time later I heard rumors that Microsoft was buying them , but that appears not to be true at this point,...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><img title="Xobnilinkedin" alt="Xobnilinkedin" src="http://www.stillsecureafteralltheseyears.com/photos/uncategorized/2008/06/30/xobnilinkedin.png" border="0" style="FLOAT: right; MARGIN: 0px 0px 5px 5px" />A while back<a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/02/xobni-but-can-i.html"> I wrote about</a> how much I liked the <a class="zem_slink" title="Xobni" href="http://www.xobni.com/" rel="homepage">Xobni</a> email add on for <a class="zem_slink" title="Microsoft Outlook" href="http://www.microsoft.com/outlook" rel="homepage">Outlook</a>. A short time later <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/04/microsoft-buys.html">I heard rumors that Microsoft was buying them</a>, but that appears not to be true at this point, though I still think it makes a lot of sense.&nbsp; In the meantime, I have continued to use and be impressed with Xobni.&nbsp; I have come to rely on its ultra fast search and the way it organizes threads of conversations and groups of people, as well as attached files. </p>

<p>An interesting thing though about Xobni. As I was given invitations, I would send them out to people I know.&nbsp; Though many of them liked the functionality of the product, they said that it slowed their Outlook to a crawl and just did not think the performance hit was worth it.&nbsp; Maybe I got used to the slowness or I am just not seeing it, but I did not see what they saw. In any event, many people were not using the product.</p>

<p>Well the Xobni folks <a href="http://http//www.xobni.com/blog/2008/06/26/out-is-in-xobni-linkedin-job-titles-employer-and-pictures/">just released a new version</a> of the product that promises improved performance. I hope that helps those people who were complaining about this. It also offers several other new features, the biggest being LinkedIn integration.&nbsp; I really like this <a class="zem_slink" title="LinkedIn" href="http://www.linkedin.com/" rel="homepage">LinkedIn</a> integration as it gives you yet another layer of information on the people writing to you. All in all, I think this just makes the product more indispensable than it is already.&nbsp; It is now available to the public, so I would encourage you to check it out for yourself!</p>

<fieldset class="zemanta-related"><legend>Related articles</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.somewhatfrank.com/2008/05/xobni-finally-o.html">Xobni Social Mail Plugin Finally Goes Public</a> [via Zemanta] </li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.techcrunch.com/2008/06/25/xobni-gets-even-better-with-linkedin-data-for-your-contacts/">Xobni Gets Even Better With LinkedIn Data For Your Contacts</a> [via Zemanta] </li>

<li class="zemanta-article-ul-li"><a title="Open in new window" href="http://www.techcrunch.com/2008/02/29/microsoft-may-buy-email-startup-xobni/">Microsoft May Buy Email Startup Xobni</a> [via Zemanta]</li></ul>

<p class="zemanta-article-ul-li"></p></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/0c8bdcd3-c6f4-4c80-8bfc-e023d3e63b46/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=0c8bdcd3-c6f4-4c80-8bfc-e023d3e63b46" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=fcGJoZ"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=fcGJoZ" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=covlZJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=covlZJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=1T6uwJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=1T6uwJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=1VelkJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=1VelkJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=9immOJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=9immOJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Lb4fxj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Lb4fxj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=SVJJRj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=SVJJRj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/323989772" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 01 Jul 2008 02:53:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/xobni">xobni</category>
      <category domain="http://securityratty.com/tag/xobni email">xobni email</category>
      <category domain="http://securityratty.com/tag/email startup xobni">email startup xobni</category>
      <category domain="http://securityratty.com/tag/xobni folks">xobni folks</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/linkedin integration">linkedin integration</category>
      <category domain="http://securityratty.com/tag/product">product</category>
      <category domain="http://securityratty.com/tag/zemanta">zemanta</category>
      <category domain="http://securityratty.com/tag/performance hit">performance hit</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/323989772/xobni-and-linke.html">Xobni and LinkedIn - perfect together</source>
    </item>
    <item>
      <title><![CDATA[Errant email exposed Department of Consumer Affairs personal information]]></title>
      <link>http://securityratty.com/article/ca6f5be22b8296dc3dbda7041339d863</link>
      <guid>http://securityratty.com/article/ca6f5be22b8296dc3dbda7041339d863</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
6/23/08

Organization
State of California

Contractor/Consultant/Branch
Department of Consumer Affairs

Victims
employees, contractors and board members...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/caldca.jpg" width="169" align="right" height="65"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>6/23/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.ca.gov/">State of California</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.dca.ca.gov/">Department of Consumer Affairs</a><br><br><span style="font-weight: bold;">Victims:</span><br>"employees, contractors and board members"<br><br><span style="font-weight: bold;">Number Affected:</span><br>5,000<br><br><span style="font-weight: bold;">Types of Data:</span><br>Names, Social Security numbers, salaries and job titles<br><br><span style="font-weight: bold;">Breach Description:</span><br>"The state Department of Consumer Affairs (DCA) has sent letters to 5,000 employees, contractors and board members warning them of a security breach that has compromised their names and social security numbers. "<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.capitolweekly.net/article.php?_adctlid=v%7Cjq2q43wvsl855o%7Cx7o1tt8kp1c3g5&amp;issueId=x79xdv8us2oeyp&amp;xid=x7csom3a3og08k">Capitol Weekly</a> <br><a href="http://www.centralvalleybusinesstimes.com/stories/001/?ID=9111">Central Valley Business Times</a> <br><a href="http://www.pogowasright.org/article.php?story=20080624114400847">Props to PogoWasRight</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Malcolm Maclachlan, Capitol Weekly<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>The state Department of Consumer Affairs (DCA) has sent letters to 5,000 employees, contractors and board members warning them of a security breach that has compromised their names and social security numbers.<br><br>About 2,800 of the people on the list are current, full-time employees of the DCA.<br><br>The document also included some former employees and numerous contractors, such as people who proctor state job examinations.<br><br>The rest of the names were employees and board members of the 56 professional boards and bureaus administered by the DCA, such as the Bureau of Automotive Repair and the Medical Board.<br><br>The breach occurred on June 5 or 6 when a Microsoft Word document was improperly transmitted electronically outside of the department, said DCA spokesman Russ Heimerich.<br><br>The document also contained the salaries and titles of everyone on the list, but Heimerich noted that this was public information.<br><br>"The thing that is troubling to us is that information was coupled with their social security numbers," Heimerich said.<br><span style="font-style: italic;">[Evan] Troubling to you?&nbsp; It's probably hard for the victims to have much sympathy.</span><br><br>The main danger with giving away a social security number is that it can be used to set up new credit cards, loans or purchases in someone's name.<br><br>However, a thief would generally need other information that was not included and could be harder to get, such as addresses, phone numbers and driver's license numbers.<br><span style="font-style: italic;">[Evan] Addresses and phone numbers are usually pretty easy to obtain and I would think are much easier to get than Social Security numbers.&nbsp; Unless of course, somebody emails them to you.</span><br><br>The DCA is the main state agency charged with protecting consumers in California.<br><span style="font-style: italic;">[Evan] Ironic.</span><br><br>From 2003 to 2007, it also housed the office charged with educating consumers and businesses about identity theft and fraud.<br><span style="font-style: italic;">[Evan] More Ironic</span><br><br>One agency whose employees were not on the list is the California Office of Privacy Protection (OPP).<br><br>Heimerich said the incident is still being investigated, and that he could not disclose who had received the document.<br><br>He said that so far there is no evidence that any information has been used. It was not even clear the recipient had opened the document.<br><br>"We know that it left the building and that it wound up somewhere it shouldn't have wound up," Heimerich. "We're looking into how that happened."<br><br>“We kind of know where it was sent,” Mr. Heimerich says<br><span style="font-style: italic;">[Evan] Sounds obvious, but did anyone check "Sent Items"?&nbsp; Yeah, probably.&nbsp; Seriously though, does the California DCA not log email sends and receives?&nbsp; It's hard to believe that the sender does not recall to whom they sent the email and there is no evidence of where it was sent.</span><br><br>The breach was discovered on Monday, June 9<br><span style="font-style: italic;">[Evan] It took 3 or 4 days for the DCA to discover the breach.</span><br><br>People's whose names were on the list were sent an email the next day and an official letter a week later.<br><span style="font-style: italic;">[Evan] Excellent quick notification.&nbsp; The earlier that a breach is detected and communicated to the data owner, the better.</span><br><br>Heimerich said the DCA will pay for a year of free credit reports and provide fraud insurance of up to $25,000 for everyone on the list.<br><span style="font-style: italic;">[Evan] One year of protection does not adequately protect information that has a lifespan that far exceeds that one year.&nbsp; Most bad guys (or gals) know that the "standard" organization response to a breach includes one year of free credit monitoring/protection, so many of them wait a year to use the information.&nbsp; It is also important to point out that just because a person monitors their credit, does not mean that their identity isn't being used elsewhere.&nbsp; It's a scary thought, but it's a broken system.</span><br><br>He said the DCA had not yet determined how much these protections were going to cost. <br><span style="font-style: italic;">[Evan] You can estimate the cost yourself.</span><br><br><span style="font-weight: bold;">Commentary:</span><br>I like how Microsoft Outlook helps me when I am typing an email address in the "To:" field of my email.&nbsp; It saves me some keystrokes and a few precious seconds.&nbsp; Sometimes I am in such a hurry that I don't even notice that Outlook put in the wrong email address.&nbsp; I type my email, click send and away I go onto another task.&nbsp; A couple of days later, I get a call from a customer asking where their information is.&nbsp; I state that I sent it to them a couple of days ago, but they claim to have never gotten my email.&nbsp; I look through my sent items, and HOLY #*@^!&nbsp; I just sent some confidential (sensitive and potentially damaging) information to a competitor instead of my customer.<br><br>Sound conceivable?&nbsp; Have you ever sent an embarrassing email to the wrong person?&nbsp; It is very easy to do if your not paying attention.<br><br>There are a number of controls us information security guys can put in place to reduce the risk of this happening.&nbsp; One of the best is information security training and awareness (kind of an administrative control). <br><br><span style="font-weight: bold;">Past Breaches:</span><br><span style="font-weight: bold;">State of California:</span><br>March, 2008 - <a href="http://breachblog.com/2008/03/31/caldoc.aspx">San Quentin visitor and volunteer information lost</a> </font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/06/24/caldca.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 13:51:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/volunteer information lost">volunteer information lost</category>
      <category domain="http://securityratty.com/tag/wrong email address">wrong email address</category>
      <category domain="http://securityratty.com/tag/email address">email address</category>
      <category domain="http://securityratty.com/tag/information security">information security</category>
      <category domain="http://securityratty.com/tag/adequately protect information">adequately protect information</category>
      <category domain="http://securityratty.com/tag/credit cards">credit cards</category>
      <category domain="http://securityratty.com/tag/credit">credit</category>
      <source url="http://breachblog.com/2008/06/24/caldca.aspx">Errant email exposed Department of Consumer Affairs personal information</source>
    </item>
    <item>
      <title><![CDATA[ESoft spam filter goes mobile]]></title>
      <link>http://securityratty.com/article/760cf8a444797545f1f3828b19b2c278</link>
      <guid>http://securityratty.com/article/760cf8a444797545f1f3828b19b2c278</guid>
      <description><![CDATA[Security appliance developer eSoft has updated its e-mail gateway with the ability for users to spam-file or whitelist e-mails from any device, including a BlackBerry or smartphone. Previously, only...]]></description>
      <content:encoded><![CDATA[Security appliance developer eSoft has updated its e-mail gateway with the ability for users to spam-file or whitelist e-mails from any device, including a BlackBerry or smartphone. Previously, only Outlook users could train the gateway's Bayesian spam-filter.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=10443?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=10443?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Wed, 18 Jun 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/gateway">gateway</category>
      <category domain="http://securityratty.com/tag/users">users</category>
      <category domain="http://securityratty.com/tag/e-mail gateway">e-mail gateway</category>
      <category domain="http://securityratty.com/tag/outlook users">outlook users</category>
      <category domain="http://securityratty.com/tag/bayesian spam-filter">bayesian spam-filter</category>
      <category domain="http://securityratty.com/tag/whitelist e-mails">whitelist e-mails</category>
      <category domain="http://securityratty.com/tag/smartphone">smartphone</category>
      <category domain="http://securityratty.com/tag/blackberry">blackberry</category>
      <category domain="http://securityratty.com/tag/spam-file">spam-file</category>
      <source url="http://www.networkworld.com/news/2008/061908-esoft-spam-filter-goes.html?fsrc=rss-security">ESoft spam filter goes mobile</source>
    </item>
    <item>
      <title><![CDATA[Links for 2008-06-13 [del.icio.us]]]></title>
      <link>http://securityratty.com/article/8f2934017817a32248e500079e0ff647</link>
      <guid>http://securityratty.com/article/8f2934017817a32248e500079e0ff647</guid>
      <description><![CDATA[Rational Survivability: Notes from the IBM Global Innovation Outlook: Security and Society
BBC NEWS | Technology | Storm warning for cloud...]]></description>
      <content:encoded><![CDATA[<ul>
<li><a href="http://rationalsecurity.typepad.com/blog/2008/06/notes-from-the.html">Rational Survivability: Notes from the IBM Global Innovation Outlook: Security and Society</a></li>
<li><a href="http://news.bbc.co.uk/1/hi/technology/7421099.stm">BBC NEWS | Technology | Storm warning for cloud computing</a></li>
</ul><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/311616721" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 13 Jun 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/rational survivability">rational survivability</category>
      <category domain="http://securityratty.com/tag/bbc news">bbc news</category>
      <category domain="http://securityratty.com/tag/storm">storm</category>
      <category domain="http://securityratty.com/tag/cloud">cloud</category>
      <category domain="http://securityratty.com/tag/notes">notes</category>
      <category domain="http://securityratty.com/tag/society">society</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/technology">technology</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/311616721/anton18">Links for 2008-06-13 [del.icio.us]</source>
    </item>
  </channel>
</rss>
